Run Ruff, mypy, and focused pytest coverage for changed code.
The TLS tests use the OpenSSL CLI to create a throwaway private CA and run a
local HTTPS endpoint. Install openssl to run those controls locally; the
supported-version CI requires it before running tests.
Replay and payload-codec fixes also follow the organization
regression-corpus contract.
Put minimal replay histories in the existing golden-history format when
possible, or use tests/fixtures/replay_regressions/. Put shared wire evidence
in tests/fixtures/codec_regressions/ and copy it to every applicable official
binding.
Fixtures preserve the value and type, framing, and stable failure policy.
Existing evidence is append-only; protocol evolution adds a new fixture with a
supersedes identity. Run:
python scripts/ci/validate-regression-corpus.py --base-ref <target>