{ "by_category": { "adapter_bypass": { "executed": 4, "held": 4 }, "authorization_binding": { "executed": 10, "held": 10 }, "causal_ordering": { "executed": 5, "held": 5 }, "concurrent_revocation": { "executed": 6, "held": 6 }, "contradictory_observations": { "executed": 3, "held": 3 }, "effect_canonicalization": { "executed": 7, "held": 7 }, "evidence_omission": { "executed": 7, "held": 7 }, "incomplete_evidence": { "executed": 6, "held": 6 }, "observer_compromise": { "executed": 7, "held": 7 }, "partial_execution": { "executed": 3, "held": 3 }, "privilege_escalation": { "executed": 4, "held": 4 }, "receipt_replay": { "executed": 3, "held": 3 }, "recovery_correctness": { "executed": 4, "held": 4 }, "toctou": { "executed": 9, "held": 9 }, "unsupported_semantics": { "executed": 4, "held": 4 } }, "by_outcome": { "DETECTED": 38, "LEGITIMATE": 3, "LIMIT": 2, "PREVENTED": 39 }, "command": "python3 scripts/evolution18/run_evidence.py", "corpus_version": "cain42.evolution18.corpus.v1", "environment": { "cpus": 6, "generated_utc": "2026-10-12T18:41:30Z", "git_head": "ad40473bb5f553f94d5caeb6c8fcf6bf33ca7f7e", "kernel": "7.0.0-38-generic", "machine": "x86_64", "python": "3.14.4" }, "errors": 0, "property_held": 82, "property_not_held": 0, "results": [ { "actual": "BLOCKED:PARAMETER_MUTATION_OR_EFFECT_MISMATCH; target unchanged=True", "category": "authorization_binding", "elapsed_ms": 231.0, "evidence": { "block_reason": "PARAMETER_MUTATION_OR_EFFECT_MISMATCH", "receipt_id": "41f0ab79-f909-4fb5-a8d2-af821fd789c9", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AB-01", "outcome": "PREVENTED", "property": "an approval for one content does not execute another", "threat": "argument changed after approval" }, { "actual": "BLOCKED:PARAMETER_MUTATION_OR_EFFECT_MISMATCH; target unchanged=True", "category": "authorization_binding", "elapsed_ms": 214.4, "evidence": { "block_reason": "PARAMETER_MUTATION_OR_EFFECT_MISMATCH", "receipt_id": "b1a5cd9b-dea6-4a56-9437-80a5cfad3145", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AB-02", "outcome": "PREVENTED", "property": "an approval for one resource does not execute on another", "threat": "target changed after approval" }, { "actual": "BLOCKED:APPROVER_KEY_NOT_PINNED; target unchanged=True", "category": "authorization_binding", "elapsed_ms": 210.8, "evidence": { "block_reason": "APPROVER_KEY_NOT_PINNED", "receipt_id": "885367c8-e758-4be0-be31-777ceac89238", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AB-03", "outcome": "PREVENTED", "property": "a self-signed authorization is refused even though its signature verifies under the key it carries", "threat": "authorization signed by a key the enforcer does not pin" }, { "actual": "BLOCKED:APPROVER_KEY_NOT_PINNED; target unchanged=True", "category": "authorization_binding", "elapsed_ms": 224.9, "evidence": { "block_reason": "APPROVER_KEY_NOT_PINNED", "receipt_id": "745f52fe-74e4-4810-bc3b-4806d084c84a", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AB-04", "outcome": "PREVENTED", "property": "no CAIN component grants itself authority: the enforcer's key is not an approver key", "threat": "the enforcer mints its own authorization" }, { "actual": "BLOCKED:INVALID_AUTHORIZATION_SIGNATURE; target unchanged=True", "category": "authorization_binding", "elapsed_ms": 217.3, "evidence": { "block_reason": "INVALID_AUTHORIZATION_SIGNATURE", "receipt_id": "4eedd31e-b661-4237-87de-90f650019526", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AB-05", "outcome": "PREVENTED", "property": "any change to the signed fields invalidates the authorization", "threat": "expiry extended inside a signed authorization" }, { "actual": "BLOCKED:TOOL_DIFFERS_FROM_AUTHORIZED; target unchanged=True", "category": "authorization_binding", "elapsed_ms": 226.7, "evidence": { "block_reason": "TOOL_DIFFERS_FROM_AUTHORIZED", "receipt_id": "d6f1a6c8-e8ae-4bf0-98e1-020cfce52048", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AB-06", "outcome": "PREVENTED", "property": "the authorization is bound to the tool and passport it was decided for, not only to the effect set", "threat": "another tool with identical declared effects is substituted" }, { "actual": "BLOCKED:POLICY_VERSION_MISMATCH; target unchanged=True", "category": "authorization_binding", "elapsed_ms": 245.2, "evidence": { "block_reason": "POLICY_VERSION_MISMATCH", "receipt_id": "1c72f0a2-e76a-4adf-b31d-e056d1e32045", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AB-07", "outcome": "PREVENTED", "property": "a stale policy version does not authorize", "threat": "authorization issued under an older policy version" }, { "actual": "first=COMPLETED second=BLOCKED:AUTHORIZATION_ALREADY_USED", "category": "authorization_binding", "elapsed_ms": 234.5, "evidence": { "block_reason": "AUTHORIZATION_ALREADY_USED", "receipt_id": "0d55da00-23a9-415c-a999-6b7d6b30114b", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AB-08", "outcome": "PREVENTED", "property": "an authorization admits at most one execution", "threat": "the same authorization is presented twice" }, { "actual": "BLOCKED:AUTHORIZATION_EXPIRED_OR_NOT_YET_VALID; target unchanged=True", "category": "authorization_binding", "elapsed_ms": 218.7, "evidence": { "block_reason": "AUTHORIZATION_EXPIRED_OR_NOT_YET_VALID", "receipt_id": "96b6c836-0470-48a4-9cdf-076f80d3decd", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AB-09", "outcome": "PREVENTED", "property": "expired authority authorizes nothing", "threat": "authorization used after it expired" }, { "actual": "BLOCKED:RESOURCE_BINDING_IS_FOR_ANOTHER_AUTHORIZATION; target unchanged=True", "category": "authorization_binding", "elapsed_ms": 224.1, "evidence": { "block_reason": "RESOURCE_BINDING_IS_FOR_ANOTHER_AUTHORIZATION", "receipt_id": "195ee344-e386-46dd-b9d2-591e79a0d017", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AB-10", "outcome": "PREVENTED", "property": "the object binding is tied to one authorization", "threat": "resource binding from another authorization swapped in" }, { "actual": "COMPLETED verifier=VERIFIED", "category": "effect_canonicalization", "elapsed_ms": 243.9, "evidence": { "block_reason": "", "receipt_id": "123630e8-007e-4795-8f81-4082f3c66194", "status": "COMPLETED", "trust_level": "INDEPENDENTLY_CORROBORATED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [], "verdict": "VERIFIED" } }, "executed": true, "held": true, "id": "EC-01", "outcome": "LEGITIMATE", "property": "two spellings of one resource are one effect: the approval carries over and the run is VERIFIED", "threat": "the same file named with a dot-dot path" }, { "actual": "authorization refused: CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS", "category": "effect_canonicalization", "elapsed_ms": 246.5, "evidence": { "reason": "CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS" }, "executed": true, "held": true, "id": "EC-02", "outcome": "PREVENTED", "property": "an action whose effects cannot be determined is never authorized", "threat": "shell command with command substitution" }, { "actual": "authorization refused: CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS", "category": "effect_canonicalization", "elapsed_ms": 223.0, "evidence": { "reason": "CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS" }, "executed": true, "held": true, "id": "EC-03", "outcome": "PREVENTED", "property": "an undeclared argument makes the effect unknown", "threat": "tool call with an argument the passport does not declare" }, { "actual": "refused: RESOURCE_CANNOT_BE_BOUND:TARGET_IS_A_SYMLINK", "category": "effect_canonicalization", "elapsed_ms": 218.3, "evidence": { "reason": "RESOURCE_CANNOT_BE_BOUND:TARGET_IS_A_SYMLINK" }, "executed": true, "held": true, "id": "EC-04", "outcome": "PREVENTED", "property": "a link is not silently treated as the file it names", "threat": "resource is a symbolic link to another file" }, { "actual": "refused: RESOURCE_CANNOT_BE_BOUND:PATH_COMPONENT_IS_A_SYMLINK_OR_MISSING:d:20", "category": "effect_canonicalization", "elapsed_ms": 246.1, "evidence": { "reason": "RESOURCE_CANNOT_BE_BOUND:PATH_COMPONENT_IS_A_SYMLINK_OR_MISSING:d:20" }, "executed": true, "held": true, "id": "EC-05", "outcome": "PREVENTED", "property": "path components are resolved without following links", "threat": "a directory in the path is a symbolic link out of the root" }, { "actual": "refused: RESOURCE_CANNOT_BE_BOUND:RESOURCE_OUTSIDE_EXECUTION_ROOT", "category": "effect_canonicalization", "elapsed_ms": 227.4, "evidence": { "reason": "RESOURCE_CANNOT_BE_BOUND:RESOURCE_OUTSIDE_EXECUTION_ROOT" }, "executed": true, "held": true, "id": "EC-06", "outcome": "PREVENTED", "property": "the pinned pathway refuses objects outside its root whatever the policy pattern says", "threat": "resource outside the execution root, policy pattern too broad" }, { "actual": "verifier=FAILED undeclared=['file:/tmp/e18-vyqant4_/EC-07/root/alias.txt']", "category": "effect_canonicalization", "elapsed_ms": 225.1, "evidence": { "block_reason": "", "receipt_id": "ad5c67e0-ca92-47bd-a6c6-61950d3443e6", "status": "COMPLETED", "trust_level": "INDEPENDENTLY_CORROBORATED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "EC-07", "outcome": "DETECTED", "property": "a write that also changes another name's content is reported as an undeclared effect", "threat": "hard link: a second name for the authorized inode" }, { "actual": "verifier=FAILED:['RECEIPT_NODE_DOES_NOT_MATCH_RECEIPT', 'RECEIPT_SIGNATURE_INVALID']", "category": "observer_compromise", "elapsed_ms": 239.1, "evidence": { "reasons": [ "RECEIPT_NODE_DOES_NOT_MATCH_RECEIPT", "RECEIPT_SIGNATURE_INVALID" ] }, "executed": true, "held": true, "id": "OC-01", "outcome": "DETECTED", "property": "the receipt no longer verifies", "threat": "an observation inside a receipt is edited after signing" }, { "actual": "enforcer said VERIFIED; verifier anchored=FAILED unanchored=INCOMPLETE", "category": "observer_compromise", "elapsed_ms": 123.7, "evidence": { "anchored": [ "SENSOR_KEY_NOT_ANCHORED" ], "unanchored": [ "SENSOR_KEYS_NOT_ANCHORED_BY_THE_READER" ] }, "executed": true, "held": true, "id": "OC-02", "outcome": "DETECTED", "property": "sensor keys the reader did not anchor do not count; with no anchors at all the verdict is capped at INCOMPLETE", "threat": "a lying enforcer invents its own sensors that confirm everything" }, { "actual": "trust=EXTERNALLY_OBSERVED verdict=FAILED", "category": "observer_compromise", "elapsed_ms": 8.4, "evidence": { "block_reason": "", "gaps": [ "SENSOR_SHARES_KEY_OR_PROCESS_WITH_ANOTHER:fake-tree_diff-XalwMS" ], "receipt_id": "ed7f2c19-33ad-4bc1-afb9-c85f8a159a2e", "status": "COMPLETED", "trust_level": "EXTERNALLY_OBSERVED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "POSTCONDITION_VIOLATED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "OC-03", "outcome": "DETECTED", "property": "sensors sharing a key are one sensor: no corroboration", "threat": "two 'sensors' that are one key" }, { "actual": "verifier=INCOMPLETE failures=2 trust=INSTRUMENTED", "category": "observer_compromise", "elapsed_ms": 168.8, "evidence": { "block_reason": "", "receipt_id": "553cd84c-d1fb-4e83-8e97-c641ccc51e47", "status": "COMPLETED", "trust_level": "INSTRUMENTED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "EFFECT_BELOW_REQUIRED_LEVEL:EXTERNALLY_OBSERVED", "EVIDENCE_GAPS_PRESENT" ], "verdict": "INCOMPLETE" } }, "executed": true, "held": true, "id": "OC-04", "outcome": "DETECTED", "property": "a missing sensor is a gap, never a clean result", "threat": "a sensor is killed before the action" }, { "actual": "verifier=INCOMPLETE trust=EXTERNALLY_OBSERVED", "category": "observer_compromise", "elapsed_ms": 214.9, "evidence": { "block_reason": "", "failures": [ { "reason": "SENSOR_PIPE_CLOSED:BrokenPipeError", "sensor": "inotify-b303ba76", "stage": "REPORT" } ], "receipt_id": "ddd7fc52-2301-4fe7-aef9-d313708752c9", "status": "COMPLETED", "trust_level": "EXTERNALLY_OBSERVED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "EVIDENCE_GAPS_PRESENT" ], "verdict": "INCOMPLETE" } }, "executed": true, "held": true, "id": "OC-05", "outcome": "DETECTED", "property": "what the dead sensor would have covered is reported as not covered", "threat": "the event sensor dies between arming and reporting" }, { "actual": "sensor rejected: ['OBSERVATION_NONCE_MISMATCH']; verdict=INCOMPLETE", "category": "observer_compromise", "elapsed_ms": 121.0, "evidence": { "block_reason": "", "receipt_id": "79adbdf3-0eb1-466c-bea6-9a3640f5b5be", "status": "COMPLETED", "trust_level": "EXTERNALLY_OBSERVED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "EVIDENCE_GAPS_PRESENT" ], "verdict": "INCOMPLETE" } }, "executed": true, "held": true, "id": "OC-06", "outcome": "DETECTED", "property": "an observation is bound to one action by nonce and action identity", "threat": "a sensor replays its signed statement from an earlier action" }, { "actual": "trust=INSTRUMENTED verdict=INCOMPLETE", "category": "observer_compromise", "elapsed_ms": 9.5, "evidence": { "block_reason": "", "receipt_id": "2dbde182-4413-4f69-9857-34a63499ddd2", "status": "COMPLETED", "trust_level": "INSTRUMENTED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "EFFECT_BELOW_REQUIRED_LEVEL:EXTERNALLY_OBSERVED", "EVIDENCE_GAPS_PRESENT" ], "verdict": "INCOMPLETE" } }, "executed": true, "held": true, "id": "OC-07", "outcome": "DETECTED", "property": "an observer in the same process is not graded as external", "threat": "an observer inside the enforcer's process presented as a sensor" }, { "actual": "verifier=FAILED; next authorization: CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS", "category": "evidence_omission", "elapsed_ms": 232.7, "evidence": { "block_reason": "", "receipt_id": "183d6aa3-590c-4f1d-bb8b-89f977b17ef6", "status": "COMPLETED", "trust_level": "INDEPENDENTLY_CORROBORATED", "undeclared": [ { "effect": "WRITE", "observed_by": [ "inotify-03cfd3d2", "tree_diff-6f5253d2" ], "resource": "file:/tmp/e18-vyqant4_/EO-01/root/stash.txt" } ], "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "EO-01", "outcome": "DETECTED", "property": "an omitted write is found by the sensors, the run is FAILED and the tool is suspended", "threat": "the tool writes a second file it does not report" }, { "actual": "undeclared=[('READ', 'secret.key')]", "category": "evidence_omission", "elapsed_ms": 240.7, "evidence": { "block_reason": "", "receipt_id": "8fd2251b-29b0-4934-a59f-112b59fd3692", "status": "COMPLETED", "trust_level": "INDEPENDENTLY_CORROBORATED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "EO-02", "outcome": "DETECTED", "property": "an undeclared read that returned data is seen by the event sensor", "threat": "the tool reads a file it was not authorized to read" }, { "actual": "undeclared=['tmp.bin']; snapshot sensor saw tmp.bin=False", "category": "evidence_omission", "elapsed_ms": 241.3, "evidence": { "block_reason": "", "receipt_id": "9e6b2600-ba5a-4c22-9431-5d19d283d9b2", "status": "COMPLETED", "trust_level": "INDEPENDENTLY_CORROBORATED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "EO-03", "outcome": "DETECTED", "property": "a change that is undone before the second snapshot is still seen (by events; the snapshot sensor alone misses it)", "threat": "the tool creates and removes a temporary file inside the window" }, { "actual": "verifier=FAILED:['DECLARED_EFFECT_NOT_OBSERVED_BY_ANY_COVERING_SENSOR', 'POSTCONDITION_VIOLATED']", "category": "evidence_omission", "elapsed_ms": 278.1, "evidence": { "block_reason": "", "receipt_id": "c6929d00-0af5-42e6-bf55-331733939003", "status": "COMPLETED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "DECLARED_EFFECT_NOT_OBSERVED_BY_ANY_COVERING_SENSOR", "POSTCONDITION_VIOLATED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "EO-04", "outcome": "DETECTED", "property": "a claimed effect that no covering sensor saw is FAILED, not VERIFIED", "threat": "the tool reports success and did nothing" }, { "actual": "verifier=FAILED:['POSTCONDITION_VIOLATED']", "category": "evidence_omission", "elapsed_ms": 244.8, "evidence": { "block_reason": "", "receipt_id": "538f65ce-3b33-4d97-bead-4687ab693156", "status": "COMPLETED", "trust_level": "INDEPENDENTLY_CORROBORATED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "POSTCONDITION_VIOLATED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "EO-05", "outcome": "DETECTED", "property": "a write holds only if the object has exactly the authorized content", "threat": "the tool writes the right file with other content" }, { "actual": "trust=INSTRUMENTED verifier=INCOMPLETE", "category": "evidence_omission", "elapsed_ms": 11.1, "evidence": { "block_reason": "", "receipt_id": "fceb0105-81a8-4e32-aaf0-31bbfd70133d", "status": "COMPLETED", "trust_level": "INSTRUMENTED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "EFFECT_BELOW_REQUIRED_LEVEL:EXTERNALLY_OBSERVED", "EVIDENCE_GAPS_PRESENT" ], "verdict": "INCOMPLETE" } }, "executed": true, "held": true, "id": "EO-06", "outcome": "DETECTED", "property": "without an external sensor the level is INSTRUMENTED and the verdict is never VERIFIED", "threat": "no sensor is deployed at all" }, { "actual": "outside write happened and was NOT detected (verdict VERIFIED); receipt lists it as not observed=True", "category": "evidence_omission", "elapsed_ms": 239.4, "evidence": { "block_reason": "", "receipt_id": "43236d57-be71-4a12-8600-c72ee1dc7911", "status": "COMPLETED", "trust_level": "INDEPENDENTLY_CORROBORATED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [], "verdict": "VERIFIED" } }, "executed": true, "held": true, "id": "EO-07", "outcome": "LIMIT", "property": "LIMIT: effects outside the observed roots are not seen; the receipt says so instead of implying none occurred", "threat": "the tool also writes a file outside the observed root" }, { "actual": "verifier=FAILED:['GRAPH_ROOT_MISMATCH', 'PARENT_MISSING_OR_LATER']", "category": "causal_ordering", "elapsed_ms": 239.5, "evidence": { "reasons": [ "GRAPH_ROOT_MISMATCH", "PARENT_MISSING_OR_LATER" ] }, "executed": true, "held": true, "id": "CO-01", "outcome": "DETECTED", "property": "the graph is bound to its order and to the receipt", "threat": "graph nodes reordered in a receipt" }, { "actual": "verifier=FAILED:['CAUSAL_CHAIN_BROKEN', 'OBSERVATION_NOT_CAUSALLY_LINKED_TO_THIS_EXECUTION']", "category": "causal_ordering", "elapsed_ms": 233.7, "evidence": { "reasons": [ "CAUSAL_CHAIN_BROKEN", "OBSERVATION_NOT_CAUSALLY_LINKED_TO_THIS_EXECUTION" ] }, "executed": true, "held": true, "id": "CO-02", "outcome": "DETECTED", "property": "temporal proximity is not a causal link: the observations do not support this execution", "threat": "a lying enforcer links the observations to the execution only by time" }, { "actual": "verifier=FAILED:['LOGICAL_CLOCK_NOT_AFTER_PARENT']", "category": "causal_ordering", "elapsed_ms": 228.2, "evidence": { "reasons": [ "LOGICAL_CLOCK_NOT_AFTER_PARENT" ] }, "executed": true, "held": true, "id": "CO-03", "outcome": "DETECTED", "property": "a node's logical clock must follow every parent's", "threat": "a lying enforcer puts the execution before its admission in logical time" }, { "actual": "verifier=FAILED:['CAUSAL_CHAIN_BROKEN']", "category": "causal_ordering", "elapsed_ms": 268.9, "evidence": { "reasons": [ "CAUSAL_CHAIN_BROKEN" ] }, "executed": true, "held": true, "id": "CO-04", "outcome": "DETECTED", "property": "an execution with no causal path from an authorization is not a verified authorized execution", "threat": "the authorization is attached to the admission only as a correlation" }, { "actual": "verifier=FAILED:['OBSERVATION_BOUND_TO_ANOTHER_ACTION']", "category": "causal_ordering", "elapsed_ms": 242.4, "evidence": { "reasons": [ "OBSERVATION_BOUND_TO_ANOTHER_ACTION" ] }, "executed": true, "held": true, "id": "CO-05", "outcome": "DETECTED", "property": "an observation bound to another action does not support this one", "threat": "observations from another execution grafted into a receipt" }, { "actual": "BLOCKED:RESOURCE_CHANGED_SINCE_AUTHORIZATION:INODE_REPLACED; target unchanged=True", "category": "toctou", "elapsed_ms": 233.7, "evidence": { "block_reason": "RESOURCE_CHANGED_SINCE_AUTHORIZATION:INODE_REPLACED", "receipt_id": "a7a45a43-ebd5-47c8-9ab7-f1c9c066e102", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "TT-01", "outcome": "PREVENTED", "property": "the authorized object, not the path, is what may be acted on", "threat": "file replaced by another inode with the same bytes after authorization" }, { "actual": "BLOCKED:RESOURCE_CHANGED_SINCE_AUTHORIZATION:CONTENT_CHANGED; target unchanged=True", "category": "toctou", "elapsed_ms": 223.3, "evidence": { "block_reason": "RESOURCE_CHANGED_SINCE_AUTHORIZATION:CONTENT_CHANGED", "receipt_id": "bc9ae680-4596-417e-8b26-911f88f04126", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "TT-02", "outcome": "PREVENTED", "property": "an approval for a state of the object does not apply to another state", "threat": "file content changed after authorization (resource version changed)" }, { "actual": "BLOCKED:PIN_FAILED:TARGET_IS_A_SYMLINK; target unchanged=True", "category": "toctou", "elapsed_ms": 217.9, "evidence": { "block_reason": "PIN_FAILED:TARGET_IS_A_SYMLINK", "receipt_id": "00936906-15a7-4df0-a959-f8d5ae39d213", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "TT-03", "outcome": "PREVENTED", "property": "the link is not followed", "threat": "target replaced by a symbolic link to a file outside the root after authorization" }, { "actual": "BLOCKED:PIN_FAILED:PATH_COMPONENT_IS_A_SYMLINK_OR_MISSING:d:20; target unchanged=True", "category": "toctou", "elapsed_ms": 211.9, "evidence": { "block_reason": "PIN_FAILED:PATH_COMPONENT_IS_A_SYMLINK_OR_MISSING:d:20", "receipt_id": "e9bf9e06-313b-4097-9a29-a013abc77d4a", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "TT-04", "outcome": "PREVENTED", "property": "the parent directory is part of the authorized object identity", "threat": "parent directory replaced by a symbolic link after authorization" }, { "actual": "FAILED:TOCTOURaceError:TARGET_NOT_OPENABLE_AS_AUTHORIZED:40; link never opened=True; victim intact=True; verdict=FAILED", "category": "toctou", "elapsed_ms": 255.6, "evidence": { "block_reason": "TOCTOURaceError:TARGET_NOT_OPENABLE_AS_AUTHORIZED:40", "receipt_id": "3aaab685-5fd0-4e28-9157-1a6e16486707", "status": "FAILED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EFFECT_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "TT-05", "outcome": "PREVENTED", "property": "the write goes through the pinned descriptor path with O_NOFOLLOW: the victim is untouched", "threat": "swap to a symbolic link AFTER admission, before the write (the real race window)" }, { "actual": "FAILED:TOCTOURaceError:INODE_REPLACED_AFTER_AUTHORIZATION; impostor bytes intact=True", "category": "toctou", "elapsed_ms": 220.4, "evidence": { "block_reason": "TOCTOURaceError:INODE_REPLACED_AFTER_AUTHORIZATION", "receipt_id": "336564f7-9d76-4905-a4fc-6e7810ecb0b7", "status": "FAILED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EFFECT_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "TT-06", "outcome": "PREVENTED", "property": "the descriptor's inode is compared with the authorized inode before any byte is written", "threat": "another file renamed over the target AFTER admission, before the write" }, { "actual": "impostor intact=True; authorized object written=True; verdict=FAILED", "category": "toctou", "elapsed_ms": 225.4, "evidence": { "block_reason": "", "receipt_id": "516082a6-d62c-4b00-9f2d-ffb9e06c6b75", "status": "COMPLETED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED", "DECLARED_EFFECT_NOT_OBSERVED_BY_ANY_COVERING_SENSOR", "POSTCONDITION_VIOLATED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "TT-07", "outcome": "PREVENTED", "property": "the action lands in the authorized directory object; the impostor at the old path is untouched", "threat": "parent directory renamed away and an impostor directory put at its path AFTER admission" }, { "actual": "FAILED:TOCTOURaceError:TARGET_APPEARED_AFTER_AUTHORIZATION; planted file intact=True", "category": "toctou", "elapsed_ms": 217.0, "evidence": { "block_reason": "TOCTOURaceError:TARGET_APPEARED_AFTER_AUTHORIZATION", "receipt_id": "91b89654-4410-4aaf-864c-784cdb839795", "status": "FAILED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EFFECT_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "TT-08", "outcome": "PREVENTED", "property": "creation is exclusive: an object that was not authorized is not overwritten", "threat": "a file appears at a path authorized as 'does not exist' AFTER admission" }, { "actual": "victim modified=True (not prevented); label=PATH_CHECK_ONLY; verdict=FAILED", "category": "toctou", "elapsed_ms": 235.9, "evidence": { "block_reason": "", "receipt_id": "a5352f44-b15f-4ec6-825a-47170224fc51", "status": "COMPLETED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED", "DECLARED_EFFECT_NOT_OBSERVED_BY_ANY_COVERING_SENSOR" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "TT-09", "outcome": "LIMIT", "property": "LIMIT: a path executor is NOT protected (the victim is modified); the receipt is labelled PATH_CHECK_ONLY and the run is FAILED after the fact", "threat": "the same link swap against an executor that takes a path string" }, { "actual": "BLOCKED:CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS; target unchanged=True", "category": "concurrent_revocation", "elapsed_ms": 214.3, "evidence": { "block_reason": "CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS", "receipt_id": "20ea0d38-eb5a-4fe3-87b3-a5e0ac5a239c", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "CR-01", "outcome": "PREVENTED", "property": "revoked authority does not authorize a new action", "threat": "tool revoked between authorization and execution" }, { "actual": "STOPPED_BEFORE_COMMIT:AUTHORITY_REVOKED_BEFORE_COMMIT; file intact=True; verifier=VERIFIED of NO_EFFECT_OCCURRED", "category": "concurrent_revocation", "elapsed_ms": 249.4, "evidence": { "block_reason": "AUTHORITY_REVOKED_BEFORE_COMMIT", "receipt_id": "955f69bc-58dd-40c7-9329-0f263cc5ee01", "status": "STOPPED_BEFORE_COMMIT", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EFFECT_OCCURRED", "reasons": [], "verdict": "VERIFIED" } }, "executed": true, "held": true, "id": "CR-02", "outcome": "PREVENTED", "property": "the last check before the effect stops it; the receipt verifies that nothing changed", "threat": "tool revoked after admission, before the effect is committed" }, { "actual": "authority_at_completion=REVOKED; effect present; recovery=NOT_APPLICABLE; notes=['AUTHORITY_REVOKED_BY_COMPLETION:the effect was committed while authority was live']", "category": "concurrent_revocation", "elapsed_ms": 222.1, "evidence": { "block_reason": "", "receipt_id": "5b641b87-b355-4f9d-b048-bf545acd8eb1", "status": "COMPLETED", "trust_level": "INDEPENDENTLY_CORROBORATED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [], "verdict": "VERIFIED" } }, "executed": true, "held": true, "id": "CR-03", "outcome": "DETECTED", "property": "the effect is reported as having happened under authority that ended; it is not reported as undone", "threat": "tool revoked after the effect was committed" }, { "actual": "STOPPED_BEFORE_COMMIT:AUTHORITY_EXPIRED_BEFORE_COMMIT; file intact=True", "category": "concurrent_revocation", "elapsed_ms": 217.6, "evidence": { "block_reason": "AUTHORITY_EXPIRED_BEFORE_COMMIT", "receipt_id": "0a29a9ba-c8b5-440b-af65-89d5316197f1", "status": "STOPPED_BEFORE_COMMIT", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EFFECT_OCCURRED", "reasons": [], "verdict": "VERIFIED" } }, "executed": true, "held": true, "id": "CR-04", "outcome": "PREVENTED", "property": "expiry is checked again at the commit point", "threat": "authorization expires while the action waits between admission and commit" }, { "actual": "PARTIAL; dst created=False; verifier=FAILED:['DECLARED_EFFECT_NOT_OBSERVED_BY_ANY_COVERING_SENSOR', 'PARTIAL_EXECUTION', 'POSTCONDITION_VIOLATED']", "category": "concurrent_revocation", "elapsed_ms": 222.1, "evidence": { "block_reason": "AUTHORITY_REVOKED_BEFORE_COMMIT", "receipt_id": "dd84679b-c5de-4277-b2f6-4a551748c124", "status": "PARTIAL", "trust_level": "UNAVAILABLE", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "DECLARED_EFFECT_NOT_OBSERVED_BY_ANY_COVERING_SENSOR", "PARTIAL_EXECUTION", "POSTCONDITION_VIOLATED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "CR-05", "outcome": "DETECTED", "property": "a half-done action is PARTIAL and FAILED, never COMPLETED; the uncommitted effect did not happen", "threat": "tool revoked in the middle of a two-effect action" }, { "actual": "BLOCKED:PASSPORT_CHANGED_SINCE_AUTHORIZATION; target unchanged=True", "category": "concurrent_revocation", "elapsed_ms": 217.2, "evidence": { "block_reason": "PASSPORT_CHANGED_SINCE_AUTHORIZATION", "receipt_id": "aaa4147c-79c9-4c0b-9c43-efba86c99541", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "CR-06", "outcome": "PREVENTED", "property": "an approval decided against one passport version does not carry to another", "threat": "the tool's passport is replaced by a new version after authorization" }, { "actual": "status=FAILED (executor claimed nothing); verifier=FAILED:['UNDECLARED_EFFECT_OBSERVED']", "category": "partial_execution", "elapsed_ms": 221.2, "evidence": { "block_reason": "RuntimeError:tool crashed", "receipt_id": "7ede76cc-3cde-41f9-9a2d-f574099cece5", "status": "FAILED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EFFECT_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "PE-01", "outcome": "DETECTED", "property": "a crash does not hide the effect: the sensors report it and the run is FAILED", "threat": "the tool performs the effect and then crashes without reporting" }, { "actual": "status=FAILED; verifier=VERIFIED of NO_EFFECT_OCCURRED", "category": "partial_execution", "elapsed_ms": 225.9, "evidence": { "block_reason": "RuntimeError:refused", "receipt_id": "7a09e1b8-6b11-48b2-b271-a12989a86a89", "status": "FAILED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EFFECT_OCCURRED", "reasons": [], "verdict": "VERIFIED" } }, "executed": true, "held": true, "id": "PE-02", "outcome": "LEGITIMATE", "property": "a failed action with no effect is verified as 'no effect occurred', not as success", "threat": "the tool fails cleanly before doing anything" }, { "actual": "recovered=['AMBIGUOUS_OUTCOME'] verifier=INCOMPLETE; replay after restart=BLOCKED:RESOURCE_CHANGED_SINCE_AUTHORIZATION:CONTENT_CHANGED", "category": "partial_execution", "elapsed_ms": 223.3, "evidence": { "block_reason": "", "receipt_id": "f96c28b3-765b-4bbe-8108-c5c3a305502f", "status": "AMBIGUOUS_OUTCOME", "trust_level": "UNAVAILABLE", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "CRASH_BETWEEN_ADMISSION_AND_EVIDENCE", "EFFECT_MAY_OR_MAY_NOT_HAVE_OCCURRED", "NOT_RETRIED" ], "verdict": "INCOMPLETE" } }, "executed": true, "held": true, "id": "PE-03", "outcome": "DETECTED", "property": "on restart the outcome is AMBIGUOUS and INCOMPLETE, the action is not retried, and the authorization cannot be used again", "threat": "the enforcer process dies after the effect, before any evidence is written" }, { "actual": "first=VERIFIED second=FAILED:['RECEIPT_REPLAYED']", "category": "receipt_replay", "elapsed_ms": 222.5, "evidence": { "block_reason": "", "receipt_id": "5febd179-81f0-4747-8879-f0639bb4ad1c", "status": "COMPLETED", "trust_level": "EXTERNALLY_OBSERVED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [], "verdict": "VERIFIED" } }, "executed": true, "held": true, "id": "RR-01", "outcome": "DETECTED", "property": "a receipt counts once", "threat": "the same receipt presented twice as evidence of two executions" }, { "actual": "edited=FAILED; re-signed by a lying enforcer=FAILED:['RECEIPT_BOUND_TO_ANOTHER_MISSION_OR_AUTHORIZATION']", "category": "receipt_replay", "elapsed_ms": 222.3, "evidence": { "reasons": [ "RECEIPT_BOUND_TO_ANOTHER_MISSION_OR_AUTHORIZATION" ] }, "executed": true, "held": true, "id": "RR-02", "outcome": "DETECTED", "property": "the mission is inside the signed receipt and the signed authorization", "threat": "a receipt relabelled as belonging to another mission" }, { "actual": "second execution happened (COMPLETED); verifier first=VERIFIED second=FAILED:['AUTHORIZATION_USED_FOR_MORE_THAN_ONE_EXECUTION']", "category": "receipt_replay", "elapsed_ms": 237.1, "evidence": { "block_reason": "", "receipt_id": "985f0f22-634f-44ab-abc3-c1f1df6cda66", "status": "COMPLETED", "trust_level": "EXTERNALLY_OBSERVED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [], "verdict": "VERIFIED" } }, "executed": true, "held": true, "id": "RR-03", "outcome": "DETECTED", "property": "two receipts for one authorization: the second is rejected by a verifier that keeps what it has seen", "threat": "an enforcer that lost its ledger executes one authorization twice" }, { "actual": "trust=CONFLICTING verifier=FAILED:['SENSORS_CONTRADICT_EACH_OTHER']", "category": "contradictory_observations", "elapsed_ms": 142.7, "evidence": { "block_reason": "", "receipt_id": "f5ac1b9d-c1e1-4e97-87e6-a705730b69b2", "status": "COMPLETED", "trust_level": "CONFLICTING", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "SENSORS_CONTRADICT_EACH_OTHER" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "CX-01", "outcome": "DETECTED", "property": "sensors that disagree never yield VERIFIED", "threat": "one of two anchored sensors reports that nothing changed" }, { "actual": "trust=CONFLICTING verifier=FAILED:['SENSORS_CONTRADICT_EACH_OTHER']", "category": "contradictory_observations", "elapsed_ms": 243.8, "evidence": { "block_reason": "", "contradictions": [ { "effect": "WRITE", "not_observed_by": [ "inotify-c4c6af12" ], "observed_by": [ "tree_diff-546e6c20" ], "resource": "file:/tmp/e18-vyqant4_/CX-02/root/a.txt" } ], "receipt_id": "c1a47562-a0a0-49b0-87e8-efdef40e69b1", "status": "COMPLETED", "trust_level": "CONFLICTING", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "SENSORS_CONTRADICT_EACH_OTHER" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "CX-02", "outcome": "DETECTED", "property": "a real blind spot of the event sensor shows up as a contradiction with the snapshot sensor, not as agreement", "threat": "the tool writes through a memory mapping (no modify event is raised)" }, { "actual": "verifier=FAILED:['UNDECLARED_EFFECT_OBSERVED']", "category": "contradictory_observations", "elapsed_ms": 113.9, "evidence": { "block_reason": "", "receipt_id": "7ced7c37-41be-42aa-b78f-878d10231d03", "status": "COMPLETED", "trust_level": "INDEPENDENTLY_CORROBORATED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "CX-03", "outcome": "DETECTED", "property": "an undeclared effect reported by any counted sensor fails the run", "threat": "one anchored sensor reports an extra effect the other did not see" }, { "actual": "verifier=INCOMPLETE gaps=['READ_NOT_OBSERVED:file:/tmp/e18-vyqant4_/IE-01/root/empty.txt']", "category": "incomplete_evidence", "elapsed_ms": 226.8, "evidence": { "block_reason": "", "receipt_id": "e0482483-75ca-4354-9676-75a2e63658cb", "status": "COMPLETED", "trust_level": "SELF_REPORTED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "EFFECT_BELOW_REQUIRED_LEVEL:EXTERNALLY_OBSERVED", "EVIDENCE_GAPS_PRESENT" ], "verdict": "INCOMPLETE" } }, "executed": true, "held": true, "id": "IE-01", "outcome": "DETECTED", "property": "an unobserved read is a gap: INCOMPLETE, not VERIFIED", "threat": "a read that returns no data (empty file) leaves no kernel event" }, { "actual": "trust=SELF_REPORTED verifier=UNSUPPORTED", "category": "incomplete_evidence", "elapsed_ms": 235.8, "evidence": { "block_reason": "", "receipt_id": "43c4542f-902b-4fd0-9484-817ab84f268f", "status": "COMPLETED", "trust_level": "SELF_REPORTED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "NO_OBSERVATION_METHOD_FOR_SOME_DECLARED_EFFECT" ], "verdict": "UNSUPPORTED" } }, "executed": true, "held": true, "id": "IE-02", "outcome": "DETECTED", "property": "an effect with no observation method is UNSUPPORTED, never VERIFIED", "threat": "an action whose effect is a network export" }, { "actual": "BLOCKED:EFFECT_NOT_EXECUTABLE_ON_THE_PINNED_PATHWAY:EXPORT; target unchanged=True", "category": "incomplete_evidence", "elapsed_ms": 219.8, "evidence": { "block_reason": "EFFECT_NOT_EXECUTABLE_ON_THE_PINNED_PATHWAY:EXPORT", "receipt_id": "c8d46c07-508d-4992-9c7c-d15af7c5f4af", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "IE-03", "outcome": "PREVENTED", "property": "an effect the pinned pathway cannot execute faithfully is refused", "threat": "the same network export sent to the default pinned pathway" }, { "actual": "verifier=INCOMPLETE gaps=['NO_COMPLETE_SENSOR_FOR_UNDECLARED_MUTATIONS', 'NO_COMPLETE_SENSOR_FOR_UNDECLARED_READS', 'NO_EXTERNAL_SENSOR_COVERS:WRITE:file:/tmp/e18-vyqant4_/IE-04/root/f0.txt', 'SENSOR_SCOPE_INCOMPLETE:tree_diff-d23e5a24:ENTRY_LIMIT_REACHED']", "category": "incomplete_evidence", "elapsed_ms": 115.8, "evidence": { "block_reason": "", "receipt_id": "f73ed690-0262-46af-b087-e1cae382c7a1", "status": "COMPLETED", "trust_level": "INSTRUMENTED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "EFFECT_BELOW_REQUIRED_LEVEL:EXTERNALLY_OBSERVED", "EVIDENCE_GAPS_PRESENT" ], "verdict": "INCOMPLETE" } }, "executed": true, "held": true, "id": "IE-04", "outcome": "DETECTED", "property": "a sensor that could not look at everything says so and is not counted", "threat": "the tree is larger than the snapshot sensor's limit" }, { "actual": "verifier=FAILED:['EVIDENCE_GAPS_PRESENT', 'RECEIPT_CLAIMS_VERIFIED_WITHOUT_SUPPORT', 'TRUST_LEVEL_OVERCLAIMED']", "category": "incomplete_evidence", "elapsed_ms": 221.0, "evidence": { "reasons": [ "EVIDENCE_GAPS_PRESENT", "RECEIPT_CLAIMS_VERIFIED_WITHOUT_SUPPORT", "TRUST_LEVEL_OVERCLAIMED" ] }, "executed": true, "held": true, "id": "IE-05", "outcome": "DETECTED", "property": "the verifier re-derives the level from what is in the receipt: a stronger claim than the evidence is FAILED", "threat": "a lying enforcer drops one sensor's observation and keeps the top trust level" }, { "actual": "verifier=INCOMPLETE:['SENSOR_KEYS_NOT_ANCHORED_BY_THE_READER']", "category": "incomplete_evidence", "elapsed_ms": 224.7, "evidence": { "block_reason": "", "receipt_id": "85181823-9bdb-4494-a4bf-c85f79a83c6f", "status": "COMPLETED", "trust_level": "INDEPENDENTLY_CORROBORATED", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [], "verdict": "VERIFIED" } }, "executed": true, "held": true, "id": "IE-06", "outcome": "DETECTED", "property": "sensors the reader cannot anchor cap the verdict at INCOMPLETE", "threat": "the reader has no independent knowledge of the sensor keys" }, { "actual": "state=FULLY_COMPENSATED verifier=VERIFIED", "category": "recovery_correctness", "elapsed_ms": 239.6, "evidence": { "state": { "original_receipt": "70f1b6f4-dc48-47dd-9020-0004d85833ef", "resources": [ { "authorized_prior_state_known": true, "by_receipt": "3e4f571b-0d56-474b-a28c-076b33630b67", "resource": "file:/tmp/e18-vyqant4_/RC-01/root/a.txt", "restored": true } ], "state": "FULLY_COMPENSATED" } }, "executed": true, "held": true, "id": "RC-01", "outcome": "LEGITIMATE", "property": "FULLY_COMPENSATED is stated only when every changed object is back to the signed prior state", "threat": "a failed run is repaired by a verified restoring action" }, { "actual": "state=PARTIALLY_COMPENSATED verifier derived=PARTIALLY_COMPENSATED", "category": "recovery_correctness", "elapsed_ms": 238.9, "evidence": { "state": { "original_receipt": "716735e5-8f9a-4482-8a11-8e2d6411c58b", "resources": [ { "authorized_prior_state_known": true, "by_receipt": "b2b81aa0-1476-4510-82ab-6819324e126a", "resource": "file:/tmp/e18-vyqant4_/RC-02/root/a.txt", "restored": true }, { "authorized_prior_state_known": false, "by_receipt": null, "resource": "file:/tmp/e18-vyqant4_/RC-02/root/b.txt", "restored": false } ], "state": "PARTIALLY_COMPENSATED" } }, "executed": true, "held": true, "id": "RC-02", "outcome": "DETECTED", "property": "an incomplete repair is PARTIALLY_COMPENSATED, never reported as fully rolled back", "threat": "two objects were changed, one was restored" }, { "actual": "verifier=FAILED:['RECOVERY_STATE_OVERSTATED_OR_WRONG'] derived=PARTIALLY_COMPENSATED", "category": "recovery_correctness", "elapsed_ms": 241.6, "evidence": { "reasons": [ "RECOVERY_STATE_OVERSTATED_OR_WRONG" ] }, "executed": true, "held": true, "id": "RC-03", "outcome": "DETECTED", "property": "the verifier re-derives the recovery state from the receipts and rejects the overstatement", "threat": "a lying enforcer signs FULLY_COMPENSATED for the partial repair" }, { "actual": "state=NOT_COMPENSATED (repair verdict FAILED)", "category": "recovery_correctness", "elapsed_ms": 241.4, "evidence": { "state": { "original_receipt": "7a23e24e-7b90-4319-9c56-ca2ce5028ac4", "resources": [ { "authorized_prior_state_known": true, "by_receipt": null, "resource": "file:/tmp/e18-vyqant4_/RC-04/root/a.txt", "restored": false } ], "state": "NOT_COMPENSATED" } }, "executed": true, "held": true, "id": "RC-04", "outcome": "DETECTED", "property": "a restoring action counts only if it is itself VERIFIED", "threat": "the 'repair' run is itself not verified (tool wrote other bytes)" }, { "actual": "authorization refused: CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS", "category": "unsupported_semantics", "elapsed_ms": 211.6, "evidence": { "reason": "CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS" }, "executed": true, "held": true, "id": "UA-01", "outcome": "PREVENTED", "property": "ambiguous shell syntax is never authorized", "threat": "shell command with backticks" }, { "actual": "BLOCKED:ONLY_PASSPORTED_TOOL_CALLS_RUN_ON_THE_PINNED_PATHWAY; target unchanged=True", "category": "unsupported_semantics", "elapsed_ms": 227.2, "evidence": { "block_reason": "ONLY_PASSPORTED_TOOL_CALLS_RUN_ON_THE_PINNED_PATHWAY", "receipt_id": "a802cbbb-36aa-47fd-bc53-719657463a18", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "UA-02", "outcome": "PREVENTED", "property": "an action whose content cannot be bound is refused on the pinned pathway instead of being executed approximately", "threat": "shell redirection: the effect is known, the bytes are not" }, { "actual": "authorization refused: CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS", "category": "unsupported_semantics", "elapsed_ms": 232.8, "evidence": { "reason": "CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS" }, "executed": true, "held": true, "id": "UA-03", "outcome": "PREVENTED", "property": "an unknown runtime produces unknown effects, which nothing authorizes", "threat": "a runtime the adapters do not know" }, { "actual": "authorization refused: CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS", "category": "unsupported_semantics", "elapsed_ms": 215.8, "evidence": { "reason": "CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS" }, "executed": true, "held": true, "id": "UA-04", "outcome": "PREVENTED", "property": "a tool nobody evaluated has no known effects", "threat": "a tool with no passport" }, { "actual": "verifier=FAILED:['DECLARED_EFFECT_NOT_OBSERVED_BY_ANY_COVERING_SENSOR', 'POSTCONDITION_VIOLATED', 'UNDECLARED_EFFECT_OBSERVED']; tool afterwards: CALL_PRODUCES_UNKNOWN_OR_NO_EFFECTS", "category": "adapter_bypass", "elapsed_ms": 233.5, "evidence": { "block_reason": "", "receipt_id": "212205e0-dd3b-49a1-9258-84376b98b46c", "status": "COMPLETED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "AUTHORIZED_EFFECTS_OCCURRED", "reasons": [ "UNDECLARED_EFFECT_OBSERVED", "DECLARED_EFFECT_NOT_OBSERVED_BY_ANY_COVERING_SENSOR", "POSTCONDITION_VIOLATED" ], "verdict": "FAILED" } }, "executed": true, "held": true, "id": "AD-01", "outcome": "DETECTED", "property": "what the tool does is compared with what was authorized, and the tool is suspended", "threat": "the tool does a different thing from the call it was given (delete instead of write)" }, { "actual": "BLOCKED:MALFORMED_AUTHORIZATION_BUNDLE; target unchanged=True", "category": "adapter_bypass", "elapsed_ms": 215.4, "evidence": { "block_reason": "MALFORMED_AUTHORIZATION_BUNDLE", "receipt_id": "325e411c-1142-49cf-b936-65a478472d76", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AD-02", "outcome": "PREVENTED", "property": "no authorization, no execution", "threat": "execution requested with no authorization at all" }, { "actual": "BLOCKED:DECISION_IS_NOT_ALLOW:DENY; target unchanged=True", "category": "adapter_bypass", "elapsed_ms": 241.2, "evidence": { "block_reason": "DECISION_IS_NOT_ALLOW:DENY", "receipt_id": "dc6f5479-4768-4eba-826c-58a2f71683fe", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AD-03", "outcome": "PREVENTED", "property": "only ALLOW admits; a signed refusal is not a permission", "threat": "a genuine approver-signed DENY presented as an authorization" }, { "actual": "BLOCKED:RUNTIME_MISMATCH; target unchanged=True", "category": "adapter_bypass", "elapsed_ms": 213.7, "evidence": { "block_reason": "RUNTIME_MISMATCH", "receipt_id": "12af9eeb-1650-4ab4-9cb2-b36a93badcef", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "AD-04", "outcome": "PREVENTED", "property": "the runtime is part of what was authorized", "threat": "authorization for one runtime used through another" }, { "actual": "authorization refused: RESOURCE_NOT_PERMITTED_BY_POLICY:file:/tmp/e18-vyqant4_/PV-01/root/a.txt", "category": "privilege_escalation", "elapsed_ms": 211.9, "evidence": { "reason": "RESOURCE_NOT_PERMITTED_BY_POLICY:file:/tmp/e18-vyqant4_/PV-01/root/a.txt" }, "executed": true, "held": true, "id": "PV-01", "outcome": "PREVENTED", "property": "authority does not widen", "threat": "action on a resource outside the delegated set" }, { "actual": "authorization refused: EFFECT_NOT_PERMITTED_BY_POLICY:WRITE", "category": "privilege_escalation", "elapsed_ms": 211.6, "evidence": { "reason": "EFFECT_NOT_PERMITTED_BY_POLICY:WRITE" }, "executed": true, "held": true, "id": "PV-02", "outcome": "PREVENTED", "property": "an effect class that was not delegated is not authorized", "threat": "a mutating effect under a read-only delegation" }, { "actual": "statuses=['BLOCKED', 'BLOCKED', 'BLOCKED', 'BLOCKED', 'BLOCKED', 'BLOCKED', 'BLOCKED', 'COMPLETED']", "category": "privilege_escalation", "elapsed_ms": 230.6, "evidence": { "statuses": [ "BLOCKED", "BLOCKED", "BLOCKED", "BLOCKED", "BLOCKED", "BLOCKED", "BLOCKED", "COMPLETED" ] }, "executed": true, "held": true, "id": "PV-03", "outcome": "PREVENTED", "property": "exactly one execution is admitted", "threat": "eight threads race to use one authorization" }, { "actual": "second=BLOCKED:CONCURRENT_ACTION_ON_RESOURCE; file='first'", "category": "privilege_escalation", "elapsed_ms": 217.9, "evidence": { "block_reason": "CONCURRENT_ACTION_ON_RESOURCE", "receipt_id": "027c6589-6a0a-474c-b54c-7ff5a00fc79e", "status": "BLOCKED", "trust_level": "UNAVAILABLE", "verdict": { "claim": "NO_EXECUTION", "reasons": [ "NOT_EXECUTED:NON_EXECUTION_WAS_NOT_INDEPENDENTLY_OBSERVED" ], "verdict": "UNAVAILABLE" } }, "executed": true, "held": true, "id": "PV-04", "outcome": "PREVENTED", "property": "two actions do not interleave on one object: the second is refused, not queued", "threat": "a second authorized action on a resource while the first is in flight" } ], "scenario_wall_ms": { "max": 278.1, "note": "includes starting two observer processes per scenario", "p50": 224.7, "p95": 246.5 }, "scenarios_defined": 82, "scenarios_executed": 82, "skipped": 0 }