@ai-ecoverse/slicc-browsers 1.18.10 → 1.18.12

package/README.md

@@ -186,8 +186,12 @@ Each vector runs twice. The **control** runs it against an ordinary origin, wher
 
 When a vector compares ordinary and protected fixture markers, those markers do not contain one another. Protected-marker checks still examine complete probe replies, including errors, and the vector's client events and messages, including encoded values.
 
+A guard may refuse every client navigation to an `about:` URL that inherits an origin, such as `about:blank`. Refusing an ordinary navigation away from a protected page still fails.
+
 Client-exit controls use the unguarded observer; persistent-capability refusals are valid evidence, granted instruments must leave no effects after exit, and missing answers remain incomplete.
 
+Forwarding audits retain early snapshots as evidence. A complete final ledger supersedes an incomplete early snapshot, but any forwarding reported in either audit remains a failure. An incomplete final audit remains missing evidence.
+
 ### Running them
 
 The reference runner works with any guard that speaks CDP:

package/bfcache-restore.mjs

@@ -377,7 +377,7 @@ class Restore {
       this.result.probes.some((probe) => probe.forwarded);
     this.result.commandsUnforwarded = forwarded ? false : complete ? true : 'incomplete';
     if (final) this.finalAuditComplete = complete;
-    if (!complete) this.missingEvidence('forwarding audit unavailable');
+    if (final && !complete) this.missingEvidence('forwarding audit unavailable');
   }
 
   async judge() {

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.18.10",
+  "setVersion": "1.18.12",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.18.10",
+  "version": "1.18.12",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -79,8 +79,8 @@
     "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-cdp": "1.31.9",
-    "@ai-ecoverse/slicc-shared-web": "2.10.4",
+    "@ai-ecoverse/slicc-cdp": "1.33.1",
+    "@ai-ecoverse/slicc-shared-web": "2.11.0",
     "@biomejs/biome": "2.5.15",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",

package/protected-error-page.mjs

@@ -269,10 +269,9 @@ export async function protectedErrorPage({
       });
       result.reload = result.reloadedError;
     }
-    result.blank = (
-      await outcome(client.send('Page.navigate', { url: 'about:blank' }, session))
-    ).ok;
-    if (result.blank) result.blank = await loaded('about:blank');
+    const recovery = `${ordinary}/blank?n=${tag}-recover`;
+    result.blank = (await outcome(client.send('Page.navigate', { url: recovery }, session))).ok;
+    if (result.blank) result.blank = await loaded(recovery);
     result.attached = !client.events
       .slice(start)
       .some((e) => e.method === 'Target.detachedFromTarget' && e.params.sessionId === session);