test(audit_registry): add integration tests for verify()

apps/contracts/audit_registry/src/lib.rs

@@ -421,3 +421,6 @@ mod tests {
         assert_eq!(client.get_version(), soroban_sdk::String::from_str(&env, "1.0.0"));
     }
 }
+
+#[cfg(test)]
+mod verify_integration_test;

apps/contracts/audit_registry/src/verify_integration_test.rs

@@ -0,0 +1,137 @@
+//! Integration tests for `audit_registry::verify` (#563).
+//!
+//! Tests the full anchor → verify round-trip including ledger sequence
+//! recording, field correctness, None for unanchored hashes, and independence
+//! across multiple hashes.
+
+#![cfg(test)]
+
+use audit_registry::{AuditRegistry, AuditRegistryClient, Error};
+use soroban_sdk::{testutils::Address as _, Address, BytesN, Env};
+
+fn setup() -> (Env, Address, AuditRegistryClient<'static>) {
+    let env = Env::default();
+    env.mock_all_auths();
+    let id = env.register(AuditRegistry, ());
+    let client = AuditRegistryClient::new(&env, &id);
+    let admin = Address::generate(&env);
+    let api_signer = Address::generate(&env);
+    client.initialize(&admin, &api_signer);
+    (env, api_signer, client)
+}
+
+fn make_hash(env: &Env, byte: u8) -> BytesN<32> {
+    BytesN::from_array(env, &[byte; 32])
+}
+
+// ── verify returns None before anchoring ─────────────────────────────────────
+
+#[test]
+fn verify_returns_none_for_unanchored_hash() {
+    let (env, _signer, client) = setup();
+    assert!(client.verify(&make_hash(&env, 0x01)).is_none());
+}
+
+// ── verify returns correct fields after anchoring ────────────────────────────
+
+#[test]
+fn verify_returns_anchor_with_correct_reading_hash() {
+    let (env, signer, client) = setup();
+    let h = make_hash(&env, 0x42);
+    client.anchor(&signer, &h).unwrap();
+    let anchor = client.verify(&h).expect("must be Some after anchor");
+    assert_eq!(anchor.reading_hash, h);
+}
+
+#[test]
+fn verify_records_ledger_sequence_at_anchor_time() {
+    let (env, signer, client) = setup();
+    // Advance ledger to a known sequence
+    env.ledger().with_mut(|l| l.sequence_number = 999);
+    let h = make_hash(&env, 0x10);
+    client.anchor(&signer, &h).unwrap();
+    let anchor = client.verify(&h).expect("must be Some");
+    assert_eq!(anchor.anchored_at_ledger, 999);
+}
+
+#[test]
+fn verify_ledger_sequence_is_not_current_ledger_if_anchored_earlier() {
+    let (env, signer, client) = setup();
+    env.ledger().with_mut(|l| l.sequence_number = 100);
+    let h = make_hash(&env, 0x20);
+    client.anchor(&signer, &h).unwrap();
+    // Advance ledger after anchoring
+    env.ledger().with_mut(|l| l.sequence_number = 500);
+    let anchor = client.verify(&h).expect("must be Some");
+    // anchored_at_ledger must reflect the time of anchor, not the current ledger
+    assert_eq!(anchor.anchored_at_ledger, 100);
+}
+
+// ── verify is idempotent ──────────────────────────────────────────────────────
+
+#[test]
+fn verify_is_idempotent() {
+    let (env, signer, client) = setup();
+    let h = make_hash(&env, 0x55);
+    client.anchor(&signer, &h).unwrap();
+    let a1 = client.verify(&h).expect("first verify must be Some");
+    let a2 = client.verify(&h).expect("second verify must be Some");
+    assert_eq!(a1.reading_hash, a2.reading_hash);
+    assert_eq!(a1.anchored_at_ledger, a2.anchored_at_ledger);
+}
+
+// ── verify distinguishes independent hashes ──────────────────────────────────
+
+#[test]
+fn verify_distinguishes_two_hashes() {
+    let (env, signer, client) = setup();
+    let h1 = make_hash(&env, 0xAA);
+    let h2 = make_hash(&env, 0xBB);
+    env.ledger().with_mut(|l| l.sequence_number = 1);
+    client.anchor(&signer, &h1).unwrap();
+    env.ledger().with_mut(|l| l.sequence_number = 2);
+    client.anchor(&signer, &h2).unwrap();
+
+    let a1 = client.verify(&h1).expect("h1 must be anchored");
+    let a2 = client.verify(&h2).expect("h2 must be anchored");
+    assert_eq!(a1.reading_hash, h1);
+    assert_eq!(a2.reading_hash, h2);
+    assert_eq!(a1.anchored_at_ledger, 1);
+    assert_eq!(a2.anchored_at_ledger, 2);
+}
+
+// ── verify after duplicate anchor attempt ────────────────────────────────────
+
+#[test]
+fn verify_unchanged_after_rejected_duplicate_anchor() {
+    let (env, signer, client) = setup();
+    env.ledger().with_mut(|l| l.sequence_number = 10);
+    let h = make_hash(&env, 0x77);
+    client.anchor(&signer, &h).unwrap();
+
+    // second anchor attempt must fail
+    env.ledger().with_mut(|l| l.sequence_number = 20);
+    assert_eq!(client.anchor(&signer, &h), Err(Error::AlreadyAnchored));
+
+    // verify must still return the original anchor (ledger 10, not 20)
+    let anchor = client.verify(&h).expect("must still be anchored");
+    assert_eq!(anchor.anchored_at_ledger, 10);
+}
+
+// ── boundary hash values ──────────────────────────────────────────────────────
+
+#[test]
+fn verify_works_with_all_zeros_hash() {
+    let (env, signer, client) = setup();
+    let h = BytesN::from_array(&env, &[0x00u8; 32]);
+    client.anchor(&signer, &h).unwrap();
+    assert!(client.verify(&h).is_some());
+}
+
+#[test]
+fn verify_works_with_all_ones_hash() {
+    let (env, signer, client) = setup();
+    let h = BytesN::from_array(&env, &[0xFFu8; 32]);
+    client.anchor(&signer, &h).unwrap();
+    assert!(client.verify(&h).is_some());
+}