From b6f93c39854e40188f6b9efcadd78c6bf9f03e14 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=86=B0=E6=9C=94?= <565183519@qq.com>
Date: Tue, 8 Sep 2026 02:21:48 +0800
Subject: [PATCH] test: reject legacy persona aliases before node binding

---
 .../bingshuo-system-write-admission/write-admission.test.js   | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/server-tools/bingshuo-system-write-admission/write-admission.test.js b/server-tools/bingshuo-system-write-admission/write-admission.test.js
index 5595aba..d0a058a 100644
--- a/server-tools/bingshuo-system-write-admission/write-admission.test.js
+++ b/server-tools/bingshuo-system-write-admission/write-admission.test.js
@@ -53,7 +53,9 @@ test("root-like possession without the node protocol key is noise", () => {
 
 test("registered persona, node binding, authorization receipt and replay gate all fail closed", () => {
   const first = fixture();
-  first.envelope.request.persona_id = "CHENGLU-AGENT-001";
+  // Use a current registered persona that is intentionally absent from this node.
+  // Historical aliases must fail earlier as unregistered execution identities.
+  first.envelope.request.persona_id = "ICE-P-GD0720";
   first.envelope.node_signature_base64url = crypto.sign(null, canonicalRequest(first.envelope.request), first.keys.privateKey).toString("base64url");
   assert.equal(evaluateWriteAdmission(first.envelope, { nodeRegistry: first.nodeRegistry, nowUnix: 1786363200 }).error_code, "PERSONA_NOT_BOUND_TO_ORIGIN_NODE");
   const second = fixture();