IABTechLab · ChristianPavilonis · Mar 25, 2026 · Mar 30, 2026 · Mar 25, 2026 · Mar 25, 2026
diff --git a/.github/actions/setup-integration-test-env/action.yml b/.github/actions/setup-integration-test-env/action.yml
@@ -71,7 +71,7 @@ runs:
       env:
         TRUSTED_SERVER__PUBLISHER__ORIGIN_URL: http://127.0.0.1:${{ inputs.origin-port }}
         TRUSTED_SERVER__PUBLISHER__PROXY_SECRET: integration-test-proxy-secret
-        TRUSTED_SERVER__EDGE_COOKIE__SECRET_KEY: integration-test-secret-key
+        TRUSTED_SERVER__EC__PASSPHRASE: integration-test-ec-secret
         TRUSTED_SERVER__PROXY__CERTIFICATE_CHECK: "false"
       run: cargo build --package trusted-server-adapter-fastly --release --target wasm32-wasip1
 

diff --git a/CLAUDE.md b/CLAUDE.md
@@ -366,7 +366,7 @@ both runtime behavior and build/tooling changes.
 | `crates/trusted-server-core/src/tsjs.rs`                  | Script tag generation with module IDs             |
 | `crates/trusted-server-core/src/html_processor.rs`        | Injects `<script>` at `<head>` start              |
 | `crates/trusted-server-core/src/publisher.rs`             | `/static/tsjs=` handler, concatenates modules     |
-| `crates/trusted-server-core/src/edge_cookie.rs`           | Edge Cookie (EC) ID generation                    |
+| `crates/trusted-server-core/src/ec/`                      | EC identity subsystem (generation, consent, cookies) |
 | `crates/trusted-server-core/src/cookies.rs`               | Cookie handling                                   |
 | `crates/trusted-server-core/src/consent/mod.rs`           | GDPR and broader consent management               |
 | `crates/trusted-server-core/src/http_util.rs`             | HTTP abstractions and request utilities           |

diff --git a/crates/integration-tests/Cargo.lock b/crates/integration-tests/Cargo.lock
diff --git a/crates/integration-tests/Cargo.toml b/crates/integration-tests/Cargo.toml
@@ -11,10 +11,11 @@ harness = true
 
 [dev-dependencies]
 testcontainers = { version = "0.25", features = ["blocking"] }
-reqwest = { version = "0.12", features = ["blocking"] }
+reqwest = { version = "0.12", features = ["blocking", "cookies", "json"] }
 scraper = "0.21"
 log = "0.4.29"
 serde_json = "1.0.149"
 error-stack = "0.6"
 derive_more = { version = "2.0", features = ["display"] }
 env_logger = "0.11"
+urlencoding = "2.1"
diff --git a/crates/integration-tests/fixtures/configs/viceroy-template.toml b/crates/integration-tests/fixtures/configs/viceroy-template.toml
@@ -7,10 +7,32 @@
     [local_server.backends]
 
     [local_server.kv_stores]
+        # These inline placeholders satisfy Viceroy's local KV configuration
+        # requirements without exercising KV-backed application behavior.
+        [[local_server.kv_stores.counter_store]]
+            key = "placeholder"
+            data = "placeholder"
+
+        [[local_server.kv_stores.opid_store]]
+            key = "placeholder"
+            data = "placeholder"
+
         [[local_server.kv_stores.creative_store]]
             key = "placeholder"
             data = "placeholder"
 
+        [[local_server.kv_stores.consent_store]]
+            key = "placeholder"
+            data = "placeholder"
+
+        [[local_server.kv_stores.ec_identity_store]]
+            key = "placeholder"
+            data = "placeholder"
+
+        [[local_server.kv_stores.ec_partner_store]]
+            key = "placeholder"
+            data = "placeholder"
+
     # These are generated test-only key pairs, not production credentials.
     # The Ed25519 private key (data) and its matching public key (x in jwks_store below)
     # exist solely for signing and verifying tokens in the integration test environment.