test: add full core-components coverage plan

REUSE.toml

@@ -246,3 +246,26 @@ path = [
 ]
 SPDX-FileCopyrightText = "NONE"
 SPDX-License-Identifier = "CC0-1.0"
+
+[[annotations]]
+path = [
+    "docs/test-plans/core-components-full/index.json",
+    "docs/test-plans/core-components-full/source-inventory.json",
+]
+SPDX-FileCopyrightText = "© 2026 Phala Network <dstack@phala.network>"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "docs/test-plans/core-components-full/configuration-inventory.json"
+SPDX-FileCopyrightText = "© 2026 Phala Network <dstack@phala.network>"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "docs/test-plans/core-components-full/api-inventory.json"
+SPDX-FileCopyrightText = "© 2026 Phala Network <dstack@phala.network>"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "docs/test-plans/core-components-full/source-coverage-map.json"
+SPDX-FileCopyrightText = "© 2026 Phala Network <dstack@phala.network>"
+SPDX-License-Identifier = "Apache-2.0"

docs/test-plans/core-components-full/01-guest-os/01-rpc-tappd/tc-gos-tappd-001/case.md

@@ -0,0 +1,62 @@
+<!-- SPDX-FileCopyrightText: © 2026 Phala Network <dstack@phala.network> -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+<a id="tc-gos-tappd-001"></a>
+# TC-GOS-TAPPD-001: Tappd.DeriveKey
+
+## Metadata
+
+- Priority: P1
+- Type: Functional, API, Security, Regression
+- Minimum environment: SIMULATOR
+- Automation: Yes
+- Requirements: [req-gos-tappd-001](../../../feature-audit.md#req-gos-tappd-001)
+- Risks: [risk-gos-tappd-001](../../../feature-audit.md#risk-gos-tappd-001)
+- Source: `dstack/guest-agent/rpc/proto/agent_rpc.proto:15`
+
+## Objective
+
+Verify the complete request, response, authorization, state transition, and error contract of `Tappd.DeriveKey`.
+
+## Preconditions
+
+1. The shared plan prerequisites are healthy and the target listener is reachable.
+2. Commands use isolated test data and preserve native request and response output.
+
+## Test Data
+
+The `Tappd.DeriveKey` entry in [`api-inventory.json`](../../../api-inventory.json) is mandatory test data. Exercise every request field and every recursively referenced message field as absent/default, valid, boundary-invalid and combined with an unknown field; validate every response field, nested message field, and presence bit.
+
+Use a unique run-scoped identifier and non-production credentials.
+
+## Steps
+
+<a id="tc-gos-tappd-001-step-01"></a>
+### Step 1: Inspect the effective prerequisite
+
+Query the relevant health, configuration, and baseline state for tappd.derivekey.
+
+**Expected results:**
+
+- The target component is healthy, the intended listener and policy are effective, and the baseline contains no run-scoped test object.
+
+<a id="tc-gos-tappd-001-step-02"></a>
+### Step 2: Exercise the behavior
+
+Invoke `Tappd.DeriveKey` with a valid `DeriveKeyArgs` request using valid service-specific authentication and attestation context; capture the binary and JSON pRPC representations. Then send a schema-invalid request and, where protected, omit the credential.
+
+**Expected results:**
+
+- The valid call returns `GetTlsKeyResponse` with every documented field and exhibits the documented `DeriveKey` state and side effects; invalid framing or fields return a structured error, and protected calls reject missing credentials.
+
+<a id="tc-gos-tappd-001-step-03"></a>
+### Step 3: Verify state, isolation, and diagnostics
+
+Re-query the public status/state interfaces, inspect component and peer logs, and repeat the request with one invalid or unauthorized input appropriate to this interface.
+
+**Expected results:**
+
+- Repeated observations match the method’s documented persistence, determinism, and idempotency semantics and remain scoped to the caller or run-scoped object; invalid or unauthorized input is rejected without secret disclosure, partial mutation, or loss of service availability.
+
+## Postconditions
+
+Remove run-scoped objects and restore changed configuration. Preserve logs and responses in the result artifacts.

docs/test-plans/core-components-full/01-guest-os/01-rpc-tappd/tc-gos-tappd-002/case.md

@@ -0,0 +1,62 @@
+<!-- SPDX-FileCopyrightText: © 2026 Phala Network <dstack@phala.network> -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+<a id="tc-gos-tappd-002"></a>
+# TC-GOS-TAPPD-002: Tappd.DeriveK256Key
+
+## Metadata
+
+- Priority: P1
+- Type: Functional, API, Security, Regression
+- Minimum environment: SIMULATOR
+- Automation: Yes
+- Requirements: [req-gos-tappd-002](../../../feature-audit.md#req-gos-tappd-002)
+- Risks: [risk-gos-tappd-002](../../../feature-audit.md#risk-gos-tappd-002)
+- Source: `dstack/guest-agent/rpc/proto/agent_rpc.proto:18`
+
+## Objective
+
+Verify the complete request, response, authorization, state transition, and error contract of `Tappd.DeriveK256Key`.
+
+## Preconditions
+
+1. The shared plan prerequisites are healthy and the target listener is reachable.
+2. Commands use isolated test data and preserve native request and response output.
+
+## Test Data
+
+The `Tappd.DeriveK256Key` entry in [`api-inventory.json`](../../../api-inventory.json) is mandatory test data. Exercise every request field and every recursively referenced message field as absent/default, valid, boundary-invalid and combined with an unknown field; validate every response field, nested message field, and presence bit.
+
+Use a unique run-scoped identifier and non-production credentials.
+
+## Steps
+
+<a id="tc-gos-tappd-002-step-01"></a>
+### Step 1: Inspect the effective prerequisite
+
+Query the relevant health, configuration, and baseline state for tappd.derivek256key.
+
+**Expected results:**
+
+- The target component is healthy, the intended listener and policy are effective, and the baseline contains no run-scoped test object.
+
+<a id="tc-gos-tappd-002-step-02"></a>
+### Step 2: Exercise the behavior
+
+Invoke `Tappd.DeriveK256Key` with a valid `GetKeyArgs` request using valid service-specific authentication and attestation context; capture the binary and JSON pRPC representations. Then send a schema-invalid request and, where protected, omit the credential.
+
+**Expected results:**
+
+- The valid call returns `DeriveK256KeyResponse` with every documented field and exhibits the documented `DeriveK256Key` state and side effects; invalid framing or fields return a structured error, and protected calls reject missing credentials.
+
+<a id="tc-gos-tappd-002-step-03"></a>
+### Step 3: Verify state, isolation, and diagnostics
+
+Re-query the public status/state interfaces, inspect component and peer logs, and repeat the request with one invalid or unauthorized input appropriate to this interface.
+
+**Expected results:**
+
+- Repeated observations match the method’s documented persistence, determinism, and idempotency semantics and remain scoped to the caller or run-scoped object; invalid or unauthorized input is rejected without secret disclosure, partial mutation, or loss of service availability.
+
+## Postconditions
+
+Remove run-scoped objects and restore changed configuration. Preserve logs and responses in the result artifacts.

docs/test-plans/core-components-full/01-guest-os/01-rpc-tappd/tc-gos-tappd-003/case.md

@@ -0,0 +1,62 @@
+<!-- SPDX-FileCopyrightText: © 2026 Phala Network <dstack@phala.network> -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+<a id="tc-gos-tappd-003"></a>
+# TC-GOS-TAPPD-003: Tappd.TdxQuote
+
+## Metadata
+
+- Priority: P1
+- Type: Functional, API, Security, Regression
+- Minimum environment: SIMULATOR
+- Automation: Yes
+- Requirements: [req-gos-tappd-003](../../../feature-audit.md#req-gos-tappd-003)
+- Risks: [risk-gos-tappd-003](../../../feature-audit.md#risk-gos-tappd-003)
+- Source: `dstack/guest-agent/rpc/proto/agent_rpc.proto:21`
+
+## Objective
+
+Verify the complete request, response, authorization, state transition, and error contract of `Tappd.TdxQuote`.
+
+## Preconditions
+
+1. The shared plan prerequisites are healthy and the target listener is reachable.
+2. Commands use isolated test data and preserve native request and response output.
+
+## Test Data
+
+The `Tappd.TdxQuote` entry in [`api-inventory.json`](../../../api-inventory.json) is mandatory test data. Exercise every request field and every recursively referenced message field as absent/default, valid, boundary-invalid and combined with an unknown field; validate every response field, nested message field, and presence bit.
+
+Use a unique run-scoped identifier and non-production credentials.
+
+## Steps
+
+<a id="tc-gos-tappd-003-step-01"></a>
+### Step 1: Inspect the effective prerequisite
+
+Query the relevant health, configuration, and baseline state for tappd.tdxquote.
+
+**Expected results:**
+
+- The target component is healthy, the intended listener and policy are effective, and the baseline contains no run-scoped test object.
+
+<a id="tc-gos-tappd-003-step-02"></a>
+### Step 2: Exercise the behavior
+
+Invoke `Tappd.TdxQuote` with a valid `TdxQuoteArgs` request using valid service-specific authentication and attestation context; capture the binary and JSON pRPC representations. Then send a schema-invalid request and, where protected, omit the credential.
+
+**Expected results:**
+
+- The valid call returns `TdxQuoteResponse` with every documented field and exhibits the documented `TdxQuote` state and side effects; invalid framing or fields return a structured error, and protected calls reject missing credentials.
+
+<a id="tc-gos-tappd-003-step-03"></a>
+### Step 3: Verify state, isolation, and diagnostics
+
+Re-query the public status/state interfaces, inspect component and peer logs, and repeat the request with one invalid or unauthorized input appropriate to this interface.
+
+**Expected results:**
+
+- Repeated observations match the method’s documented persistence, determinism, and idempotency semantics and remain scoped to the caller or run-scoped object; invalid or unauthorized input is rejected without secret disclosure, partial mutation, or loss of service availability.
+
+## Postconditions
+
+Remove run-scoped objects and restore changed configuration. Preserve logs and responses in the result artifacts.

docs/test-plans/core-components-full/01-guest-os/01-rpc-tappd/tc-gos-tappd-004/case.md

@@ -0,0 +1,62 @@
+<!-- SPDX-FileCopyrightText: © 2026 Phala Network <dstack@phala.network> -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+<a id="tc-gos-tappd-004"></a>
+# TC-GOS-TAPPD-004: Tappd.RawQuote
+
+## Metadata
+
+- Priority: P1
+- Type: Functional, API, Security, Regression
+- Minimum environment: SIMULATOR
+- Automation: Yes
+- Requirements: [req-gos-tappd-004](../../../feature-audit.md#req-gos-tappd-004)
+- Risks: [risk-gos-tappd-004](../../../feature-audit.md#risk-gos-tappd-004)
+- Source: `dstack/guest-agent/rpc/proto/agent_rpc.proto:28`
+
+## Objective
+
+Verify the complete request, response, authorization, state transition, and error contract of `Tappd.RawQuote`.
+
+## Preconditions
+
+1. The shared plan prerequisites are healthy and the target listener is reachable.
+2. Commands use isolated test data and preserve native request and response output.
+
+## Test Data
+
+The `Tappd.RawQuote` entry in [`api-inventory.json`](../../../api-inventory.json) is mandatory test data. Exercise every request field and every recursively referenced message field as absent/default, valid, boundary-invalid and combined with an unknown field; validate every response field, nested message field, and presence bit.
+
+Use a unique run-scoped identifier and non-production credentials.
+
+## Steps
+
+<a id="tc-gos-tappd-004-step-01"></a>
+### Step 1: Inspect the effective prerequisite
+
+Query the relevant health, configuration, and baseline state for tappd.rawquote.
+
+**Expected results:**
+
+- The target component is healthy, the intended listener and policy are effective, and the baseline contains no run-scoped test object.
+
+<a id="tc-gos-tappd-004-step-02"></a>
+### Step 2: Exercise the behavior
+
+Invoke `Tappd.RawQuote` with a valid `RawQuoteArgs` request using valid service-specific authentication and attestation context; capture the binary and JSON pRPC representations. Then send a schema-invalid request and, where protected, omit the credential.
+
+**Expected results:**
+
+- The valid call returns `TdxQuoteResponse` with every documented field and exhibits the documented `RawQuote` state and side effects; invalid framing or fields return a structured error, and protected calls reject missing credentials.
+
+<a id="tc-gos-tappd-004-step-03"></a>
+### Step 3: Verify state, isolation, and diagnostics
+
+Re-query the public status/state interfaces, inspect component and peer logs, and repeat the request with one invalid or unauthorized input appropriate to this interface.
+
+**Expected results:**
+
+- Repeated observations match the method’s documented persistence, determinism, and idempotency semantics and remain scoped to the caller or run-scoped object; invalid or unauthorized input is rejected without secret disclosure, partial mutation, or loss of service availability.
+
+## Postconditions
+
+Remove run-scoped objects and restore changed configuration. Preserve logs and responses in the result artifacts.

docs/test-plans/core-components-full/01-guest-os/01-rpc-tappd/tc-gos-tappd-005/case.md

@@ -0,0 +1,62 @@
+<!-- SPDX-FileCopyrightText: © 2026 Phala Network <dstack@phala.network> -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+<a id="tc-gos-tappd-005"></a>
+# TC-GOS-TAPPD-005: Tappd.Info
+
+## Metadata
+
+- Priority: P1
+- Type: Functional, API, Security, Regression
+- Minimum environment: SIMULATOR
+- Automation: Yes
+- Requirements: [req-gos-tappd-005](../../../feature-audit.md#req-gos-tappd-005)
+- Risks: [risk-gos-tappd-005](../../../feature-audit.md#risk-gos-tappd-005)
+- Source: `dstack/guest-agent/rpc/proto/agent_rpc.proto:31`
+
+## Objective
+
+Verify the complete request, response, authorization, state transition, and error contract of `Tappd.Info`.
+
+## Preconditions
+
+1. The shared plan prerequisites are healthy and the target listener is reachable.
+2. Commands use isolated test data and preserve native request and response output.
+
+## Test Data
+
+The `Tappd.Info` entry in [`api-inventory.json`](../../../api-inventory.json) is mandatory test data. Exercise every request field and every recursively referenced message field as absent/default, valid, boundary-invalid and combined with an unknown field; validate every response field, nested message field, and presence bit.
+
+Use a unique run-scoped identifier and non-production credentials.
+
+## Steps
+
+<a id="tc-gos-tappd-005-step-01"></a>
+### Step 1: Inspect the effective prerequisite
+
+Query the relevant health, configuration, and baseline state for tappd.info.
+
+**Expected results:**
+
+- The target component is healthy, the intended listener and policy are effective, and the baseline contains no run-scoped test object.
+
+<a id="tc-gos-tappd-005-step-02"></a>
+### Step 2: Exercise the behavior
+
+Invoke `Tappd.Info` with a valid `google.protobuf.Empty` request using valid service-specific authentication and attestation context; capture the binary and JSON pRPC representations. Then send a schema-invalid request and, where protected, omit the credential.
+
+**Expected results:**
+
+- The valid call returns `AppInfo` with every documented field and exhibits the documented `Info` state and side effects; invalid framing or fields return a structured error, and protected calls reject missing credentials.
+
+<a id="tc-gos-tappd-005-step-03"></a>
+### Step 3: Verify state, isolation, and diagnostics
+
+Re-query the public status/state interfaces, inspect component and peer logs, and repeat the request with one invalid or unauthorized input appropriate to this interface.
+
+**Expected results:**
+
+- Repeated observations match the method’s documented persistence, determinism, and idempotency semantics and remain scoped to the caller or run-scoped object; invalid or unauthorized input is rejected without secret disclosure, partial mutation, or loss of service availability.
+
+## Postconditions
+
+Remove run-scoped objects and restore changed configuration. Preserve logs and responses in the result artifacts.