synthesis: add backup key examples

Author: geroldsteiner67

rust/modality/src/cmds/synthesize.rs

@@ -505,6 +505,8 @@ const FORMULA_EXAMPLE_GROUPS: &[FormulaExampleGroup] = &[
             r#"always([+REVOKE_VAULT_TOKEN] true -> eventually(<+NOTIFY_SECRETS_OWNER> true))"#,
             r#"always([+CI_VARIABLE_SECRET_LEAKED] true -> (<+ROTATE_CI_VARIABLE_SECRET> true | <+DISABLE_CI_PIPELINE> true))"#,
             r#"always([+ROTATE_CI_VARIABLE_SECRET] true -> eventually(<+NOTIFY_PIPELINE_OWNER> true))"#,
+            r#"always([+BACKUP_ENCRYPTION_KEY_LEAKED] true -> (<+ROTATE_BACKUP_ENCRYPTION_KEY> true | <+QUARANTINE_BACKUPS> true))"#,
+            r#"always([+ROTATE_BACKUP_ENCRYPTION_KEY] true -> eventually(<+NOTIFY_BACKUP_OWNER> true))"#,
             r#"next(<+APPROVE> true)"#,
             r#"next((<+APPROVE> true | [<+REJECT>] true))"#,
             r#"<+WAIT> true until <+APPROVE> true"#,
@@ -5089,6 +5091,18 @@ F2: formula generated_2 {
         ));
     }
 
+    #[test]
+    fn synthesis_list_includes_backup_encryption_key_leak_prompt_examples() {
+        let output = synthesis_list_text();
+
+        assert!(output.contains(
+            "always([+BACKUP_ENCRYPTION_KEY_LEAKED] true -> (<+ROTATE_BACKUP_ENCRYPTION_KEY> true | <+QUARANTINE_BACKUPS> true))"
+        ));
+        assert!(output.contains(
+            "always([+ROTATE_BACKUP_ENCRYPTION_KEY] true -> eventually(<+NOTIFY_BACKUP_OWNER> true))"
+        ));
+    }
+
     #[test]
     fn synthesis_list_includes_escrow_progression_prompt_examples() {
         let output = synthesis_list_text();
@@ -15128,6 +15142,22 @@ gfp(X, []((X)) & ([<+ARCHIVE>] true))
         verify_synthesized_model(&model, &formulas).unwrap();
     }
 
+    #[test]
+    fn verify_synthesized_model_accepts_backup_encryption_key_leak_prompt_examples() {
+        let formulas = parse_formula_strings(&[
+            "always([+BACKUP_ENCRYPTION_KEY_LEAKED] true -> (<+ROTATE_BACKUP_ENCRYPTION_KEY> true | <+QUARANTINE_BACKUPS> true))"
+                .to_string(),
+            "always([+ROTATE_BACKUP_ENCRYPTION_KEY] true -> eventually(<+NOTIFY_BACKUP_OWNER> true))"
+                .to_string(),
+        ]);
+        let model = modality_lang::formula_synthesis::synthesize_from_formulas(
+            "BackupEncryptionKeyLeak",
+            &formulas,
+        );
+
+        verify_synthesized_model(&model, &formulas).unwrap();
+    }
+
     #[test]
     fn verify_synthesized_model_accepts_mixed_alternatives_with_signer_requirement() {
         let formulas = parse_formula_strings(&[