test(spin): move wire checks into Rust fixture harness

Author: aram356

.github/workflows/test.yml

@@ -443,7 +443,11 @@ jobs:
           wasmtime --version
 
       - name: Fetch dependencies (locked)
-        run: cargo fetch --locked
+        run: |
+          cargo fetch --locked
+          if [ "${{ matrix.adapter }}" = spin ]; then
+            cargo fetch --locked --manifest-path tests/fixtures/reusable-app/Cargo.toml
+          fi
 
       - name: Run ${{ matrix.adapter }} wasm tests
         env:
@@ -482,8 +486,17 @@ jobs:
           tar -xzf "$install_dir/$archive" -C "$install_dir"
           export PATH="$install_dir:$PATH"
           test "$(spin --version | awk '{print $2}')" = "$version"
-          cargo build --offline --locked -p edgezero-adapter-spin --no-default-features --features spin,test-utils --target wasm32-wasip2 --example outbound-bodyless-wire
-          python3 crates/edgezero-adapter-spin/tests/outbound_bodyless_wire.py
+          run="$GITHUB_WORKSPACE/tests/fixtures/reusable-app/.runs/ci-spin-wire"
+          CARGO_NET_OFFLINE=true ./scripts/smoke_test_reusable_app.sh --adapter spin --suite outbound-wire --output "$run"
+          jq --slurp --exit-status '
+            ([.[] | select(.event == "spin-wire-inventory")]
+              | length == 1 and .[0].status == "pass"
+              and .[0].exchanges == 68 and .[0].origin_requests == 84
+              and .[0].qualification == false)
+            and ([.[] | select(.event == "spin-wire-case")]
+              | length == 68 and ([.[].origin_requests | length] | add) == 84)
+            and all(.[]; .status != "fail")
+          ' "$run/events.jsonl"
 
       - name: Run Cloudflare outbound runtime unit tests
         if: matrix.adapter == 'cloudflare'
@@ -534,11 +547,11 @@ jobs:
             and all(.[]; .status != "fail")
           ' "$run/events.jsonl"
 
-      - name: Preserve Fastly lifecycle evidence
-        if: always() && matrix.adapter == 'fastly'
+      - name: Preserve provider lifecycle evidence
+        if: always() && (matrix.adapter == 'fastly' || matrix.adapter == 'spin')
         uses: actions/upload-artifact@v4
         with:
-          name: fastly-lifecycle-evidence
+          name: ${{ matrix.adapter }}-lifecycle-evidence
           path: tests/fixtures/reusable-app/.runs/
           include-hidden-files: true
           if-no-files-found: ignore

CHANGELOG.md

@@ -94,6 +94,11 @@ their scope when introduced; the current summary supersedes their then-pending A
   Run the Spin wire harness in its existing CI job and require the separate Fastly redirect
   inventory without weakening the original progress inventory. These tests do not qualify
   hosted cancellation, successful optimizer transformation or resource guarantees.
+- Run the Spin host wire fixture in the existing Rust harness and remove the Python runner.
+  Preserve all 68 redirect exchanges, 84 correlated origin requests and existing raw-framing
+  and lifecycle controls. Reuse bounded HTTP capture, file-backed runtime logs and process-group
+  teardown; reject late worker failures and unexpected runtime exits before publishing success.
+  Keep one runner and no compatibility wrapper or additional host-language dependency.
 
 ### Main Integration
 

crates/edgezero-adapter-spin/tests/outbound_bodyless_wire.py

@@ -237,6 +237,15 @@ freeze an exact candidate. The normative requirements and approved Interfaces ar
 
 ### Current Work Queue and Gates
 
+The Spin host wire suite now uses the existing Rust fixture harness's explicit
+`--adapter spin --suite outbound-wire` entrypoint. The former Python runner is removed, without
+compatibility wrappers or another process supervisor.
+The unchanged guest retains 68 exchanges/84 correlated requests, raw framing and scope/handoff
+assertions. Colocated Rust tests cover capture boundaries, duplicate fields, exact bytes, late
+worker failures and process-group shutdown. The existing Spin CI job executes the shared harness
+and checks its complete inventory. This tooling migration does not change production outbound
+behavior, frozen requirements, provider capabilities or qualification status.
+
 1. **G1/Q3 acceptance binding:** replace planned placeholder commands with actual, nonzero
    sentinels and environment-specific assertions/artifacts as each owning task lands. Reconcile
    applicability/approval records separately; mark a leg `ready` only when its complete declared

docs/superpowers/plans/2026-10-18-trusted-server-outbound-implementation.md

@@ -840,6 +840,18 @@ converters to make a provider check appear supported. Build/startup failures rem
 failures; tools or runtime evidence the runner explicitly marks unsupported or
 unverified remain exit 2.
 
+The adapter's local Spin wire controls run in the existing Rust harness, using the unchanged
+guest and pinned Spin. The runner builds and stages that guest; there is no separate host-language
+runner or alternate outbound client:
+
+```sh
+cargo test --offline --locked --manifest-path tests/fixtures/reusable-app/Cargo.toml -p fixture-harness
+./scripts/smoke_test_reusable_app.sh --adapter spin --suite outbound-wire
+```
+
+These controls preserve raw request framing, scope/handoff checks and 68 redirect exchanges
+with 84 correlated origin requests. They establish local SDK behavior, not hosted qualification.
+
 Cloudflare and Spin may select different guests during overlap or recovery tests;
 those observations are unverified. A success requires the same instance and the
 specific injected failure. Overlap checks use each request's `before.inflight`