diff --git a/docs/TEST_INTEGRITY.md b/docs/TEST_INTEGRITY.md index a74e261..3d275c7 100644 --- a/docs/TEST_INTEGRITY.md +++ b/docs/TEST_INTEGRITY.md @@ -45,29 +45,6 @@ test_integrity_note: if_true_explain_spec_basis: "" ``` -## 2026-10-01 — Check-subject context B1 allocation-bound correction - -```yaml -test_integrity_note: - change_type: new_tests - scenarios: - - id: SCN-check-subject-context-v1-refusal - given: Captured metadata bytes larger than the fixed 1 MiB v1 frame limit - when: Parsing or E/S/A digest calculation is requested - then: Both reject before Buffer copying, hashing, or frame parsing - observable_outcomes: - - "MANAGED_SUBJECT_METADATA_FRAME_TOO_LARGE with zero observed Buffer.from copies" - determinism_controls: - - Fixed in-memory oversized buffer and temporary Buffer.from observation; no database, provider, network, retry, or sleep - anti_cheat_rationale: - prevents: - - Copying caller-controlled oversized metadata before the protocol resource bound applies - - Hashing or parsing bytes that the v1 contract must reject - relaxation: - did_relax_any_assertion: false - if_true_explain_spec_basis: "" -``` - ## 2026-10-01 — Atomic runtime identity reservations ```yaml @@ -2794,3 +2771,26 @@ test_integrity_note: did_relax_any_assertion: false if_true_explain_spec_basis: "" ``` + +## 2026-10-01 — Check-subject context B1 allocation-bound correction + +```yaml +test_integrity_note: + change_type: new_tests + scenarios: + - id: SCN-check-subject-context-v1-refusal + given: Captured metadata bytes larger than the fixed 1 MiB v1 frame limit + when: Parsing or E/S/A digest calculation is requested + then: Both reject before Buffer copying, hashing, or frame parsing + observable_outcomes: + - "MANAGED_SUBJECT_METADATA_FRAME_TOO_LARGE with zero observed Buffer.from copies" + determinism_controls: + - Fixed in-memory oversized buffer and temporary Buffer.from observation; no database, provider, network, retry, or sleep + anti_cheat_rationale: + prevents: + - Copying caller-controlled oversized metadata before the protocol resource bound applies + - Hashing or parsing bytes that the v1 contract must reject + relaxation: + did_relax_any_assertion: false + if_true_explain_spec_basis: "" +```