thePR0M3TH3AN/TORCH
1
0 Fork 0
mirror of https://github.com/PR0M3TH3AN/TORCH.git synced 2026-10-27 07:51:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

TASK-33d49b5b: cover valid identity reply spoof

Browse Source
This commit is contained in:
thePR0M3TH3AN committed 2026-10-03 18:21:54 -04:00
1 parent 0b10165c08
commit 6c217fcc91
2 files changed
+4 -3
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/TEST_INTEGRITY.md
+3 -3
View File
@@ -3083,9 +3083,9 @@ test_integrity_note:
when: "It sends a dedicated reply and state is reopened"
then: "The reply linkage, bounded owner cursor, and actor audit persist"
- id: SCN-owner-addressed-reply-refusal
given: "Spoofed senders, generic owner recipients, foreign/forged references, or a non-owner reader"
given: "Spoofed senders, a different valid registered agent, generic owner recipients, foreign/forged references, or a non-owner reader"
when: "They invoke the owner-reply boundary"
then: "They refuse without message or audit writes; direct and broadcast delivery remain intact"
then: "They refuse without message or audit writes; the owner conversation remains unchanged; direct and broadcast delivery remain intact"
observable_outcomes:
- "Schema-v2 compatibility refusal, stable snapshot rows, byte/sidecar preservation, durable reply linkage, cursor page, and audit event"
determinism_controls:
@@ -3095,7 +3095,7 @@ test_integrity_note:
- "Migrating or initializing a read-only or unknown schema"
- "Returning stale or mixed identity generations"
- "Treating owner as a fleet identity or accepting generic recipient bypasses"
- "Accepting foreign or forged owner-reply linkage"
- "Accepting foreign, forged, or valid-identity wrong-addressee owner-reply linkage"
relaxation:
did_relax_any_assertion: false
if_true_explain_spec_basis: ""
test/fleet/owner-addressed-message-replies.test.mjs
+1
View File
@@ -75,6 +75,7 @@ test('SCN-owner-addressed-reply-refusal: forged owner recipients, senders, and r
assert.throws(() => control.sendMessage({ sender: fixture.worker, recipient: 'owner', body: 'Bypass the reply boundary.' }), (error) => error.code === 'UNKNOWN_FLEET_IDENTITY');
assert.throws(() => control.sendOwnerReply({ sender: 'owner', requestId: request.id, body: 'Spoofed sender.' }), (error) => error.code === 'UNKNOWN_FLEET_IDENTITY');
assert.throws(() => control.sendOwnerReply({ sender: 'session-manager', requestId: request.id, body: 'Valid identity, wrong addressee.' }), (error) => error.code === 'OWNER_REPLY_REFERENCE_INVALID');
assert.throws(() => control.sendOwnerReply({ sender: fixture.worker, requestId: foreignRequest.id, body: 'Foreign reference.' }), (error) => error.code === 'OWNER_REPLY_REFERENCE_INVALID');
assert.throws(() => control.sendOwnerReply({ sender: fixture.worker, requestId: 'forged-message-id', body: 'Forged reference.' }), (error) => error.code === 'OWNER_REPLY_REFERENCE_INVALID');
assert.throws(() => control.readOwnerConversation({ actorId: fixture.worker, requestId: request.id, limit: 1 }), (error) => error.code === 'OWNER_AUTHORITY_REQUIRED');