fix(devtools): preserve fail-closed testmon provenance

devtools/checkout_guard.py

@@ -68,6 +68,8 @@
 
 import tomllib
 
+from devtools.testmon_state import attempt_is_checkout_bound, seed_marker_is_checkout_bound
+
 
 class CheckoutImportMismatchError(RuntimeError):
     """``import polylogue`` resolved to a package outside the invoking checkout."""
@@ -130,6 +132,7 @@ def as_dict(self) -> dict[str, object]:
 _TESTMON_STATE_DIR = Path(".cache/testmon")
 _TESTMON_STATE_MARKER = _TESTMON_STATE_DIR / "seed.json"
 _TESTMON_SEED_ATTEMPT = _TESTMON_STATE_DIR / "seed-attempt.json"
+_TESTMON_SEED_PROTOCOL_VERSION = 5
 _VERIFY_STATE_DIR = Path(".cache/verify")
 _VERIFY_STATE_MARKER = _VERIFY_STATE_DIR / "current-run.json"
 
@@ -249,6 +252,10 @@ def _marker_origin(marker: Path) -> Path | None:
     if not isinstance(payload, Mapping):
         return None
     raw = payload.get("checkout_root")
+    if raw is None:
+        binding = payload.get("binding")
+        if isinstance(binding, Mapping):
+            raw = binding.get("checkout_root")
     if raw is None:
         fingerprint = payload.get("environment_fingerprint")
         if isinstance(fingerprint, Mapping):
@@ -258,7 +265,7 @@ def _marker_origin(marker: Path) -> Path | None:
     return Path(raw).resolve()
 
 
-def _is_valid_in_progress_testmon_seed_attempt(attempt: Path) -> bool:
+def _is_valid_in_progress_testmon_seed_attempt(attempt: Path, *, checkout_root: Path) -> bool:
     """Recognize the live seed ledger before its completion marker exists.
 
     ``verify --seed-testmon`` writes this receipt before pytest starts and
@@ -270,8 +277,25 @@ def _is_valid_in_progress_testmon_seed_attempt(attempt: Path) -> bool:
         payload = json.loads(attempt.read_text(encoding="utf-8"))
     except (OSError, UnicodeDecodeError, json.JSONDecodeError):
         return False
-    if not isinstance(payload, Mapping) or payload.get("status") not in {"running", "incomplete"}:
+    if not isinstance(payload, Mapping) or payload.get("status") not in {
+        "running",
+        "incomplete",
+        "reusable",
+        "complete",
+    }:
         return False
+    if payload.get("status") == "complete":
+        return attempt_is_checkout_bound(
+            payload,
+            checkout_root=checkout_root,
+            protocol_version=_TESTMON_SEED_PROTOCOL_VERSION,
+        )
+    if payload.get("status") == "reusable":
+        return attempt_is_checkout_bound(
+            payload,
+            checkout_root=checkout_root,
+            protocol_version=_TESTMON_SEED_PROTOCOL_VERSION,
+        )
     protocol_version = payload.get("protocol_version")
     if not isinstance(protocol_version, int) or isinstance(protocol_version, bool) or protocol_version <= 0:
         return False
@@ -331,12 +355,32 @@ def _cache_artifact(
     marker_path = repo_root / marker
     origin = _marker_origin(marker_path)
     if origin == repo_root:
+        if state_dir == _TESTMON_STATE_DIR and not seed_marker_is_checkout_bound(
+            marker_path,
+            checkout_root=repo_root,
+            protocol_version=_TESTMON_SEED_PROTOCOL_VERSION,
+        ):
+            return (
+                origin,
+                EnvironmentArtifact(
+                    kind="invalid_testmon_seed",
+                    path=marker_path,
+                    detail="testmon seed marker is stale, malformed, or its SQLite graph is incomplete",
+                    remediation=(
+                        f"remove {state_path} and run `devtools verify --seed-testmon` "
+                        "to rebuild the typed testmon state"
+                    ),
+                ),
+            )
         return origin, None
     if (
         origin is None
         and not marker_path.exists()
         and state_dir == _TESTMON_STATE_DIR
-        and _is_valid_in_progress_testmon_seed_attempt(repo_root / _TESTMON_SEED_ATTEMPT)
+        and _is_valid_in_progress_testmon_seed_attempt(
+            repo_root / _TESTMON_SEED_ATTEMPT,
+            checkout_root=repo_root,
+        )
     ):
         return None, None
     if origin is None: