v0.34.0_7

scripts/tests/rps_hotpath_034_static_test.py

@@ -14,12 +14,14 @@ def source(path):
     return (ROOT / path).read_text(encoding="utf-8")
 
 
-# Random request identifiers retain CSPRNG entropy, SHA-256, format and sequence.
+# Random request identifiers still use the OS-seeded thread-local CSPRNG,
+# preserve a 256-bit unpredictable 64-hex token and mix the per-process sequence.
+# OPT5 removes the extra SHA-256 operation, not the entropy or correlation ID.
 identifier = source("src/proxy/request_id.rs")
 assert "rand::random()" in identifier
-assert "hash.update(sequence.to_be_bytes());" in identifier
-assert "hash.update(nonce);" in identifier
-assert "request_id_hex(&hash.finalize())" in identifier
+assert "sequence.to_be_bytes()" in identifier
+assert "*byte ^= sequence_byte;" in identifier
+assert "request_id_hex(&token)" in identifier
 assert "SysRng.try_fill_bytes" not in identifier
 
 # Compiled/validated target authority survives request URI construction.