Complete runtime diagnostics and verification coverage

1 files changed, 11 insertions, 0 deletions

diff --git a/tests/Agent.Windows.Tests/SecurityPolicyTests.cs b/tests/Agent.Windows.Tests/SecurityPolicyTests.cs
index 7489dad..da6b325 100644
--- a/tests/Agent.Windows.Tests/SecurityPolicyTests.cs
+++ b/tests/Agent.Windows.Tests/SecurityPolicyTests.cs
@@ -15,6 +15,17 @@ namespace Agent.Windows.Tests;
 public sealed class SecurityPolicyTests
 {
     [Fact]
+    public void Process_timeout_uses_configured_default_and_rejects_higher_values()
+    {
+        using JsonDocument omitted = JsonDocument.Parse("{}");
+        Assert.Equal(45, WindowsToolBackend.ResolveProcessTimeout(omitted.RootElement, 45));
+        using JsonDocument exact = JsonDocument.Parse("{\"timeout_seconds\":45}");
+        Assert.Equal(45, WindowsToolBackend.ResolveProcessTimeout(exact.RootElement, 45));
+        using JsonDocument tooHigh = JsonDocument.Parse("{\"timeout_seconds\":46}");
+        Assert.Throws<ToolValidationException>(() => WindowsToolBackend.ResolveProcessTimeout(tooHigh.RootElement, 45));
+    }
+
+    [Fact]
     public void Read_write_and_delete_capabilities_are_independent()
     {
         using TestDirectory directory = new();