@ai-ecoverse/slicc-browsers 1.16.2 → 1.18.0

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.16.2",
+  "setVersion": "1.18.0",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",
@@ -98,10 +98,14 @@
     "extensionWorld": "a browser hosting a foreign content-script extension isolated world on the ordinary fixture page",
     "discovery": "session-less Target.setDiscoverTargets and targetCreated/targetInfoChanged delivery; absent transports must emit neither event",
     "chromeUrlsAttach": "attaching to and driving chrome:// pages, which CDP over a DevTools port can and chrome.debugger can't",
-    "clientExit": "closing the guarded client mid-row: the client has close(), the clientFactory makes a fresh guarded client for the next leg, and an independent unguarded observer outlives it"
+    "clientExit": "closing the guarded client mid-row: the client has close(), the clientFactory makes a fresh guarded client for the next leg, and an independent unguarded observer outlives it",
+    "siteIsolationOff": "the browser runs without site isolation, so a cross-site iframe shares its parent's process",
+    "inboundDelay": "a harness gate holding browser-to-guard messages until release during a history restore, with seed and release evidence",
+    "forwardAudit": "a complete browser-side forwarding ledger for every history-restore probe"
   },
   "placeholders": {
     "target": "the target's origin; {plain} on the control",
+    "protectedTarget": "the row target's origin on both legs of a history-restore probe",
     "targetHost": "{target}'s host",
     "seven": "the seven target's origin",
     "vault": "the vault target's origin",
@@ -125,6 +129,292 @@
     "browserUi": "the id of one of Chrome's own browser_ui targets, which the runner looks up with its own CDP"
   },
   "vectors": [
+    {
+      "id": "C8.protected-bfcache-restore",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/doc?n={tag}-start"
+        }
+      ],
+      "trigger": [
+        {
+          "bfcacheRestore": "observer",
+          "origin": "{protectedTarget}",
+          "as": "restore",
+          "requires": ["inboundDelay"]
+        }
+      ],
+      "targets": ["seven", "vault"],
+      "requires": ["inboundDelay"],
+      "observe": {
+        "markerHidden": {
+          "means": "history restore: markerHidden",
+          "check": {
+            "result": "restore",
+            "path": "result.markerHidden",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "originHidden": {
+          "means": "history restore: originHidden",
+          "check": {
+            "result": "restore",
+            "path": "result.originHidden",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "sideEffectAbsent": {
+          "means": "history restore: sideEffectAbsent",
+          "check": {
+            "result": "restore",
+            "path": "result.sideEffectAbsent",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "probesRefusedOrUnforwarded": {
+          "means": "history restore: probesRefusedOrUnforwarded",
+          "check": {
+            "result": "restore",
+            "path": "result.probesRefusedOrUnforwarded",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "restoredObserved": {
+          "means": "history restore: restoredObserved",
+          "check": {
+            "result": "restore",
+            "path": "result.restoredObserved",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "sessionLive": {
+          "means": "history restore: sessionLive",
+          "check": {
+            "result": "restore",
+            "path": "result.sessionLive",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "probeRanInProtected": {
+          "means": "history restore: probeRanInProtected",
+          "check": {
+            "result": "restore",
+            "path": "result.probeRanInProtected",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "touched": {
+          "means": "history restore: touched",
+          "check": {
+            "result": "restore",
+            "path": "result.touched",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "methodsProven": {
+          "means": "the unguarded control exercises every probe method",
+          "check": {
+            "result": "restore",
+            "path": "result.methodsProven",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "commandsUnforwarded": {
+          "means": "no protected-window probe reached the browser while inbound delivery was held",
+          "requires": ["forwardAudit"],
+          "check": {
+            "result": "restore",
+            "path": "result.commandsUnforwarded",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the guarded session answers on ordinary B before the history trigger",
+      "liveCheck": {
+        "result": "restore",
+        "path": "result.sessionLive",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "restoredObserved": true,
+          "probeRanInProtected": true,
+          "touched": true,
+          "sessionLive": true,
+          "methodsProven": true
+        }
+      },
+      "expected": {
+        "markerHidden": true,
+        "originHidden": true,
+        "sideEffectAbsent": true,
+        "probesRefusedOrUnforwarded": true,
+        "restoredObserved": true,
+        "sessionLive": true,
+        "commandsUnforwarded": true
+      }
+    },
+    {
+      "id": "C8.protected-bfcache-restore.history",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/doc?n={tag}-start"
+        }
+      ],
+      "trigger": [
+        {
+          "bfcacheRestore": "history",
+          "origin": "{protectedTarget}",
+          "as": "restore",
+          "requires": ["inboundDelay"]
+        }
+      ],
+      "targets": ["seven", "vault"],
+      "requires": ["inboundDelay"],
+      "observe": {
+        "markerHidden": {
+          "means": "history restore: markerHidden",
+          "check": {
+            "result": "restore",
+            "path": "result.markerHidden",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "originHidden": {
+          "means": "history restore: originHidden",
+          "check": {
+            "result": "restore",
+            "path": "result.originHidden",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "sideEffectAbsent": {
+          "means": "history restore: sideEffectAbsent",
+          "check": {
+            "result": "restore",
+            "path": "result.sideEffectAbsent",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "probesRefusedOrUnforwarded": {
+          "means": "history restore: probesRefusedOrUnforwarded",
+          "check": {
+            "result": "restore",
+            "path": "result.probesRefusedOrUnforwarded",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "restoredObserved": {
+          "means": "history restore: restoredObserved",
+          "check": {
+            "result": "restore",
+            "path": "result.restoredObserved",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "sessionLive": {
+          "means": "history restore: sessionLive",
+          "check": {
+            "result": "restore",
+            "path": "result.sessionLive",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "probeRanInProtected": {
+          "means": "history restore: probeRanInProtected",
+          "check": {
+            "result": "restore",
+            "path": "result.probeRanInProtected",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "touched": {
+          "means": "history restore: touched",
+          "check": {
+            "result": "restore",
+            "path": "result.touched",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "methodsProven": {
+          "means": "the unguarded control exercises every probe method",
+          "check": {
+            "result": "restore",
+            "path": "result.methodsProven",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "commandsUnforwarded": {
+          "means": "no protected-window probe reached the browser while inbound delivery was held",
+          "requires": ["forwardAudit"],
+          "check": {
+            "result": "restore",
+            "path": "result.commandsUnforwarded",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the guarded session answers on ordinary B before the history trigger",
+      "liveCheck": {
+        "result": "restore",
+        "path": "result.sessionLive",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "restoredObserved": true,
+          "probeRanInProtected": true,
+          "touched": true,
+          "sessionLive": true,
+          "methodsProven": true
+        }
+      },
+      "expected": {
+        "markerHidden": true,
+        "originHidden": true,
+        "sideEffectAbsent": true,
+        "probesRefusedOrUnforwarded": true,
+        "restoredObserved": true,
+        "sessionLive": true,
+        "commandsUnforwarded": true
+      }
+    },
     {
       "id": "C2.redirect-body",
       "family": "C",
@@ -13042,6 +13332,524 @@
         "observer": "client"
       }
     },
+    {
+      "id": "C4.iframe-preattach.blank",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "frameRead": "blank",
+          "from": "{ordinary-same-site}",
+          "on": "guarded",
+          "as": "frames"
+        },
+        {
+          "frameRead": "blank",
+          "from": "{plain}",
+          "on": "control",
+          "as": "frames"
+        }
+      ],
+      "targets": ["seven"],
+      "observe": {
+        "live": {
+          "means": "the observer saw the protected frame's about:blank child and its marker in the page's process",
+          "check": {
+            "result": "frames",
+            "path": "result.live",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "frameTreeShown": {
+          "means": "the client's Page.getFrameTree showed the child's marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.frameTreeShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "axFullShown": {
+          "means": "the client's frame-scoped Accessibility.getFullAXTree showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.axFullShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "axPartialShown": {
+          "means": "the client's Accessibility.getPartialAXTree of the marker node showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.axPartialShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "documentShown": {
+          "means": "the client's pierced DOM.getDocument showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.documentShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "nodeShown": {
+          "means": "the client's DOM.describeNode and DOM.getOuterHTML of the child's nodes showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.nodeShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "snapshotShown": {
+          "means": "the client's DOMSnapshot.captureSnapshot showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.snapshotShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "eventsShown": {
+          "means": "an event on the client's session showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.eventsShown",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the independent observer, before the client attaches, sees {target}'s about:blank child frame and its marker in the page's own process through every read",
+      "liveCheck": {
+        "result": "frames",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "live": true,
+          "frameTreeShown": true,
+          "axFullShown": true,
+          "axPartialShown": true,
+          "documentShown": true,
+          "nodeShown": true,
+          "snapshotShown": true
+        }
+      },
+      "expected": {
+        "live": true,
+        "frameTreeShown": false,
+        "axFullShown": false,
+        "axPartialShown": false,
+        "documentShown": false,
+        "nodeShown": false,
+        "snapshotShown": false,
+        "eventsShown": false
+      }
+    },
+    {
+      "id": "C4.iframe-preattach.srcdoc",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "frameRead": "srcdoc",
+          "from": "{ordinary-same-site}",
+          "on": "guarded",
+          "as": "frames"
+        },
+        {
+          "frameRead": "srcdoc",
+          "from": "{plain}",
+          "on": "control",
+          "as": "frames"
+        }
+      ],
+      "targets": ["seven"],
+      "observe": {
+        "live": {
+          "means": "the observer saw the protected frame's about:srcdoc child and its marker in the page's process",
+          "check": {
+            "result": "frames",
+            "path": "result.live",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "frameTreeShown": {
+          "means": "the client's Page.getFrameTree showed the child's marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.frameTreeShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "axFullShown": {
+          "means": "the client's frame-scoped Accessibility.getFullAXTree showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.axFullShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "axPartialShown": {
+          "means": "the client's Accessibility.getPartialAXTree of the marker node showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.axPartialShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "documentShown": {
+          "means": "the client's pierced DOM.getDocument showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.documentShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "nodeShown": {
+          "means": "the client's DOM.describeNode and DOM.getOuterHTML of the child's nodes showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.nodeShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "snapshotShown": {
+          "means": "the client's DOMSnapshot.captureSnapshot showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.snapshotShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "eventsShown": {
+          "means": "an event on the client's session showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.eventsShown",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the independent observer, before the client attaches, sees {target}'s about:srcdoc child frame and its marker in the page's own process through every read",
+      "liveCheck": {
+        "result": "frames",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "live": true,
+          "frameTreeShown": true,
+          "axFullShown": true,
+          "axPartialShown": true,
+          "documentShown": true,
+          "nodeShown": true,
+          "snapshotShown": true
+        }
+      },
+      "expected": {
+        "live": true,
+        "frameTreeShown": false,
+        "axFullShown": false,
+        "axPartialShown": false,
+        "documentShown": false,
+        "nodeShown": false,
+        "snapshotShown": false,
+        "eventsShown": false
+      }
+    },
+    {
+      "id": "C4.iframe-preattach.blank.shared",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "frameRead": "blank",
+          "from": "{ordinary}",
+          "as": "frames",
+          "requires": ["siteIsolationOff"]
+        }
+      ],
+      "targets": ["seven", "vault", "vault-x", "apex"],
+      "requires": ["siteIsolationOff"],
+      "observe": {
+        "live": {
+          "means": "the observer saw the protected frame's about:blank child and its marker in the page's process",
+          "check": {
+            "result": "frames",
+            "path": "result.live",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "frameTreeShown": {
+          "means": "the client's Page.getFrameTree showed the child's marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.frameTreeShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "axFullShown": {
+          "means": "the client's frame-scoped Accessibility.getFullAXTree showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.axFullShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "axPartialShown": {
+          "means": "the client's Accessibility.getPartialAXTree of the marker node showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.axPartialShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "documentShown": {
+          "means": "the client's pierced DOM.getDocument showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.documentShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "nodeShown": {
+          "means": "the client's DOM.describeNode and DOM.getOuterHTML of the child's nodes showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.nodeShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "snapshotShown": {
+          "means": "the client's DOMSnapshot.captureSnapshot showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.snapshotShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "eventsShown": {
+          "means": "an event on the client's session showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.eventsShown",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the independent observer, before the client attaches, sees {target}'s about:blank child frame and its marker in the page's own process through every read",
+      "liveCheck": {
+        "result": "frames",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "live": true,
+          "frameTreeShown": true,
+          "axFullShown": true,
+          "axPartialShown": true,
+          "documentShown": true,
+          "nodeShown": true,
+          "snapshotShown": true
+        }
+      },
+      "expected": {
+        "live": true,
+        "frameTreeShown": false,
+        "axFullShown": false,
+        "axPartialShown": false,
+        "documentShown": false,
+        "nodeShown": false,
+        "snapshotShown": false,
+        "eventsShown": false
+      }
+    },
+    {
+      "id": "C4.iframe-preattach.srcdoc.shared",
+      "family": "C",
+      "kind": "cdp",
+      "scope": "any",
+      "defaultContext": true,
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/blank"
+        }
+      ],
+      "trigger": [
+        {
+          "frameRead": "srcdoc",
+          "from": "{ordinary}",
+          "as": "frames",
+          "requires": ["siteIsolationOff"]
+        }
+      ],
+      "targets": ["seven", "vault", "vault-x", "apex"],
+      "requires": ["siteIsolationOff"],
+      "observe": {
+        "live": {
+          "means": "the observer saw the protected frame's about:srcdoc child and its marker in the page's process",
+          "check": {
+            "result": "frames",
+            "path": "result.live",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "frameTreeShown": {
+          "means": "the client's Page.getFrameTree showed the child's marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.frameTreeShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "axFullShown": {
+          "means": "the client's frame-scoped Accessibility.getFullAXTree showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.axFullShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "axPartialShown": {
+          "means": "the client's Accessibility.getPartialAXTree of the marker node showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.axPartialShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "documentShown": {
+          "means": "the client's pierced DOM.getDocument showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.documentShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "nodeShown": {
+          "means": "the client's DOM.describeNode and DOM.getOuterHTML of the child's nodes showed the marker",
+          "check": {
+            "result": "frames",
+            "path": "result.nodeShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "snapshotShown": {
+          "means": "the client's DOMSnapshot.captureSnapshot showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.snapshotShown",
+            "equals": true,
+            "observer": "client"
+          }
+        },
+        "eventsShown": {
+          "means": "an event on the client's session showed the marker or the protected path, query or fragment",
+          "check": {
+            "result": "frames",
+            "path": "result.eventsShown",
+            "equals": true,
+            "observer": "client"
+          }
+        }
+      },
+      "live": "the independent observer, before the client attaches, sees {target}'s about:srcdoc child frame and its marker in the page's own process through every read",
+      "liveCheck": {
+        "result": "frames",
+        "path": "result.live",
+        "equals": true,
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "live": true,
+          "frameTreeShown": true,
+          "axFullShown": true,
+          "axPartialShown": true,
+          "documentShown": true,
+          "nodeShown": true,
+          "snapshotShown": true
+        }
+      },
+      "expected": {
+        "live": true,
+        "frameTreeShown": false,
+        "axFullShown": false,
+        "axPartialShown": false,
+        "documentShown": false,
+        "nodeShown": false,
+        "snapshotShown": false,
+        "eventsShown": false
+      }
+    },
     {
       "id": "C5.fulfill",
       "family": "C",