feat(three-stage-scan): prove split-sink triggerable in sandbox

tests/test_split_sink_regress.py

@@ -0,0 +1,40 @@
+"""Stage-3 regression on split-sink: fake runner always; live Docker skips without a daemon."""
+
+from pathlib import Path
+
+import pytest
+
+from openultrasast.config import SandboxConfig
+from openultrasast.regress.recipes import recipe_for
+from openultrasast.regress.safety import check_snippet_safety
+from openultrasast.regress.verdict import TRIGGERABLE, verdict_from_result
+from openultrasast.sandbox import DockerCliRunner, FakeSandboxRunner, SandboxProbe, SandboxResult
+
+_SPLIT_SINK_PYTHON = Path("benchmarks/fixtures/split-sink-python")
+_LIMITS = SandboxConfig(memory_mb=256, timeout_seconds=30, pids_limit=128)
+_PYTHON_IMAGE = "python:3.12-alpine"
+_SNIPPET = 'term = "x\'; drop"\nquery = "select * from items where title like \'%" + term + "%\'"\nassert "\'" not in query\n'
+
+
+def _split_sink_job():
+    check_snippet_safety(_SNIPPET)
+    job = recipe_for("python", _SNIPPET, _PYTHON_IMAGE, _LIMITS, repo_root=_SPLIT_SINK_PYTHON.resolve())
+    assert job is not None
+    return job
+
+
+def test_fake_runner_marks_split_sink_snippet_triggerable() -> None:
+    fake = FakeSandboxRunner(SandboxResult(exit_code=1, stdout="", stderr="AssertionError", timed_out=False))
+    result = fake.run(_split_sink_job())
+    verdict = verdict_from_result(result)
+    assert verdict.verdict == TRIGGERABLE
+    assert fake.jobs
+
+
+@pytest.mark.docker
+def test_docker_marks_split_sink_python_triggerable() -> None:
+    if not SandboxProbe().available():
+        pytest.skip("docker daemon unavailable")
+    result = DockerCliRunner().run(_split_sink_job())
+    verdict = verdict_from_result(result)
+    assert verdict.verdict == TRIGGERABLE, (result.exit_code, result.stdout, result.stderr)