test: add explicit projected-port LES source profile

tests/unit/test_les_flow_runner.py

@@ -43,12 +43,12 @@ class GuardTests(unittest.TestCase):
 
     def test_current_corrected_pins(self):
         self.assertEqual(
-            source_guard(ROOT, "corrected", "dev8403956")["base_commit"],
-            "8403956a9afc0b0bb89265cec374392013d89016",
+            source_guard(ROOT, "corrected", "a135252")["base_commit"],
+            "a135252ae78b47b57d7e77d19001700b3bedac8b",
         )
 
     def test_corrected_and_tamper_guard(self):
-        pins = json.loads((HERE / "data/les_flow/source_pins_dev8403956.json").read_text())
+        pins = json.loads((HERE / "data/les_flow/source_pins_a135252.json").read_text())
         with TemporaryDirectory() as directory:
             root = Path(directory)
             for name in pins["sources"]:
@@ -59,24 +59,45 @@ class GuardTests(unittest.TestCase):
                 "run_uniform_les_flow.subprocess.check_output",
                 return_value="isolated-fixture\n",
             ):
-                source_guard(root, "corrected", "dev8403956")
+                source_guard(root, "corrected", "a135252")
                 with self.assertRaisesRegex(RuntimeError, "Source pin mismatch"):
-                    source_guard(root, "baseline", "dev8403956")
-                target = root / "src/CelerisLab/lbm/kernels/step/one_step_double.cu"
-                target.write_bytes(target.read_bytes() + b"\n// tamper\n")
-                with self.assertRaisesRegex(RuntimeError, "Source pin mismatch"):
-                    source_guard(root, "corrected", "dev8403956")
+                    source_guard(root, "baseline", "a135252")
+                for name in ("kernels/step/one_step_double.cu", "kernels/blocks.cu",
+                             "refinement_stepper.py", "refinement_tables.py"):
+                    target = root / "src/CelerisLab/lbm" / name
+                    original = target.read_bytes()
+                    target.write_bytes(original + b"\n// tamper\n")
+                    with self.assertRaisesRegex(RuntimeError, "Source pin mismatch"):
+                        source_guard(root, "corrected", "a135252")
+                    target.write_bytes(original)
 
     def test_historical_default_and_manifest_unchanged(self):
-        manifest = HERE / "data/les_flow/source_pins.json"
-        self.assertEqual(hashlib.sha256(manifest.read_bytes()).hexdigest(),
-                         "87ca033619da1fc02bee822bfc5681b518a92a155c3c3d1dbbe5265c96066b39")
-        for variant in ("baseline", "corrected"):
-            with self.assertRaisesRegex(RuntimeError, "Source pin mismatch"):
-                source_guard(ROOT, variant)
+        historical = {
+            "historical": ("source_pins.json", "87ca033619da1fc02bee822bfc5681b518a92a155c3c3d1dbbe5265c96066b39"),
+            "dev8403956": ("source_pins_dev8403956.json", "58187908485f2af7c78677d53de98015878372444265ce9e667683b8ef5d410f"),
+        }
+        for experiment, (name, expected) in historical.items():
+            manifest = HERE / "data/les_flow" / name
+            self.assertEqual(hashlib.sha256(manifest.read_bytes()).hexdigest(), expected)
+            for variant in ("baseline", "corrected"):
+                with self.assertRaisesRegex(RuntimeError, "Source pin mismatch"):
+                    source_guard(ROOT, variant, experiment)
+        with self.assertRaisesRegex(RuntimeError, "Source pin mismatch"):
+            source_guard(ROOT, "corrected")  # Omission still uses the historical profile.
+
+    def test_current_manifest_pins_actual_corrected_tree(self):
+        pins = json.loads((HERE / "data/les_flow/source_pins_a135252.json").read_text())
+        tracked = subprocess.check_output(["git", "-C", str(ROOT), "ls-files", "src"], text=True)
+        self.assertEqual(set(pins["sources"]), set(tracked.splitlines()))
+        for name, expected in pins["sources"].items():
+            self.assertEqual(hashlib.sha256((ROOT / name).read_bytes()).hexdigest(), expected)
+        self.assertEqual(pins["sources"][HEADER], pins["candidate_header_sha256"])
+        self.assertNotEqual(pins["sources"][HEADER], pins["baseline_header_sha256"])
+        with self.assertRaisesRegex(RuntimeError, "Source pin mismatch"):
+            source_guard(ROOT, "baseline", "a135252")
 
     def test_named_baseline_accepts_only_reversed_header(self):
-        pins = json.loads((HERE / "data/les_flow/source_pins_dev8403956.json").read_text())
+        pins = json.loads((HERE / "data/les_flow/source_pins_a135252.json").read_text())
         with TemporaryDirectory() as directory:
             root = Path(directory)
             for name in pins["sources"]:
@@ -85,9 +106,9 @@ class GuardTests(unittest.TestCase):
                 shutil.copyfile(ROOT / name, dest)
             subprocess.run(["git", "apply", "--reverse", str(HERE / "les/data/smagorinsky_normalization.patch")], cwd=root, check=True)
             with patch("run_uniform_les_flow.subprocess.check_output", return_value="baseline-fixture\n"):
-                source_guard(root, "baseline", "dev8403956")
+                source_guard(root, "baseline", "a135252")
                 with self.assertRaisesRegex(RuntimeError, "Source pin mismatch"):
-                    source_guard(root, "corrected", "dev8403956")
+                    source_guard(root, "corrected", "a135252")
 
     def test_gpu_requires_opt_in_before_import(self):
         with TemporaryDirectory() as directory: