@raishin/vanguard-frontier-agentic 1.8.0 → 2.0.0

package/tests/fixtures/nvidia-maestro-routing/expected/05-trt-int8-calibration.json

@@ -0,0 +1,6 @@
+{
+  "route": [
+    "nvidia-tensorrt-llm-deployment-review-agent"
+  ],
+  "mode": "single"
+}

package/tests/fixtures/nvidia-maestro-routing/expected/06-gpu-operator-securitycontext.json

@@ -0,0 +1,6 @@
+{
+  "route": [
+    "nvidia-gpu-operator-kubernetes-hardening-agent"
+  ],
+  "mode": "single"
+}

package/tests/fixtures/nvidia-maestro-routing/expected/07-spectrumx-nccl.json

@@ -0,0 +1,6 @@
+{
+  "route": [
+    "nvidia-ai-networking-fabric-review-agent"
+  ],
+  "mode": "single"
+}

package/tests/fixtures/nvidia-maestro-routing/expected/08-dgx-bmc.json

@@ -0,0 +1,6 @@
+{
+  "route": [
+    "nvidia-ai-infrastructure-operations-agent"
+  ],
+  "mode": "single"
+}

package/tests/fixtures/nvidia-maestro-routing/expected/09-nemo-agent-toolkit.json

@@ -0,0 +1,6 @@
+{
+  "route": [
+    "nvidia-agentic-ai-platform-review-agent"
+  ],
+  "mode": "single"
+}

package/tests/fixtures/nvidia-maestro-routing/expected/10-nemo-genai.json

@@ -0,0 +1,6 @@
+{
+  "route": [
+    "nvidia-generative-ai-platform-review-agent"
+  ],
+  "mode": "single"
+}

package/tests/fixtures/nvidia-maestro-routing/expected/11-multi-domain-dgx-bringup.json

@@ -0,0 +1,8 @@
+{
+  "route": [
+    "nvidia-ai-infrastructure-operations-agent",
+    "nvidia-ai-networking-fabric-review-agent",
+    "nvidia-gpu-operator-kubernetes-hardening-agent"
+  ],
+  "mode": "parallel (3)"
+}

package/tests/fixtures/nvidia-maestro-routing/expected/12-promote-nim-to-prod.json

@@ -0,0 +1,6 @@
+{
+  "route": [
+    "nvidia-model-promotion-gatekeeper-agent"
+  ],
+  "mode": "runtime-evidence-gate"
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/01-cuda-coalescing.json

@@ -0,0 +1,4 @@
+{
+  "name": "01-cuda-coalescing",
+  "task": "Review this CUDA kernel for memory coalescing and shared memory bank conflicts; check occupancy and register pressure with Nsight Compute."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/02-dcgm-coverage.json

@@ -0,0 +1,4 @@
+{
+  "name": "02-dcgm-coverage",
+  "task": "Audit our DCGM exporter coverage across the GPU fleet and review Xid signature to runbook mapping; we also want gated driver upgrade discipline."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/03-ngc-cosign-policy.json

@@ -0,0 +1,4 @@
+{
+  "name": "03-ngc-cosign-policy",
+  "task": "We need a review of our NGC API key scope and rotation policy, NIM cosign verification, AI Enterprise license posture, and air-gap mirror integrity."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/04-triton-batching.json

@@ -0,0 +1,4 @@
+{
+  "name": "04-triton-batching",
+  "task": "Tune dynamic batching and ensemble pipelines on our Triton model repository; also review custom backend trust and response cache."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/05-trt-int8-calibration.json

@@ -0,0 +1,4 @@
+{
+  "name": "05-trt-int8-calibration",
+  "task": "Review our TensorRT-LLM INT8 calibration pipeline, ONNX export, dynamic shapes, and engine cache provenance."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/06-gpu-operator-securitycontext.json

@@ -0,0 +1,4 @@
+{
+  "name": "06-gpu-operator-securitycontext",
+  "task": "Harden GPU Operator on Kubernetes: device plugin, MIG manager, NFD, container toolkit, securityContext, namespace tenancy."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/07-spectrumx-nccl.json

@@ -0,0 +1,4 @@
+{
+  "name": "07-spectrumx-nccl",
+  "task": "Review Spectrum-X fabric topology, NCCL collective tuning, RoCEv2 lossless config, congestion control, east-west isolation."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/08-dgx-bmc.json

@@ -0,0 +1,4 @@
+{
+  "name": "08-dgx-bmc",
+  "task": "Review DGX H200 BMC segmentation, driver and firmware alignment against the AI Enterprise support matrix and our reference architecture; check ECC and persistence."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/09-nemo-agent-toolkit.json

@@ -0,0 +1,4 @@
+{
+  "name": "09-nemo-agent-toolkit",
+  "task": "Review our agentic AI platform built on NeMo Agent Toolkit and NIM-as-tool, including retrieval pipeline, tool-use safety, agent memory boundaries, and audit log."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/10-nemo-genai.json

@@ -0,0 +1,4 @@
+{
+  "name": "10-nemo-genai",
+  "task": "Review our generative AI training pipeline on NeMo: model card, weights provenance, evaluation harness, guardrails."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/11-multi-domain-dgx-bringup.json

@@ -0,0 +1,4 @@
+{
+  "name": "11-multi-domain-dgx-bringup",
+  "task": "We're bringing up a new DGX H200 cluster with Spectrum-X fabric and GPU Operator; need a Day-1 review of BMC, NCCL, and device plugin / securityContext."
+}

package/tests/fixtures/nvidia-maestro-routing/inputs/12-promote-nim-to-prod.json

@@ -0,0 +1,4 @@
+{
+  "name": "12-promote-nim-to-prod",
+  "task": "Promote nvcr.io/nim/meta/llama-3.3-70b:1.5.0 NIM container from staging to production with a signed attestation."
+}

package/tests/fixtures/nvidia-maestro-routing/taxonomy.json

@@ -0,0 +1,49 @@
+{
+  "provider": "nvidia",
+  "domains": {
+    "infrastructure": {
+      "keywords": ["DGX", "HGX", "MGX", "BMC", "ECC", "MIG", "driver", "firmware", "reference architecture", "AI Enterprise support matrix", "persistence"],
+      "agent": "nvidia-ai-infrastructure-operations-agent"
+    },
+    "networking-fabric": {
+      "keywords": ["Spectrum-X", "InfiniBand", "NCCL", "RoCEv2", "lossless", "congestion control", "fabric topology", "east-west"],
+      "agent": "nvidia-ai-networking-fabric-review-agent"
+    },
+    "day2-ops": {
+      "keywords": ["DCGM", "dcgm-exporter", "Xid", "runbook", "fleet health", "MIG lifecycle", "driver upgrade", "firmware upgrade"],
+      "agent": "nvidia-ai-operations-day2-agent"
+    },
+    "kubernetes": {
+      "keywords": ["GPU Operator", "device plugin", "MIG manager", "NFD", "time-sliced", "container toolkit", "securityContext", "namespace tenancy"],
+      "agent": "nvidia-gpu-operator-kubernetes-hardening-agent"
+    },
+    "cuda-perf": {
+      "keywords": ["CUDA kernel", ".cu", "coalescing", "bank conflict", "occupancy", "register pressure", "Nsight Compute", "shared memory", "stream concurrency"],
+      "agent": "nvidia-cuda-kernel-performance-review-agent"
+    },
+    "inference-trt": {
+      "keywords": ["TensorRT", "TensorRT-LLM", "TRT", "ONNX", "calibration", "INT8", "FP8", "FP4", "dynamic shapes", "engine cache"],
+      "agent": "nvidia-tensorrt-llm-deployment-review-agent"
+    },
+    "inference-triton": {
+      "keywords": ["Triton", "model repository", "dynamic batching", "ensemble", "custom backend", "response cache"],
+      "agent": "nvidia-triton-inference-serving-review-agent"
+    },
+    "genai-platform": {
+      "keywords": ["NeMo", "model card", "weights provenance", "evaluation harness", "guardrails", "generative AI"],
+      "agent": "nvidia-generative-ai-platform-review-agent"
+    },
+    "agentic-ai": {
+      "keywords": ["NeMo Agent Toolkit", "agentic AI", "NIM-as-tool", "retrieval pipeline", "tool-use safety", "agent memory", "audit log"],
+      "agent": "nvidia-agentic-ai-platform-review-agent"
+    },
+    "supply-chain": {
+      "keywords": ["NGC", "cosign", "AI Enterprise license", "air-gap mirror", "API key scope"],
+      "agent": "nvidia-ngc-nim-supply-chain-governor-agent"
+    }
+  },
+  "live_guards": ["nvidia-model-promotion-gatekeeper-agent"],
+  "gate_mode": "runtime-evidence-gate",
+  "live_guard_intent": "(promote\\s+\\w+\\s+(?:to\\s+prod|to\\s+production)|production\\s+promotion|promote.*NIM|staging[- ]to[- ]production|runtime[- ]evidence)",
+  "parallel_threshold": 0.6
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/README.md

@@ -0,0 +1,34 @@
+# Golden fixtures — `nvidia-model-promotion-gatekeeper`
+
+Each fixture is a pair of files with the same basename:
+
+- `inputs/NN-name.json` — the recorded **scenario**: operator inputs plus the stubbed outputs the gatekeeper would have observed if it had executed each allowlisted command.
+- `expected/NN-name.json` — the expected **verdict** (`promote` / `block` / `manual-review`), the set of `verdict_reasons[]`, and the `evidence_level`.
+
+`tests/validate-nvidia-promotion-gatekeeper.py` reads each `inputs/NN-name.json`, runs the pure-Python gate evaluator against its stubs, produces an attestation JSON, validates that attestation against `schemas/attestation.schema.json`, and asserts verdict + reasons match `expected/NN-name.json`.
+
+This is the project's first eval-fixture pattern. Other live agents should copy this layout.
+
+## Taxonomy
+
+| # | Pair basename | Scenario | Expected verdict |
+|---|---|---|---|
+| 01 | `01-clean` | Signed by expected NVIDIA identity, SBOM + model card present, no new CVEs | `promote` |
+| 02 | `02-unsigned` | `cosign verify` fails (no signature found) | `block` |
+| 03 | `03-digest-drift` | Tag resolves to a digest different from operator-supplied pin | `block` |
+| 04 | `04-missing-sbom` | No SPDX or CycloneDX attestation referrer | `block` |
+| 05 | `05-missing-model-card` | No model card OCI referrer | `block` |
+| 06 | `06-cve-regression` | Candidate adds new CRITICAL CVEs vs current-prod | `block` |
+| 07 | `07-expired-cert` | Fulcio cert `notAfter` < now (replay artifact) | `block` |
+| 08 | `08-wrong-issuer` | Signer identity matches but OIDC issuer is not the expected one | `block` |
+| 09 | `09-unknown-registry` | `image_ref` is `docker.io/...`, not `nvcr.io/...` | `block` |
+| 10 | `10-replay-stale-attestation` | Attestation older than the operator-configured TTL | `block` |
+| 11 | `11-label-only-model-card` | Documentation label exists, but no fetched model-card OCI referrer sha256 | `block` |
+
+Air-gap behavior (Sigstore unreachable) is exercised separately by setting `stub_outputs.rekor_reachable=false` in any fixture; that path emits `manual-review` with reason `rekor_unreachable`.
+
+## Adding a fixture
+
+1. Drop a new `inputs/NN-shortname.json` with the scenario + `stub_outputs`.
+2. Add `expected/NN-shortname.json` with the expected `verdict`, the **set** of `verdict_reasons[]` (order does not matter), and `evidence_level`.
+3. Run `python3 tests/validate-nvidia-promotion-gatekeeper.py`. It will replay every fixture and report.

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/01-clean.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "promote",
+  "verdict_reasons": [
+    "all_gates_passed"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/02-unsigned.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "block",
+  "verdict_reasons": [
+    "unsigned"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/03-digest-drift.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "block",
+  "verdict_reasons": [
+    "digest_drift"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/04-missing-sbom.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "block",
+  "verdict_reasons": [
+    "missing_sbom"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/05-missing-model-card.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "block",
+  "verdict_reasons": [
+    "missing_model_card"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/06-cve-regression.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "block",
+  "verdict_reasons": [
+    "cve_regression"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/07-expired-cert.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "block",
+  "verdict_reasons": [
+    "expired_cert"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/08-wrong-issuer.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "block",
+  "verdict_reasons": [
+    "wrong_issuer"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/09-unknown-registry.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "block",
+  "verdict_reasons": [
+    "unknown_registry"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/10-replay-stale-attestation.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "block",
+  "verdict_reasons": [
+    "stale_attestation"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/expected/11-label-only-model-card.json

@@ -0,0 +1,7 @@
+{
+  "verdict": "block",
+  "verdict_reasons": [
+    "missing_model_card"
+  ],
+  "evidence_level": "live"
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/inputs/01-clean.json

@@ -0,0 +1,45 @@
+{
+  "name": "01-clean",
+  "scenario": "Signed by expected identity, SBOM and model card present, CVE delta clean.",
+  "inputs": {
+    "image_ref": "nvcr.io/nim/meta/llama-3.3-70b:1.5.0",
+    "image_ref_pin": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "current_prod_digest": "sha256:9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a8b",
+    "expected_signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+    "expected_oidc_issuer": "https://token.actions.githubusercontent.com",
+    "mode": "runtime",
+    "attestation_ttl_hours": 24
+  },
+  "stub_outputs": {
+    "rekor_reachable": true,
+    "crane_digest": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "cosign_verify": {
+      "ok": true,
+      "signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+      "issuer": "https://token.actions.githubusercontent.com",
+      "cert_not_after": "2027-01-15T00:00:00Z",
+      "rekor_log_index": 134567890
+    },
+    "cosign_verify_attestation_spdx": {
+      "ok": true,
+      "sha256": "sha256:1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b",
+      "format": "spdx"
+    },
+    "oras_discover_model_card": {
+      "present": true,
+      "sha256": "sha256:0f1e2d3c4b5a69788b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f10",
+      "source": "oci-referrer"
+    },
+    "grype_candidate": {
+      "critical": 0,
+      "high": 1,
+      "medium": 5
+    },
+    "grype_prod": {
+      "critical": 0,
+      "high": 1,
+      "medium": 7
+    },
+    "attestation_age_hours": 1
+  }
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/inputs/02-unsigned.json

@@ -0,0 +1,42 @@
+{
+  "name": "02-unsigned",
+  "scenario": "cosign verify reports no signature found.",
+  "inputs": {
+    "image_ref": "nvcr.io/nim/meta/llama-3.3-70b:1.5.0",
+    "image_ref_pin": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "current_prod_digest": "sha256:9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a8b",
+    "expected_signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+    "expected_oidc_issuer": "https://token.actions.githubusercontent.com",
+    "mode": "runtime",
+    "attestation_ttl_hours": 24
+  },
+  "stub_outputs": {
+    "rekor_reachable": true,
+    "crane_digest": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "cosign_verify": {
+      "ok": false,
+      "reason": "no_signatures_found"
+    },
+    "cosign_verify_attestation_spdx": {
+      "ok": true,
+      "sha256": "sha256:1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b",
+      "format": "spdx"
+    },
+    "oras_discover_model_card": {
+      "present": true,
+      "sha256": "sha256:0f1e2d3c4b5a69788b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f10",
+      "source": "oci-referrer"
+    },
+    "grype_candidate": {
+      "critical": 0,
+      "high": 1,
+      "medium": 5
+    },
+    "grype_prod": {
+      "critical": 0,
+      "high": 1,
+      "medium": 7
+    },
+    "attestation_age_hours": 1
+  }
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/inputs/03-digest-drift.json

@@ -0,0 +1,45 @@
+{
+  "name": "03-digest-drift",
+  "scenario": "crane digest resolves to a different sha256 than the operator-supplied pin.",
+  "inputs": {
+    "image_ref": "nvcr.io/nim/meta/llama-3.3-70b:1.5.0",
+    "image_ref_pin": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+    "current_prod_digest": "sha256:9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a8b",
+    "expected_signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+    "expected_oidc_issuer": "https://token.actions.githubusercontent.com",
+    "mode": "runtime",
+    "attestation_ttl_hours": 24
+  },
+  "stub_outputs": {
+    "rekor_reachable": true,
+    "crane_digest": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "cosign_verify": {
+      "ok": true,
+      "signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+      "issuer": "https://token.actions.githubusercontent.com",
+      "cert_not_after": "2027-01-15T00:00:00Z",
+      "rekor_log_index": 134567890
+    },
+    "cosign_verify_attestation_spdx": {
+      "ok": true,
+      "sha256": "sha256:1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b",
+      "format": "spdx"
+    },
+    "oras_discover_model_card": {
+      "present": true,
+      "sha256": "sha256:0f1e2d3c4b5a69788b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f10",
+      "source": "oci-referrer"
+    },
+    "grype_candidate": {
+      "critical": 0,
+      "high": 1,
+      "medium": 5
+    },
+    "grype_prod": {
+      "critical": 0,
+      "high": 1,
+      "medium": 7
+    },
+    "attestation_age_hours": 1
+  }
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/inputs/04-missing-sbom.json

@@ -0,0 +1,44 @@
+{
+  "name": "04-missing-sbom",
+  "scenario": "No SPDX or CycloneDX attestation referrer.",
+  "inputs": {
+    "image_ref": "nvcr.io/nim/meta/llama-3.3-70b:1.5.0",
+    "image_ref_pin": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "current_prod_digest": "sha256:9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a8b",
+    "expected_signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+    "expected_oidc_issuer": "https://token.actions.githubusercontent.com",
+    "mode": "runtime",
+    "attestation_ttl_hours": 24
+  },
+  "stub_outputs": {
+    "rekor_reachable": true,
+    "crane_digest": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "cosign_verify": {
+      "ok": true,
+      "signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+      "issuer": "https://token.actions.githubusercontent.com",
+      "cert_not_after": "2027-01-15T00:00:00Z",
+      "rekor_log_index": 134567890
+    },
+    "cosign_verify_attestation_spdx": {
+      "ok": false,
+      "reason": "no_attestation_found"
+    },
+    "oras_discover_model_card": {
+      "present": true,
+      "sha256": "sha256:0f1e2d3c4b5a69788b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f10",
+      "source": "oci-referrer"
+    },
+    "grype_candidate": {
+      "critical": 0,
+      "high": 1,
+      "medium": 5
+    },
+    "grype_prod": {
+      "critical": 0,
+      "high": 1,
+      "medium": 7
+    },
+    "attestation_age_hours": 1
+  }
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/inputs/05-missing-model-card.json

@@ -0,0 +1,44 @@
+{
+  "name": "05-missing-model-card",
+  "scenario": "No OCI referrer of model-card type.",
+  "inputs": {
+    "image_ref": "nvcr.io/nim/meta/llama-3.3-70b:1.5.0",
+    "image_ref_pin": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "current_prod_digest": "sha256:9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a8b",
+    "expected_signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+    "expected_oidc_issuer": "https://token.actions.githubusercontent.com",
+    "mode": "runtime",
+    "attestation_ttl_hours": 24
+  },
+  "stub_outputs": {
+    "rekor_reachable": true,
+    "crane_digest": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "cosign_verify": {
+      "ok": true,
+      "signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+      "issuer": "https://token.actions.githubusercontent.com",
+      "cert_not_after": "2027-01-15T00:00:00Z",
+      "rekor_log_index": 134567890
+    },
+    "cosign_verify_attestation_spdx": {
+      "ok": true,
+      "sha256": "sha256:1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b",
+      "format": "spdx"
+    },
+    "oras_discover_model_card": {
+      "present": false,
+      "source": "missing"
+    },
+    "grype_candidate": {
+      "critical": 0,
+      "high": 1,
+      "medium": 5
+    },
+    "grype_prod": {
+      "critical": 0,
+      "high": 1,
+      "medium": 7
+    },
+    "attestation_age_hours": 1
+  }
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/inputs/06-cve-regression.json

@@ -0,0 +1,45 @@
+{
+  "name": "06-cve-regression",
+  "scenario": "Candidate adds 2 new CRITICAL CVEs vs current-prod.",
+  "inputs": {
+    "image_ref": "nvcr.io/nim/meta/llama-3.3-70b:1.5.0",
+    "image_ref_pin": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "current_prod_digest": "sha256:9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a8b",
+    "expected_signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+    "expected_oidc_issuer": "https://token.actions.githubusercontent.com",
+    "mode": "runtime",
+    "attestation_ttl_hours": 24
+  },
+  "stub_outputs": {
+    "rekor_reachable": true,
+    "crane_digest": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "cosign_verify": {
+      "ok": true,
+      "signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+      "issuer": "https://token.actions.githubusercontent.com",
+      "cert_not_after": "2027-01-15T00:00:00Z",
+      "rekor_log_index": 134567890
+    },
+    "cosign_verify_attestation_spdx": {
+      "ok": true,
+      "sha256": "sha256:1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b",
+      "format": "spdx"
+    },
+    "oras_discover_model_card": {
+      "present": true,
+      "sha256": "sha256:0f1e2d3c4b5a69788b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f10",
+      "source": "oci-referrer"
+    },
+    "grype_candidate": {
+      "critical": 2,
+      "high": 5,
+      "medium": 10
+    },
+    "grype_prod": {
+      "critical": 0,
+      "high": 1,
+      "medium": 7
+    },
+    "attestation_age_hours": 1
+  }
+}

package/tests/fixtures/nvidia-model-promotion-gatekeeper/inputs/07-expired-cert.json

@@ -0,0 +1,45 @@
+{
+  "name": "07-expired-cert",
+  "scenario": "Fulcio cert notAfter is in the past \u2014 replay artifact.",
+  "inputs": {
+    "image_ref": "nvcr.io/nim/meta/llama-3.3-70b:1.5.0",
+    "image_ref_pin": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "current_prod_digest": "sha256:9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a8b",
+    "expected_signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+    "expected_oidc_issuer": "https://token.actions.githubusercontent.com",
+    "mode": "runtime",
+    "attestation_ttl_hours": 24
+  },
+  "stub_outputs": {
+    "rekor_reachable": true,
+    "crane_digest": "sha256:5f5fbd7a6e9b0c3a2e1d8c7b6a5f4e3d2c1b0a9f8e7d6c5b4a3f2e1d0c9b8a7f",
+    "cosign_verify": {
+      "ok": true,
+      "signer_identity": "https://github.com/nvidia/nim-builder/.github/workflows/release.yml@refs/tags/v1.5.0",
+      "issuer": "https://token.actions.githubusercontent.com",
+      "cert_not_after": "2024-01-01T00:00:00Z",
+      "rekor_log_index": 134567890
+    },
+    "cosign_verify_attestation_spdx": {
+      "ok": true,
+      "sha256": "sha256:1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b",
+      "format": "spdx"
+    },
+    "oras_discover_model_card": {
+      "present": true,
+      "sha256": "sha256:0f1e2d3c4b5a69788b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f10",
+      "source": "oci-referrer"
+    },
+    "grype_candidate": {
+      "critical": 0,
+      "high": 1,
+      "medium": 5
+    },
+    "grype_prod": {
+      "critical": 0,
+      "high": 1,
+      "medium": 7
+    },
+    "attestation_age_hours": 1
+  }
+}