$ /usr/bin/python3 scripts/sovereign/mutation_e7.py --jobs 4 --json /root/cain-studio-platform/reports/sovereign/evolution-07/mutation_results.json
# exit_code=0 seconds=354.48

K01  KILLED               signature not verified  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_signature_covers_every_field_that_is_not_the_signature
K02  KILLED               structural validation skipped  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_type_and_charset_confusion_is_malformed_not_coerced[exp-9999999999-FIELD_EXP]
K03  KILLED               protocol allowlist skipped  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_legacy_or_unknown_protocol_versions_are_refused_even_when_validly_signed[protocol_version-cain42.talos.v1]
K04  KILLED               algorithm allowlist skipped  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_algorithm_substitution_is_refused_even_when_validly_signed[none]
K05  KILLED               issuer not bound to key  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_issuer_not_bound_to_key_refused
K06  KILLED               key validity window ignored  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_key_rotation_window
K07  KILLED               expiry ignored  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_expired_and_boundary
K08  KILLED               lifetime bound ignored  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_lifetime_and_future_issue_bounds
K09  KILLED               future issue time accepted  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_lifetime_and_future_issue_bounds
K10  KILLED               pre-consumption key revocation lookup skipped  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_revoked_key_and_revoked_decision
K11  KILLED               pre-consumption decision revocation lookup skipped  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_revoked_key_and_revoked_decision
K12  KILLED               CAIN DENY not honoured  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_cain_deny_is_never_allow
K13  KILLED               audience not checked  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_audience_mismatch_refused
K14  KILLED               principal not checked  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_identity_spoofing_refused[kw0-PRINCIPAL_MISMATCH]
K15  KILLED               tenant not checked  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_cross_tenant_reuse_is_refused_and_does_not_burn_the_envelope
K16  KILLED               agent not checked  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_identity_spoofing_refused[kw1-AGENT_MISMATCH]
K17  KILLED               session not checked  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_identity_spoofing_refused[kw2-SESSION_MISMATCH]
K18  KILLED               action not checked  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_target_and_action_substitution_refused
K19  KILLED               target not checked  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_target_and_action_substitution_refused
K20  KILLED               policy version not pinned  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_stale_policy_version_and_digest_refused
K21  KILLED               policy digest not pinned  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_stale_policy_version_and_digest_refused
K22  KILLED               enforcement profile not checked  <- tests/sovereign/evolution_07/test_e7_formal_link.py::test_each_modelled_check_fails_closed_with_the_modelled_verdict[profile]
K23  KILLED               approval refusal ignored  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_approval_reference_string_is_not_an_approval
K24  KILLED               request not bound to the signed digest  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_unbound_envelope_cannot_authorise_any_request
K25  KILLED               request scope containment not checked  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_cwd_outside_scope_is_refused_even_when_signed
K26  KILLED               non-durable ledger accepted for execution  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_in_memory_ledger_refuses_execution_by_default
K27  KILLED               consumption result ignored  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water
K28  KILLED               verifier exception becomes ALLOW  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_non_envelope_inputs_and_internal_faults_never_allow[None]
K29  KILLED               ledger failure at consumption becomes ALLOW  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_ledger_failure_does_not_execute[consume_authorization_atomic-LEDGER_UNAVAILABLE_NONCE_CONSUMPTION_FAILED-INDETERMINATE]
K30  KILLED               worker launched whatever the verdict  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_unusable_clock_fails_closed[<lambda>0]
K31  KILLED               sandbox setup failure reported as an allowed execution  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_missing_required_control_means_no_delivery[landlock_denial_observed]
K32  KILLED               approval signature not verified  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_approval_is_bound_to_the_exact_operation
K33  KILLED               missing time source not detected  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_unusable_clock_fails_closed[<lambda>0]
K34  KILLED               execution intent failure ignored  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_valid_request_executes_exactly_once_within_scope
K35  SURVIVED_EQUIVALENT  file path need not be the authorised target
W01  KILLED               missing required controls ignored  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_missing_required_control_means_no_delivery[landlock_denial_observed]
W02  KILLED               launcher FAILED status ignored  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_launcher_failure_before_ready[import os, json, sys\ncfg = json.loads(sys.stdin.readline())\nos.write(cfg['status_fd'], b'{"state": "FAILED", "code": "LANDLOCK"}\\n')\nsys.exit(131)-SANDBOX_LANDLOCK]
W03  KILLED               PID namespace not verified by the parent  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_parent_verifies_pid_namespace_independently
W04  KILLED               launcher inherits the gateway environment  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_launcher_spawn_parameters
W05  KILLED               output cap removed  <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_output_flood_is_cut_off
W06  KILLED               network namespace never requested  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_valid_request_executes_exactly_once_within_scope
W07  KILLED               symlinked scope roots accepted  <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_scope_root_symlink_refused
W08  SURVIVED_EQUIVALENT  file-read scope not checked by the worker
W09  KILLED               symlink accepted as a governed file  <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_fs_modes_refuse_symlinks_and_never_follow_them
W10  KILLED               socket families always allowed  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water
W11  KILLED               old Landlock ABI accepted  <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_old_landlock_abi_is_a_missing_control
L01  KILLED               supervisor does not enforce the wall-clock limit  <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_wall_clock_limit[while True: pass]
L02  KILLED               descriptors not closed before the workload  <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_inherited_descriptors
L03  KILLED               Landlock self-test result ignored  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_control_that_silently_does_nothing_is_detected[        rep = ll.restrict_self(profile)\n-        rep = ll.plan(profile)\n-LANDLOCK_SELF_TEST_NOT_DENIED]
L04  SURVIVED_EQUIVALENT  seccomp self-test result ignored
L05  KILLED               seccomp: ptrace allowed  <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_capabilities_and_no_way_back
L06  KILLED               seccomp: namespace flags allowed on clone  <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_capabilities_and_no_way_back
L07  KILLED               seccomp: io_uring allowed  <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_capabilities_and_no_way_back
L08  KILLED               governed file read follows symlinks  <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_fs_modes_refuse_symlinks_and_never_follow_them
L09  KILLED               capability bounding set not emptied  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water
L10  SURVIVED_EQUIVALENT  no_new_privs read-back ignored
D01  KILLED               nonce existence not checked in the transaction  <- tests/sovereign/evolution_07/test_e7_formal_link.py::test_each_modelled_check_fails_closed_with_the_modelled_verdict[nonce_fresh]
D02  KILLED               floor compared without the skew allowance (the bug fixed in this evolution)  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_emergency_invalidation_floor
D03  KILLED               invalidation floor ignored  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_emergency_invalidation_floor
D04  KILLED               key revocation not re-checked in the transaction  <- tests/sovereign/evolution_07/test_e7_ledger.py::test_key_revoked_between_check_and_consume
D05  KILLED               decision revocation not re-checked in the transaction  <- tests/sovereign/evolution_07/test_e7_ledger.py::test_decision_revoked_between_check_and_consume
D06  KILLED               clock rollback not detected  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water
D07  KILLED               host binding not checked  <- tests/sovereign/evolution_07/test_e7_ledger.py::test_ledger_refuses_other_host_and_network_filesystems
D08  KILLED               symlinked ledger path accepted  <- tests/sovereign/evolution_07/test_e7_ledger.py::test_unsafe_ledger_files_refused
D09  KILLED               audit chain not verified  <- tests/sovereign/evolution_07/test_e7_ledger.py::test_audit_chain_detects_tampering
D10  KILLED               illegal execution-state transitions accepted  <- tests/sovereign/evolution_07/test_e7_ledger.py::test_kill_after_start_is_uncertain_not_retried
D11  KILLED               new file-backed ledger starts without a floor  <- tests/sovereign/evolution_07/test_e7_ledger.py::test_replaced_ledger_cannot_be_used_to_replay
D12  KILLED               world-writable ledger accepted  <- tests/sovereign/evolution_07/test_e7_ledger.py::test_unsafe_ledger_files_refused
D13  KILLED               network filesystem accepted  <- tests/sovereign/evolution_07/test_e7_ledger.py::test_ledger_refuses_other_host_and_network_filesystems
D14  KILLED               foreign database accepted as a ledger  <- tests/sovereign/evolution_07/test_e7_ledger.py::test_unsafe_ledger_files_refused
P01  KILLED               duplicate JSON keys accepted  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_duplicate_keys_rejected_at_top_level_and_nested
P02  KILLED               unknown envelope fields accepted  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_unknown_and_missing_fields_rejected
P03  KILLED               path containment by string prefix  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_path_within_is_component_wise
P04  KILLED               no domain separation in the signing input  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_signature_over_undomained_bytes_is_rejected
P05  KILLED               environment not part of the bound request  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_cwd_and_env_are_bound
P06  KILLED               working directory not part of the bound request  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_cwd_and_env_are_bound
P07  KILLED               loader variables allowed in the request environment  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_dangerous_environment_names_refused[LD_PRELOAD]
P08  KILLED               floats accepted by the strict parser  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_strict_parser_rejects_ambiguous_numbers_and_bad_encoding[{"a":1.0}-FLOAT_NOT_ALLOWED]
P09  KILLED               exp <= iat accepted  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_invalid_timestamps_are_malformed[100-100]
P10  KILLED               ports without network accepted  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_ambiguous_scope_is_malformed[patch7-SCOPE_PORTS_WITHOUT_NETWORK]
P11  KILLED               unbound digest shares the request hash domain  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_unbound_envelope_cannot_authorise_any_request
P12  KILLED               non-canonical scope paths accepted  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_ambiguous_scope_is_malformed[patch0-SCOPE_PATH_NOT_CANONICAL]
P13  KILLED               argv not part of the bound request  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_untrusted_data_only_changes_digests
J01  KILLED               scope attenuation by string prefix  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_requested_scope_is_clamped_component_wise
J02  KILLED               non-canonical file target evaluated  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_jit_refuses_non_canonical_file_target
J03  KILLED               approval-required rule issues ALLOW  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_jit_never_accepts_a_proposer_supplied_approval
J04  KILLED               policy digest omits the scope ceiling  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_policy_digest_changes_when_any_permission_bearing_field_changes
J05  KILLED               policy conflict resolved by first rule  <- tests/sovereign/evolution_07/test_e7_protocol.py::test_jit_default_deny_and_conflict_deny
A01  KILLED               file adapter accepts non-canonical paths  <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_filesystem_adapter_rejects_non_canonical_paths[/../../etc/passwd]
{"KILLED": 85, "SURVIVED_EQUIVALENT": 4} unexplained: []
