Delegation05 (delegation05)

Status: Final

Purpose

Preconditions:
- A zone.Zone object is available.
Required inputs:
- NS names from methods.Method2and3.
- Addressed NS from methods.Method4 and methods.Method5.
- Recursive lookup function (recurse) for non-in-bailiwick NS names.
Profile/config knobs that affect behavior:
- net.ipv4 and net.ipv6: disabled transports emit transport-debug tags and skip per-NS-IP in-bailiwick checks.
- resolver.defaults.parallel: parallel in-bailiwick NS-IP query fanout.

Emit TEST_CASE_START.
Get NS name list from Method2and3.
Get delegation and child addressed NS lists (Method4 and Method5), merge into a unique map keyed by name/ip, and sort keys.
For each NS name from step 2:
- If NS name is in-bailiwick of tested zone:
  - For each merged addressed NS (name/ip) in sorted order (parallelized):
    - Build args {ns, query_name, rrtype=A}.
    - If transport is disabled for that addressed NS, emit IPV4_DISABLED or IPV6_DISABLED and skip.
    - Query addressed NS for A with recursion disabled (RD=0).
    - If no DNS message, emit NO_RESPONSE.
    - Else if RCODE != NOERROR, emit UNEXPECTED_RCODE.
    - Else if answer contains CNAME, emit NS_IS_CNAME (nsname).
    - Else if response is a referral/redirect, perform recursive retry (RD=1) against same addressed NS and emit NS_IS_CNAME if answer contains CNAME.
- Else (sibling/out-of-bailiwick):
  - Perform recursive lookup via recurse.
  - Emit NS_IS_CNAME if recursive answer contains CNAME.
After all NS names, if NS_IS_CNAME was never emitted, emit NO_NS_CNAME.
Emit TEST_CASE_END.

Tag	Emitted when
`IPV4_DISABLED`	IPv4 in-bailiwick per-NS-IP check is skipped because IPv4 is disabled.
`IPV6_DISABLED`	IPv6 in-bailiwick per-NS-IP check is skipped because IPv6 is disabled.
`NO_NS_CNAME`	No `NS_IS_CNAME` finding was produced in testcase execution.
`NO_RESPONSE`	In-bailiwick `A` query (`RD=0`) produced no DNS message.
`NS_IS_CNAME`	NS name resolves as CNAME in direct or recursive branch.
`TEST_CASE_END`	Testcase completion marker is emitted.
`TEST_CASE_START`	Testcase start marker is emitted.
`UNEXPECTED_RCODE`	In-bailiwick `A` query (`RD=0`) returned non-`NOERROR` response code.

Tag	Argument key	Type	Meaning
`IPV4_DISABLED`	`ns`	`string`	Nameserver identity (`ns` name only; use `address` for IP) skipped on IPv4.
`IPV4_DISABLED`	`address`	`string`	Nameserver IP address for the same endpoint.
`IPV4_DISABLED`	`rrtype`	`string`	rrtype skipped (`A`).
`IPV6_DISABLED`	`ns`	`string`	Nameserver identity (`ns` name only; use `address` for IP) skipped on IPv6.
`IPV6_DISABLED`	`address`	`string`	Nameserver IP address for the same endpoint.
`IPV6_DISABLED`	`rrtype`	`string`	rrtype skipped (`A`).
`NO_NS_CNAME`	`-`	`-`	No arguments.
`NO_RESPONSE`	`ns`	`string`	Nameserver identity (`ns` name only; use `address` for IP) that did not return DNS message.
`NO_RESPONSE`	`address`	`string`	Nameserver IP address for the same endpoint.
`NO_RESPONSE`	`query_name`	`string`	NS name queried for type `A`.
`NO_RESPONSE`	`rrtype`	`string`	Queried rrtype (`A`).
`NS_IS_CNAME`	`nsname`	`string`	NS name found as CNAME.
`TEST_CASE_END`	`testcase`	`string`	Testcase display name (`Delegation05`).
`TEST_CASE_START`	`testcase`	`string`	Testcase display name (`Delegation05`).
`UNEXPECTED_RCODE`	`ns`	`string`	Nameserver identity (`ns` name only; use `address` for IP) that returned unexpected RCODE.
`UNEXPECTED_RCODE`	`address`	`string`	Nameserver IP address for the same endpoint.
`UNEXPECTED_RCODE`	`query_name`	`string`	NS name queried for type `A`.
`UNEXPECTED_RCODE`	`rrtype`	`string`	Queried rrtype (`A`).
`UNEXPECTED_RCODE`	`rcode`	`string`	Returned DNS response code string.

Tag	Level	Notes
`IPV4_DISABLED`	`DEBUG`	Default from `share/profile.json` (`test_levels.DELEGATION`).
`IPV6_DISABLED`	`DEBUG`	Default from `share/profile.json` (`test_levels.DELEGATION`).
`NO_NS_CNAME`	`INFO`	Default from `share/profile.json` (`test_levels.DELEGATION`).
`NO_RESPONSE`	`DEBUG`	Default from `share/profile.json` (`test_levels.DELEGATION`).
`NS_IS_CNAME`	`ERROR`	Default from `share/profile.json` (`test_levels.DELEGATION`).
`TEST_CASE_END`	`DEBUG`	Default from `share/profile.json` (`test_levels.DELEGATION`).
`TEST_CASE_START`	`DEBUG`	Default from `share/profile.json` (`test_levels.DELEGATION`).
`UNEXPECTED_RCODE`	`WARNING`	Default from `share/profile.json` (`test_levels.DELEGATION`).

Upstream reference: delegation05.md
Differences (Upstream vs Gonemaster):
- Upstream: special-procedure text is generic about disabled transports. Gonemaster: explicitly emits IPV4_DISABLED/IPV6_DISABLED only in the in-bailiwick per-NS-IP branch.
- Upstream: describes recursive sibling/out-of-bailiwick branch as DNS lookup followed by CNAME check. Gonemaster: does that CNAME check, but does not emit NO_RESPONSE or UNEXPECTED_RCODE in that branch.
- Upstream: does not describe testcase boundary debug markers. Gonemaster: emits TEST_CASE_START and TEST_CASE_END.
Potential upstream report:
- no

NS_IS_CNAME can be emitted multiple times for the same NS name from different addressed NS checks.
In-bailiwick checks are performed against all unique name/ip entries from delegation+child sets, not only the tested NS name’s own addresses.
NO_NS_CNAME is emitted whenever no NS_IS_CNAME was found, even if other warning/debug tags were emitted.