Fixups for SNTExecutionController tests.

Source/santad/SNTPolicyProcessor.mm

@@ -76,9 +76,24 @@ - (nonnull SNTCachedDecision *)updateCachedDecision:(SNTCachedDecision *)cd
     cd.silentBlock = YES;
   } else if (rule.state == SNTRuleStateAllowCompiler) {
     if (![self.configurator enableTransitiveRules]) {
-      cd.decision = SNTEventStateAllowBinary;
+      switch (rule.type) {
+        case SNTRuleTypeCDHash: cd.decision = SNTEventStateAllowCDHash; break;
+        case SNTRuleTypeBinary: cd.decision = SNTEventStateAllowBinary; break;
+        case SNTRuleTypeSigningID: cd.decision = SNTEventStateAllowSigningID; break;
+        default:
+          // Programming error. Something's marked as a compiler that shouldn't
+          // be.
+          LOGE(@"Invalid compiler rule type %ld", rule.type);
+          [NSException
+             raise:@"Invalid compiler rule type"
+            format:@"updateCachedDecision:ForRule: Unexpected compiler rule type: %ld", rule.type];
+          break;
+      }
     }
   } else if (rule.state == SNTRuleStateAllowTransitive) {
+    // If transitive rules are enabled, then SNTRuleStateAllowTransitive rules
+    // become SNTEventStateAllowTransitive decisions.  Otherwise, we treat the
+    // rule as if it were SNTRuleStateUnknown.
     if (![self.configurator enableTransitiveRules]) {
       // check operating mode.
       SNTClientMode mode = [self.configurator clientMode];