"""Self-test: proves the anti-slop gate + anti-drift memory actually enforce."""

import sys

from memory import Memory

m = Memory()

ok = True

def check(name, cond):

    global ok

    print(("PASS " if cond else "FAIL ") + name)

    ok = ok and cond

t = m.upsert_target("github.com/example/loader", "ml-model-loaders",

                    lang="c", commit="deadbeef", released_at="2026-06-10")

h = m.add_hypothesis(t, "memory-corruption", "src/parse.c", 42,

                     "gguf_read(fd)", "memcpy(dst,src,n)", "joern")

check("target+hypothesis created", bool(t) and bool(h))

refused = False

try:

    m.promote_to_finding(h, "RCE via Deserialization", "CRITICAL", "should not exist")

except PermissionError:

    refused = True

check("finding REFUSED without execution proof (anti-slop gate)", refused)

p = m.add_proof(h, "REPLICA_CONFIRMED", "asan",

                "/opt/cyclops-v2/oracle/crashes/crash-001.txt",

                "ASan heap-buffer-overflow WRITE of size 8 in gguf parse, PC controlled")

f = m.promote_to_finding(h, "RCE via Deserialization", "CRITICAL",

                         "GGUF parser heap overflow -> load-time RCE",

                         novel=True, cve_checked=True)

check("finding ALLOWED once proof attached", bool(p) and bool(f))

h2 = m.add_hypothesis(t, "command-injection", "src/x.c", 99, "argv", "system()", "joern")

m.add_proof(h2, "DISPROVEN", "replica", "", "guarded: input is shell-escaped before system()")

refused2 = False

try:

    m.promote_to_finding(h2, "RCE via Command Injection", "HIGH", "nope")

except PermissionError:

    refused2 = True

check("DISPROVEN hypothesis cannot become a finding", refused2)

m.clear_axis(t, "ml-model-loaders", "pickle-deserialization", "CLEAN",

             "no torch.load/pickle path; format is pure binary")

check("axis cleared + recalled", m.is_axis_cleared(t, "pickle-deserialization") == "CLEAN")

check("uncleared axis returns None", m.is_axis_cleared(t, "integer-overflow") is None)

m.cache_put("k1", "v1")

check("redis cache roundtrip", m.cache_get("k1") == "v1")

m.mark_analysis_done(t, "joern-cpg")

check("analysis dedup (don't re-CPG same commit)", m.analysis_done(t, "joern-cpg"))

m.enqueue("targets", {"repo": "x", "n": 1})

check("redis queue roundtrip", m.dequeue("targets")["n"] == 1)

print("\nnode counts:", m.stats())

print("RESULT:", "ALL PASS" if ok else "FAILURES PRESENT")

sys.exit(0 if ok else 1)