$ /usr/bin/python3 scripts/sovereign/mutation_e7.py --jobs 4 --json /root/cain-studio-platform/reports/sovereign/evolution-07/mutation_results.json # exit_code=0 seconds=354.48 K01 KILLED signature not verified <- tests/sovereign/evolution_07/test_e7_protocol.py::test_signature_covers_every_field_that_is_not_the_signature K02 KILLED structural validation skipped <- tests/sovereign/evolution_07/test_e7_protocol.py::test_type_and_charset_confusion_is_malformed_not_coerced[exp-9999999999-FIELD_EXP] K03 KILLED protocol allowlist skipped <- tests/sovereign/evolution_07/test_e7_protocol.py::test_legacy_or_unknown_protocol_versions_are_refused_even_when_validly_signed[protocol_version-cain42.talos.v1] K04 KILLED algorithm allowlist skipped <- tests/sovereign/evolution_07/test_e7_protocol.py::test_algorithm_substitution_is_refused_even_when_validly_signed[none] K05 KILLED issuer not bound to key <- tests/sovereign/evolution_07/test_e7_protocol.py::test_issuer_not_bound_to_key_refused K06 KILLED key validity window ignored <- tests/sovereign/evolution_07/test_e7_protocol.py::test_key_rotation_window K07 KILLED expiry ignored <- tests/sovereign/evolution_07/test_e7_protocol.py::test_expired_and_boundary K08 KILLED lifetime bound ignored <- tests/sovereign/evolution_07/test_e7_protocol.py::test_lifetime_and_future_issue_bounds K09 KILLED future issue time accepted <- tests/sovereign/evolution_07/test_e7_protocol.py::test_lifetime_and_future_issue_bounds K10 KILLED pre-consumption key revocation lookup skipped <- tests/sovereign/evolution_07/test_e7_protocol.py::test_revoked_key_and_revoked_decision K11 KILLED pre-consumption decision revocation lookup skipped <- tests/sovereign/evolution_07/test_e7_protocol.py::test_revoked_key_and_revoked_decision K12 KILLED CAIN DENY not honoured <- tests/sovereign/evolution_07/test_e7_protocol.py::test_cain_deny_is_never_allow K13 KILLED audience not checked <- tests/sovereign/evolution_07/test_e7_protocol.py::test_audience_mismatch_refused K14 KILLED principal not checked <- tests/sovereign/evolution_07/test_e7_protocol.py::test_identity_spoofing_refused[kw0-PRINCIPAL_MISMATCH] K15 KILLED tenant not checked <- tests/sovereign/evolution_07/test_e7_protocol.py::test_cross_tenant_reuse_is_refused_and_does_not_burn_the_envelope K16 KILLED agent not checked <- tests/sovereign/evolution_07/test_e7_protocol.py::test_identity_spoofing_refused[kw1-AGENT_MISMATCH] K17 KILLED session not checked <- tests/sovereign/evolution_07/test_e7_protocol.py::test_identity_spoofing_refused[kw2-SESSION_MISMATCH] K18 KILLED action not checked <- tests/sovereign/evolution_07/test_e7_protocol.py::test_target_and_action_substitution_refused K19 KILLED target not checked <- tests/sovereign/evolution_07/test_e7_protocol.py::test_target_and_action_substitution_refused K20 KILLED policy version not pinned <- tests/sovereign/evolution_07/test_e7_protocol.py::test_stale_policy_version_and_digest_refused K21 KILLED policy digest not pinned <- tests/sovereign/evolution_07/test_e7_protocol.py::test_stale_policy_version_and_digest_refused K22 KILLED enforcement profile not checked <- tests/sovereign/evolution_07/test_e7_formal_link.py::test_each_modelled_check_fails_closed_with_the_modelled_verdict[profile] K23 KILLED approval refusal ignored <- tests/sovereign/evolution_07/test_e7_protocol.py::test_approval_reference_string_is_not_an_approval K24 KILLED request not bound to the signed digest <- tests/sovereign/evolution_07/test_e7_protocol.py::test_unbound_envelope_cannot_authorise_any_request K25 KILLED request scope containment not checked <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_cwd_outside_scope_is_refused_even_when_signed K26 KILLED non-durable ledger accepted for execution <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_in_memory_ledger_refuses_execution_by_default K27 KILLED consumption result ignored <- tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water K28 KILLED verifier exception becomes ALLOW <- tests/sovereign/evolution_07/test_e7_protocol.py::test_non_envelope_inputs_and_internal_faults_never_allow[None] K29 KILLED ledger failure at consumption becomes ALLOW <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_ledger_failure_does_not_execute[consume_authorization_atomic-LEDGER_UNAVAILABLE_NONCE_CONSUMPTION_FAILED-INDETERMINATE] K30 KILLED worker launched whatever the verdict <- tests/sovereign/evolution_07/test_e7_protocol.py::test_unusable_clock_fails_closed[0] K31 KILLED sandbox setup failure reported as an allowed execution <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_missing_required_control_means_no_delivery[landlock_denial_observed] K32 KILLED approval signature not verified <- tests/sovereign/evolution_07/test_e7_protocol.py::test_approval_is_bound_to_the_exact_operation K33 KILLED missing time source not detected <- tests/sovereign/evolution_07/test_e7_protocol.py::test_unusable_clock_fails_closed[0] K34 KILLED execution intent failure ignored <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_valid_request_executes_exactly_once_within_scope K35 SURVIVED_EQUIVALENT file path need not be the authorised target W01 KILLED missing required controls ignored <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_missing_required_control_means_no_delivery[landlock_denial_observed] W02 KILLED launcher FAILED status ignored <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_launcher_failure_before_ready[import os, json, sys\ncfg = json.loads(sys.stdin.readline())\nos.write(cfg['status_fd'], b'{"state": "FAILED", "code": "LANDLOCK"}\\n')\nsys.exit(131)-SANDBOX_LANDLOCK] W03 KILLED PID namespace not verified by the parent <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_parent_verifies_pid_namespace_independently W04 KILLED launcher inherits the gateway environment <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_launcher_spawn_parameters W05 KILLED output cap removed <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_output_flood_is_cut_off W06 KILLED network namespace never requested <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_valid_request_executes_exactly_once_within_scope W07 KILLED symlinked scope roots accepted <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_scope_root_symlink_refused W08 SURVIVED_EQUIVALENT file-read scope not checked by the worker W09 KILLED symlink accepted as a governed file <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_fs_modes_refuse_symlinks_and_never_follow_them W10 KILLED socket families always allowed <- tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water W11 KILLED old Landlock ABI accepted <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_old_landlock_abi_is_a_missing_control L01 KILLED supervisor does not enforce the wall-clock limit <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_wall_clock_limit[while True: pass] L02 KILLED descriptors not closed before the workload <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_inherited_descriptors L03 KILLED Landlock self-test result ignored <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_control_that_silently_does_nothing_is_detected[ rep = ll.restrict_self(profile)\n- rep = ll.plan(profile)\n-LANDLOCK_SELF_TEST_NOT_DENIED] L04 SURVIVED_EQUIVALENT seccomp self-test result ignored L05 KILLED seccomp: ptrace allowed <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_capabilities_and_no_way_back L06 KILLED seccomp: namespace flags allowed on clone <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_capabilities_and_no_way_back L07 KILLED seccomp: io_uring allowed <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_no_capabilities_and_no_way_back L08 KILLED governed file read follows symlinks <- tests/sovereign/evolution_07/test_e7_worker_isolation.py::test_fs_modes_refuse_symlinks_and_never_follow_them L09 KILLED capability bounding set not emptied <- tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water L10 SURVIVED_EQUIVALENT no_new_privs read-back ignored D01 KILLED nonce existence not checked in the transaction <- tests/sovereign/evolution_07/test_e7_formal_link.py::test_each_modelled_check_fails_closed_with_the_modelled_verdict[nonce_fresh] D02 KILLED floor compared without the skew allowance (the bug fixed in this evolution) <- tests/sovereign/evolution_07/test_e7_protocol.py::test_emergency_invalidation_floor D03 KILLED invalidation floor ignored <- tests/sovereign/evolution_07/test_e7_protocol.py::test_emergency_invalidation_floor D04 KILLED key revocation not re-checked in the transaction <- tests/sovereign/evolution_07/test_e7_ledger.py::test_key_revoked_between_check_and_consume D05 KILLED decision revocation not re-checked in the transaction <- tests/sovereign/evolution_07/test_e7_ledger.py::test_decision_revoked_between_check_and_consume D06 KILLED clock rollback not detected <- tests/sovereign/evolution_07/test_e7_protocol.py::test_clock_rollback_detected_by_ledger_high_water D07 KILLED host binding not checked <- tests/sovereign/evolution_07/test_e7_ledger.py::test_ledger_refuses_other_host_and_network_filesystems D08 KILLED symlinked ledger path accepted <- tests/sovereign/evolution_07/test_e7_ledger.py::test_unsafe_ledger_files_refused D09 KILLED audit chain not verified <- tests/sovereign/evolution_07/test_e7_ledger.py::test_audit_chain_detects_tampering D10 KILLED illegal execution-state transitions accepted <- tests/sovereign/evolution_07/test_e7_ledger.py::test_kill_after_start_is_uncertain_not_retried D11 KILLED new file-backed ledger starts without a floor <- tests/sovereign/evolution_07/test_e7_ledger.py::test_replaced_ledger_cannot_be_used_to_replay D12 KILLED world-writable ledger accepted <- tests/sovereign/evolution_07/test_e7_ledger.py::test_unsafe_ledger_files_refused D13 KILLED network filesystem accepted <- tests/sovereign/evolution_07/test_e7_ledger.py::test_ledger_refuses_other_host_and_network_filesystems D14 KILLED foreign database accepted as a ledger <- tests/sovereign/evolution_07/test_e7_ledger.py::test_unsafe_ledger_files_refused P01 KILLED duplicate JSON keys accepted <- tests/sovereign/evolution_07/test_e7_protocol.py::test_duplicate_keys_rejected_at_top_level_and_nested P02 KILLED unknown envelope fields accepted <- tests/sovereign/evolution_07/test_e7_protocol.py::test_unknown_and_missing_fields_rejected P03 KILLED path containment by string prefix <- tests/sovereign/evolution_07/test_e7_protocol.py::test_path_within_is_component_wise P04 KILLED no domain separation in the signing input <- tests/sovereign/evolution_07/test_e7_protocol.py::test_signature_over_undomained_bytes_is_rejected P05 KILLED environment not part of the bound request <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_cwd_and_env_are_bound P06 KILLED working directory not part of the bound request <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_cwd_and_env_are_bound P07 KILLED loader variables allowed in the request environment <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_dangerous_environment_names_refused[LD_PRELOAD] P08 KILLED floats accepted by the strict parser <- tests/sovereign/evolution_07/test_e7_protocol.py::test_strict_parser_rejects_ambiguous_numbers_and_bad_encoding[{"a":1.0}-FLOAT_NOT_ALLOWED] P09 KILLED exp <= iat accepted <- tests/sovereign/evolution_07/test_e7_protocol.py::test_invalid_timestamps_are_malformed[100-100] P10 KILLED ports without network accepted <- tests/sovereign/evolution_07/test_e7_protocol.py::test_ambiguous_scope_is_malformed[patch7-SCOPE_PORTS_WITHOUT_NETWORK] P11 KILLED unbound digest shares the request hash domain <- tests/sovereign/evolution_07/test_e7_protocol.py::test_unbound_envelope_cannot_authorise_any_request P12 KILLED non-canonical scope paths accepted <- tests/sovereign/evolution_07/test_e7_protocol.py::test_ambiguous_scope_is_malformed[patch0-SCOPE_PATH_NOT_CANONICAL] P13 KILLED argv not part of the bound request <- tests/sovereign/evolution_07/test_e7_protocol.py::test_untrusted_data_only_changes_digests J01 KILLED scope attenuation by string prefix <- tests/sovereign/evolution_07/test_e7_protocol.py::test_requested_scope_is_clamped_component_wise J02 KILLED non-canonical file target evaluated <- tests/sovereign/evolution_07/test_e7_protocol.py::test_jit_refuses_non_canonical_file_target J03 KILLED approval-required rule issues ALLOW <- tests/sovereign/evolution_07/test_e7_protocol.py::test_jit_never_accepts_a_proposer_supplied_approval J04 KILLED policy digest omits the scope ceiling <- tests/sovereign/evolution_07/test_e7_protocol.py::test_policy_digest_changes_when_any_permission_bearing_field_changes J05 KILLED policy conflict resolved by first rule <- tests/sovereign/evolution_07/test_e7_protocol.py::test_jit_default_deny_and_conflict_deny A01 KILLED file adapter accepts non-canonical paths <- tests/sovereign/evolution_07/test_e7_enforcement.py::test_filesystem_adapter_rejects_non_canonical_paths[/../../etc/passwd] {"KILLED": 85, "SURVIVED_EQUIVALENT": 4} unexplained: []