code-mower 0.5.0b42__tar.gz → 0.5.0b43__tar.gz

{code_mower-0.5.0b42 → code_mower-0.5.0b43}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-mower
-Version: 0.5.0b42
+Version: 0.5.0b43
 Summary: Multi-reviewer AI code audit orchestration
 License-Expression: Apache-2.0
 Requires-Python: >=3.11
@@ -103,11 +103,11 @@ Code Mower currently targets Python 3.11+; Python 3.12 is recommended.
 
 ```bash
 python3.12 --version
-pipx install --python python3.12 code-mower==0.5.0b42
+pipx install --python python3.12 code-mower==0.5.0b43
 code-mower --version
 ```
 
-`0.5.0b42` is a beta release. Until Code Mower publishes a stable `1.0`
+`0.5.0b43` is a beta release. Until Code Mower publishes a stable `1.0`
 line, use the explicit beta version above or allow prereleases with:
 
 ```bash
@@ -155,7 +155,7 @@ First-time command map: [docs/launch-command-surface.md](docs/launch-command-sur
 
 The current PyPI beta has been rehearsed end-to-end from a clean install:
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the latest 10/10 public-package readiness proof for `code-mower==0.5.0b42`.
+the latest 10/10 public-package readiness proof for `code-mower==0.5.0b43`.
 
 ## Optional: Plan Before Coding
 
@@ -310,9 +310,9 @@ builder provenance, start with
 
 ## Installation Status
 
-The current public beta is `v0.5.0-beta.42` from
+The current public beta is `v0.5.0-beta.43` from
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), published
-as `code-mower==0.5.0b42` on [PyPI](https://pypi.org/project/code-mower/).
+as `code-mower==0.5.0b43` on [PyPI](https://pypi.org/project/code-mower/).
 GitHub releases remain the auditable source for tags, build artifacts, and
 release notes.
 

{code_mower-0.5.0b42 → code_mower-0.5.0b43}/README.md

@@ -88,11 +88,11 @@ Code Mower currently targets Python 3.11+; Python 3.12 is recommended.
 
 ```bash
 python3.12 --version
-pipx install --python python3.12 code-mower==0.5.0b42
+pipx install --python python3.12 code-mower==0.5.0b43
 code-mower --version
 ```
 
-`0.5.0b42` is a beta release. Until Code Mower publishes a stable `1.0`
+`0.5.0b43` is a beta release. Until Code Mower publishes a stable `1.0`
 line, use the explicit beta version above or allow prereleases with:
 
 ```bash
@@ -140,7 +140,7 @@ First-time command map: [docs/launch-command-surface.md](docs/launch-command-sur
 
 The current PyPI beta has been rehearsed end-to-end from a clean install:
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the latest 10/10 public-package readiness proof for `code-mower==0.5.0b42`.
+the latest 10/10 public-package readiness proof for `code-mower==0.5.0b43`.
 
 ## Optional: Plan Before Coding
 
@@ -295,9 +295,9 @@ builder provenance, start with
 
 ## Installation Status
 
-The current public beta is `v0.5.0-beta.42` from
+The current public beta is `v0.5.0-beta.43` from
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), published
-as `code-mower==0.5.0b42` on [PyPI](https://pypi.org/project/code-mower/).
+as `code-mower==0.5.0b43` on [PyPI](https://pypi.org/project/code-mower/).
 GitHub releases remain the auditable source for tags, build artifacts, and
 release notes.
 

{code_mower-0.5.0b42 → code_mower-0.5.0b43}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "code-mower"
-version = "0.5.0b42"
+version = "0.5.0b43"
 description = "Multi-reviewer AI code audit orchestration"
 requires-python = ">=3.11"
 readme = "README.md"

{code_mower-0.5.0b42 → code_mower-0.5.0b43}/src/code_mower/__init__.py

@@ -1,3 +1,3 @@
 """Code Mower package."""
 
-__version__ = "0.5.0b42"
+__version__ = "0.5.0b43"

{code_mower-0.5.0b42 → code_mower-0.5.0b43}/src/code_mower/claude_audit_pr.py

@@ -112,6 +112,11 @@ MAX_SUMMARY_CHARS = 4_000
 MAX_FINDING_TITLE_CHARS = 300
 MAX_FINDING_FILE_CHARS = 500
 MAX_FINDING_DETAIL_CHARS = 4_000
+MAX_CLAUDE_AUDIT_ATTEMPTS = 2
+MIN_BLOCKED_VERDICT_PROSE_CHARS = 80
+SCHEMA_PLACEHOLDER_TEXT = frozenset({"test", "example", "placeholder"})
+CLAUDE_RAW_OUTPUT_SCHEMA = "code_mower.claudeAuditRawOutput.v1"
+BLOCKER_SEVERITIES = frozenset({"P0", "P1", "P2"})
 
 STALE_TRAILER = "<!-- CLAUDE_AUDIT_STATE: needs-claude-audit -->"
 DONE_TRAILER = "<!-- CLAUDE_AUDIT_STATE: claude-audit-done -->"
@@ -181,6 +186,8 @@ class ClaudeVerdict:
     p2_count: int = 0
     p3_count: int = 0
     mismatch_note: str = ""
+    summary: str = ""
+    findings: Tuple[Dict[str, Any], ...] = field(default_factory=tuple)
 
     @property
     def blocker_count(self) -> int:
@@ -207,6 +214,7 @@ class ClaudeAuditResult:
 class DiffContext:
     stat: str
     diff: str
+    changed_files: Tuple[str, ...]
     was_truncated: bool
     requested_max_bytes: int
     hard_limit_bytes: int
@@ -337,7 +345,7 @@ def parse_structured_claude_verdict(data: Any) -> ClaudeVerdict:
 
         p_counts[int(severity[1])] += 1
         if len(rendered_findings) < MAX_RENDERED_FINDINGS:
-            rendered_findings.append(raw_finding)
+            rendered_findings.append(dict(raw_finding))
 
     blocker_count = p_counts[0] + p_counts[1] + p_counts[2]
     if blocker_count > 0:
@@ -362,9 +370,139 @@ def parse_structured_claude_verdict(data: Any) -> ClaudeVerdict:
         p2_count=p_counts[2],
         p3_count=p_counts[3],
         mismatch_note=mismatch_note,
+        summary=summary,
+        findings=tuple(dict(finding) for finding in raw_findings),
     )
 
 
+def _placeholder_equal(value: object) -> bool:
+    return str(value or "").strip().lower() in SCHEMA_PLACEHOLDER_TEXT
+
+
+def _normalize_diff_path(value: object) -> str:
+    path = str(value or "").strip().replace("\\", "/")
+    while path.startswith("./"):
+        path = path[2:]
+    if path.startswith(("a/", "b/")):
+        path = path[2:]
+    return path
+
+
+def _diff_file_matches(file_path: str, allowed_files: set[str]) -> bool:
+    if file_path in allowed_files:
+        return True
+    suffix_matches = [
+        path
+        for path in allowed_files
+        if path.endswith(f"/{file_path}") or file_path.endswith(f"/{path}")
+    ]
+    return len(suffix_matches) == 1
+
+
+def _claude_verdict_guardrail_reason(
+    parsed: ClaudeVerdict,
+    changed_files: Tuple[str, ...],
+) -> Optional[str]:
+    if parsed.verdict == "UNKNOWN":
+        return None
+
+    if _placeholder_equal(parsed.summary):
+        return "structured verdict summary matched a schema placeholder value"
+
+    allowed_files = {_normalize_diff_path(path) for path in changed_files}
+    allowed_files.discard("")
+    for idx, finding in enumerate(parsed.findings):
+        where = f"findings[{idx}]"
+        if _placeholder_equal(finding.get("title")):
+            return f"{where}.title matched a schema placeholder value"
+        if _placeholder_equal(finding.get("detail")):
+            return f"{where}.detail matched a schema placeholder value"
+
+        file_path = _normalize_diff_path(finding.get("file"))
+        severity = str(finding.get("severity") or "")
+        if (
+            severity in BLOCKER_SEVERITIES
+            and (not file_path or not _diff_file_matches(file_path, allowed_files))
+        ):
+            return f"{where}.file {file_path!r} is not present in the PR diff"
+
+    if (
+        parsed.verdict == "BLOCKED"
+        and len(parsed.prose.strip()) < MIN_BLOCKED_VERDICT_PROSE_CHARS
+    ):
+        return "structured blocked verdict body is too short to be credible"
+
+    return None
+
+
+def _apply_claude_verdict_guardrails(
+    parsed: ClaudeVerdict,
+    changed_files: Tuple[str, ...],
+) -> Tuple[ClaudeVerdict, Optional[str]]:
+    reason = _claude_verdict_guardrail_reason(parsed, changed_files)
+    if reason is None:
+        return parsed, None
+    return _unknown_structured_verdict(reason), reason
+
+
+def _write_claude_raw_output_sidecar(
+    artifact_path: Optional[Path],
+    attempts: List[Dict[str, Any]],
+) -> None:
+    if artifact_path is None:
+        return
+    sidecar_path = artifact_path.with_suffix(".claude-raw-output.json")
+    payload = {"schema": CLAUDE_RAW_OUTPUT_SCHEMA, "attempts": attempts}
+    try:
+        text = json.dumps(payload, indent=2, sort_keys=True) + "\n"
+        sidecar_path.write_text(text, encoding="utf-8")
+    except OSError as exc:
+        print(
+            f"warning: failed to write Claude raw output sidecar {sidecar_path}: {exc}",
+            file=sys.stderr,
+        )
+
+
+def _guardrail_retry_prompt(
+    prompt: str,
+    reason: str,
+    changed_files: Tuple[str, ...],
+) -> str:
+    files = "\n".join(f"- {path}" for path in changed_files[:50])
+    if len(changed_files) > 50:
+        files += f"\n- ... {len(changed_files) - 50} additional file(s) omitted"
+    return (
+        f"{prompt.rstrip()}\n\n"
+        "Trusted wrapper retry instruction:\n"
+        f"The previous structured verdict was rejected: {reason}. "
+        "Return a fresh JSON verdict only. Do not use placeholder values such "
+        "as 'test', 'example', or 'placeholder'. P0/P1/P2 findings must cite a "
+        "file from the PR diff, using the repository-relative path or a unique "
+        "suffix. PR diff files:\n"
+        f"{files}\n"
+    )
+
+
+def _record_posted_comment_url(
+    artifact_path: Optional[Path],
+    posted_comment_url: Optional[str],
+) -> None:
+    if artifact_path is None or not posted_comment_url:
+        return
+    try:
+        payload = json.loads(artifact_path.read_text(encoding="utf-8"))
+        if not isinstance(payload, dict):
+            return
+        payload["posted_comment_url"] = posted_comment_url
+        text = json.dumps(payload, indent=2, sort_keys=True) + "\n"
+        artifact_path.write_text(text, encoding="utf-8")
+    except (OSError, json.JSONDecodeError) as exc:
+        print(
+            f"warning: failed to update audit verdict artifact {artifact_path}: {exc}",
+            file=sys.stderr,
+        )
+
+
 def _claude_env() -> Dict[str, str]:
     preserve_auth_overrides = env_flag(os.environ.get("CODE_MOWER_CLAUDE_KEEP_AUTH_ENV"))
     env, _removed = clean_claude_cli_env(
@@ -505,6 +643,13 @@ def _build_diff_context(
         raise FetchedHeadMismatch(expected_head_sha, fetched_head_ref)
     diff_range = f"{fetched_base_ref}...{fetched_head_ref}"
     stat = _run_git(local_repo, ["diff", "--stat", "--find-renames", diff_range])
+    changed_files_text = _run_git(
+        local_repo,
+        ["-c", "core.quotePath=false", "diff", "--name-only", "--find-renames", diff_range],
+    )
+    changed_files = tuple(
+        line.strip() for line in changed_files_text.splitlines() if line.strip()
+    )
     included_diff, full_diff_bytes, was_truncated = _run_git_limited(
         local_repo,
         ["diff", "--find-renames", "--unified=80", diff_range],
@@ -518,6 +663,7 @@ def _build_diff_context(
     return DiffContext(
         stat=stat,
         diff=included_diff,
+        changed_files=changed_files,
         was_truncated=was_truncated,
         requested_max_bytes=max_diff_bytes,
         hard_limit_bytes=hard_limit,
@@ -869,6 +1015,10 @@ def audit_pr(config: ClaudeAuditConfig, repo: str, pr_number: int) -> ClaudeAudi
                 )
             posted = post_pr_comment(repo, pr_number, comment_body, token=config.github_token)
             result.posted_comment_url = posted.get("html_url")
+            _record_posted_comment_url(
+                result.verdict_artifact_path,
+                result.posted_comment_url,
+            )
             print(
                 f"posted {repo}#{pr_number} verdict=STALE "
                 f"url={result.posted_comment_url}",
@@ -927,8 +1077,46 @@ def audit_pr(config: ClaudeAuditConfig, repo: str, pr_number: int) -> ClaudeAudi
         ),
     )
 
+    raw_output_attempts: List[Dict[str, Any]] = []
+    parsed = _unknown_structured_verdict("Claude audit did not run")
+    claude_stdout = ""
+    claude_stderr = ""
+    attempt_prompt = prompt
     t0 = time.time()
-    parsed, claude_stdout, claude_stderr = run_claude_audit(config, prompt)
+    for attempt in range(1, MAX_CLAUDE_AUDIT_ATTEMPTS + 1):
+        parsed_candidate, attempt_stdout, attempt_stderr = run_claude_audit(
+            config,
+            attempt_prompt,
+        )
+        claude_stdout = attempt_stdout
+        claude_stderr = attempt_stderr
+        parsed, guardrail_reason = _apply_claude_verdict_guardrails(
+            parsed_candidate,
+            diff_context.changed_files,
+        )
+        raw_output_attempts.append(
+            {
+                "attempt": attempt,
+                "stdout": attempt_stdout,
+                "stderr": attempt_stderr,
+                "verdict": parsed_candidate.verdict,
+                "guardrail_rejection": guardrail_reason,
+            }
+        )
+        if guardrail_reason and attempt < MAX_CLAUDE_AUDIT_ATTEMPTS:
+            print(
+                "  structured-verdict guardrail rejected Claude output: "
+                f"{guardrail_reason}; retrying once",
+                file=sys.stderr,
+                flush=True,
+            )
+            attempt_prompt = _guardrail_retry_prompt(
+                prompt,
+                guardrail_reason,
+                diff_context.changed_files,
+            )
+            continue
+        break
     dt = time.time() - t0
     print(f"  claude audit completed in {dt:.0f}s", file=sys.stderr, flush=True)
     if parsed.mismatch_note:
@@ -1001,8 +1189,13 @@ def audit_pr(config: ClaudeAuditConfig, repo: str, pr_number: int) -> ClaudeAudi
                 file=sys.stderr,
                 flush=True,
             )
+            _write_claude_raw_output_sidecar(artifact_path, raw_output_attempts)
         posted = post_pr_comment(repo, pr_number, comment_body, token=config.github_token)
         result.posted_comment_url = posted.get("html_url")
+        _record_posted_comment_url(
+            result.verdict_artifact_path,
+            result.posted_comment_url,
+        )
         print(
             f"posted {repo}#{pr_number} verdict={result_verdict} "
             f"url={result.posted_comment_url}",

{code_mower-0.5.0b42 → code_mower-0.5.0b43}/src/code_mower/cli.py

@@ -14,7 +14,7 @@ from pathlib import Path
 if __package__ in {None, ""}:
     raise SystemExit(
         "code_mower.cli is a packaged entrypoint. Install Code Mower with "
-        "`pipx install code-mower==0.5.0b42`, or run source checkouts with "
+        "`pipx install code-mower==0.5.0b43`, or run source checkouts with "
         "`PYTHONPATH=src python -m code_mower.cli`."
     )
 

{code_mower-0.5.0b42 → code_mower-0.5.0b43}/src/code_mower/templates/workflows/builder-provenance.yml.j2

@@ -8,7 +8,7 @@ permissions:
   contents: read
 
 env:
-  CODE_MOWER_PACKAGE_SPEC: code-mower==0.5.0b42
+  CODE_MOWER_PACKAGE_SPEC: code-mower==0.5.0b43
 
 jobs:
   auto-record:

{code_mower-0.5.0b42 → code_mower-0.5.0b43}/src/code_mower.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-mower
-Version: 0.5.0b42
+Version: 0.5.0b43
 Summary: Multi-reviewer AI code audit orchestration
 License-Expression: Apache-2.0
 Requires-Python: >=3.11
@@ -103,11 +103,11 @@ Code Mower currently targets Python 3.11+; Python 3.12 is recommended.
 
 ```bash
 python3.12 --version
-pipx install --python python3.12 code-mower==0.5.0b42
+pipx install --python python3.12 code-mower==0.5.0b43
 code-mower --version
 ```
 
-`0.5.0b42` is a beta release. Until Code Mower publishes a stable `1.0`
+`0.5.0b43` is a beta release. Until Code Mower publishes a stable `1.0`
 line, use the explicit beta version above or allow prereleases with:
 
 ```bash
@@ -155,7 +155,7 @@ First-time command map: [docs/launch-command-surface.md](docs/launch-command-sur
 
 The current PyPI beta has been rehearsed end-to-end from a clean install:
 [First-User Install Rehearsal](docs/first-user-install-rehearsal.md) records
-the latest 10/10 public-package readiness proof for `code-mower==0.5.0b42`.
+the latest 10/10 public-package readiness proof for `code-mower==0.5.0b43`.
 
 ## Optional: Plan Before Coding
 
@@ -310,9 +310,9 @@ builder provenance, start with
 
 ## Installation Status
 
-The current public beta is `v0.5.0-beta.42` from
+The current public beta is `v0.5.0-beta.43` from
 [codemower-ai/code-mower](https://github.com/codemower-ai/code-mower), published
-as `code-mower==0.5.0b42` on [PyPI](https://pypi.org/project/code-mower/).
+as `code-mower==0.5.0b43` on [PyPI](https://pypi.org/project/code-mower/).
 GitHub releases remain the auditable source for tags, build artifacts, and
 release notes.
 

{code_mower-0.5.0b42 → code_mower-0.5.0b43}/src/code_mower.egg-info/SOURCES.txt

@@ -257,6 +257,7 @@ tests/test_builder_runs.py
 tests/test_calibration_effect_report.py
 tests/test_calibration_truth.py
 tests/test_checks.py
+tests/test_claude_audit_pr.py
 tests/test_claude_cli_bounce.py
 tests/test_clear_stale.py
 tests/test_cloud_client.py

code_mower-0.5.0b43/tests/test_claude_audit_pr.py

@@ -0,0 +1,175 @@
+from __future__ import annotations
+
+import json
+import tempfile
+import unittest
+from pathlib import Path
+from unittest import mock
+
+from code_mower import claude_audit_pr as cap
+
+
+def _finding(**overrides: object) -> dict[str, object]:
+    return {
+        "severity": "P1",
+        "title": "Real blocker",
+        "file": "src/app.py",
+        "line": 12,
+        "detail": "This explains a concrete regression with enough context.",
+        **overrides,
+    }
+
+
+def _payload(**overrides: object) -> dict[str, object]:
+    return {
+        "schema": cap.CLAUDE_AUDIT_SCHEMA_ID,
+        "verdict": "blocked",
+        "summary": "Real audit summary with enough detail.",
+        "findings": [_finding()],
+        **overrides,
+    }
+
+
+class ClaudeAuditPrTests(unittest.TestCase):
+    def test_claude_guardrails_reject_untrusted_verdicts(self) -> None:
+        cases = [
+            (
+                cap.parse_structured_claude_verdict(_payload(summary="test")),
+                ("src/app.py",),
+                "structured verdict summary matched a schema placeholder value",
+            ),
+            (
+                cap.parse_structured_claude_verdict(
+                    _payload(findings=[_finding(file="a.txt")])
+                ),
+                ("src/app.py",),
+                "is not present in the PR diff",
+            ),
+            (
+                cap.ClaudeVerdict(
+                    verdict="BLOCKED",
+                    prose="too short",
+                    findings=(
+                        {"title": "Real title", "file": "src/app.py", "detail": "Real"},
+                    ),
+                ),
+                ("src/app.py",),
+                "structured blocked verdict body is too short to be credible",
+            ),
+        ]
+
+        for parsed, changed_files, expected in cases:
+            with self.subTest(expected=expected):
+                guarded, reason = cap._apply_claude_verdict_guardrails(
+                    parsed,
+                    changed_files,
+                )
+                self.assertEqual(guarded.verdict, "UNKNOWN")
+                self.assertIn(expected, str(reason))
+
+    def test_claude_guardrails_accept_path_variants_and_p3_misses(self) -> None:
+        parsed = cap.parse_structured_claude_verdict(
+            _payload(
+                findings=[
+                    _finding(file="b/src/app.py"),
+                    _finding(severity="P3", file="notes.md"),
+                ]
+            )
+        )
+
+        guarded, reason = cap._apply_claude_verdict_guardrails(parsed, ("src/app.py",))
+
+        self.assertEqual(guarded.verdict, "BLOCKED")
+        self.assertIsNone(reason)
+
+    def test_claude_audit_retries_guardrail_rejection_and_updates_artifact(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp:
+            tmp_path = Path(tmp)
+            repo = tmp_path / "repo"
+            repo.mkdir()
+            head_sha = "a" * 40
+            pr_payload = {"head": {"sha": head_sha, "ref": "human/fix"}, "title": "Fix"}
+            placeholder = cap.parse_structured_claude_verdict(
+                _payload(summary="test", findings=[_finding(title="test")])
+            )
+            clean = cap.parse_structured_claude_verdict(
+                {
+                    "schema": cap.CLAUDE_AUDIT_SCHEMA_ID,
+                    "verdict": "pass",
+                    "summary": "No merge-blocking regressions found in this review.",
+                    "findings": [],
+                }
+            )
+            diff_context = cap.DiffContext(
+                "src/app.py | 1 +",
+                "diff --git a/src/app.py b/src/app.py",
+                ("src/app.py",),
+                False,
+                1_000,
+                1_000,
+                40,
+                40,
+            )
+            config = cap.ClaudeAuditConfig(
+                "token",
+                {"owner/repo": repo},
+                include_plan_context=False,
+            )
+
+            with (
+                mock.patch.dict(
+                    "os.environ",
+                    {"CODE_MOWER_VERDICT_ARTIFACT_DIR": str(tmp_path / "verdicts")},
+                ),
+                mock.patch.object(
+                    cap,
+                    "fetch_pull_request",
+                    side_effect=[pr_payload, pr_payload],
+                ),
+                mock.patch.object(cap, "_build_diff_context", return_value=diff_context),
+                mock.patch.object(
+                    cap.code_mower_prompts,
+                    "load_review_prompt",
+                    return_value="",
+                ),
+                mock.patch.object(
+                    cap,
+                    "run_claude_audit",
+                    side_effect=[
+                        (placeholder, '{"structured_output":"placeholder"}', ""),
+                        (clean, '{"structured_output":"pass"}', ""),
+                    ],
+                ) as run_claude,
+                mock.patch.object(
+                    cap,
+                    "post_pr_comment",
+                    return_value={"html_url": "https://github.test/comment/1"},
+                ),
+            ):
+                result = cap.audit_pr(config, "owner/repo", 42)
+
+            self.assertEqual(result.verdict, "PASS")
+            self.assertEqual(run_claude.call_count, 2)
+            self.assertIn(
+                "Trusted wrapper retry instruction",
+                run_claude.call_args_list[1].args[1],
+            )
+            self.assertEqual(result.posted_comment_url, "https://github.test/comment/1")
+            self.assertIsNotNone(result.verdict_artifact_path)
+            assert result.verdict_artifact_path is not None
+
+            artifact = json.loads(result.verdict_artifact_path.read_text(encoding="utf-8"))
+            self.assertEqual(
+                artifact["posted_comment_url"],
+                "https://github.test/comment/1",
+            )
+
+            sidecar = result.verdict_artifact_path.with_suffix(".claude-raw-output.json")
+            payload = json.loads(sidecar.read_text(encoding="utf-8"))
+            self.assertEqual(payload["schema"], cap.CLAUDE_RAW_OUTPUT_SCHEMA)
+            self.assertTrue(payload["attempts"][0]["guardrail_rejection"])
+            self.assertIsNone(payload["attempts"][1]["guardrail_rejection"])
+
+
+if __name__ == "__main__":
+    unittest.main()