{ "schema": "cain42.sovereign.evo07.test_results.v1", "source_tree_digest": "484c641db0ea1789639888e1469fdc7f67ed2fa3a13affb9846c56a7fecb53c0", "suites": [ { "cases": [ { "attack_class": "positive", "expected_control": "a well-formed, correctly bound envelope verifies", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_valid_envelope_round_trips_over_the_wire_and_verifies", "outcome": "passed", "seconds": 0.012, "test_id": "E7-P-001", "threat": "baseline" }, { "attack_class": "positive", "expected_control": "issuer and verifier agree on the signing input for every field", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_signature_covers_every_field_that_is_not_the_signature", "outcome": "passed", "seconds": 0.021, "test_id": "E7-P-002", "threat": "baseline" }, { "attack_class": "forged signatures", "expected_control": "Ed25519 verification against TALOS trust root", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_signature_by_untrusted_key_is_rejected", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-001", "threat": "forged signature" }, { "attack_class": "forged signatures", "expected_control": "kid must be a configured trust root", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_unknown_kid_is_rejected_even_with_a_self_consistent_signature", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-002", "threat": "attacker names their own key id" }, { "attack_class": "forged signatures", "expected_control": "missing/short/non-base64 signature refused", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_missing_or_malformed_signature[None-MISSING_SIGNATURE]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-003", "threat": "signature stripped or malformed" }, { "attack_class": "forged signatures", "expected_control": "missing/short/non-base64 signature refused", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_missing_or_malformed_signature[-MISSING_SIGNATURE]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-003", "threat": "signature stripped or malformed" }, { "attack_class": "forged signatures", "expected_control": "missing/short/non-base64 signature refused", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_missing_or_malformed_signature[!!!not-base64!!!-SIGNATURE_ENCODING]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-003", "threat": "signature stripped or malformed" }, { "attack_class": "forged signatures", "expected_control": "missing/short/non-base64 signature refused", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_missing_or_malformed_signature[eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4-INVALID_SIGNATURE_LENGTH]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-003", "threat": "signature stripped or malformed" }, { "attack_class": "protocol downgrade", "expected_control": "domain-separated signing input", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_signature_over_undomained_bytes_is_rejected", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-004", "threat": "v1 signature replayed as v3 (no domain separation)" }, { "attack_class": "protocol downgrade", "expected_control": "version allowlist; legacy versions withdrawn", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_legacy_or_unknown_protocol_versions_are_refused_even_when_validly_signed[protocol_version-cain42.talos.v1]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-005", "threat": "protocol downgrade to v1/v2" }, { "attack_class": "protocol downgrade", "expected_control": "version allowlist; legacy versions withdrawn", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_legacy_or_unknown_protocol_versions_are_refused_even_when_validly_signed[protocol_version-cain42.talos.v2]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-005", "threat": "protocol downgrade to v1/v2" }, { "attack_class": "protocol downgrade", "expected_control": "version allowlist; legacy versions withdrawn", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_legacy_or_unknown_protocol_versions_are_refused_even_when_validly_signed[schema_version-cain42.talos.envelope.v1]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-005", "threat": "protocol downgrade to v1/v2" }, { "attack_class": "protocol downgrade", "expected_control": "version allowlist; legacy versions withdrawn", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_legacy_or_unknown_protocol_versions_are_refused_even_when_validly_signed[protocol_version-]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-005", "threat": "protocol downgrade to v1/v2" }, { "attack_class": "protocol downgrade", "expected_control": "algorithm allowlist (Ed25519 only)", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_algorithm_substitution_is_refused_even_when_validly_signed[none]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-006", "threat": "algorithm substitution" }, { "attack_class": "protocol downgrade", "expected_control": "algorithm allowlist (Ed25519 only)", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_algorithm_substitution_is_refused_even_when_validly_signed[HS256]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-006", "threat": "algorithm substitution" }, { "attack_class": "protocol downgrade", "expected_control": "algorithm allowlist (Ed25519 only)", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_algorithm_substitution_is_refused_even_when_validly_signed[ed25519]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-006", "threat": "algorithm substitution" }, { "attack_class": "protocol downgrade", "expected_control": "algorithm allowlist (Ed25519 only)", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_algorithm_substitution_is_refused_even_when_validly_signed[RS256]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-006", "threat": "algorithm substitution" }, { "attack_class": "duplicate JSON keys", "expected_control": "strict parser rejects duplicates at any depth", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_duplicate_keys_rejected_at_top_level_and_nested", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-010", "threat": "duplicate JSON keys (parser differential)" }, { "attack_class": "altered signed fields", "expected_control": "exact key set", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_unknown_and_missing_fields_rejected", "outcome": "passed", "seconds": 0.004, "test_id": "E7-A-011", "threat": "unknown or missing security field" }, { "attack_class": "canonicalization mismatch", "expected_control": "no coercion; exact types", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_type_and_charset_confusion_is_malformed_not_coerced[exp-9999999999-FIELD_EXP]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-012", "threat": "type confusion (string for int, bool for int, float)" }, { "attack_class": "canonicalization mismatch", "expected_control": "no coercion; exact types", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_type_and_charset_confusion_is_malformed_not_coerced[iat-True-FIELD_IAT]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-012", "threat": "type confusion (string for int, bool for int, float)" }, { "attack_class": "canonicalization mismatch", "expected_control": "no coercion; exact types", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_type_and_charset_confusion_is_malformed_not_coerced[exp-1000000000000.0-FIELD_EXP]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-012", "threat": "type confusion (string for int, bool for int, float)" }, { "attack_class": "canonicalization mismatch", "expected_control": "no coercion; exact types", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_type_and_charset_confusion_is_malformed_not_coerced[tenant_id-7-FIELD_TENANT_ID]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-012", "threat": "type confusion (string for int, bool for int, float)" }, { "attack_class": "canonicalization mismatch", "expected_control": "no coercion; exact types", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_type_and_charset_confusion_is_malformed_not_coerced[decision-allow-FIELD_DECISION]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-012", "threat": "type confusion (string for int, bool for int, float)" }, { "attack_class": "canonicalization mismatch", "expected_control": "no coercion; exact types", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_type_and_charset_confusion_is_malformed_not_coerced[action-Tool.Run-FIELD_ACTION]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-012", "threat": "type confusion (string for int, bool for int, float)" }, { "attack_class": "canonicalization mismatch", "expected_control": "no coercion; exact types", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_type_and_charset_confusion_is_malformed_not_coerced[target-a\\nb-FIELD_TARGET]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-012", "threat": "type confusion (string for int, bool for int, float)" }, { "attack_class": "canonicalization mismatch", "expected_control": "no coercion; exact types", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_type_and_charset_confusion_is_malformed_not_coerced[principal_did-did:cain:e7:alice\\x00-FIELD_PRINCIPAL_DID]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-012", "threat": "type confusion (string for int, bool for int, float)" }, { "attack_class": "canonicalization mismatch", "expected_control": "no coercion; exact types", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_type_and_charset_confusion_is_malformed_not_coerced[principal_did-did:cain:e7:\\u0430lice-FIELD_PRINCIPAL_DID]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-012", "threat": "type confusion (string for int, bool for int, float)" }, { "attack_class": "canonicalization mismatch", "expected_control": "no coercion; exact types", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_type_and_charset_confusion_is_malformed_not_coerced[parameters_digest-ABCDEF0000000000000000000000000000000000000000000000000000000000-FIELD_PARAMETERS_DIGEST]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-012", "threat": "type confusion (string for int, bool for int, float)" }, { "attack_class": "canonicalization mismatch", "expected_control": "floats and non-finite numbers rejected by the parser", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_strict_parser_rejects_ambiguous_numbers_and_bad_encoding[{\"a\":1.0}-FLOAT_NOT_ALLOWED]", "outcome": "passed", "seconds": 0.001, "test_id": "E7-A-013", "threat": "float or NaN smuggled through the wire" }, { "attack_class": "canonicalization mismatch", "expected_control": "floats and non-finite numbers rejected by the parser", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_strict_parser_rejects_ambiguous_numbers_and_bad_encoding[{\"a\":NaN}-NON_FINITE_NUMBER]", "outcome": "passed", "seconds": 0.001, "test_id": "E7-A-013", "threat": "float or NaN smuggled through the wire" }, { "attack_class": "canonicalization mismatch", "expected_control": "floats and non-finite numbers rejected by the parser", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_strict_parser_rejects_ambiguous_numbers_and_bad_encoding[{\"a\":1e400}-FLOAT_NOT_ALLOWED]", "outcome": "passed", "seconds": 0.001, "test_id": "E7-A-013", "threat": "float or NaN smuggled through the wire" }, { "attack_class": "canonicalization mismatch", "expected_control": "floats and non-finite numbers rejected by the parser", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_strict_parser_rejects_ambiguous_numbers_and_bad_encoding[{\"a\":-INVALID_JSON]", "outcome": "passed", "seconds": 0.001, "test_id": "E7-A-013", "threat": "float or NaN smuggled through the wire" }, { "attack_class": "canonicalization mismatch", "expected_control": "floats and non-finite numbers rejected by the parser", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_strict_parser_rejects_ambiguous_numbers_and_bad_encoding[{\"a\":\"\\xff\"}-INVALID_UTF8]", "outcome": "passed", "seconds": 0.001, "test_id": "E7-A-013", "threat": "float or NaN smuggled through the wire" }, { "attack_class": "resource exhaustion", "expected_control": "16 KiB bound before parsing", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_oversize_envelope_rejected_before_parsing", "outcome": "passed", "seconds": 0.012, "test_id": "E7-A-014", "threat": "oversize envelope (memory/CPU exhaustion of the verifier)" }, { "attack_class": "canonicalization mismatch", "expected_control": "signature is over the canonical form, so every wire spelling of the same values verifies identically and no spelling changes a value", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_wire_formatting_does_not_change_the_signed_value", "outcome": "passed", "seconds": 0.006, "test_id": "E7-A-015", "threat": "whitespace / key-order variants of the same envelope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch0-SCOPE_PATH_NOT_CANONICAL]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch1-SCOPE_PATH_NOT_CANONICAL]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch2-SCOPE_PATH_NOT_CANONICAL]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch3-SCOPE_READ_ROOT_FORBIDDEN]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch4-SCOPE_WRITE_ROOT_FORBIDDEN]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch5-SCOPE_WRITE_ROOT_FORBIDDEN]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch6-SCOPE_NETWORK_WITHOUT_PORTS]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch7-SCOPE_PORTS_WITHOUT_NETWORK]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch8-SCOPE_NETWORK_TYPE]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch9-SCOPE_PORTS]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch10-SCOPE_LIMIT]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch11-SCOPE_LIMIT]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "attack_class": "scope widening", "expected_control": "scope validation refuses rather than guesses", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_ambiguous_scope_is_malformed[patch12-SCOPE_KEYS]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-016", "threat": "ambiguous or dangerous scope" }, { "id": "tests.sovereign.evolution_07.test_e7_protocol::test_path_within_is_component_wise", "outcome": "passed", "seconds": 0.001 }, { "attack_class": "cross-tenant token reuse", "expected_control": "tenant bound in the signed envelope", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_cross_tenant_reuse_is_refused_and_does_not_burn_the_envelope", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-020", "threat": "cross-tenant token reuse" }, { "attack_class": "identity spoofing", "expected_control": "each identity bound in the signed envelope", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_identity_spoofing_refused[kw0-PRINCIPAL_MISMATCH]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-021", "threat": "identity spoofing (principal, agent, session)" }, { "attack_class": "identity spoofing", "expected_control": "each identity bound in the signed envelope", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_identity_spoofing_refused[kw1-AGENT_MISMATCH]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-021", "threat": "identity spoofing (principal, agent, session)" }, { "attack_class": "identity spoofing", "expected_control": "each identity bound in the signed envelope", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_identity_spoofing_refused[kw2-SESSION_MISMATCH]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-021", "threat": "identity spoofing (principal, agent, session)" }, { "attack_class": "identity spoofing", "expected_control": "audience is the kernel's own configured name", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_audience_mismatch_refused", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-022", "threat": "envelope minted for another TALOS instance" }, { "attack_class": "identity spoofing", "expected_control": "issuer bound to the trust root", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_issuer_not_bound_to_key_refused", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-023", "threat": "trusted key used under another issuer name" }, { "attack_class": "target substitution", "expected_control": "target bound in the signed envelope", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_target_and_action_substitution_refused", "outcome": "passed", "seconds": 0.006, "test_id": "E7-A-024", "threat": "target substitution" }, { "attack_class": "stale policy digest", "expected_control": "kernel pins the policy version and digest", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_stale_policy_version_and_digest_refused", "outcome": "passed", "seconds": 0.006, "test_id": "E7-A-030", "threat": "stale policy digest / version" }, { "attack_class": "stale policy digest", "expected_control": "policy digest covers scope ceiling, tenant, conditions", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_policy_digest_changes_when_any_permission_bearing_field_changes", "outcome": "passed", "seconds": 0.004, "test_id": "E7-A-031", "threat": "rule ceiling widened without changing the digest" }, { "attack_class": "timeout bypass", "expected_control": "strict expiry on the kernel clock", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_expired_and_boundary", "outcome": "passed", "seconds": 0.006, "test_id": "E7-A-040", "threat": "expired envelope" }, { "attack_class": "timeout bypass", "expected_control": "bounded lifetime and bounded skew", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_lifetime_and_future_issue_bounds", "outcome": "passed", "seconds": 0.007, "test_id": "E7-A-041", "threat": "over-long lifetime / issued in the future" }, { "attack_class": "timeout bypass", "expected_control": "structural time validation", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_invalid_timestamps_are_malformed[100-100]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-042", "threat": "exp <= iat / absurd timestamps" }, { "attack_class": "timeout bypass", "expected_control": "structural time validation", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_invalid_timestamps_are_malformed[200-100]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-042", "threat": "exp <= iat / absurd timestamps" }, { "attack_class": "timeout bypass", "expected_control": "structural time validation", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_invalid_timestamps_are_malformed[0-50]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-042", "threat": "exp <= iat / absurd timestamps" }, { "attack_class": "timeout bypass", "expected_control": "structural time validation", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_invalid_timestamps_are_malformed[-5-50]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-042", "threat": "exp <= iat / absurd timestamps" }, { "attack_class": "timeout bypass", "expected_control": "structural time validation", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_invalid_timestamps_are_malformed[10-1000000000000000]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-042", "threat": "exp <= iat / absurd timestamps" }, { "attack_class": "clock rollback", "expected_control": "no usable clock => INDETERMINATE", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_unusable_clock_fails_closed[0]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-043", "threat": "missing or broken time source" }, { "attack_class": "clock rollback", "expected_control": "no usable clock => INDETERMINATE", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_unusable_clock_fails_closed[1]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-043", "threat": "missing or broken time source" }, { "attack_class": "clock rollback", "expected_control": "no usable clock => INDETERMINATE", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_unusable_clock_fails_closed[2]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-043", "threat": "missing or broken time source" }, { "attack_class": "clock rollback", "expected_control": "no usable clock => INDETERMINATE", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_unusable_clock_fails_closed[3]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-043", "threat": "missing or broken time source" }, { "attack_class": "clock rollback", "expected_control": "no usable clock => INDETERMINATE", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_unusable_clock_fails_closed[4]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-043", "threat": "missing or broken time source" }, { "attack_class": "clock rollback", "expected_control": "no usable clock => INDETERMINATE", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_unusable_clock_fails_closed[5]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-043", "threat": "missing or broken time source" }, { "attack_class": "clock rollback", "expected_control": "ledger keeps a time high-water mark", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_clock_rollback_detected_by_ledger_high_water", "outcome": "passed", "seconds": 0.078, "test_id": "E7-A-044", "threat": "clock rolled back to revive an expired envelope" }, { "attack_class": "key revocation races", "expected_control": "key validity window on issue time", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_key_rotation_window", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-050", "threat": "retired key keeps signing" }, { "attack_class": "key revocation races", "expected_control": "key revocation in the ledger", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_revoked_key_and_revoked_decision", "outcome": "passed", "seconds": 0.007, "test_id": "E7-A-051", "threat": "compromised key" }, { "attack_class": "key revocation races", "expected_control": "emergency invalidation floor", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_emergency_invalidation_floor", "outcome": "passed", "seconds": 0.01, "test_id": "E7-A-052", "threat": "everything issued before an incident must die" }, { "attack_class": "replay races", "expected_control": "atomic single-use consumption", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_single_use_and_retry_cannot_regain_authority", "outcome": "passed", "seconds": 0.011, "test_id": "E7-A-060", "threat": "replay" }, { "attack_class": "cache poisoning", "expected_control": "no verdict cache: every call re-reads trust state", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_no_verdict_is_cached", "outcome": "passed", "seconds": 0.007, "test_id": "E7-A-061", "threat": "stale cached decision / cache poisoning" }, { "attack_class": "identity spoofing", "expected_control": "approval is a signature by a TALOS-trusted approver key", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_approval_reference_string_is_not_an_approval", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-070", "threat": "self-asserted approval reference" }, { "attack_class": "parameter substitution", "expected_control": "approval signs envelope id, nonce, digest, action, target, principal, tenant", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_approval_is_bound_to_the_exact_operation", "outcome": "passed", "seconds": 0.011, "test_id": "E7-A-071", "threat": "approval for another operation replayed" }, { "attack_class": "identity spoofing", "expected_control": "fail closed", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_no_approver_trust_root_denies", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-072", "threat": "approval required but TALOS has no approver trust root" }, { "attack_class": "altered signed fields", "expected_control": "DENY is terminal", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_cain_deny_is_never_allow", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-073", "threat": "CAIN DENY turned into execution" }, { "attack_class": "verifier exceptions", "expected_control": "stable reason codes without field values", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_reason_codes_are_stable_and_carry_no_caller_data", "outcome": "passed", "seconds": 0.008, "test_id": "E7-A-080", "threat": "verifier error leaks secrets or stack traces" }, { "attack_class": "verifier exceptions", "expected_control": "any exception => INDETERMINATE, never ALLOW", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_non_envelope_inputs_and_internal_faults_never_allow[None]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-A-081", "threat": "exception inside the verifier" }, { "attack_class": "verifier exceptions", "expected_control": "any exception => INDETERMINATE, never ALLOW", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_non_envelope_inputs_and_internal_faults_never_allow[bad1]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-A-081", "threat": "exception inside the verifier" }, { "attack_class": "verifier exceptions", "expected_control": "any exception => INDETERMINATE, never ALLOW", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_non_envelope_inputs_and_internal_faults_never_allow[envelope]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-A-081", "threat": "exception inside the verifier" }, { "attack_class": "verifier exceptions", "expected_control": "any exception => INDETERMINATE, never ALLOW", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_non_envelope_inputs_and_internal_faults_never_allow[42]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-A-081", "threat": "exception inside the verifier" }, { "attack_class": "verifier exceptions", "expected_control": "any exception => INDETERMINATE, never ALLOW", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_non_envelope_inputs_and_internal_faults_never_allow[bad4]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-A-081", "threat": "exception inside the verifier" }, { "attack_class": "scope widening", "expected_control": "attenuation is monotonic (never exceeds the rule ceiling)", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_requested_scope_is_clamped_component_wise", "outcome": "passed", "seconds": 0.004, "test_id": "E7-A-090", "threat": "scope widening through the requested scope" }, { "attack_class": "path traversal", "expected_control": "file targets must be canonical before rule matching", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_jit_refuses_non_canonical_file_target", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-091", "threat": "path traversal in a file target ('/tmp/../etc/shadow' matches '/tmp/.*')" }, { "attack_class": "identity spoofing", "expected_control": "JIT emits REQUIRE_APPROVAL regardless", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_jit_never_accepts_a_proposer_supplied_approval", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-092", "threat": "agent-supplied approval label on a critical action" }, { "attack_class": "parameter substitution", "expected_control": "untrusted data cannot change scope, tenant, policy or key: only the digest of the data changes", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_untrusted_data_only_changes_digests", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-093", "threat": "prompt-injected text in parameters or context" }, { "attack_class": "scope widening", "expected_control": "default deny; conflict denies", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_jit_default_deny_and_conflict_deny", "outcome": "passed", "seconds": 0.005, "test_id": "E7-A-094", "threat": "default-allow or conflict resolved in the attacker's favour" }, { "attack_class": "parameter substitution", "expected_control": "unbound digest can never equal a request digest (different hash domain)", "id": "tests.sovereign.evolution_07.test_e7_protocol::test_unbound_envelope_cannot_authorise_any_request", "outcome": "passed", "seconds": 0.006, "test_id": "E7-A-095", "threat": "envelope with no execution request used to execute" }, { "attack_class": "positive", "expected_control": "a valid, bound request runs once, inside its scope", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_valid_request_executes_exactly_once_within_scope", "outcome": "passed", "seconds": 0.077, "test_id": "E7-P-010", "threat": "baseline" }, { "attack_class": "missing authorization", "expected_control": "no envelope => no execution", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_envelope", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-001", "threat": "missing authorization" }, { "attack_class": "identity spoofing", "expected_control": "TALOS does not trust a decision flag, header, env var or Python object", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_decision_flag_or_object_is_not_authorization[True]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-002", "threat": "caller presents a flag, dict or object instead of a signed envelope" }, { "attack_class": "identity spoofing", "expected_control": "TALOS does not trust a decision flag, header, env var or Python object", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_decision_flag_or_object_is_not_authorization[ALLOW]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-002", "threat": "caller presents a flag, dict or object instead of a signed envelope" }, { "attack_class": "identity spoofing", "expected_control": "TALOS does not trust a decision flag, header, env var or Python object", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_decision_flag_or_object_is_not_authorization[fake2]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-002", "threat": "caller presents a flag, dict or object instead of a signed envelope" }, { "attack_class": "identity spoofing", "expected_control": "TALOS does not trust a decision flag, header, env var or Python object", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_decision_flag_or_object_is_not_authorization[fake3]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-002", "threat": "caller presents a flag, dict or object instead of a signed envelope" }, { "attack_class": "altered signed fields", "expected_control": "signature covers the decision", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_decision_field_flipped_after_signing", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-003", "threat": "envelope object mutated after signing to look approved" }, { "attack_class": "parameter substitution", "expected_control": "request digest must equal the signed parameters_digest", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_different_command_under_valid_envelope", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-010", "threat": "parameter substitution: run a different command under a valid envelope" }, { "attack_class": "argument injection", "expected_control": "argv is bound element by element", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_argv_changes_break_the_binding[0]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-011", "threat": "argument injection: one extra argv element" }, { "attack_class": "argument injection", "expected_control": "argv is bound element by element", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_argv_changes_break_the_binding[1]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-011", "threat": "argument injection: one extra argv element" }, { "attack_class": "argument injection", "expected_control": "argv is bound element by element", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_argv_changes_break_the_binding[2]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-011", "threat": "argument injection: one extra argv element" }, { "attack_class": "argument injection", "expected_control": "argv is bound element by element", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_argv_changes_break_the_binding[3]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-011", "threat": "argument injection: one extra argv element" }, { "attack_class": "environment injection", "expected_control": "cwd and env are inside the bound request", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_cwd_and_env_are_bound", "outcome": "passed", "seconds": 0.007, "test_id": "E7-E-012", "threat": "TOCTOU: working directory or environment changed between check and use" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[LD_PRELOAD]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[LD_LIBRARY_PATH]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[PATH]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[PYTHONPATH]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[PYTHONSTARTUP]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[BASH_ENV]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[IFS]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[ENV]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[HOME]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[NODE_OPTIONS]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[GIT_SSH_COMMAND]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[lower]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[A=B]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "environment injection", "expected_control": "loader/resolver variables are refused even when CAIN signed them", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_dangerous_environment_names_refused[]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-013", "threat": "environment injection (LD_PRELOAD, PATH, PYTHONPATH, BASH_ENV...)" }, { "attack_class": "shell metacharacters", "expected_control": "no shell: argv is passed to execve verbatim", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_shell_metacharacters_are_literal", "outcome": "passed", "seconds": 0.078, "test_id": "E7-E-014", "threat": "shell metacharacters in an argument" }, { "attack_class": "argument injection", "expected_control": "the runner binds the split argv; a different string that yields a different argv is refused", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_runner_string_command_is_bound_after_splitting", "outcome": "passed", "seconds": 0.076, "test_id": "E7-E-015", "threat": "string command split differently at check and at use" }, { "attack_class": "scope widening", "expected_control": "cwd must lie inside the signed scope", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_cwd_outside_scope_is_refused_even_when_signed", "outcome": "passed", "seconds": 0.007, "test_id": "E7-E-016", "threat": "working directory outside the signed scope (the Evolution 6 worker silently added the caller's cwd to the readable paths)" }, { "attack_class": "timeout bypass", "expected_control": "expiry enforced on the kernel clock at execution", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_expired_envelope_does_not_execute", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-020", "threat": "stale credential" }, { "attack_class": "key revocation races", "expected_control": "revocation checked before and inside consumption", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_revoked_does_not_execute", "outcome": "passed", "seconds": 0.008, "test_id": "E7-E-021", "threat": "revoked key / revoked decision" }, { "attack_class": "identity spoofing", "expected_control": "all bound and compared at execution", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_context_mismatch_does_not_execute[kw0-IDENTITY_MISMATCH-PRINCIPAL_MISMATCH]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-022", "threat": "mismatched identity / tenant / target / agent / session at the boundary" }, { "attack_class": "identity spoofing", "expected_control": "all bound and compared at execution", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_context_mismatch_does_not_execute[kw1-IDENTITY_MISMATCH-TENANT_MISMATCH]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-022", "threat": "mismatched identity / tenant / target / agent / session at the boundary" }, { "attack_class": "identity spoofing", "expected_control": "all bound and compared at execution", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_context_mismatch_does_not_execute[kw2-IDENTITY_MISMATCH-AGENT_MISMATCH]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-022", "threat": "mismatched identity / tenant / target / agent / session at the boundary" }, { "attack_class": "identity spoofing", "expected_control": "all bound and compared at execution", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_context_mismatch_does_not_execute[kw3-IDENTITY_MISMATCH-SESSION_MISMATCH]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-022", "threat": "mismatched identity / tenant / target / agent / session at the boundary" }, { "attack_class": "identity spoofing", "expected_control": "all bound and compared at execution", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_context_mismatch_does_not_execute[kw4-SCOPE_MISMATCH-TARGET_MISMATCH]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-022", "threat": "mismatched identity / tenant / target / agent / session at the boundary" }, { "attack_class": "identity spoofing", "expected_control": "all bound and compared at execution", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_context_mismatch_does_not_execute[kw5-SCOPE_MISMATCH-ACTION_MISMATCH]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-022", "threat": "mismatched identity / tenant / target / agent / session at the boundary" }, { "attack_class": "verifier exceptions", "expected_control": "request validated before anything else", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_malformed_request_object[None]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-023", "threat": "malformed request object" }, { "attack_class": "verifier exceptions", "expected_control": "request validated before anything else", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_malformed_request_object[touch /tmp/x]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-023", "threat": "malformed request object" }, { "attack_class": "verifier exceptions", "expected_control": "request validated before anything else", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_malformed_request_object[bad2]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-023", "threat": "malformed request object" }, { "attack_class": "verifier exceptions", "expected_control": "request validated before anything else", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_malformed_request_object[bad3]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-023", "threat": "malformed request object" }, { "attack_class": "identity spoofing", "expected_control": "approval verified by TALOS", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_require_approval_execution", "outcome": "passed", "seconds": 0.079, "test_id": "E7-E-024", "threat": "human approval missing or for another operation at execution" }, { "attack_class": "verifier exceptions", "expected_control": "exception => INDETERMINATE => no execution", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_verifier_fault_does_not_execute", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-030", "threat": "verifier unavailable (internal fault)" }, { "attack_class": "ledger corruption", "expected_control": "every ledger failure is a refusal", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_ledger_failure_does_not_execute[is_key_revoked-LEDGER_UNAVAILABLE_REVOCATION_LOOKUP_FAILED-INDETERMINATE]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-031", "threat": "ledger failure at revocation lookup / at consumption / at intent recording" }, { "attack_class": "ledger corruption", "expected_control": "every ledger failure is a refusal", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_ledger_failure_does_not_execute[consume_authorization_atomic-LEDGER_UNAVAILABLE_NONCE_CONSUMPTION_FAILED-INDETERMINATE]", "outcome": "passed", "seconds": 0.01, "test_id": "E7-E-031", "threat": "ledger failure at revocation lookup / at consumption / at intent recording" }, { "attack_class": "ledger corruption", "expected_control": "every ledger failure is a refusal", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_ledger_failure_does_not_execute[transition_execution-EXECUTION_INTENT_NOT_RECORDED-ENFORCEMENT_UNAVAILABLE]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-E-031", "threat": "ledger failure at revocation lookup / at consumption / at intent recording" }, { "attack_class": "ledger corruption", "expected_control": "anything but CONSUMED is a refusal", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_unknown_consumption_result_does_not_execute[ret0]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-E-032", "threat": "ledger returns an unknown consumption result" }, { "attack_class": "ledger corruption", "expected_control": "anything but CONSUMED is a refusal", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_unknown_consumption_result_does_not_execute[ret1]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-E-032", "threat": "ledger returns an unknown consumption result" }, { "attack_class": "ledger corruption", "expected_control": "anything but CONSUMED is a refusal", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_unknown_consumption_result_does_not_execute[ret2]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-032", "threat": "ledger returns an unknown consumption result" }, { "attack_class": "ledger corruption", "expected_control": "anything but CONSUMED is a refusal", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_unknown_consumption_result_does_not_execute[ret3]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-032", "threat": "ledger returns an unknown consumption result" }, { "attack_class": "replay races", "expected_control": "execution refused unless the deployer explicitly accepts process-lifetime replay protection", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_in_memory_ledger_refuses_execution_by_default", "outcome": "passed", "seconds": 0.082, "test_id": "E7-E-033", "threat": "non-durable replay ledger in an execution path" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[landlock_denial_observed]", "outcome": "passed", "seconds": 0.074, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[seccomp_unix_socket_denial_observed]", "outcome": "passed", "seconds": 0.075, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[capabilities_zero]", "outcome": "passed", "seconds": 0.071, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[no_new_privs]", "outcome": "passed", "seconds": 0.074, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[pid_namespace_init]", "outcome": "passed", "seconds": 0.072, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[net_interfaces]", "outcome": "passed", "seconds": 0.072, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[rlimits]", "outcome": "passed", "seconds": 0.076, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[landlock_tcp]", "outcome": "passed", "seconds": 0.069, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[pdeathsig]", "outcome": "passed", "seconds": 0.078, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[namespaces]", "outcome": "passed", "seconds": 0.095, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "request is never delivered unless the launcher proves every required control", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_missing_required_control_means_no_delivery[seccomp_filter]", "outcome": "passed", "seconds": 0.069, "test_id": "E7-E-034", "threat": "sandbox setup failure (Landlock, seccomp, namespaces, capabilities unavailable)" }, { "attack_class": "worker escape attempts", "expected_control": "no READY => no delivery", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_launcher_failure_before_ready[import sys; sys.exit(3)-LAUNCHER_NO_STATUS]", "outcome": "passed", "seconds": 0.044, "test_id": "E7-E-035", "threat": "launcher crashes, hangs or reports failure before READY" }, { "attack_class": "worker escape attempts", "expected_control": "no READY => no delivery", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_launcher_failure_before_ready[import time; time.sleep(30)-LAUNCHER_HANDSHAKE_TIMEOUT]", "outcome": "passed", "seconds": 1.016, "test_id": "E7-E-035", "threat": "launcher crashes, hangs or reports failure before READY" }, { "attack_class": "worker escape attempts", "expected_control": "no READY => no delivery", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_launcher_failure_before_ready[import os, json, sys\\ncfg = json.loads(sys.stdin.readline())\\nos.write(cfg['status_fd'], b'{\"state\": \"FAILED\", \"code\": \"LANDLOCK\"}\\\\n')\\nsys.exit(131)-SANDBOX_LANDLOCK]", "outcome": "passed", "seconds": 0.046, "test_id": "E7-E-035", "threat": "launcher crashes, hangs or reports failure before READY" }, { "attack_class": "worker escape attempts", "expected_control": "no READY => no delivery", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_launcher_failure_before_ready[import os, json, sys\\ncfg = json.loads(sys.stdin.readline())\\nos.write(cfg['status_fd'], b'READY\\\\n')-LAUNCHER_NO_STATUS]", "outcome": "passed", "seconds": 0.048, "test_id": "E7-E-035", "threat": "launcher crashes, hangs or reports failure before READY" }, { "attack_class": "worker escape attempts", "expected_control": "no READY => no delivery", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_launcher_failure_before_ready[import os, json, sys, time\\ncfg = json.loads(sys.stdin.readline())\\nos.write(cfg['status_fd'], (json.dumps({'state': 'READY', 'controls': {}, 'init_pid': 1, 'launcher_pid': os.getpid()}) + '\\\\n').encode())\\nopen(sys.stdin.read().split('\"')[5], 'w')-REQUIRED_CONTROL_MISSING]", "outcome": "passed", "seconds": 0.05, "test_id": "E7-E-035", "threat": "launcher crashes, hangs or reports failure before READY" }, { "attack_class": "worker escape attempts", "expected_control": "the launcher reads each control back or tests it by attempting the forbidden operation; a control that did not take effect aborts the launch before any request is read", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_control_that_silently_does_nothing_is_detected[ rep = ll.restrict_self(profile)\\n- rep = ll.plan(profile)\\n-LANDLOCK_SELF_TEST_NOT_DENIED]", "outcome": "passed", "seconds": 0.083, "test_id": "E7-E-039", "threat": "a control silently fails to take effect (kernel without the feature, no-op call, wrong order)" }, { "attack_class": "worker escape attempts", "expected_control": "the launcher reads each control back or tests it by attempting the forbidden operation; a control that did not take effect aborts the launch before any request is read", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_control_that_silently_does_nothing_is_detected[ if libc.prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, ctypes.byref(fprog), 0, 0) != 0:\\n- if False:\\n-SECCOMP_READBACK]", "outcome": "passed", "seconds": 0.07, "test_id": "E7-E-039", "threat": "a control silently fails to take effect (kernel without the feature, no-op call, wrong order)" }, { "attack_class": "worker escape attempts", "expected_control": "the launcher reads each control back or tests it by attempting the forbidden operation; a control that did not take effect aborts the launch before any request is read", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_control_that_silently_does_nothing_is_detected[ if libc.capset(ctypes.byref(hdr), ctypes.byref(data)) != 0:\\n- if False:\\n-CAPABILITIES_NOT_ZERO]", "outcome": "passed", "seconds": 0.071, "test_id": "E7-E-039", "threat": "a control silently fails to take effect (kernel without the feature, no-op call, wrong order)" }, { "attack_class": "worker escape attempts", "expected_control": "the launcher reads each control back or tests it by attempting the forbidden operation; a control that did not take effect aborts the launch before any request is read", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_control_that_silently_does_nothing_is_detected[ flags |= os.CLONE_NEWNET\\n- pass\\n-NETWORK_NAMESPACE_NOT_EMPTY]", "outcome": "passed", "seconds": 0.075, "test_id": "E7-E-039", "threat": "a control silently fails to take effect (kernel without the feature, no-op call, wrong order)" }, { "attack_class": "worker escape attempts", "expected_control": "the launcher reads each control back or tests it by attempting the forbidden operation; a control that did not take effect aborts the launch before any request is read", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_control_that_silently_does_nothing_is_detected[ flags = os.CLONE_NEWPID | os.CLONE_NEWIPC | os.CLONE_NEWUTS\\n- flags = os.CLONE_NEWIPC | os.CLONE_NEWUTS\\n-PID_NAMESPACE_INIT]", "outcome": "passed", "seconds": 0.078, "test_id": "E7-E-039", "threat": "a control silently fails to take effect (kernel without the feature, no-op call, wrong order)" }, { "attack_class": "worker escape attempts", "expected_control": "the launcher reads each control back or tests it by attempting the forbidden operation; a control that did not take effect aborts the launch before any request is read", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_control_that_silently_does_nothing_is_detected[ resource.setrlimit(res, (value, value))\\n- pass\\n-RLIMIT_READBACK]", "outcome": "passed", "seconds": 0.071, "test_id": "E7-E-039", "threat": "a control silently fails to take effect (kernel without the feature, no-op call, wrong order)" }, { "attack_class": "worker escape attempts", "expected_control": "the launcher reads each control back or tests it by attempting the forbidden operation; a control that did not take effect aborts the launch before any request is read", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_control_that_silently_does_nothing_is_detected[ if libc.prctl(PR_CAPBSET_DROP, cap, 0, 0, 0) != 0:\\n- if cap > 40:\\n break\\n if False:\\n-CAPABILITIES_NOT_ZERO]", "outcome": "passed", "seconds": 0.077, "test_id": "E7-E-039", "threat": "a control silently fails to take effect (kernel without the feature, no-op call, wrong order)" }, { "attack_class": "environment injection", "expected_control": "the one Popen call: argv vector, python -I, empty environment, close_fds, new session, cwd /", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_launcher_spawn_parameters", "outcome": "passed", "seconds": 0.088, "test_id": "E7-E-044", "threat": "launcher started through a shell, with the gateway's environment or descriptors" }, { "attack_class": "worker escape attempts", "expected_control": "the parent checks /proc itself (NSpid, PPid)", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_parent_verifies_pid_namespace_independently", "outcome": "passed", "seconds": 0.073, "test_id": "E7-E-036", "threat": "launcher lies about the PID namespace" }, { "attack_class": "worker escape attempts", "expected_control": "crash is reported as a failed execution; the authorization stays consumed; the gateway is unaffected", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_worker_crash_is_contained_and_not_retried", "outcome": "passed", "seconds": 0.083, "test_id": "E7-E-037", "threat": "worker crash mid-execution" }, { "attack_class": "cancellation races", "expected_control": "receipt says evidence was not recorded; row stays STARTED and is reconciled to UNCERTAIN, never re-run", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_unrecorded_outcome_is_visible_and_never_retried", "outcome": "passed", "seconds": 0.087, "test_id": "E7-E-038", "threat": "outcome cannot be recorded after a side effect" }, { "attack_class": "missing authorization", "expected_control": "every adapter refuses", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_all_adapters_refuse_without_envelope", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-040", "threat": "adapters called without an envelope" }, { "attack_class": "target substitution", "expected_control": "path is the signed target and inside the signed scope", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_filesystem_adapter_binding", "outcome": "passed", "seconds": 0.142, "test_id": "E7-E-041", "threat": "file adapter: read or write a different file than the one authorised" }, { "attack_class": "path traversal", "expected_control": "non-canonical paths are refused, never rewritten", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_filesystem_adapter_rejects_non_canonical_paths[/../../etc/passwd]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-E-042", "threat": "path traversal through the file adapter" }, { "attack_class": "path traversal", "expected_control": "non-canonical paths are refused, never rewritten", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_filesystem_adapter_rejects_non_canonical_paths[/./x]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-042", "threat": "path traversal through the file adapter" }, { "attack_class": "path traversal", "expected_control": "non-canonical paths are refused, never rewritten", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_filesystem_adapter_rejects_non_canonical_paths[//x]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-042", "threat": "path traversal through the file adapter" }, { "attack_class": "path traversal", "expected_control": "non-canonical paths are refused, never rewritten", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_filesystem_adapter_rejects_non_canonical_paths[/a/../../etc/shadow]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-E-042", "threat": "path traversal through the file adapter" }, { "attack_class": "scope widening", "expected_control": "TALOS checks scope containment itself", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_file_outside_scope_refused_even_when_signed", "outcome": "passed", "seconds": 0.008, "test_id": "E7-E-043", "threat": "file outside the signed scope, signed by a careless or compromised issuer" }, { "attack_class": "worker escape attempts", "expected_control": "static inventory: only the worker module and its launcher can start a process; no shell=True anywhere", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_only_the_worker_and_launcher_can_start_processes", "outcome": "passed", "seconds": 0.043, "test_id": "E7-E-050", "threat": "alternate route around the enforcement point inside cain.talos" }, { "attack_class": "worker escape attempts", "expected_control": "static: adapters call kernel.execute only", "id": "tests.sovereign.evolution_07.test_e7_enforcement::test_adapters_have_no_direct_file_or_process_access", "outcome": "passed", "seconds": 0.003, "test_id": "E7-E-051", "threat": "adapters or boundary reach the worker without the kernel" }, { "attack_class": "formal link", "expected_control": "the all-checks-pass state is ALLOW in both model and kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_model_and_kernel_agree_when_every_check_passes", "outcome": "passed", "seconds": 0.008, "test_id": "E7-F-LINK-001", "threat": "model drift" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[structure]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[protocol]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[algorithm]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[trust_root]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[signature]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[issuer]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[key_window]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[clock]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[ttl]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[not_expired]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[not_future]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[ledger_lookup]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[key_not_revoked]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[decision_not_revoked]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[not_deny]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[audience]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[principal]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[tenant]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[agent]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[session]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[action]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[target]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[policy_version]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[policy_digest]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[profile]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[approval]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[request_valid]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[binding]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[scope]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[durable_ledger]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[consume_available]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[nonce_fresh]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[no_clock_rollback]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "each modelled check, violated alone, yields the modelled verdict in the real kernel", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_each_modelled_check_fails_closed_with_the_modelled_verdict[floor]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-002", "threat": "model drift: a check removed, added or given another verdict" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[agent+action]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[agent+action+request_valid+durable_ledger]", "outcome": "passed", "seconds": 0.008, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[agent+binding+no_clock_rollback]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[agent+request_valid]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[algorithm+action+target+policy_version+profile+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[algorithm+clock+not_future+not_deny]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[algorithm+issuer]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[algorithm+issuer+principal+session+action+target]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[algorithm+key_not_revoked+not_deny+policy_digest+binding+durable_ledger]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[algorithm+key_window]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[algorithm+signature+tenant+no_clock_rollback]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[algorithm+trust_root+ttl+not_expired+decision_not_revoked+durable_ledger]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[audience+binding]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[clock+action+target+scope]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[clock+approval]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[clock+key_not_revoked+tenant+policy_version+binding+durable_ledger]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[clock+not_deny]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[clock+not_deny+action+durable_ledger+nonce_fresh+no_clock_rollback]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[clock+not_future+tenant+binding+scope+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[consume_available+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[decision_not_revoked+agent+binding]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[decision_not_revoked+floor]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[decision_not_revoked+nonce_fresh]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[decision_not_revoked+not_deny+session]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[decision_not_revoked+policy_digest]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[decision_not_revoked+policy_version]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[decision_not_revoked+request_valid]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[decision_not_revoked+request_valid+durable_ledger+no_clock_rollback+floor]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[decision_not_revoked+request_valid+nonce_fresh]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[issuer+approval]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[issuer+audience+tenant+policy_version+profile+consume_available]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[issuer+ledger_lookup]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[issuer+ledger_lookup+tenant+policy_version+profile+approval]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[issuer+no_clock_rollback]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[issuer+not_future+key_not_revoked+not_deny+request_valid+nonce_fresh]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[issuer+profile]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[key_not_revoked+action+binding+nonce_fresh]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[key_not_revoked+decision_not_revoked]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[key_window+clock]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[key_window+clock+decision_not_revoked+agent+policy_version+nonce_fresh]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[key_window+not_expired+target+durable_ledger]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[key_window+tenant+target]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ledger_lookup+action]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ledger_lookup+not_deny]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ledger_lookup+not_deny+consume_available+no_clock_rollback]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ledger_lookup+policy_digest+request_valid]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ledger_lookup+session]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[no_clock_rollback+floor]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[nonce_fresh+no_clock_rollback]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[not_deny+policy_version]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[not_expired]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[not_expired+agent+durable_ledger]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[not_expired+not_deny+agent+no_clock_rollback]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[not_expired+principal]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[not_future+audience+tenant+no_clock_rollback]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[not_future+nonce_fresh]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[policy_digest+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[policy_digest+no_clock_rollback]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[policy_version+durable_ledger]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[policy_version+request_valid]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[profile+scope+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[protocol+agent+request_valid]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[protocol+clock]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[protocol+clock+ledger_lookup+audience+target+floor]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[protocol+decision_not_revoked+consume_available]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[protocol+issuer+not_future+agent+action+approval]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[protocol+key_window+ledger_lookup+policy_version+request_valid+no_clock_rollback]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[protocol+not_deny+durable_ledger]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[protocol+not_deny+request_valid]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[protocol+policy_version+consume_available+nonce_fresh]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[protocol+trust_root+policy_version+approval+scope+consume_available]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[request_valid+consume_available]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[scope+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+action]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+action+approval]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+floor]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+issuer+clock+ttl+key_not_revoked+binding]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+issuer+key_window+not_expired+action+policy_version]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+issuer+request_valid]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+key_window+clock]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+profile]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+profile+durable_ledger]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+session]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[signature+session+target+policy_version+nonce_fresh+no_clock_rollback]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+algorithm+request_valid]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+algorithm+ttl+session+request_valid+nonce_fresh]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+audience+action+policy_digest+approval+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+clock+decision_not_revoked+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+clock+ledger_lookup]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+clock+nonce_fresh]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+decision_not_revoked]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+key_not_revoked]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+ledger_lookup+decision_not_revoked+policy_version+profile+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+policy_digest+no_clock_rollback]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+protocol+policy_version]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+signature+not_expired+ledger_lookup+approval]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+trust_root+issuer+clock+agent+session]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[structure+ttl+binding+scope+nonce_fresh+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[target+profile]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[target+scope+nonce_fresh]", "outcome": "passed", "seconds": 0.007, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[tenant+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[tenant+policy_version]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[tenant+target+policy_version]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[trust_root+clock+not_future+agent+approval+request_valid]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[trust_root+issuer+binding]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[trust_root+key_not_revoked+binding+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[trust_root+key_window+nonce_fresh]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[trust_root+not_expired+tenant+nonce_fresh]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[trust_root+profile]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[trust_root+signature+key_window+ledger_lookup+policy_digest+approval]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ttl+decision_not_revoked+nonce_fresh]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ttl+durable_ledger+consume_available]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ttl+key_not_revoked+principal+request_valid+consume_available+floor]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ttl+not_future+tenant+policy_version+profile+approval]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ttl+profile]", "outcome": "passed", "seconds": 0.005, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "for seeded random sets of simultaneous failures the kernel returns the verdict of the first failing check in the modelled order", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_check_order_matches_the_model[ttl+session+no_clock_rollback]", "outcome": "passed", "seconds": 0.006, "test_id": "E7-F-LINK-003", "threat": "model drift: the ORDER of checks (which failure wins)" }, { "attack_class": "formal link", "expected_control": "every reason code in the kernel source maps to a modelled guard and every guard to a reason code", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_every_kernel_reason_code_is_modelled", "outcome": "passed", "seconds": 0.001, "test_id": "E7-F-LINK-004", "threat": "model lists checks the kernel does not perform (the Evolution 6 model had a parameters_digest guard with no code behind it)" }, { "attack_class": "formal link", "expected_control": "the model's control list is the list the worker enforces", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_sandbox_control_list_matches_the_worker", "outcome": "passed", "seconds": 0.004, "test_id": "E7-F-LINK-005", "threat": "sandbox-control model drift" }, { "attack_class": "formal link", "expected_control": "randomised check of the real attenuation function against the modelled property (effective scope within ceiling)", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_real_attenuation_never_widens", "outcome": "passed", "seconds": 0.085, "test_id": "E7-F-LINK-006", "threat": "scope-attenuation model drift" }, { "attack_class": "formal link", "expected_control": "the model run is part of the test suite", "id": "tests.sovereign.evolution_07.test_e7_formal_link::test_all_formal_properties_hold", "outcome": "passed", "seconds": 0.209, "test_id": "E7-F-000", "threat": "a formal property fails, a control is vacuous, or a mutant goes undetected" }, { "attack_class": "replay races", "expected_control": "BEGIN IMMEDIATE consumption in one shared WAL ledger: exactly one process executes", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_twelve_processes_race_one_envelope_exactly_one_executes", "outcome": "passed", "seconds": 6.422, "test_id": "E7-L-001", "threat": "simultaneous replay from separate processes" }, { "attack_class": "replay races", "expected_control": "same transaction", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_sixteen_threads_race_one_envelope_exactly_one_executes", "outcome": "passed", "seconds": 0.115, "test_id": "E7-L-002", "threat": "simultaneous replay from threads in one process" }, { "attack_class": "replay races", "expected_control": "a consumed authorization stays consumed whatever the outcome", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_failed_execution_cannot_be_retried_by_another_worker", "outcome": "passed", "seconds": 1.251, "test_id": "E7-L-003", "threat": "retry across workers after a refusal or a failure" }, { "attack_class": "key revocation races", "expected_control": "revocation and consumption are serialised: a revocation that committed first always wins", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_revocation_race_is_always_consistent", "outcome": "passed", "seconds": 0.087, "test_id": "E7-L-004", "threat": "revocation racing the authorization-to-execution interval" }, { "attack_class": "key revocation races", "expected_control": "key revocation is re-checked inside the consumption transaction", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_key_revoked_between_check_and_consume", "outcome": "passed", "seconds": 0.008, "test_id": "E7-L-005", "threat": "key revoked after the signature check but before consumption" }, { "attack_class": "cancellation races", "expected_control": "decision revocation is re-checked inside the consumption transaction", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_decision_revoked_between_check_and_consume", "outcome": "passed", "seconds": 0.008, "test_id": "E7-L-006", "threat": "decision revoked (cancelled) after the pre-check but before consumption" }, { "attack_class": "replay races", "expected_control": "uncommitted: nothing consumed, nothing executed, and the envelope is still usable exactly once", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_kill_inside_transaction_leaves_nothing_consumed", "outcome": "passed", "seconds": 1.079, "test_id": "E7-L-010", "threat": "process killed inside the consumption transaction" }, { "attack_class": "cancellation races", "expected_control": "consumed, never executed, never replayable; reconciled to ABORTED", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_kill_after_consume_before_start", "outcome": "passed", "seconds": 1.036, "test_id": "E7-L-011", "threat": "crash after consumption, before launch" }, { "attack_class": "cancellation races", "expected_control": "reconciled to UNCERTAIN; never retried automatically", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_kill_after_start_is_uncertain_not_retried", "outcome": "passed", "seconds": 1.03, "test_id": "E7-L-012", "threat": "crash after launch, before the outcome is recorded (ambiguous execution outcome)" }, { "attack_class": "replay races", "expected_control": "WAL + synchronous=FULL: history survives", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_restart_recovery_keeps_history", "outcome": "passed", "seconds": 0.082, "test_id": "E7-L-013", "threat": "replay after a clean restart" }, { "attack_class": "ledger corruption", "expected_control": "transaction fails => INDETERMINATE => no execution", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_disk_full_denies", "outcome": "passed", "seconds": 0.303, "test_id": "E7-L-020", "threat": "disk full during consumption" }, { "attack_class": "ledger corruption", "expected_control": "integrity check at open; any SQLite error at use is a refusal", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_corrupted_ledger_denies", "outcome": "passed", "seconds": 0.025, "test_id": "E7-L-021", "threat": "ledger file corrupted" }, { "attack_class": "ledger corruption", "expected_control": "a new ledger refuses every envelope stamped at or before its creation second", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_replaced_ledger_cannot_be_used_to_replay", "outcome": "passed", "seconds": 0.081, "test_id": "E7-L-022", "threat": "ledger file deleted or replaced by an empty file to forget consumed nonces" }, { "attack_class": "ledger corruption", "expected_control": "NOT detected automatically: the operator must raise the invalidation floor after a restore. This test keeps the limitation visible and proves the documented procedure closes it", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_restored_backup_is_a_documented_limit_closed_by_the_floor_procedure", "outcome": "passed", "seconds": 0.087, "test_id": "E7-L-023", "threat": "stale replica / restore of an older copy of the same ledger" }, { "attack_class": "replay races", "expected_control": "new-ledger quarantine: issue stamp minus skew allowance must be after the creation second", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_new_ledger_quarantine_covers_future_stamped_envelopes", "outcome": "passed", "seconds": 0.017, "test_id": "E7-L-025", "threat": "envelope issued just before a ledger was created, including one stamped ahead by the allowed clock skew" }, { "attack_class": "ledger corruption", "expected_control": "bounded busy timeout => INDETERMINATE", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_lock_contention_denies_then_recovers", "outcome": "passed", "seconds": 0.695, "test_id": "E7-L-024", "threat": "busy ledger (lock held by another writer)" }, { "attack_class": "replay races", "expected_control": "single-host only: the ledger refuses to open on a host it was not created on", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_ledger_refuses_other_host_and_network_filesystems", "outcome": "passed", "seconds": 0.012, "test_id": "E7-L-030", "threat": "ledger copied to, or shared with, another host (multi-host without coordination)" }, { "attack_class": "ledger corruption", "expected_control": "refused at open", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_unsafe_ledger_files_refused", "outcome": "passed", "seconds": 0.015, "test_id": "E7-L-031", "threat": "ledger path is a symlink, a directory, world-writable, or a foreign database" }, { "attack_class": "corrupted evidence", "expected_control": "hash chain with a stored head", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_audit_chain_detects_tampering", "outcome": "passed", "seconds": 0.248, "test_id": "E7-L-040", "threat": "audit rows edited, deleted or reordered" }, { "attack_class": "cancellation races", "expected_control": "terminal states are final; unknown decisions cannot be started", "id": "tests.sovereign.evolution_07.test_e7_ledger::test_execution_state_machine_is_monotonic", "outcome": "passed", "seconds": 0.086, "test_id": "E7-L-041", "threat": "illegal execution-state transitions (resurrect a finished execution)" }, { "attack_class": "worker escape attempts", "expected_control": "Landlock: EACCES on open", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_read_outside_scope_is_eacces", "outcome": "passed", "seconds": 0.08, "test_id": "E7-W-001", "threat": "read a secret outside the scope" }, { "attack_class": "worker escape attempts", "expected_control": "Landlock: EACCES", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_write_outside_scope_is_eacces", "outcome": "passed", "seconds": 0.083, "test_id": "E7-W-002", "threat": "write, create, delete or rename outside the scope" }, { "attack_class": "symlink races", "expected_control": "Landlock follows the real path: EACCES", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_symlink_escape_is_denied", "outcome": "passed", "seconds": 0.108, "test_id": "E7-W-003", "threat": "symlink inside the scope pointing outside it" }, { "attack_class": "symlink races", "expected_control": "the file is opened in the worker with O_NOFOLLOW under a rule for that path only; a link is refused", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_fs_modes_refuse_symlinks_and_never_follow_them", "outcome": "passed", "seconds": 0.075, "test_id": "E7-W-004", "threat": "symlink race on a governed file read/write (swap the file for a link between check and open)" }, { "attack_class": "path traversal", "expected_control": "Landlock is path-resolution based", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_dotdot_traversal_from_inside_scope", "outcome": "passed", "seconds": 0.126, "test_id": "E7-W-005", "threat": "path traversal with '..' from an allowed directory" }, { "attack_class": "symlink races", "expected_control": "refused before launch", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_scope_root_symlink_refused", "outcome": "passed", "seconds": 0.006, "test_id": "E7-W-006", "threat": "scope root that is itself a symlink" }, { "attack_class": "unauthorized network access", "expected_control": "empty network namespace + seccomp socket() denial", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_no_tcp_udp_raw_netlink_or_unix_sockets", "outcome": "passed", "seconds": 0.089, "test_id": "E7-W-010", "threat": "TCP egress" }, { "attack_class": "worker escape attempts", "expected_control": "seccomp refuses socket(AF_UNIX)", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_unix_socket_outside_scope_is_unreachable", "outcome": "passed", "seconds": 0.309, "test_id": "E7-W-011", "threat": "connect to a local Unix socket outside the scope (docker.sock-style escape; Landlock does not mediate AF_UNIX connect)" }, { "attack_class": "unauthorized network access", "expected_control": "new network namespace: the host loopback is not there", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_host_loopback_listener_unreachable_even_with_network_allowed_ports", "outcome": "passed", "seconds": 0.577, "test_id": "E7-W-012", "threat": "reach a listener on the host loopback" }, { "attack_class": "DNS-based egress", "expected_control": "no resolver reachable: no sockets, no /etc/resolv.conf", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_dns_resolution_and_dns_exfiltration_fail", "outcome": "passed", "seconds": 0.081, "test_id": "E7-W-013", "threat": "DNS-based egress" }, { "attack_class": "unauthorized network access", "expected_control": "Landlock TCP connect/bind rules (ABI >= 4)", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_network_scope_allows_only_listed_tcp_ports", "outcome": "passed", "seconds": 0.57, "test_id": "E7-W-014", "threat": "network allowed for one TCP port: reach another port, or bind a listener" }, { "attack_class": "worker escape attempts", "expected_control": "no_new_privs, empty capability sets, seccomp", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_no_capabilities_and_no_way_back", "outcome": "passed", "seconds": 0.075, "test_id": "E7-W-020", "threat": "regain privileges (setuid binary, capabilities, user namespace)" }, { "attack_class": "worker escape attempts", "expected_control": "PID namespace: host pids do not exist inside it", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_host_processes_are_invisible_and_unsignalable", "outcome": "passed", "seconds": 0.072, "test_id": "E7-W-021", "threat": "signal, inspect or kill host processes (including the gateway)" }, { "attack_class": "worker escape attempts", "expected_control": "socket() family allowlist and syscall denylist are what the launcher installs", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_seccomp_program_shape", "outcome": "passed", "seconds": 0.001, "test_id": "E7-W-022", "threat": "seccomp filter content" }, { "attack_class": "publication of secrets", "expected_control": "the worker starts from a fixed four-variable base; the gateway environment is not inherited", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_environment_is_not_inherited", "outcome": "passed", "seconds": 0.142, "test_id": "E7-W-030", "threat": "secrets in the worker environment" }, { "attack_class": "inherited descriptor leakage", "expected_control": "close_fds + the launcher closes its status pipe: only 0,1,2 are open in the payload", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_no_inherited_descriptors", "outcome": "passed", "seconds": 0.072, "test_id": "E7-W-031", "threat": "inherited file descriptors (open secret file, ledger, sockets)" }, { "attack_class": "publication of secrets", "expected_control": "request travels on a pipe, never argv; nothing is written to disk; core dumps are disabled", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_request_not_in_argv_and_no_core_dump", "outcome": "passed", "seconds": 1.648, "test_id": "E7-W-032", "threat": "secrets in worker arguments, temp files or crash output" }, { "attack_class": "resource exhaustion", "expected_control": "RLIMIT_AS", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_memory_limit", "outcome": "passed", "seconds": 0.07, "test_id": "E7-W-040", "threat": "memory exhaustion" }, { "attack_class": "timeout bypass", "expected_control": "supervisor (pid 1 of the namespace) kills everything at the wall-clock limit; gateway backstop after that", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_wall_clock_limit[while True: pass]", "outcome": "passed", "seconds": 1.071, "test_id": "E7-W-041", "threat": "CPU spin / sleep past the limit (timeout bypass)" }, { "attack_class": "timeout bypass", "expected_control": "supervisor (pid 1 of the namespace) kills everything at the wall-clock limit; gateway backstop after that", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_wall_clock_limit[import time\\ntime.sleep(60)]", "outcome": "passed", "seconds": 1.069, "test_id": "E7-W-041", "threat": "CPU spin / sleep past the limit (timeout bypass)" }, { "attack_class": "timeout bypass", "expected_control": "supervisor (pid 1 of the namespace) kills everything at the wall-clock limit; gateway backstop after that", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_wall_clock_limit[import signal, time\\nfor s in (signal.SIGTERM, signal.SIGINT, signal.SIGALRM, signal.SIGHUP, signal.SIGXCPU):\\n signal.signal(s, signal.SIG_IGN)\\ntime.sleep(60)]", "outcome": "passed", "seconds": 1.067, "test_id": "E7-W-041", "threat": "CPU spin / sleep past the limit (timeout bypass)" }, { "attack_class": "process-tree survival", "expected_control": "killing pid 1 of the PID namespace kills every process in it", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_no_process_survives_the_call[True]", "outcome": "passed", "seconds": 0.404, "test_id": "E7-W-042", "threat": "process-tree survival: daemonise, setsid, double fork, ignore signals, outlive the call" }, { "attack_class": "process-tree survival", "expected_control": "killing pid 1 of the PID namespace kills every process in it", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_no_process_survives_the_call[False]", "outcome": "passed", "seconds": 2.092, "test_id": "E7-W-042", "threat": "process-tree survival: daemonise, setsid, double fork, ignore signals, outlive the call" }, { "attack_class": "output flooding", "expected_control": "gateway reads at most max_output_bytes and kills the tree", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_output_flood_is_cut_off", "outcome": "passed", "seconds": 0.148, "test_id": "E7-W-043", "threat": "output flooding" }, { "attack_class": "resource exhaustion", "expected_control": "RLIMIT_NOFILE, RLIMIT_FSIZE", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_fd_and_file_size_limits", "outcome": "passed", "seconds": 0.08, "test_id": "E7-W-044", "threat": "file-descriptor and file-size exhaustion" }, { "attack_class": "resource exhaustion", "expected_control": "RLIMIT_NPROC binds only for a non-root worker uid; for uid 0 the bound is the wall-clock kill of the namespace", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_process_count_limit_with_unprivileged_worker_uid", "outcome": "passed", "seconds": 0.104, "test_id": "E7-W-045", "threat": "process-count exhaustion" }, { "attack_class": "replay races", "expected_control": "one disposable sandbox per request", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_concurrent_executions_are_independent", "outcome": "passed", "seconds": 0.595, "test_id": "E7-W-046", "threat": "concurrent requests interfere with each other" }, { "attack_class": "process-tree survival", "expected_control": "PR_SET_PDEATHSIG on launcher and supervisor: the namespace is torn down", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_worker_dies_with_its_parent", "outcome": "passed", "seconds": 0.042, "test_id": "E7-W-047", "threat": "gateway dies while a worker runs (parent crash)" }, { "attack_class": "scope widening", "expected_control": "refused before launch", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_config_refusals", "outcome": "passed", "seconds": 0.006, "test_id": "E7-W-050", "threat": "scope so broad that denial cannot be demonstrated" }, { "attack_class": "worker escape attempts", "expected_control": "profile refused (no silent downgrade)", "id": "tests.sovereign.evolution_07.test_e7_worker_isolation::test_old_landlock_abi_is_a_missing_control", "outcome": "passed", "seconds": 0.069, "test_id": "E7-W-051", "threat": "Landlock ABI too old for the TCP rules" }, { "attack_class": "positive", "expected_control": "an intact, consistent, unsigned bundle verifies, and says what it did not verify", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_clean_bundle_passes_and_reports_dimensions_separately", "outcome": "passed", "seconds": 0.081, "test_id": "E7-V-001", "threat": "baseline" }, { "attack_class": "corrupted evidence", "expected_control": "SHA-256 and size per artifact (exit 12)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_altered_artifact[FINAL_REPORT.md]", "outcome": "passed", "seconds": 0.076, "test_id": "E7-V-002", "threat": "corrupted evidence: an artifact altered after sealing" }, { "attack_class": "corrupted evidence", "expected_control": "SHA-256 and size per artifact (exit 12)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_altered_artifact[test_results.json]", "outcome": "passed", "seconds": 0.073, "test_id": "E7-V-002", "threat": "corrupted evidence: an artifact altered after sealing" }, { "attack_class": "corrupted evidence", "expected_control": "SHA-256 and size per artifact (exit 12)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_altered_artifact[release_gate.json]", "outcome": "passed", "seconds": 0.073, "test_id": "E7-V-002", "threat": "corrupted evidence: an artifact altered after sealing" }, { "attack_class": "corrupted evidence", "expected_control": "SHA-256 and size per artifact (exit 12)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_altered_artifact[verify_evolution_07.py]", "outcome": "passed", "seconds": 0.072, "test_id": "E7-V-002", "threat": "corrupted evidence: an artifact altered after sealing" }, { "attack_class": "corrupted evidence", "expected_control": "required-file list, listed-file check, unlisted-file check (exit 11 / 13)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_missing_extra_and_substituted_files", "outcome": "passed", "seconds": 0.283, "test_id": "E7-V-003", "threat": "corrupted evidence: artifact removed, added or substituted" }, { "attack_class": "corrupted evidence", "expected_control": "strict manifest schema (exit 10)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_malformed_manifest[0]", "outcome": "passed", "seconds": 0.288, "test_id": "E7-V-004", "threat": "malformed or unsupported manifest" }, { "attack_class": "corrupted evidence", "expected_control": "strict manifest schema (exit 10)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_malformed_manifest[1]", "outcome": "passed", "seconds": 0.286, "test_id": "E7-V-004", "threat": "malformed or unsupported manifest" }, { "attack_class": "corrupted evidence", "expected_control": "strict manifest schema (exit 10)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_malformed_manifest[2]", "outcome": "passed", "seconds": 0.275, "test_id": "E7-V-004", "threat": "malformed or unsupported manifest" }, { "attack_class": "corrupted evidence", "expected_control": "strict manifest schema (exit 10)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_malformed_manifest[3]", "outcome": "passed", "seconds": 0.278, "test_id": "E7-V-004", "threat": "malformed or unsupported manifest" }, { "attack_class": "corrupted evidence", "expected_control": "strict manifest schema (exit 10)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_malformed_manifest[4]", "outcome": "passed", "seconds": 0.27, "test_id": "E7-V-004", "threat": "malformed or unsupported manifest" }, { "attack_class": "corrupted evidence", "expected_control": "strict manifest schema (exit 10)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_malformed_manifest[5]", "outcome": "passed", "seconds": 0.279, "test_id": "E7-V-004", "threat": "malformed or unsupported manifest" }, { "attack_class": "corrupted evidence", "expected_control": "strict manifest schema (exit 10)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_malformed_manifest[6]", "outcome": "passed", "seconds": 0.271, "test_id": "E7-V-004", "threat": "malformed or unsupported manifest" }, { "attack_class": "corrupted evidence", "expected_control": "strict manifest schema (exit 10)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_malformed_manifest[7]", "outcome": "passed", "seconds": 0.267, "test_id": "E7-V-004", "threat": "malformed or unsupported manifest" }, { "attack_class": "forged signatures", "expected_control": "signature checked only against a key the auditor supplies; unsigned is NOT_RUN, never PASS (exit 14)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_signature_handling", "outcome": "passed", "seconds": 0.497, "test_id": "E7-V-005", "threat": "forged or unverifiable manifest signature" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[test_results.json-0]", "outcome": "passed", "seconds": 0.074, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[test_results.json-1]", "outcome": "passed", "seconds": 0.078, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[test_results.json-2]", "outcome": "passed", "seconds": 0.078, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[test_results.json-3]", "outcome": "passed", "seconds": 0.079, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[test_results.json-4]", "outcome": "passed", "seconds": 0.085, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[test_results.json-5]", "outcome": "passed", "seconds": 0.08, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[formal_results.json-0]", "outcome": "passed", "seconds": 0.076, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[formal_results.json-1]", "outcome": "passed", "seconds": 0.074, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[formal_results.json-2]", "outcome": "passed", "seconds": 0.069, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[mutation_results.json-0]", "outcome": "passed", "seconds": 0.068, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "corrupted evidence", "expected_control": "summaries are recomputed from detail records (exit 15)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_inconsistent_or_missing_results[mutation_results.json-1]", "outcome": "passed", "seconds": 0.068, "test_id": "E7-V-006", "threat": "inflated counts: summary says more passed than the detail shows; required tests absent" }, { "attack_class": "stale manifests", "expected_control": "age limit and source-tree digest match (exit 16)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_stale_evidence", "outcome": "passed", "seconds": 0.431, "test_id": "E7-V-007", "threat": "stale manifest: old evidence presented as current, or results from a different source tree" }, { "attack_class": "stale manifests", "expected_control": "--source compares recorded source hashes with a checkout (exit 16)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_source_inspection", "outcome": "passed", "seconds": 0.143, "test_id": "E7-V-008", "threat": "bundle does not correspond to the code it is presented with" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-0]", "outcome": "passed", "seconds": 0.079, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-1]", "outcome": "passed", "seconds": 0.079, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-2]", "outcome": "passed", "seconds": 0.077, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-3]", "outcome": "passed", "seconds": 0.078, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-4]", "outcome": "passed", "seconds": 0.076, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-5]", "outcome": "passed", "seconds": 0.077, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-6]", "outcome": "passed", "seconds": 0.082, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-7]", "outcome": "passed", "seconds": 0.087, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-8]", "outcome": "passed", "seconds": 0.085, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-9]", "outcome": "passed", "seconds": 0.095, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[release_gate.json-10]", "outcome": "passed", "seconds": 0.086, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[claim_evidence_matrix.json-0]", "outcome": "passed", "seconds": 0.078, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "the verifier recomputes every verdict from its inputs (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_contradictory_statuses[claim_evidence_matrix.json-1]", "outcome": "passed", "seconds": 0.079, "test_id": "E7-V-009", "threat": "contradictory statuses: a gate upgraded without evidence; local results presented as production; skipped checks marked PASS" }, { "attack_class": "corrupted evidence", "expected_control": "gate status is checked against recorded results (exit 17)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_pass_gate_with_failing_results", "outcome": "passed", "seconds": 0.076, "test_id": "E7-V-010", "threat": "failed tests hidden behind a PASS gate" }, { "attack_class": "publication of secrets", "expected_control": "secret patterns and private file types (exit 18)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_secret_or_private_material[private-key-block]", "outcome": "passed", "seconds": 0.078, "test_id": "E7-V-011", "threat": "publication of secrets or private material in the downloadable kit" }, { "attack_class": "publication of secrets", "expected_control": "secret patterns and private file types (exit 18)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_secret_or_private_material[aws-key-id]", "outcome": "passed", "seconds": 0.081, "test_id": "E7-V-011", "threat": "publication of secrets or private material in the downloadable kit" }, { "attack_class": "publication of secrets", "expected_control": "secret patterns and private file types (exit 18)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_secret_or_private_material[stripe-live-key]", "outcome": "passed", "seconds": 0.084, "test_id": "E7-V-011", "threat": "publication of secrets or private material in the downloadable kit" }, { "attack_class": "publication of secrets", "expected_control": "secret patterns and private file types (exit 18)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_secret_or_private_material[json-password]", "outcome": "passed", "seconds": 0.071, "test_id": "E7-V-011", "threat": "publication of secrets or private material in the downloadable kit" }, { "attack_class": "publication of secrets", "expected_control": "secret patterns and private file types (exit 18)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_secret_or_private_material[py-source]", "outcome": "passed", "seconds": 0.085, "test_id": "E7-V-011", "threat": "publication of secrets or private material in the downloadable kit" }, { "attack_class": "publication of secrets", "expected_control": "secret patterns and private file types (exit 18)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_secret_or_private_material[sqlite-db]", "outcome": "passed", "seconds": 0.085, "test_id": "E7-V-011", "threat": "publication of secrets or private material in the downloadable kit" }, { "attack_class": "publication of secrets", "expected_control": "secret patterns and private file types (exit 18)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_secret_or_private_material[pem-file]", "outcome": "passed", "seconds": 0.076, "test_id": "E7-V-011", "threat": "publication of secrets or private material in the downloadable kit" }, { "attack_class": "stale manifests", "expected_control": "withdrawn-version list (exit 19)", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_withdrawn_version", "outcome": "passed", "seconds": 0.075, "test_id": "E7-V-012", "threat": "withdrawn kit version served as current" }, { "attack_class": "corrupted evidence", "expected_control": "the pipeline's own gate function: production is BLOCKED while any mandatory gate is not PASS; local is PASS only if every local gate is", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_pipeline_gate_function_is_fail_closed", "outcome": "passed", "seconds": 0.001, "test_id": "E7-V-013", "threat": "release-gate logic that lets presentation outrank results" }, { "attack_class": "publication of secrets", "expected_control": "the pipeline writes only under reports/ and ihvrk/evidence/evolution_07, never signs, never publishes", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_pipeline_never_touches_served_directories_and_never_signs", "outcome": "passed", "seconds": 0.003, "test_id": "E7-V-014", "threat": "tests or the pipeline writing into a served (live) directory or signing with a made-up key" }, { "attack_class": "corrupted evidence", "expected_control": "sorted members, zeroed metadata, fixed gzip header", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_bundle_tarball_is_deterministic", "outcome": "passed", "seconds": 1.115, "test_id": "E7-V-015", "threat": "non-deterministic bundle (cannot be reproduced bit for bit)" }, { "attack_class": "canonicalization mismatch", "expected_control": "the published JSON Schema lists exactly the wire fields of the v3 envelope", "id": "tests.sovereign.evolution_07.test_e7_evidence::test_published_schema_matches_the_protocol", "outcome": "passed", "seconds": 0.003, "test_id": "E7-V-016", "threat": "envelope schema file out of step with the protocol" } ], "errors": 0, "exit_code": 0, "failed": 0, "missing_paths": [], "name": "evolution_07", "passed": 441, "paths": [ "tests/sovereign/evolution_07/test_e7_protocol.py", "tests/sovereign/evolution_07/test_e7_enforcement.py", "tests/sovereign/evolution_07/test_e7_formal_link.py", "tests/sovereign/evolution_07/test_e7_ledger.py", "tests/sovereign/evolution_07/test_e7_worker_isolation.py", "tests/sovereign/evolution_07/test_e7_evidence.py" ], "seconds": 40.02, "skipped": 0, "tests": 441 }, { "cases": [ { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_01_missing_authorization", "outcome": "passed", "seconds": 0.01 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_02_invalid_signature", "outcome": "passed", "seconds": 0.005 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_03_unknown_signing_key", "outcome": "passed", "seconds": 0.005 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_04_revoked_signing_key", "outcome": "passed", "seconds": 0.005 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_05_algorithm_substitution", "outcome": "passed", "seconds": 0.004 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_06_malformed_envelope", "outcome": "passed", "seconds": 0.004 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_07_expired_authorization", "outcome": "passed", "seconds": 0.004 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_08_future_issued_authorization", "outcome": "passed", "seconds": 0.009 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_09_principal_substitution", "outcome": "passed", "seconds": 0.005 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_10_tenant_substitution", "outcome": "passed", "seconds": 0.005 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_11_action_substitution", "outcome": "passed", "seconds": 0.005 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_12_target_substitution", "outcome": "passed", "seconds": 0.005 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_13_resource_scope_escalation", "outcome": "passed", "seconds": 0.006 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_14_policy_version_mismatch", "outcome": "passed", "seconds": 0.005 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_15_replayed_nonce", "outcome": "passed", "seconds": 0.007 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_16_concurrent_reuse", "outcome": "passed", "seconds": 0.014 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_17_replay_after_service_restart", "outcome": "passed", "seconds": 0.009 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_18_replay_after_storage_recovery", "outcome": "passed", "seconds": 0.006 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_19_verifier_timeout", "outcome": "passed", "seconds": 1.069 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_20_verifier_crash_containment", "outcome": "passed", "seconds": 0.075 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_21_replay_ledger_unavailable", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_22_missing_human_approval", "outcome": "passed", "seconds": 0.006 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_23_approval_bound_to_different_action", "outcome": "passed", "seconds": 0.006 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_24_alternate_tool_endpoint_bypass", "outcome": "passed", "seconds": 0.004 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_25_filesystem_escape_attempt", "outcome": "passed", "seconds": 0.006 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_26_unauthorized_network_access", "outcome": "passed", "seconds": 0.005 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_27_process_creation_limits", "outcome": "passed", "seconds": 0.078 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_28_secret_redaction_and_descriptors", "outcome": "passed", "seconds": 0.099 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_29_partial_execution_failure", "outcome": "passed", "seconds": 0.138 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_30_contradictory_release_gate", "outcome": "passed", "seconds": 0.003 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_31_tampered_ihvrk_artifact", "outcome": "passed", "seconds": 0.003 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_32_withdrawn_bundle_as_current", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_33_false_production_pass", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_34_partial_cross_site_update", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_35_crash_recovery_during_consumption", "outcome": "passed", "seconds": 0.007 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_36_unsupported_platform_reporting_discipline", "outcome": "passed", "seconds": 0.007 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_37_emergency_stop_interlock", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_05.test_cain_talos_governance::test_scenario_38_parameter_clamping_and_sensor_freshness", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_01_missing_authorization_envelope_fails_closed", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_02_invalid_signature_tampered_envelope_rejected", "outcome": "passed", "seconds": 0.003 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_03_unknown_signing_key_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_04_revoked_key_fails_closed", "outcome": "passed", "seconds": 0.004 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_05_protocol_downgrade_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_06_algorithm_substitution_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_07_duplicate_json_keys_rejected_by_canonicalizer", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_08_non_canonical_serialization_detected", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_09_parameters_digest_mismatch_rejected", "outcome": "passed", "seconds": 0.032 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_10_action_substitution_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_11_target_substitution_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_12_principal_substitution_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_13_tenant_substitution_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_14_resource_scope_escalation_clamped", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_15_policy_update_invalidates_stale_envelope", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_16_expired_authorization_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_17_clock_skew_beyond_policy_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_18_replay_after_restart_prevented", "outcome": "passed", "seconds": 0.01 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_19_concurrent_replay_race_condition", "outcome": "passed", "seconds": 0.009 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_20_revocation_during_concurrent_execution", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_21_ledger_unavailability_fails_closed", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_22_ledger_corruption_fails_closed", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_23_crash_during_nonce_consumption_preserves_consumed_state", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_24_crash_after_authorization_before_execution_fails_closed", "outcome": "passed", "seconds": 0.003 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_25_audit_events_distinguish_attempt_and_completion", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_26_worker_launch_failure_fails_closed", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_27_worker_timeout_containment", "outcome": "passed", "seconds": 1.075 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_28_worker_memory_limit_containment", "outcome": "passed", "seconds": 0.084 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_29_unauthorized_filesystem_read_blocked", "outcome": "passed", "seconds": 0.003 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_30_unauthorized_filesystem_write_blocked", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_31_symbolic_link_escape_blocked", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_32_path_traversal_blocked", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_33_unauthorized_network_connection_denied_under_landlock", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_34_prohibited_process_creation_contained", "outcome": "passed", "seconds": 0.067 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_35_inherited_secret_sanitization", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_36_unauthorized_tool_endpoint_blocked", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_37_ungoverned_python_tool_execution_blocked", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_38_governed_python_tool_execution_succeeds", "outcome": "passed", "seconds": 0.065 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_39_gateway_to_worker_identity_mismatch_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_40_stale_cached_approval_rejected_after_nonce_consumption", "outcome": "passed", "seconds": 0.003 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_41_prompt_injection_in_parameters_cannot_escalate_scope", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_42_tool_output_cannot_modify_policy", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_43_missing_human_approval_on_critical_action_fails_closed", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_44_human_approval_bound_to_different_operation_rejected", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_45_estop_activation_blocks_execution", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_46_estop_reset_requires_valid_operator_authorization", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_47_conflicting_policies_fail_closed_to_deny", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_48_solver_timeout_fails_closed", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_49_malformed_evidence_manifest_rejected", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_50_altered_evidence_artifact_hash_detected", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_51_evidence_manifest_rollback_detected", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_52_withdrawn_auditor_bundle_not_served_as_current", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_53_local_test_pass_cannot_claim_production_pass", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_54_cross_site_evidence_hash_consistency", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_55_partial_publication_detected", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_56_hosted_ci_blocked_when_remote_absent", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_57_deployment_revision_mismatch_detected", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_58_release_gate_downgrade_rejected", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_59_missing_landlock_aborts_child_fail_closed", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.sovereign.evolution_06.test_evolution_6_adversarial::test_60_alternate_execution_path_bypassing_talos_eliminated", "outcome": "passed", "seconds": 0.001 }, { "id": "verification.sovereign.test_e6_talos_mutations::test_mutation_1_permissive_default_detected", "outcome": "passed", "seconds": 0.001 }, { "id": "verification.sovereign.test_e6_talos_mutations::test_mutation_2_skipped_signature_check_detected", "outcome": "passed", "seconds": 0.002 }, { "id": "verification.sovereign.test_e6_talos_mutations::test_mutation_3_missing_replay_check_detected", "outcome": "passed", "seconds": 0.003 }, { "id": "verification.sovereign.test_e6_talos_mutations::test_mutation_4_stale_policy_acceptance_detected", "outcome": "passed", "seconds": 0.002 }, { "id": "verification.sovereign.test_e6_talos_mutations::test_mutation_5_scope_widening_detected", "outcome": "passed", "seconds": 0.002 }, { "id": "verification.sovereign.test_e6_talos_mutations::test_mutation_6_exception_to_allow_detected", "outcome": "passed", "seconds": 0.002 }, { "id": "verification.sovereign.test_e6_talos_mutations::test_mutation_7_launch_before_verify_detected", "outcome": "passed", "seconds": 0.001 }, { "id": "verification.sovereign.test_e6_talos_mutations::test_mutation_8_ledger_failure_defaults_to_approval_detected", "outcome": "passed", "seconds": 0.002 } ], "errors": 0, "exit_code": 0, "failed": 0, "missing_paths": [], "name": "regression_evolution_05_06", "passed": 106, "paths": [ "tests/sovereign/evolution_05/test_cain_talos_governance.py", "tests/sovereign/evolution_06/test_evolution_6_adversarial.py", "verification/sovereign/test_e6_talos_mutations.py" ], "seconds": 5.24, "skipped": 0, "tests": 106 }, { "cases": [ { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_01_missing_evidence_file_detection", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_02_modified_evidence_bytes_detection", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_03_manifest_tampering_deleted_truncated_substituted", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_04_invalid_signature_and_unknown_key_rejection", "outcome": "passed", "seconds": 0.006 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_05_schema_version_mismatch_and_malformed_record", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_06_contradictory_status_detection", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_07_stale_or_withdrawn_kit_links_detection", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_08_package_secret_scanner_canary_secrets", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_09_fail_closed_local_pass_does_not_yield_prod_pass", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_10_ci_configuration_present_without_hosted_ci_run_yields_blocked", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_11_homepage_verification_center_link_discoverability", "outcome": "passed", "seconds": 0.011 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_12_public_artifact_hash_mismatch_detection", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_13_ledger_isolation_cannot_contaminate_live_customer_data", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_14_stale_evidence_snapshot_detection", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_15_provenance_completeness_validation", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_16_atomic_staging_vs_live_publication_isolation", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_17_partial_deployment_rejection", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_18_required_test_failure_yields_blocked_verdict", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_19_withdrawn_830_archive_not_returned_on_live_paths", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_4_evidence_pipeline::test_scenario_20_standalone_fresh_directory_verification_ihvrk_bundle", "outcome": "passed", "seconds": 0.104 }, { "id": "tests.test_evolution_3_mediated_launcher::test_landlock_allows_write_to_authorized_directory", "outcome": "passed", "seconds": 0.056 }, { "id": "tests.test_evolution_3_mediated_launcher::test_kernel_blocks_write_outside_landlock_boundary", "outcome": "passed", "seconds": 0.145 }, { "id": "tests.test_evolution_3_mediated_launcher::test_operator_allowlist_cannot_be_overridden_by_token", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_3_mediated_launcher::test_quarantined_workload_refused_before_execution", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_3_mediated_launcher::test_single_use_replay_refused", "outcome": "passed", "seconds": 0.044 }, { "id": "tests.test_evolution_3_mediated_launcher::test_argument_mutation_digest_mismatch_fails_closed", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_3_mediated_launcher::test_unprivileged_child_cannot_escape_read_only_boundary", "outcome": "passed", "seconds": 0.142 }, { "id": "tests.test_evolution_3_mediated_launcher::test_execution_timeout_fails_closed", "outcome": "passed", "seconds": 0.515 }, { "id": "tests.test_evolution_3_mediated_launcher::test_ledger_records_mediated_receipt_with_hash_chain", "outcome": "passed", "seconds": 0.04 }, { "id": "tests.test_sovereign_e3_landlock::test_filesystem_rules_are_enforced_by_the_kernel_in_the_child", "outcome": "passed", "seconds": 0.189 }, { "id": "tests.test_sovereign_e3_landlock::test_tcp_connect_limited_to_listed_ports", "outcome": "passed", "seconds": 0.202 }, { "id": "tests.test_sovereign_e3_landlock::test_unsupported_kernel_refuses_before_spawning", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_sovereign_e3_landlock::test_net_rules_on_an_old_abi_are_refused_not_ignored", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_sovereign_e3_landlock::test_older_abi_reports_rights_it_cannot_enforce", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_sovereign_e3_landlock::test_malformed_profiles_are_refused[bad0]", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_sovereign_e3_landlock::test_malformed_profiles_are_refused[bad1]", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_sovereign_e3_landlock::test_child_that_cannot_apply_its_rules_never_runs_the_workload", "outcome": "passed", "seconds": 0.011 }, { "id": "tests.test_sovereign_e3_landlock::test_stdio_proxy_tool_server_is_confined_by_landlock", "outcome": "passed", "seconds": 0.143 }, { "id": "tests.test_sovereign_e3_landlock::test_stdio_proxy_refuses_to_start_when_landlock_is_unenforceable", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.test_sovereign_e3_landlock::test_stdio_proxy_refuses_a_malformed_profile", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_deeply_nested_body_is_refused_and_proxy_survives", "outcome": "passed", "seconds": 0.036 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_deeply_nested_arguments_of_an_unauthorized_tool_never_execute", "outcome": "passed", "seconds": 0.008 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_large_payload_to_an_unauthorized_tool_never_executes", "outcome": "passed", "seconds": 4.827 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_malformed_bodies_never_execute[\\xff\\xfe\\x00garbage]", "outcome": "passed", "seconds": 0.005 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_malformed_bodies_never_execute[]", "outcome": "passed", "seconds": 0.004 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_malformed_bodies_never_execute[{]", "outcome": "passed", "seconds": 0.004 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_malformed_bodies_never_execute[{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/call\",\"params\":\"x\"}]", "outcome": "passed", "seconds": 0.006 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_malformed_bodies_never_execute[[{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/call\",\"params\":{\"name\":\"read_report\",\"arguments\":{}}}]]", "outcome": "passed", "seconds": 0.004 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_burst_of_unauthorized_requests_never_executes", "outcome": "passed", "seconds": 0.235 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_evaluation_crash_is_a_denial_not_a_forward", "outcome": "passed", "seconds": 0.004 }, { "id": "tests.test_sovereign_e3_resource_exhaustion::test_stdio_proxy_survives_garbage_lines_and_never_forwards_them", "outcome": "passed", "seconds": 0.031 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_1_modified_action_rejected", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_2_replay_rejected", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_2_expired_permit_rejected", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_2_revoked_permit_rejected", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_3_forged_signature_rejected", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_3_key_rotation_and_revocation", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_3_algorithm_downgrade_resistance", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_4_ledger_tampering_detected", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_5_policy_conflict_rejected", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_5_natural_language_draft_untrusted", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_6_context_compression_preserves_deny", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_7_solver_unknown_fails_closed", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_8_concurrent_permit_consumption_exactly_once", "outcome": "passed", "seconds": 0.007 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_9_heap_firewall_burst_and_quarantine", "outcome": "passed", "seconds": 0.002 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_10_failover_view_change_invalidates_stale_authorizations", "outcome": "passed", "seconds": 0.001 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_11_desktop_target_toctou_detected", "outcome": "passed", "seconds": 0.0 }, { "id": "tests.test_evolution_2_adversarial::test_adversarial_12_no_valid_permit_no_execution", "outcome": "passed", "seconds": 0.001 } ], "errors": 0, "exit_code": 0, "failed": 0, "missing_paths": [], "name": "regression_evolution_02_04", "passed": 68, "paths": [ "tests/test_evolution_4_evidence_pipeline.py", "tests/test_evolution_3_mediated_launcher.py", "tests/test_sovereign_e3_landlock.py", "tests/test_sovereign_e3_resource_exhaustion.py", "tests/test_evolution_2_adversarial.py" ], "seconds": 9.43, "skipped": 0, "tests": 68 }, { "cases": [ { "id": "ihvrk.tests.adversarial.test_attacks::test_A1_agent_signs_its_own_approval", "outcome": "passed", "seconds": 0.012 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A2_unenrolled_key_claims_enrolled_identity", "outcome": "passed", "seconds": 0.008 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A3_valid_key_wrong_identity_claim", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A4_tampered_signature_and_body", "outcome": "passed", "seconds": 0.011 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A5_agent_cannot_enroll_itself", "outcome": "passed", "seconds": 0.005 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A6_enrollment_signed_by_untrusted_authority", "outcome": "passed", "seconds": 0.005 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A7_key_substitution_for_existing_kid", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A8_revoked_verifier", "outcome": "passed", "seconds": 0.014 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A9_stale_status_list_blocks", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A10_low_assurance_authentication", "outcome": "passed", "seconds": 0.014 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A11_break_glass_operator_cannot_act_as_ordinary_verifier", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_B1_forged_biometric_metadata_does_not_help", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_B2_replayed_authentication_event_from_another_request", "outcome": "passed", "seconds": 0.027 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_B3_extra_unsigned_field_is_rejected", "outcome": "passed", "seconds": 0.007 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_B4_transport_marks_agent_relayed_approval", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_C1_instructions_in_action_are_data", "outcome": "passed", "seconds": 0.008 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_C2_approval_for_benign_text_cannot_run_injected_action", "outcome": "passed", "seconds": 0.021 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_C3_parameter_swap_after_approval[to-ACC-002]", "outcome": "passed", "seconds": 0.027 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_C3_parameter_swap_after_approval[amount_minor-125001]", "outcome": "passed", "seconds": 0.023 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_C3_parameter_swap_after_approval[currency-EUR]", "outcome": "passed", "seconds": 0.023 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_C4_approval_names_a_different_digest", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D1_permit_reuse", "outcome": "passed", "seconds": 0.023 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D2_permit_moved_to_other_principal_resource_tenant", "outcome": "passed", "seconds": 0.023 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D3_concurrent_permit_consumption", "outcome": "passed", "seconds": 0.135 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D4_concurrent_duplicate_approvals", "outcome": "passed", "seconds": 0.065 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D4b_late_rejected_deliveries_do_not_revoke_an_issued_permit", "outcome": "passed", "seconds": 0.027 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D5_cancel_races_authorization", "outcome": "passed", "seconds": 0.099 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D6_old_challenge_after_completion", "outcome": "passed", "seconds": 0.024 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D7_wrong_nonce_does_not_burn_request_but_repeated_garbage_denies", "outcome": "passed", "seconds": 0.016 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D8_valid_signer_wrong_nonce", "outcome": "passed", "seconds": 0.022 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D9_cross_request_challenge_id", "outcome": "passed", "seconds": 0.011 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D10_approval_epoch_mismatch", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_E1_agents_cannot_approve_each_other", "outcome": "passed", "seconds": 0.01 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_E2_agent_cannot_mint_capability_or_permit", "outcome": "passed", "seconds": 0.012 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_E3_capability_for_another_agent_scope_audience", "outcome": "passed", "seconds": 0.017 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_E4_break_glass_needs_two_distinct_operators", "outcome": "passed", "seconds": 0.013 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_E5_break_glass_happy_path_is_bound_and_logged", "outcome": "passed", "seconds": 0.017 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_E6_break_glass_cannot_override_human_deny_or_notifier_failure", "outcome": "passed", "seconds": 0.014 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H1_unusable_solver_verdicts_block[verdict0]", "outcome": "passed", "seconds": 0.011 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H1_unusable_solver_verdicts_block[verdict1]", "outcome": "passed", "seconds": 0.011 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H1_unusable_solver_verdicts_block[verdict2]", "outcome": "passed", "seconds": 0.011 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H1_unusable_solver_verdicts_block[verdict3]", "outcome": "passed", "seconds": 0.011 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H2_solver_raises", "outcome": "passed", "seconds": 0.011 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H3_clock_failure_and_untrusted_time", "outcome": "passed", "seconds": 0.014 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H4_clock_uncertainty_straddling_expiry", "outcome": "passed", "seconds": 0.019 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H5_malformed_approvals[None]", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H5_malformed_approvals[junk1]", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H5_malformed_approvals[x]", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H5_malformed_approvals[5]", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H5_malformed_approvals[junk4]", "outcome": "passed", "seconds": 0.008 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H5_malformed_approvals[junk5]", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H6_wrongly_typed_signed_fields[over0]", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H6_wrongly_typed_signed_fields[over1]", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H6_wrongly_typed_signed_fields[over2]", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H6_wrongly_typed_signed_fields[over3]", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H6_wrongly_typed_signed_fields[over4]", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H6b_float_after_signing_is_rejected", "outcome": "passed", "seconds": 0.007 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H6c_far_future_approval_expiry_is_capped_by_the_request", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H7_malformed_proposals[bad0]", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H7_malformed_proposals[bad1]", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H7_malformed_proposals[bad2]", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H7_malformed_proposals[bad3]", "outcome": "passed", "seconds": 0.005 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H8_keystore_failure_blocks_permit", "outcome": "passed", "seconds": 0.019 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_H9_unknown_status_with_authorizing_model_blocks", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_D11_permit_for_one_enforcer_rejected_by_another", "outcome": "passed", "seconds": 0.02 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_E7_verifier_cannot_approve_a_request_made_under_its_own_identity", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.adversarial.test_attacks::test_A12_low_assurance_rejected_before_the_challenge_is_consumed", "outcome": "passed", "seconds": 0.022 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G1_modify_one_record", "outcome": "passed", "seconds": 0.083 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G2_modify_and_rehash_one_record_breaks_the_chain", "outcome": "passed", "seconds": 0.083 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G3_delete_record", "outcome": "passed", "seconds": 0.082 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G4_reorder_records", "outcome": "passed", "seconds": 0.083 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G5_duplicate_record", "outcome": "passed", "seconds": 0.084 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G6_replayed_approval_rewritten_consistently", "outcome": "passed", "seconds": 0.091 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G7_permit_without_evidence_rewritten_consistently", "outcome": "passed", "seconds": 0.091 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G8_full_rewrite_is_invisible_without_checkpoint_but_caught_with_one", "outcome": "passed", "seconds": 0.105 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G9_rollback_truncation", "outcome": "passed", "seconds": 0.092 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G10_forged_and_conflicting_checkpoints", "outcome": "passed", "seconds": 0.111 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G11_witness_refuses_conflict_and_rollback", "outcome": "passed", "seconds": 0.095 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G12_clock_regression_and_incomplete_execution", "outcome": "passed", "seconds": 0.093 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G13_torn_tail_detected_and_repaired_on_next_append", "outcome": "passed", "seconds": 0.1 }, { "id": "ihvrk.tests.adversarial.test_ledger_tamper::test_G14_export_is_deterministic", "outcome": "passed", "seconds": 0.101 }, { "id": "ihvrk.tests.formal.test_solver::test_control_case_is_reachable", "outcome": "passed", "seconds": 0.254 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I1]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I2]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I3]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I4]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I5]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I6]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I7]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I8]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I9]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I10]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I11]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I12]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I13]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I14]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_holds[I15]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I1]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I2]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I3]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I4]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I5]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I6]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I7]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I8]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I9]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I10]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I11]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I12]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I13]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I14]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_invariant_is_sensitive_to_its_guard[I15]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_all_fifteen_present", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_denied_request_is_sat_with_deny_not_unsat", "outcome": "passed", "seconds": 0.008 }, { "id": "ihvrk.tests.formal.test_solver::test_runtime_valid_case_authorizes", "outcome": "passed", "seconds": 0.007 }, { "id": "ihvrk.tests.formal.test_solver::test_solver_unknown_or_unexpected_result_blocks[UNKNOWN]", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.formal.test_solver::test_solver_unknown_or_unexpected_result_blocks[UNSAT]", "outcome": "passed", "seconds": 0.004 }, { "id": "ihvrk.tests.formal.test_solver::test_solver_exception_blocks", "outcome": "passed", "seconds": 0.003 }, { "id": "ihvrk.tests.formal.test_solver::test_inconsistent_model_blocks", "outcome": "passed", "seconds": 0.003 }, { "id": "ihvrk.tests.formal.test_solver::test_solver_policy_disagreement_blocks", "outcome": "passed", "seconds": 0.003 }, { "id": "ihvrk.tests.formal.test_solver::test_real_timeout_blocks", "outcome": "passed", "seconds": 0.008 }, { "id": "ihvrk.tests.formal.test_solver::test_oversize_input_blocks", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_malformed_input_denies", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.formal.test_solver::test_serialization_is_deterministic", "outcome": "passed", "seconds": 0.014 }, { "id": "ihvrk.tests.formal.test_solver::test_differential_z3_vs_python", "outcome": "passed", "seconds": 3.614 }, { "id": "ihvrk.tests.formal.test_solver::test_authorize_implies_every_requirement", "outcome": "passed", "seconds": 0.691 }, { "id": "ihvrk.tests.integration.test_flow::test_happy_path_executes_exactly_once", "outcome": "passed", "seconds": 0.033 }, { "id": "ihvrk.tests.integration.test_flow::test_challenge_carries_service_signature_and_binding", "outcome": "passed", "seconds": 0.007 }, { "id": "ihvrk.tests.integration.test_flow::test_epochs_strictly_increase", "outcome": "passed", "seconds": 0.016 }, { "id": "ihvrk.tests.integration.test_flow::test_human_deny_is_final", "outcome": "passed", "seconds": 0.011 }, { "id": "ihvrk.tests.integration.test_flow::test_cancel_before_approval_blocks", "outcome": "passed", "seconds": 0.009 }, { "id": "ihvrk.tests.integration.test_flow::test_revoke_after_permit_before_execution_blocks", "outcome": "passed", "seconds": 0.022 }, { "id": "ihvrk.tests.integration.test_flow::test_expiry_moves_pending_to_expired_and_blocks", "outcome": "passed", "seconds": 0.008 }, { "id": "ihvrk.tests.integration.test_flow::test_policy_version_bump_invalidates_pending_and_issued", "outcome": "passed", "seconds": 0.043 }, { "id": "ihvrk.tests.integration.test_flow::test_permit_expiry_blocks", "outcome": "passed", "seconds": 0.021 }, { "id": "ihvrk.tests.integration.test_flow::test_attestation_required_and_checked", "outcome": "passed", "seconds": 0.066 }, { "id": "ihvrk.tests.integration.test_flow::test_enforcement_not_holding_blocks", "outcome": "passed", "seconds": 0.033 }, { "id": "ihvrk.tests.recovery.test_recovery::test_I1_restart_mid_flow_never_proceeds", "outcome": "passed", "seconds": 0.029 }, { "id": "ihvrk.tests.recovery.test_recovery::test_I2_lost_response_retry_cannot_double_issue", "outcome": "passed", "seconds": 0.021 }, { "id": "ihvrk.tests.recovery.test_recovery::test_I3_ledger_unwritable_blocks_authorization", "outcome": "passed", "seconds": 0.008 }, { "id": "ihvrk.tests.recovery.test_recovery::test_I4_ledger_fails_after_permit_consumption", "outcome": "passed", "seconds": 0.02 }, { "id": "ihvrk.tests.recovery.test_recovery::test_I5_registry_unavailable_blocks", "outcome": "passed", "seconds": 0.02 }, { "id": "ihvrk.tests.recovery.test_recovery::test_I6_operation_raises_is_indeterminate_not_retried", "outcome": "passed", "seconds": 0.027 }, { "id": "ihvrk.tests.recovery.test_recovery::test_I7_pending_limit_bounds_resource_use", "outcome": "passed", "seconds": 0.011 }, { "id": "ihvrk.tests.recovery.test_recovery::test_I8_prune_keeps_epochs_monotone", "outcome": "passed", "seconds": 0.024 }, { "id": "ihvrk.tests.recovery.test_recovery::test_I9_cross_process_permit_race", "outcome": "passed", "seconds": 0.289 }, { "id": "ihvrk.tests.recovery.test_recovery::test_I10_kill_9_during_execution_then_reconcile", "outcome": "passed", "seconds": 0.112 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F1_pending_freezes_and_authorize_releases", "outcome": "passed", "seconds": 2.699 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F2_everything_but_authorize_stays_frozen[DENY-10]", "outcome": "passed", "seconds": 1.049 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F2_everything_but_authorize_stays_frozen[EXPIRED-10]", "outcome": "passed", "seconds": 1.047 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F2_everything_but_authorize_stays_frozen[REVOKED-10]", "outcome": "passed", "seconds": 1.05 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F2_everything_but_authorize_stays_frozen[garbage-12]", "outcome": "passed", "seconds": 1.053 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F2_everything_but_authorize_stays_frozen[-12]", "outcome": "passed", "seconds": 1.004 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F2_everything_but_authorize_stays_frozen[AUTHORIZE_PLEASE-12]", "outcome": "passed", "seconds": 1.052 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F3_timeout_keeps_frozen", "outcome": "passed", "seconds": 0.948 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F4_descendants_are_frozen_too", "outcome": "passed", "seconds": 1.087 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F5_kill_on_deny", "outcome": "passed", "seconds": 0.544 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F6_gatekeeper_killed_leaves_cgroup_frozen", "outcome": "passed", "seconds": 0.875 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F7_pid_not_in_cgroup_refused", "outcome": "passed", "seconds": 0.06 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F8_process_replaced_while_pending_stays_frozen", "outcome": "passed", "seconds": 0.538 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F9_path_and_injection_refused[../user.slice]", "outcome": "passed", "seconds": 0.006 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F9_path_and_injection_refused[/sys/fs/cgroup]", "outcome": "passed", "seconds": 0.005 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F9_path_and_injection_refused[a/../../x]", "outcome": "passed", "seconds": 0.005 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F9_path_and_injection_refused[x;rm -rf /]", "outcome": "passed", "seconds": 0.005 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F9_path_and_injection_refused[$(id)]", "outcome": "passed", "seconds": 0.006 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F9_path_and_injection_refused[]", "outcome": "passed", "seconds": 0.005 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F10_bad_root_and_relative_decision_cmd_refused", "outcome": "passed", "seconds": 0.05 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F11_every_transition_logged", "outcome": "passed", "seconds": 0.594 }, { "id": "ihvrk.tests.runtime.test_gatekeeper::test_F12_residual_escape_process_outside_cgroup_is_not_contained", "outcome": "passed", "seconds": 0.236 }, { "id": "ihvrk.tests.unit.test_canonical::test_rfc8785_key_order_and_escaping", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_canonical::test_key_order_does_not_change_digest", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_any_parameter_change_changes_digest[to-y]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_canonical::test_any_parameter_change_changes_digest[amount_minor-6]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_canonical::test_any_parameter_change_changes_digest[extra-1]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_canonical::test_unrepresentable_values_are_rejected[1.5]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_unrepresentable_values_are_rejected[nan]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_unrepresentable_values_are_rejected[9007199254740992]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_unrepresentable_values_are_rejected[-9007199254740992]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_unrepresentable_values_are_rejected[x]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_unrepresentable_values_are_rejected[bad5]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_unrepresentable_values_are_rejected[bad6]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_unrepresentable_values_are_rejected[\\ud800]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_canonical::test_unrepresentable_values_are_rejected[bad8]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_bool_is_not_confused_with_int", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_strict_loads_rejects_ambiguous_input[{\"a\":1,\"a\":2}]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_canonical::test_strict_loads_rejects_ambiguous_input[{\"a\":1.0}]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_canonical::test_strict_loads_rejects_ambiguous_input[{\"a\":NaN}]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_strict_loads_rejects_ambiguous_input[{\"a\":1e2}]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_strict_loads_rejects_ambiguous_input[\\xff]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_strict_loads_rejects_ambiguous_input[{\"a\":]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_strict_loads_rejects_ambiguous_input[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_canonical::test_strict_loads_rejects_ambiguous_input[{\"a\":9007199254740993}]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_strict_loads_rejects_ambiguous_input[\"\\ud800\"]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_oversize_rejected", "outcome": "passed", "seconds": 0.015 }, { "id": "ihvrk.tests.unit.test_canonical::test_non_canonical_spelling_rejected[{\"b\":1,\"a\":2}]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_non_canonical_spelling_rejected[{\"a\": 1}]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_non_canonical_spelling_rejected[{\"a\":1}\\n]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_non_canonical_spelling_rejected[\"\\u0041\"]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_non_canonical_spelling_rejected[\"\\/\"]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_canonical::test_domain_separation", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_policy::test_control_state_authorizes", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[hvt_signature-INVALID-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[hvt_signature-INDETERMINATE-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[hvt_issuer-INVALID-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[hvt_issuer-INDETERMINATE-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[verifier_status-INVALID-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[verifier_status-INDETERMINATE-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[verifier_independent-False-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[verifier_aal-1-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[human_decision-DENY-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[human_decision-ABSENT-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[approval_channel-AGENT_CLAIM-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[challenge-CONSUMED-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[challenge-EXPIRED-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[challenge-REVOKED-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[challenge-UNKNOWN-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[nonce_match-False-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[approved_digest-8-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[approved_resource-4-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[tenant_match-False-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_signature-INVALID-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_signature-INDETERMINATE-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_issuer-INVALID-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_issuer-INDETERMINATE-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_subject_match-False-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_scope_covers-False-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_audience_match-False-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[revocation-REVOKED-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[revocation-INDETERMINATE-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[request_epoch-4-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[approval_epoch-6-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[current_epoch-6-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[policy_version-0-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[current_policy_version-2-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[env_trust-INVALID-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[env_trust-INDETERMINATE-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[time_trusted-False-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[now-1102-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[now-1101-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[now-1100-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[now-1099-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[now-1098-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[now-1097-AUTHORIZE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[now-897-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[now-898-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[now-901-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[now-902-AUTHORIZE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_expires-998-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_expires-1000-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_expires-1002-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[cap_expires-1003-AUTHORIZE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[permit_state-ISSUED-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[permit_state-CONSUMED-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[enforcement_state-RELEASED-DENY]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[enforcement_state-UNKNOWN-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[solver_status-UNKNOWN-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_single_fault[solver_status-TIMEOUT-INDETERMINATE]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_deny_dominates_indeterminate", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_policy::test_malformed_state_denies[over0]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_policy::test_malformed_state_denies[over1]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_policy::test_malformed_state_denies[over2]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_policy::test_malformed_state_denies[over3]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_policy::test_malformed_state_denies[over4]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_policy::test_malformed_state_denies[over5]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_schemas::test_approval_schema_matches_code", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_schemas::test_permit_schema_matches_code", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_schemas::test_grant_schema_matches_code", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_schemas::test_challenge_and_record_schemas_match_produced_objects", "outcome": "passed", "seconds": 0.008 }, { "id": "ihvrk.tests.unit.test_signatures::test_roundtrip", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_wrong_domain_rejected", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_any_field_change_invalidates[n-2]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_any_field_change_invalidates[kid-k2]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_any_field_change_invalidates[type-permit]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_any_field_change_invalidates[added-1]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_algorithm_confusion_rejected[none]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_algorithm_confusion_rejected[ed25519]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_algorithm_confusion_rejected[Ed25519ph]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_algorithm_confusion_rejected[HS256]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_algorithm_confusion_rejected[ML-DSA-65]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_algorithm_confusion_rejected[]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_algorithm_confusion_rejected[None]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_algorithm_confusion_rejected[5]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_missing_alg_rejected", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_signatures::test_malformed_signature_rejected[]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_malformed_signature_rejected[AAAA]", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_signatures::test_malformed_signature_rejected[!!!!]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_malformed_signature_rejected[AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_malformed_signature_rejected[None]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_malformed_signature_rejected[7]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_malformed_signature_rejected[AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_malformed_signature_rejected[AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\\n]", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_wrong_key_and_bad_key_rejected", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_float_smuggled_into_signed_body_rejected", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_reserved_fields_cannot_be_presupplied", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_signatures::test_software_keystore_is_labelled_and_fails_closed", "outcome": "passed", "seconds": 0.001 }, { "id": "ihvrk.tests.unit.test_signatures::test_hardware_keystore_has_no_software_fallback", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_state_machine::test_all_specified_states_exist", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_state_machine::test_happy_path_is_the_only_forward_path", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_state_machine::test_terminal_states_have_no_exits", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_state_machine::test_executing_cannot_be_denied_or_cancelled_after_the_fact", "outcome": "passed", "seconds": 0.0 }, { "id": "ihvrk.tests.unit.test_state_machine::test_completed_reachable_only_from_executing", "outcome": "passed", "seconds": 0.001 } ], "errors": 0, "exit_code": 0, "failed": 0, "missing_paths": [], "name": "ihvrk_package", "passed": 301, "paths": [ "ihvrk/tests" ], "seconds": 23.16, "skipped": 0, "tests": 301 } ], "totals": { "errors": 0, "failed": 0, "passed": 916, "skipped": 0, "tests": 916 } }