id-testlisted

# id-test — read-only infra policy/contract TEST craft (infra-delivery step 7) The `infra-delivery` step sequence (a documented procedure this skill family forms — no workflow engine or state-machine file ships) drives an infra change → merge. Step 7 is the **TEST step**: after `id-validate` (step 6, the static fmt/lint/render pass) and before `id-plan` (step 8, the read-only pre-merge plan/diff seam), `id-test` **runs the infra test suite against the change**. That test suite is the active profile's **EXISTING read-only `infra_binding.policy` slot** — the policy-as-code / **contract tests** (`conftest test` / OPA over `kustomize build` / `helm template` output) — backstopped by **`tofu validate`** (structural sanity). It then **records** the **pass/fail** observation as a **`.foundry/`-partitioned STEP-REPORT NOTE** (`.foundry/id-test-report`), an advisory artifact the operator + downstream steps read. It is a PROCEDURE skill the generic agent **runs**: the `conftest test` + `tofu validate` reads are both read-only. It is **read-only** — nothing in the live env is mutated. ## ADVISORY — not a gate, records a step-report NOTE (not walk-evidence) This skill is **ADVISORY**. It **records** the pass/fail observation and **surfaces** the verdict for the operator; it does **NOT gate, approve, or block** any merge, and it does **NOT self-certify** a PASS (the skill supplies the STEPS; **the merge floor** — the adopter's branch protection + CI checks, see `docs/merge-floor.md` —