test-suite-hermetic-guards

Notes

• 2026-09-03: second hermetic guard added to tests/conftest.py (entirely-api af2d8a5) — autouse _hermetic_kilroy stubs kilroy_notify._post_signed so host-side pytest can never post to the real Hermes gateway. The 9/3 ops “Needs digest sent” spam was the test suite (real .env armed the mirror; the live-send digest test mocked email but not the mirror), NOT the Loop Deck session as first attributed. test_kilroy_budget_chokepoint restores the real _post_signed locally since it tests the chokepoint itself. Verified: 0 gateway log lines across a full 1087-test run.