test(audit): runtime audit regression harness (#6855 enabler)

[chubes4]

Adds a fast cargo test that runs the FULL audit pipeline (audit_path_with_id) against a self-contained fixture component tree and asserts the finding set matches a committed snapshot. This catches detector/config/grammar changes that alter audit OUTPUT at the unit level — the gap that let PR #6896 pass Lint+Test while breaking the live audit. Adds fixtures + test only; no detector or real-config change. Unblocks #6855 phased migration (each phase can now assert identical findings before merge).

[homeboy-ci]

Homeboy Results — homeboy

Lint

✅ lint — passed

ℹ️ Full options: homeboy docs commands/lint
ℹ️ Save lint baseline: homeboy lint homeboy --baseline
Deep dive: homeboy lint homeboy --changed-since 5145554

Artifacts and drill-down

• CI results artifact: homeboy-ci-results-homeboy-lint-homeboy-Linux contains immediate command JSON for this action invocation.
• Observation artifact: homeboy-observations-homeboy-lint-homeboy-Linux contains exported Homeboy run history for deeper queries.
• Drill-down: download the observation artifact, then run homeboy runs import <dir>, homeboy runs list, and homeboy runs findings <run-id>.
• Artifacts are attached to the workflow run: https://github.com/Extra-Chill/homeboy/actions/runs/28326902759

Test

⚠️ test — baseline red

ℹ️ No tests ran — the runner failed before producing results. See raw_output.stderr_tail / raw_output.stdout_tail for the underlying error (bootstrap failure, missing deps, DB connection, etc.).
ℹ️ To run specific tests: homeboy test homeboy -- --filter=TestName
ℹ️ Auto-fix lint issues: homeboy refactor homeboy --from lint --write
ℹ️ Collect coverage: homeboy test homeboy --coverage
ℹ️ Analyze failures: homeboy test homeboy --analyze
ℹ️ Pass args to test runner: homeboy test -- [args]
ℹ️ Full options: homeboy docs commands/test
Deep dive: homeboy test homeboy --changed-since 5145554

Artifacts and drill-down

• CI results artifact: homeboy-ci-results-homeboy-test-homeboy-Linux contains immediate command JSON for this action invocation.
• Observation artifact: homeboy-observations-homeboy-test-homeboy-Linux contains exported Homeboy run history for deeper queries.
• Drill-down: download the observation artifact, then run homeboy runs import <dir>, homeboy runs list, and homeboy runs findings <run-id>.
• Artifacts are attached to the workflow run: https://github.com/Extra-Chill/homeboy/actions/runs/28326902759

Audit

✅ audit — passed

• core_boundary_leak:core-agnostic-source — 70 finding(s)
• structural — 54 finding(s)
• intra-method-duplication — 46 finding(s)
• field_patterns — 35 finding(s)
• dead_code — 19 finding(s)
• near-duplication — 17 finding(s)
• test_quality — 13 finding(s)
• duplication — 9 finding(s)
• remote_execution_preflight — 9 finding(s)
• thin_command_adapter — 8 finding(s)
• Total: 305 finding(s)

Deep dive: homeboy audit homeboy --changed-since 5145554

Artifacts and drill-down

• CI results artifact: homeboy-ci-results-homeboy-audit-homeboy-Linux contains immediate command JSON for this action invocation.
• Observation artifact: homeboy-observations-homeboy-audit-homeboy-Linux contains exported Homeboy run history for deeper queries.
• Drill-down: download the observation artifact, then run homeboy runs import <dir>, homeboy runs list, and homeboy runs findings <run-id>.
• Artifacts are attached to the workflow run: https://github.com/Extra-Chill/homeboy/actions/runs/28326902759

Tooling versions

• Homeboy CLI: homeboy 0.268.0+656b8ad09816+04dc1899a
• Extension: rust from https://github.com/Extra-Chill/homeboy-extensions
• Extension revision: 0d0bdec5
• Action: unknown@unknown