Bound remote control object reads

internal/artifacts/remote_commit_test.go

@@ -3,6 +3,7 @@ package artifacts
 import (
 	"bytes"
 	"context"
+	"errors"
 	"strings"
 	"testing"
 
@@ -67,6 +68,28 @@ func TestLoadCurrentStateReadsVerifiedRemoteCommit(t *testing.T) {
 	if state.Manifest.RunID != commit.RunID {
 		t.Fatalf("manifest run ID = %q, want %q", state.Manifest.RunID, commit.RunID)
 	}
+	if len(store.Downloads) != 0 {
+		t.Fatalf("committed current-state downloads = %#v, want direct bounded reads", store.Downloads)
+	}
+	wantReads := []string{state.CurrentPointerKey, state.Pointer.CommitKey, state.CurrentManifestKey}
+	if len(store.Reads) != len(wantReads) {
+		t.Fatalf("committed current-state reads = %#v, want %q", store.Reads, wantReads)
+	}
+	for index, want := range wantReads {
+		if store.Reads[index].Key != want {
+			t.Fatalf("committed current-state read %d = %q, want %q", index, store.Reads[index].Key, want)
+		}
+	}
+}
+
+func TestLoadCurrentStateUsesMetadataFromOpenedObjectVersion(t *testing.T) {
+	store := &storage.FakeBackend{ListErr: errors.New("list must not be used for object verification")}
+	commit := testRemoteCommit(t, "20260519T010203Z-a1b2c3d4")
+	seedRemoteCommit(t, store, testCurrentSessionPrefix(), commit, "commit-generation", "manifest-generation")
+
+	if _, err := LoadCurrentState(context.Background(), store, testCurrentSessionPrefix(), CurrentStateValidation{}); err != nil {
+		t.Fatalf("LoadCurrentState() error = %v, want verification from Read metadata", err)
+	}
 }
 
 func TestLoadCurrentStateRejectsPointerCommitIdentityMismatch(t *testing.T) {