TASK-6e4ff870-a386-4a11-a59c-444ebc23732e: append B1 integrity correction

This commit is contained in:
thePR0M3TH3AN committed 2026-10-01 12:41:09 -04:00
1 parent b375037a9c
commit 955672c1db
1 file changed
+23 -23
+23 -23
View File
@@ -45,29 +45,6 @@ test_integrity_note:
if_true_explain_spec_basis: ""
```
## 2026-10-01 — Check-subject context B1 allocation-bound correction
```yaml
test_integrity_note:
change_type: new_tests
scenarios:
- id: SCN-check-subject-context-v1-refusal
given: Captured metadata bytes larger than the fixed 1 MiB v1 frame limit
when: Parsing or E/S/A digest calculation is requested
then: Both reject before Buffer copying, hashing, or frame parsing
observable_outcomes:
- "MANAGED_SUBJECT_METADATA_FRAME_TOO_LARGE with zero observed Buffer.from copies"
determinism_controls:
- Fixed in-memory oversized buffer and temporary Buffer.from observation; no database, provider, network, retry, or sleep
anti_cheat_rationale:
prevents:
- Copying caller-controlled oversized metadata before the protocol resource bound applies
- Hashing or parsing bytes that the v1 contract must reject
relaxation:
did_relax_any_assertion: false
if_true_explain_spec_basis: ""
```
## 2026-10-01 — Atomic runtime identity reservations
```yaml
@@ -2794,3 +2771,26 @@ test_integrity_note:
did_relax_any_assertion: false
if_true_explain_spec_basis: ""
```
## 2026-10-01 — Check-subject context B1 allocation-bound correction
```yaml
test_integrity_note:
change_type: new_tests
scenarios:
- id: SCN-check-subject-context-v1-refusal
given: Captured metadata bytes larger than the fixed 1 MiB v1 frame limit
when: Parsing or E/S/A digest calculation is requested
then: Both reject before Buffer copying, hashing, or frame parsing
observable_outcomes:
- "MANAGED_SUBJECT_METADATA_FRAME_TOO_LARGE with zero observed Buffer.from copies"
determinism_controls:
- Fixed in-memory oversized buffer and temporary Buffer.from observation; no database, provider, network, retry, or sleep
anti_cheat_rationale:
prevents:
- Copying caller-controlled oversized metadata before the protocol resource bound applies
- Hashing or parsing bytes that the v1 contract must reject
relaxation:
did_relax_any_assertion: false
if_true_explain_spec_basis: ""
```