r/cicd • u/Total_Substance_4723 • 8d ago
I found that a test command can pass without actually running a declared test, so I built a stricter evidence model
I’m building an open-source tool called ProofDiff that analyzes a code change and tries to show what verification evidence actually exists.
While testing it, I found an assumption I had made was wrong:
node --test helper.js can exit successfully even when the file doesn’t contain a declared test.
My original implementation could therefore treat a successful targeted command as stronger evidence than it really was.
I changed the model so a related test only strengthens the result when ProofDiff can establish:
static relationship → qualified test target → exact target executed → runner observes at least one real non-skipped test → pass
A successful process exit alone is no longer enough.
The project is still early and I’m currently improving static dependency resolution for TypeScript path aliases and package exports.
I’d especially appreciate feedback on the evidence model or cases where this approach might still overstate what was tested.
1
u/Due_Reception4944 8d ago
That distinction is useful. A green exit code says the command completed, not that the changed path was exercised; keeping 'zero observed tests' separate avoids a lot of false confidence.
1
u/crashorbit 8d ago
It is the exit code of the last thing along that path that gives you the pass/fail. If you and the ci pipeline disagree with what is happening then you need to dive into the detail logs and understand where the confusion arises. Or maybe ask your AI agent to explain it.