git() { if [ "$1" = rev-parse ]; then echo "$TEST_SHA"; fi; }
tar() { cat >/dev/null; }
node() { echo "verify $*" >> "$TEST_DIR/calls"; }
docker() {
 echo "docker $*" >> "$TEST_DIR/calls"
 if [ "$1" = login ]; then cat >/dev/null; return; fi
 if [ "$1 $2" = "image inspect" ]; then
  if [[ "$*" = *org.opencontainers.image.revision* ]]; then echo "$TEST_SHA"
  elif [[ "${@: -1}" = *verified-* ]]; then
   case "$SCENARIO" in verified) echo sha256:candidate ;; mismatch) echo sha256:other ;; *) return 1 ;; esac
  else echo sha256:candidate; fi
 fi
}
export -f git tar node docker