Vodou's tests are plain Python scripts under tests/, each runnable directly, e.g.:

python tests/test_vault_factor.py
python tests/test_setting_protection.py

Several (like test_vault_factor.py) use fake, hardware-free stand-ins — authenticator.FakeAuthenticator, for example — so cryptographic and security-key logic can be exercised without real hardware.

What CI actually runs

The GitHub Actions workflow (.github/workflows/ci.yml) runs on both Windows and Linux across two Python versions, and on every push it: compiles every module with py_compile, runs tests/test_platform.py (the assertions that exercise Linux-only code paths, since the project is developed on Windows), audits dependencies for known CVEs with pip-audit, and validates the Linux launcher/installer scripts. It does not run every file under tests/ automatically — the rest are there for local, targeted verification while working on a specific feature.