From 1b2d8fa85e6e69d5fb98f54a1d7fe68ef20e634b Mon Sep 17 00:00:00 2001
From: npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67d
 <011987e296fd5006292d2f930b574be47c7801048d1983c46c425d3c95f0cffd@sprout-oss.stage.blox.sqprod.co>
Date: Sun, 28 Jun 2026 08:33:51 -0400
Subject: [PATCH] ci: run the multi-tenant conformance gate in the unit-test
 job
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The buzz-conformance crate is the independent replay checker for the multi-tenant isolation contract (15 tests: 9 checker unit tests + 6 golden replay fixtures). It has no production buzz-crate deps and needs no infra — pure in-process trace replay — but `just test-unit` only ran buzz-core and buzz-auth, so this gate ran nowhere in CI.

Add `cargo nextest run -p buzz-conformance` to the nextest path of test-unit, and the equivalent `cargo test -p buzz-conformance` to the scripts/run-tests.sh fallback, so the conformance gate runs on every CI unit-test pass. Runs all targets (lib + tests/replay_fixtures.rs), ~0.01s.

Note: the live two-host A/B suite (buzz-test-client conformance_multitenant) still needs a running multi-tenant relay and has todo!()-stubbed rows, so it is not wired into CI here.
Co-authored-by: Tyler Longwell <tlongwell@block.xyz>
Signed-off-by: Tyler Longwell <tlongwell@block.xyz>
---
 Justfile             | 5 +++++
 scripts/run-tests.sh | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/Justfile b/Justfile
index 39cb7898ff..6427c9660c 100644
--- a/Justfile
+++ b/Justfile
@@ -230,6 +230,11 @@ test-unit:
     #!/usr/bin/env bash
     if command -v cargo-nextest &>/dev/null; then
         cargo nextest run -p buzz-core -p buzz-auth --lib
+        # Multi-tenant conformance gate (buzz-conformance): the independent
+        # replay checker + golden fixtures. No infra — pure in-process trace
+        # replay — so it belongs in the unit job. Run all targets (lib + the
+        # tests/replay_fixtures.rs integration test), not just --lib.
+        cargo nextest run -p buzz-conformance
     else
         ./scripts/run-tests.sh unit
     fi
diff --git a/scripts/run-tests.sh b/scripts/run-tests.sh
index db27c42d64..525b430ffc 100755
--- a/scripts/run-tests.sh
+++ b/scripts/run-tests.sh
@@ -83,6 +83,11 @@ run_unit_tests() {
 
   run_test_step "buzz-auth unit tests" \
     cargo test -p buzz-auth --lib -- --nocapture
+
+  # Multi-tenant conformance gate: independent replay checker + golden
+  # fixtures (buzz-conformance). Pure in-process trace replay, no infra.
+  run_test_step "buzz-conformance tests" \
+    cargo test -p buzz-conformance -- --nocapture
 }
 
 # ---- DB / integration tests (infra required) --------------------------------