{ "counts": { "KILLED": 85, "SURVIVED_EQUIVALENT": 4 }, "method": "one textual change per mutant to a copy of cain/talos; killed = the Evolution 7 suite fails", "mutants": [ { "description": "signature not verified", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K01", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_signature_covers_every_field_that_is_not_the_signature", "seconds": 4.3, "status": "KILLED", "suite_exit_code": 1 }, { "description": "structural validation skipped", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K02", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_type_and_charset_confusion_is_malformed_not_coerced[exp-9999999999-FIELD_EXP]", "seconds": 4.3, "status": "KILLED", "suite_exit_code": 1 }, { "description": "protocol allowlist skipped", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K03", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_legacy_or_unknown_protocol_versions_are_refused_even_when_validly_signed[protocol_version-cain42.talos.v1]", "seconds": 3.7, "status": "KILLED", "suite_exit_code": 1 }, { "description": "algorithm allowlist skipped", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K04", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_algorithm_substitution_is_refused_even_when_validly_signed[none]", "seconds": 4.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "issuer not bound to key", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K05", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_issuer_not_bound_to_key_refused", "seconds": 3.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "key validity window ignored", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K06", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_key_rotation_window", "seconds": 3.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "expiry ignored", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K07", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_expired_and_boundary", "seconds": 3.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "lifetime bound ignored", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K08", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_lifetime_and_future_issue_bounds", "seconds": 3.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "future issue time accepted", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K09", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_lifetime_and_future_issue_bounds", "seconds": 3.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "pre-consumption key revocation lookup skipped", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K10", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_revoked_key_and_revoked_decision", "seconds": 3.2, "status": "KILLED", "suite_exit_code": 1 }, { "description": "pre-consumption decision revocation lookup skipped", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K11", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_revoked_key_and_revoked_decision", "seconds": 3.2, "status": "KILLED", "suite_exit_code": 1 }, { "description": "CAIN DENY not honoured", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K12", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_cain_deny_is_never_allow", "seconds": 3.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "audience not checked", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K13", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_audience_mismatch_refused", "seconds": 3.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "principal not checked", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K14", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_identity_spoofing_refused[kw0-PRINCIPAL_MISMATCH]", "seconds": 3.8, "status": "KILLED", "suite_exit_code": 1 }, { "description": "tenant not checked", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K15", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_cross_tenant_reuse_is_refused_and_does_not_burn_the_envelope", "seconds": 3.6, "status": "KILLED", "suite_exit_code": 1 }, { "description": "agent not checked", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K16", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_identity_spoofing_refused[kw1-AGENT_MISMATCH]", "seconds": 3.7, "status": "KILLED", "suite_exit_code": 1 }, { "description": "session not checked", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K17", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_identity_spoofing_refused[kw2-SESSION_MISMATCH]", "seconds": 3.8, "status": "KILLED", "suite_exit_code": 1 }, { "description": "action not checked", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K18", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_target_and_action_substitution_refused", "seconds": 3.8, "status": "KILLED", "suite_exit_code": 1 }, { "description": "target not checked", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K19", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_target_and_action_substitution_refused", "seconds": 3.7, "status": "KILLED", "suite_exit_code": 1 }, { "description": "policy version not pinned", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K20", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_stale_policy_version_and_digest_refused", "seconds": 3.3, "status": "KILLED", "suite_exit_code": 1 }, { "description": "policy digest not pinned", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K21", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_stale_policy_version_and_digest_refused", "seconds": 3.8, "status": "KILLED", "suite_exit_code": 1 }, { "description": "enforcement profile not checked", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K22", "killed_by": "tests/sovereign/evolution_07/test_e7_formal_link.py::test_each_modelled_check_fails_closed_with_the_modelled_verdict[profile]", "seconds": 12.5, "status": "KILLED", "suite_exit_code": 1 }, { "description": "approval refusal ignored", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K23", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_approval_reference_string_is_not_an_approval", "seconds": 5.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "request not bound to the signed digest", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K24", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_unbound_envelope_cannot_authorise_any_request", "seconds": 5.9, "status": "KILLED", "suite_exit_code": 1 }, { "description": "request scope containment not checked", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K25", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_cwd_outside_scope_is_refused_even_when_signed", "seconds": 6.2, "status": "KILLED", "suite_exit_code": 1 }, { "description": "non-durable ledger accepted for execution", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K26", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_in_memory_ledger_refuses_execution_by_default", "seconds": 5.9, "status": "KILLED", "suite_exit_code": 1 }, { "description": "consumption result ignored", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K27", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water", "seconds": 4.7, "status": "KILLED", "suite_exit_code": 1 }, { "description": "verifier exception becomes ALLOW", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K28", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_non_envelope_inputs_and_internal_faults_never_allow[None]", "seconds": 5.5, "status": "KILLED", "suite_exit_code": 1 }, { "description": "ledger failure at consumption becomes ALLOW", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K29", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_ledger_failure_does_not_execute[consume_authorization_atomic-LEDGER_UNAVAILABLE_NONCE_CONSUMPTION_FAILED-INDETERMINATE]", "seconds": 6.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "worker launched whatever the verdict", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K30", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_unusable_clock_fails_closed[0]", "seconds": 4.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "sandbox setup failure reported as an allowed execution", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K31", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_missing_required_control_means_no_delivery[landlock_denial_observed]", "seconds": 6.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "approval signature not verified", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K32", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_approval_is_bound_to_the_exact_operation", "seconds": 4.5, "status": "KILLED", "suite_exit_code": 1 }, { "description": "missing time source not detected", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K33", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_unusable_clock_fails_closed[0]", "seconds": 4.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "execution intent failure ignored", "equivalent_justification": null, "file": "cain/talos/talos_kernel.py", "id": "K34", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_valid_request_executes_exactly_once_within_scope", "seconds": 3.8, "status": "KILLED", "suite_exit_code": 1 }, { "description": "file path need not be the authorised target", "equivalent_justification": "The adapter passes the same path as the expected target, so a different path fails the earlier TARGET check or the digest binding first; this line is a third check of the same property.", "file": "cain/talos/talos_kernel.py", "id": "K35", "seconds": 48.4, "status": "SURVIVED_EQUIVALENT", "suite_exit_code": 0 }, { "description": "missing required controls ignored", "equivalent_justification": null, "file": "cain/talos/talos_worker.py", "id": "W01", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_missing_required_control_means_no_delivery[landlock_denial_observed]", "seconds": 4.2, "status": "KILLED", "suite_exit_code": 1 }, { "description": "launcher FAILED status ignored", "equivalent_justification": "A launcher that reports FAILED has already exited 131 without forking a payload, and required_controls_missing() refuses any status whose state is not READY; the request is still never delivered. Only the reason code changes -- and E7-E-035/E7-E-039 assert the reason code, so in practice this mutant is killed; it is listed in case the suite order changes.", "file": "cain/talos/talos_worker.py", "id": "W02", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_launcher_failure_before_ready[import os, json, sys\\ncfg = json.loads(sys.stdin.readline())\\nos.write(cfg['status_fd'], b'{\"state\": \"FAILED\", \"code\": \"LANDLOCK\"}\\\\n')\\nsys.exit(131)-SANDBOX_LANDLOCK]", "seconds": 6.0, "status": "KILLED", "suite_exit_code": 1 }, { "description": "PID namespace not verified by the parent", "equivalent_justification": null, "file": "cain/talos/talos_worker.py", "id": "W03", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_parent_verifies_pid_namespace_independently", "seconds": 12.9, "status": "KILLED", "suite_exit_code": 1 }, { "description": "launcher inherits the gateway environment", "equivalent_justification": null, "file": "cain/talos/talos_worker.py", "id": "W04", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_launcher_spawn_parameters", "seconds": 16.2, "status": "KILLED", "suite_exit_code": 1 }, { "description": "output cap removed", "equivalent_justification": null, "file": "cain/talos/talos_worker.py", "id": "W05", "killed_by": "tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_output_flood_is_cut_off", "seconds": 58.8, "status": "KILLED", "suite_exit_code": 1 }, { "description": "network namespace never requested", "equivalent_justification": null, "file": "cain/talos/talos_worker.py", "id": "W06", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_valid_request_executes_exactly_once_within_scope", "seconds": 6.9, "status": "KILLED", "suite_exit_code": 1 }, { "description": "symlinked scope roots accepted", "equivalent_justification": null, "file": "cain/talos/talos_worker.py", "id": "W07", "killed_by": "tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_scope_root_symlink_refused", "seconds": 34.6, "status": "KILLED", "suite_exit_code": 1 }, { "description": "file-read scope not checked by the worker", "equivalent_justification": "The kernel refuses the same request earlier (PATH_OUTSIDE_READ_SCOPE in _scope_error) and Landlock would deny the open. This is the second of three checks of one property.", "file": "cain/talos/talos_worker.py", "id": "W08", "seconds": 51.0, "status": "SURVIVED_EQUIVALENT", "suite_exit_code": 0 }, { "description": "symlink accepted as a governed file", "equivalent_justification": null, "file": "cain/talos/talos_worker.py", "id": "W09", "killed_by": "tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_fs_modes_refuse_symlinks_and_never_follow_them", "seconds": 29.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "socket families always allowed", "equivalent_justification": null, "file": "cain/talos/talos_worker.py", "id": "W10", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water", "seconds": 10.5, "status": "KILLED", "suite_exit_code": 1 }, { "description": "old Landlock ABI accepted", "equivalent_justification": null, "file": "cain/talos/talos_worker.py", "id": "W11", "killed_by": "tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_old_landlock_abi_is_a_missing_control", "seconds": 53.9, "status": "KILLED", "suite_exit_code": 1 }, { "description": "supervisor does not enforce the wall-clock limit", "equivalent_justification": null, "file": "cain/talos/talos_sandbox_launcher.py", "id": "L01", "killed_by": "tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_wall_clock_limit[while True: pass]", "seconds": 50.0, "status": "KILLED", "suite_exit_code": 1 }, { "description": "descriptors not closed before the workload", "equivalent_justification": null, "file": "cain/talos/talos_sandbox_launcher.py", "id": "L02", "killed_by": "tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_inherited_descriptors", "seconds": 43.6, "status": "KILLED", "suite_exit_code": 1 }, { "description": "Landlock self-test result ignored", "equivalent_justification": null, "file": "cain/talos/talos_sandbox_launcher.py", "id": "L03", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_control_that_silently_does_nothing_is_detected[ rep = ll.restrict_self(profile)\\n- rep = ll.plan(profile)\\n-LANDLOCK_SELF_TEST_NOT_DENIED]", "seconds": 19.6, "status": "KILLED", "suite_exit_code": 1 }, { "description": "seccomp self-test result ignored", "equivalent_justification": "PR_GET_SECCOMP read-back (SECCOMP_READBACK) still refuses a filter that was not installed; this self-test additionally catches an installed filter with the wrong content, which no test fakes.", "file": "cain/talos/talos_sandbox_launcher.py", "id": "L04", "seconds": 51.0, "status": "SURVIVED_EQUIVALENT", "suite_exit_code": 0 }, { "description": "seccomp: ptrace allowed", "equivalent_justification": null, "file": "cain/talos/talos_sandbox_launcher.py", "id": "L05", "killed_by": "tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_capabilities_and_no_way_back", "seconds": 38.7, "status": "KILLED", "suite_exit_code": 1 }, { "description": "seccomp: namespace flags allowed on clone", "equivalent_justification": null, "file": "cain/talos/talos_sandbox_launcher.py", "id": "L06", "killed_by": "tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_capabilities_and_no_way_back", "seconds": 38.2, "status": "KILLED", "suite_exit_code": 1 }, { "description": "seccomp: io_uring allowed", "equivalent_justification": null, "file": "cain/talos/talos_sandbox_launcher.py", "id": "L07", "killed_by": "tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_capabilities_and_no_way_back", "seconds": 41.3, "status": "KILLED", "suite_exit_code": 1 }, { "description": "governed file read follows symlinks", "equivalent_justification": "The Landlock rule for a governed read covers only the authorised path, so a swapped-in link to any other file is denied by the kernel (EACCES) with or without O_NOFOLLOW. O_NOFOLLOW is defence in depth.", "file": "cain/talos/talos_sandbox_launcher.py", "id": "L08", "killed_by": "tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_fs_modes_refuse_symlinks_and_never_follow_them", "seconds": 28.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "capability bounding set not emptied", "equivalent_justification": null, "file": "cain/talos/talos_sandbox_launcher.py", "id": "L09", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water", "seconds": 7.9, "status": "KILLED", "suite_exit_code": 1 }, { "description": "no_new_privs read-back ignored", "equivalent_justification": "PR_SET_NO_NEW_PRIVS is also set by the Landlock binding and is a precondition of both landlock_restrict_self and the seccomp filter, which are each read back. No test can make the prctl fail while those succeed.", "file": "cain/talos/talos_sandbox_launcher.py", "id": "L10", "seconds": 53.9, "status": "SURVIVED_EQUIVALENT", "suite_exit_code": 0 }, { "description": "nonce existence not checked in the transaction", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D01", "killed_by": "tests/sovereign/evolution_07/test_e7_formal_link.py::test_each_modelled_check_fails_closed_with_the_modelled_verdict[nonce_fresh]", "seconds": 14.3, "status": "KILLED", "suite_exit_code": 1 }, { "description": "floor compared without the skew allowance (the bug fixed in this evolution)", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D02", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_emergency_invalidation_floor", "seconds": 3.9, "status": "KILLED", "suite_exit_code": 1 }, { "description": "invalidation floor ignored", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D03", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_emergency_invalidation_floor", "seconds": 8.3, "status": "KILLED", "suite_exit_code": 1 }, { "description": "key revocation not re-checked in the transaction", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D04", "killed_by": "tests/sovereign/evolution_07/test_e7_ledger.py::test_key_revoked_between_check_and_consume", "seconds": 33.0, "status": "KILLED", "suite_exit_code": 1 }, { "description": "decision revocation not re-checked in the transaction", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D05", "killed_by": "tests/sovereign/evolution_07/test_e7_ledger.py::test_decision_revoked_between_check_and_consume", "seconds": 35.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "clock rollback not detected", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D06", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water", "seconds": 4.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "host binding not checked", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D07", "killed_by": "tests/sovereign/evolution_07/test_e7_ledger.py::test_ledger_refuses_other_host_and_network_filesystems", "seconds": 44.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "symlinked ledger path accepted", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D08", "killed_by": "tests/sovereign/evolution_07/test_e7_ledger.py::test_unsafe_ledger_files_refused", "seconds": 41.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "audit chain not verified", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D09", "killed_by": "tests/sovereign/evolution_07/test_e7_ledger.py::test_audit_chain_detects_tampering", "seconds": 46.6, "status": "KILLED", "suite_exit_code": 1 }, { "description": "illegal execution-state transitions accepted", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D10", "killed_by": "tests/sovereign/evolution_07/test_e7_ledger.py::test_kill_after_start_is_uncertain_not_retried", "seconds": 43.8, "status": "KILLED", "suite_exit_code": 1 }, { "description": "new file-backed ledger starts without a floor", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D11", "killed_by": "tests/sovereign/evolution_07/test_e7_ledger.py::test_replaced_ledger_cannot_be_used_to_replay", "seconds": 39.2, "status": "KILLED", "suite_exit_code": 1 }, { "description": "world-writable ledger accepted", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D12", "killed_by": "tests/sovereign/evolution_07/test_e7_ledger.py::test_unsafe_ledger_files_refused", "seconds": 41.7, "status": "KILLED", "suite_exit_code": 1 }, { "description": "network filesystem accepted", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D13", "killed_by": "tests/sovereign/evolution_07/test_e7_ledger.py::test_ledger_refuses_other_host_and_network_filesystems", "seconds": 38.6, "status": "KILLED", "suite_exit_code": 1 }, { "description": "foreign database accepted as a ledger", "equivalent_justification": null, "file": "cain/talos/talos_ledger.py", "id": "D14", "killed_by": "tests/sovereign/evolution_07/test_e7_ledger.py::test_unsafe_ledger_files_refused", "seconds": 37.8, "status": "KILLED", "suite_exit_code": 1 }, { "description": "duplicate JSON keys accepted", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P01", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_duplicate_keys_rejected_at_top_level_and_nested", "seconds": 19.0, "status": "KILLED", "suite_exit_code": 1 }, { "description": "unknown envelope fields accepted", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P02", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_unknown_and_missing_fields_rejected", "seconds": 3.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "path containment by string prefix", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P03", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_path_within_is_component_wise", "seconds": 4.3, "status": "KILLED", "suite_exit_code": 1 }, { "description": "no domain separation in the signing input", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P04", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_signature_over_undomained_bytes_is_rejected", "seconds": 4.3, "status": "KILLED", "suite_exit_code": 1 }, { "description": "environment not part of the bound request", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P05", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_cwd_and_env_are_bound", "seconds": 5.0, "status": "KILLED", "suite_exit_code": 1 }, { "description": "working directory not part of the bound request", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P06", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_cwd_and_env_are_bound", "seconds": 6.6, "status": "KILLED", "suite_exit_code": 1 }, { "description": "loader variables allowed in the request environment", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P07", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_dangerous_environment_names_refused[LD_PRELOAD]", "seconds": 5.9, "status": "KILLED", "suite_exit_code": 1 }, { "description": "floats accepted by the strict parser", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P08", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_strict_parser_rejects_ambiguous_numbers_and_bad_encoding[{\"a\":1.0}-FLOAT_NOT_ALLOWED]", "seconds": 5.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "exp <= iat accepted", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P09", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_invalid_timestamps_are_malformed[100-100]", "seconds": 6.4, "status": "KILLED", "suite_exit_code": 1 }, { "description": "ports without network accepted", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P10", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_ambiguous_scope_is_malformed[patch7-SCOPE_PORTS_WITHOUT_NETWORK]", "seconds": 4.9, "status": "KILLED", "suite_exit_code": 1 }, { "description": "unbound digest shares the request hash domain", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P11", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_unbound_envelope_cannot_authorise_any_request", "seconds": 5.2, "status": "KILLED", "suite_exit_code": 1 }, { "description": "non-canonical scope paths accepted", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P12", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_ambiguous_scope_is_malformed[patch0-SCOPE_PATH_NOT_CANONICAL]", "seconds": 4.2, "status": "KILLED", "suite_exit_code": 1 }, { "description": "argv not part of the bound request", "equivalent_justification": null, "file": "cain/talos/cain_talos_protocol.py", "id": "P13", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_untrusted_data_only_changes_digests", "seconds": 5.0, "status": "KILLED", "suite_exit_code": 1 }, { "description": "scope attenuation by string prefix", "equivalent_justification": null, "file": "cain/talos/cain_jit_engine.py", "id": "J01", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_requested_scope_is_clamped_component_wise", "seconds": 4.0, "status": "KILLED", "suite_exit_code": 1 }, { "description": "non-canonical file target evaluated", "equivalent_justification": null, "file": "cain/talos/cain_jit_engine.py", "id": "J02", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_jit_refuses_non_canonical_file_target", "seconds": 4.1, "status": "KILLED", "suite_exit_code": 1 }, { "description": "approval-required rule issues ALLOW", "equivalent_justification": null, "file": "cain/talos/cain_jit_engine.py", "id": "J03", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_jit_never_accepts_a_proposer_supplied_approval", "seconds": 4.2, "status": "KILLED", "suite_exit_code": 1 }, { "description": "policy digest omits the scope ceiling", "equivalent_justification": null, "file": "cain/talos/cain_jit_engine.py", "id": "J04", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_policy_digest_changes_when_any_permission_bearing_field_changes", "seconds": 4.0, "status": "KILLED", "suite_exit_code": 1 }, { "description": "policy conflict resolved by first rule", "equivalent_justification": null, "file": "cain/talos/cain_jit_engine.py", "id": "J05", "killed_by": "tests/sovereign/evolution_07/test_e7_protocol.py::test_jit_default_deny_and_conflict_deny", "seconds": 4.5, "status": "KILLED", "suite_exit_code": 1 }, { "description": "file adapter accepts non-canonical paths", "equivalent_justification": null, "file": "cain/talos/talos_adapter.py", "id": "A01", "killed_by": "tests/sovereign/evolution_07/test_e7_enforcement.py::test_filesystem_adapter_rejects_non_canonical_paths[/../../etc/passwd]", "seconds": 8.9, "status": "KILLED", "suite_exit_code": 1 } ], "schema": "cain42.sovereign.evo07.mutation.v1", "seconds": 354.4, "source_tree_digest": "484c641db0ea1789639888e1469fdc7f67ed2fa3a13affb9846c56a7fecb53c0", "tests": [ "tests/sovereign/evolution_07/test_e7_protocol.py", "tests/sovereign/evolution_07/test_e7_enforcement.py", "tests/sovereign/evolution_07/test_e7_formal_link.py", "tests/sovereign/evolution_07/test_e7_ledger.py", "tests/sovereign/evolution_07/test_e7_worker_isolation.py" ], "total": 89, "unexplained_survivors_or_errors": [] }