Coverage gaps exist in internal/ai, internal/ssh; add/fix tests for adapters, network/SSH/AI error paths, prompt logic. Boost coverage of CLI, agent, API, remediation workflows. Add chaos/fault injection (network/DB/agent/AI outages, resource denial), fuzz tests, and load suites to validate stability and queue/latency targets. Release pipeline must verify SBOM, signed artifacts, SAST scan pass.
References:
- Test suites:
internal/ai/, internal/ssh/, cmd/lumo/, E2E in tests/, fuzz in adapters
- CI pipeline: enforce scan gates, SBOM, signed artifacts
- Chaos: introduce failures in agent/reporting, DB, Redis, AI adapters.