@ai-ecoverse/slicc-browsers 1.21.0 → 1.21.1

package/README.md

@@ -7,7 +7,7 @@ The browser knowledge that SLICC's tools share. SLICC drives a real Chromium bro
 - which origins browser control must **never** touch, starting with seven's own origin and the vault;
 - how to prove that a CDP guard really keeps a client away from them.
 
-These programs can't share code, so they share data: one catalog, four sets of test vectors and their JSON schemas, published as a Go module, a Rust crate and an npm package at the same version.
+These programs can't share code, so they share data: one catalog, four vector sets and schemas, as a Go module, Rust crate and npm package at one version.
 
 | who | uses it for |
 | --- | --- |

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.21.0",
+  "setVersion": "1.21.1",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",
@@ -26267,7 +26267,7 @@
         {
           "cdp": "Page.addScriptToEvaluateOnNewDocument",
           "params": {
-            "source": "// slicc
fetch(new URL('/doc?n=bound-ls-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-ls-{tag}\n",
+            "source": "// slicc
fetch\u2028fetch(new URL('/doc?n=bound-ls-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-ls-{tag}\n",
             "worldName": "slicc-bound-ls-{tag}"
           },
           "as": "boundLs",
@@ -26279,7 +26279,7 @@
         {
           "cdp": "Page.addScriptToEvaluateOnNewDocument",
           "params": {
-            "source": "// slicc
fetch(new URL('/doc?n=bound-ps-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-ps-{tag}\n",
+            "source": "// slicc
fetch\u2029fetch(new URL('/doc?n=bound-ps-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-ps-{tag}\n",
             "worldName": "slicc-bound-ps-{tag}"
           },
           "as": "boundPs",
@@ -26315,7 +26315,7 @@
         {
           "cdp": "Page.addScriptToEvaluateOnNewDocument",
           "params": {
-            "source": "fetch(new URL('/doc?n=bound-bom-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-bom-{tag}\n",
+            "source": "\ufefffetch(new URL('/doc?n=bound-bom-{tag}', location.href)).catch(()=>{})\n//# sourceURL=slicc-bom-{tag}\n",
             "worldName": "slicc-bound-bom-{tag}"
           },
           "as": "boundBom",
@@ -26528,7 +26528,12 @@
       "trigger": [
         {
           "page": "navigate",
-          "url": "{target}/doc?n={tag}"
+          "url": "{target}/doc?n={tag}",
+          "as": "nav",
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
+          }
         },
         {
           "settle": {
@@ -26569,6 +26574,10 @@
       "live": "the stand-in served {target}/doc?n={tag}, or the guard refused the protected navigation (pre + blocked), or refused a refusable setup step",
       "liveCheck": {
         "any": [
+          {
+            "refused": ["nav"],
+            "observer": "client"
+          },
           {
             "loaded": "{target}/doc?n={tag}",
             "observer": "fixture"
@@ -26631,6 +26640,137 @@
       },
       "designDependent": ["loaded"]
     },
+    {
+      "id": "E7.init-world-carry.script",
+      "family": "E",
+      "kind": "cdp",
+      "scope": "any",
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/doc?n=start-{tag}"
+        },
+        {
+          "observer": "watch"
+        },
+        {
+          "cdp": "Page.enable"
+        },
+        {
+          "cdp": "Runtime.enable"
+        },
+        {
+          "cdp": "Page.addScriptToEvaluateOnNewDocument",
+          "params": {
+            "source": "",
+            "worldName": "slicc-carry-{tag}"
+          },
+          "as": "world",
+          "requires": ["stockSetup"]
+        }
+      ],
+      "trigger": [
+        {
+          "page": "href",
+          "url": "{target}/doc?n={tag}"
+        },
+        {
+          "settle": {
+            "title": "doc",
+            "ms": 5000,
+            "or": {
+              "served": "{target}/doc?n={tag}",
+              "observer": "fixture"
+            }
+          }
+        },
+        {
+          "settle": {
+            "ms": 500
+          }
+        }
+      ],
+      "targets": ["seven", "vault"],
+      "requires": ["stockSetup"],
+      "observe": {
+        "worldOnProtected": {
+          "means": "the unguarded observer saw the named world created on {target}",
+          "check": {
+            "world": "slicc-carry-{tag}",
+            "origin": "{target}",
+            "observer": "unguarded"
+          }
+        },
+        "loaded": {
+          "means": "the stand-in served {target}/doc?n={tag}",
+          "dependsOn": [],
+          "check": {
+            "served": "{target}/doc?n={tag}",
+            "observer": "fixture"
+          }
+        }
+      },
+      "live": "the stand-in served the protected document, or the guard refused that load (pre + blocked)",
+      "liveCheck": {
+        "any": [
+          {
+            "loaded": "{target}/doc?n={tag}",
+            "observer": "fixture"
+          },
+          {
+            "all": [
+              {
+                "pre": "{target}/doc?n={tag}",
+                "observer": "fixture"
+              },
+              {
+                "any": [
+                  {
+                    "blocked": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page",
+                      "frame": false
+                    },
+                    "observer": "client"
+                  },
+                  {
+                    "blocked": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page",
+                      "frame": false
+                    },
+                    "observer": "unguarded"
+                  },
+                  {
+                    "history": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page"
+                    },
+                    "observer": "unguarded"
+                  }
+                ],
+                "observer": "client"
+              }
+            ],
+            "observer": "client"
+          }
+        ],
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "worldOnProtected": true,
+          "loaded": true
+        }
+      },
+      "expected": {
+        "worldOnProtected": false,
+        "loaded": "either"
+      },
+      "designDependent": ["loaded"]
+    },
     {
       "id": "E7.init-world-bfcache",
       "family": "E",
@@ -26663,7 +26803,12 @@
       "trigger": [
         {
           "page": "navigate",
-          "url": "{target}/bfcache?n={tag}-p"
+          "url": "{target}/bfcache?n={tag}-p",
+          "as": "nav",
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
+          }
         },
         {
           "settle": {
@@ -26728,12 +26873,17 @@
           "check": {
             "served": "{target}/bfcache?n={tag}-p",
             "observer": "fixture"
-          }
+          },
+          "dependsOn": []
         }
       },
       "live": "the stand-in served the protected bfcache document, or the guard refused that navigation (pre + blocked), or refused a refusable setup step",
       "liveCheck": {
         "any": [
+          {
+            "refused": ["nav"],
+            "observer": "client"
+          },
           {
             "loaded": "{target}/bfcache?n={tag}-p",
             "observer": "fixture"
@@ -26799,22 +26949,18 @@
       "designDependent": ["loaded"]
     },
     {
-      "id": "E7.init-world-error",
+      "id": "E7.init-world-bfcache.script",
       "family": "E",
       "kind": "cdp",
       "scope": "any",
       "setup": [
         {
           "page": "tab",
-          "url": "{ordinary}/doc?n=start-{tag}"
+          "url": "{ordinary}/bfcache?n={tag}-start"
         },
         {
           "observer": "watch"
         },
-        {
-          "observer": "fail",
-          "url": "{target}/doc*"
-        },
         {
           "cdp": "Page.enable"
         },
@@ -26825,30 +26971,65 @@
           "cdp": "Page.addScriptToEvaluateOnNewDocument",
           "params": {
             "source": "",
-            "worldName": "slicc-error-{tag}"
+            "worldName": "slicc-bf-{tag}"
           },
           "as": "world",
           "requires": ["stockSetup"]
         }
       ],
       "trigger": [
+        {
+          "page": "href",
+          "url": "{target}/bfcache?n={tag}-p"
+        },
+        {
+          "settle": {
+            "ms": 5000,
+            "or": {
+              "served": "{target}/bfcache?n={tag}-p",
+              "observer": "fixture"
+            }
+          }
+        },
         {
           "page": "navigate",
-          "url": "{target}/doc?n={tag}"
+          "url": "{ordinary}/bfcache?n={tag}-b"
         },
         {
           "settle": {
-            "ms": 5000
+            "ms": 5000,
+            "or": {
+              "served": "{ordinary}/bfcache?n={tag}-b",
+              "observer": "fixture"
+            }
+          }
+        },
+        {
+          "observer": "watch"
+        },
+        {
+          "cdp": "Runtime.evaluate",
+          "params": {
+            "expression": "history.back()",
+            "returnByValue": true
+          },
+          "as": "back"
+        },
+        {
+          "settle": {
+            "ms": 3000
           }
         }
       ],
       "targets": ["seven", "vault"],
       "requires": ["stockSetup"],
       "observe": {
-        "worldOnError": {
-          "means": "the unguarded observer saw the admitted no-code world on Chrome's error page for the failed {target} navigation",
+        "worldOnProtected": {
+          "means": "after bfcache restore the unguarded observer saw the named no-code world on the protected document",
           "check": {
-            "world": "slicc-error-{tag}",
+            "world": "slicc-bf-{tag}",
+            "origin": "{target}",
+            "afterClear": true,
             "observer": "unguarded"
           }
         },
@@ -26859,22 +27040,527 @@
             "observer": "fixture"
           }
         },
-        "pre": {
-          "means": "the stand-in saw a pre-request for {target}/doc?n={tag}",
-          "dependsOn": [],
+        "loaded": {
+          "means": "the stand-in served the protected bfcache document",
           "check": {
-            "pre": "{target}/doc?n={tag}",
+            "served": "{target}/bfcache?n={tag}-p",
             "observer": "fixture"
-          }
+          },
+          "dependsOn": []
         }
       },
-      "live": "the runner saw a pre-request for the protected URL, or the guard refused the world",
+      "live": "the stand-in served the protected document, or the guard refused that load (pre + blocked)",
       "liveCheck": {
         "any": [
           {
-            "pre": "{target}/doc?n={tag}",
+            "loaded": "{target}/bfcache?n={tag}-p",
             "observer": "fixture"
           },
+          {
+            "all": [
+              {
+                "pre": "{target}/bfcache?n={tag}-p",
+                "observer": "fixture"
+              },
+              {
+                "any": [
+                  {
+                    "blocked": {
+                      "url": "{target}/bfcache?n={tag}-p",
+                      "session": "page",
+                      "frame": false
+                    },
+                    "observer": "client"
+                  },
+                  {
+                    "blocked": {
+                      "url": "{target}/bfcache?n={tag}-p",
+                      "session": "page",
+                      "frame": false
+                    },
+                    "observer": "unguarded"
+                  },
+                  {
+                    "history": {
+                      "url": "{target}/bfcache?n={tag}-p",
+                      "session": "page"
+                    },
+                    "observer": "unguarded"
+                  }
+                ],
+                "observer": "client"
+              }
+            ],
+            "observer": "client"
+          }
+        ],
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "worldOnProtected": true,
+          "beacon": false,
+          "loaded": true
+        }
+      },
+      "expected": {
+        "worldOnProtected": false,
+        "beacon": false,
+        "loaded": "either"
+      },
+      "designDependent": ["loaded"]
+    },
+    {
+      "id": "E7.init-world-error",
+      "family": "E",
+      "kind": "cdp",
+      "scope": "any",
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/doc?n=start-{tag}"
+        },
+        {
+          "observer": "watch"
+        },
+        {
+          "observer": "fail",
+          "url": "{target}/doc*"
+        },
+        {
+          "cdp": "Page.enable"
+        },
+        {
+          "cdp": "Runtime.enable"
+        },
+        {
+          "cdp": "Page.addScriptToEvaluateOnNewDocument",
+          "params": {
+            "source": "",
+            "worldName": "slicc-error-{tag}"
+          },
+          "as": "world",
+          "requires": ["stockSetup"]
+        }
+      ],
+      "trigger": [
+        {
+          "page": "navigate",
+          "url": "{target}/doc?n={tag}",
+          "as": "nav",
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
+          }
+        },
+        {
+          "settle": {
+            "ms": 5000
+          }
+        }
+      ],
+      "targets": ["seven", "vault"],
+      "requires": ["stockSetup"],
+      "observe": {
+        "worldOnError": {
+          "means": "the unguarded observer saw the admitted no-code world on Chrome's error page for the failed {target} navigation",
+          "check": {
+            "world": "slicc-error-{tag}",
+            "observer": "unguarded"
+          },
+          "dependsOn": ["nav"]
+        },
+        "beacon": {
+          "means": "a beacon from {target}",
+          "check": {
+            "beacon": "{target}",
+            "observer": "fixture"
+          }
+        },
+        "pre": {
+          "means": "the stand-in saw a pre-request for {target}/doc?n={tag}",
+          "dependsOn": [],
+          "check": {
+            "pre": "{target}/doc?n={tag}",
+            "observer": "fixture"
+          }
+        }
+      },
+      "live": "the runner saw a pre-request for the protected URL, or the guard refused the world, or the guard refused the protected navigation command",
+      "liveCheck": {
+        "any": [
+          {
+            "refused": ["nav"],
+            "observer": "client"
+          },
+          {
+            "pre": "{target}/doc?n={tag}",
+            "observer": "fixture"
+          },
+          {
+            "registration": "any",
+            "observer": "client"
+          }
+        ],
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "worldOnError": true,
+          "beacon": false,
+          "pre": true
+        }
+      },
+      "expected": {
+        "worldOnError": true,
+        "beacon": false,
+        "pre": "either"
+      },
+      "designDependent": ["pre"]
+    },
+    {
+      "id": "E7.init-world-error.script",
+      "family": "E",
+      "kind": "cdp",
+      "scope": "any",
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/doc?n=start-{tag}"
+        },
+        {
+          "observer": "watch"
+        },
+        {
+          "observer": "fail",
+          "url": "{target}/doc*"
+        },
+        {
+          "cdp": "Page.enable"
+        },
+        {
+          "cdp": "Runtime.enable"
+        },
+        {
+          "cdp": "Page.addScriptToEvaluateOnNewDocument",
+          "params": {
+            "source": "",
+            "worldName": "slicc-error-{tag}"
+          },
+          "as": "world",
+          "requires": ["stockSetup"]
+        }
+      ],
+      "trigger": [
+        {
+          "page": "href",
+          "url": "{target}/doc?n={tag}"
+        },
+        {
+          "settle": {
+            "ms": 5000
+          }
+        }
+      ],
+      "targets": ["seven", "vault"],
+      "requires": ["stockSetup"],
+      "observe": {
+        "worldOnError": {
+          "means": "the unguarded observer saw the admitted no-code world on Chrome's error page for the failed {target} navigation",
+          "check": {
+            "world": "slicc-error-{tag}",
+            "observer": "unguarded"
+          }
+        },
+        "beacon": {
+          "means": "a beacon from {target}",
+          "check": {
+            "beacon": "{target}",
+            "observer": "fixture"
+          }
+        },
+        "pre": {
+          "means": "the stand-in saw a pre-request for {target}/doc?n={tag}",
+          "dependsOn": [],
+          "check": {
+            "pre": "{target}/doc?n={tag}",
+            "observer": "fixture"
+          }
+        }
+      },
+      "live": "the runner saw a pre-request for the protected URL, or refused that load (pre + blocked)",
+      "liveCheck": {
+        "any": [
+          {
+            "pre": "{target}/doc?n={tag}",
+            "observer": "fixture"
+          },
+          {
+            "all": [
+              {
+                "pre": "{target}/doc?n={tag}",
+                "observer": "fixture"
+              },
+              {
+                "any": [
+                  {
+                    "blocked": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page",
+                      "frame": false
+                    },
+                    "observer": "client"
+                  },
+                  {
+                    "blocked": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page",
+                      "frame": false
+                    },
+                    "observer": "unguarded"
+                  },
+                  {
+                    "history": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page"
+                    },
+                    "observer": "unguarded"
+                  }
+                ],
+                "observer": "client"
+              }
+            ],
+            "observer": "client"
+          }
+        ],
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "worldOnError": true,
+          "beacon": false,
+          "pre": true
+        }
+      },
+      "expected": {
+        "worldOnError": true,
+        "beacon": false,
+        "pre": "either"
+      },
+      "designDependent": ["pre"]
+    },
+    {
+      "id": "E7.emulation-carry",
+      "family": "E",
+      "kind": "cdp",
+      "scope": "any",
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/doc?n=start-{tag}"
+        },
+        {
+          "cdp": "Page.enable"
+        },
+        {
+          "cdp": "Emulation.setFocusEmulationEnabled",
+          "params": {
+            "enabled": true
+          },
+          "as": "focus",
+          "requires": ["stockSetup"]
+        },
+        {
+          "cdp": "Emulation.setEmulatedMedia",
+          "params": {
+            "media": "",
+            "features": [
+              {
+                "name": "prefers-color-scheme",
+                "value": "light"
+              },
+              {
+                "name": "prefers-reduced-motion",
+                "value": "reduce"
+              },
+              {
+                "name": "forced-colors",
+                "value": "none"
+              },
+              {
+                "name": "prefers-contrast",
+                "value": "no-preference"
+              }
+            ]
+          },
+          "as": "media",
+          "requires": ["stockSetup"]
+        },
+        {
+          "cdp": "Emulation.setDeviceMetricsOverride",
+          "params": {
+            "width": 1001,
+            "height": 601,
+            "deviceScaleFactor": 1,
+            "mobile": false,
+            "screenWidth": 1001,
+            "screenHeight": 601
+          },
+          "as": "metrics",
+          "requires": ["stockSetup"]
+        },
+        {
+          "cdp": "Emulation.setTouchEmulationEnabled",
+          "params": {
+            "enabled": true,
+            "maxTouchPoints": 2
+          },
+          "as": "touch",
+          "requires": ["stockSetup"]
+        }
+      ],
+      "trigger": [
+        {
+          "page": "navigate",
+          "url": "{target}/doc?n={tag}",
+          "as": "nav",
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
+          }
+        },
+        {
+          "settle": {
+            "ms": 5000,
+            "or": {
+              "served": "{target}/doc?n={tag}",
+              "observer": "fixture"
+            }
+          }
+        }
+      ],
+      "targets": ["seven", "vault"],
+      "requires": ["stockSetup"],
+      "observe": {
+        "focused": {
+          "means": "the unguarded observer still reads focus emulation on the document after the protected navigation attempt",
+          "check": {
+            "expression": "document.hasFocus()",
+            "equals": true,
+            "via": "unguarded",
+            "observer": "unguarded"
+          },
+          "dependsOn": ["nav"]
+        },
+        "media": {
+          "means": "the unguarded observer matches prefers-reduced-motion: reduce on {target}",
+          "check": {
+            "expression": "matchMedia('(prefers-reduced-motion: reduce)').matches",
+            "equals": true,
+            "via": "unguarded",
+            "observer": "unguarded"
+          },
+          "dependsOn": ["nav"]
+        },
+        "viewport": {
+          "means": "the unguarded observer still reads the admitted viewport override after the protected navigation attempt",
+          "check": {
+            "expression": "innerWidth + 'x' + innerHeight",
+            "equals": "1001x601",
+            "via": "unguarded",
+            "observer": "unguarded"
+          },
+          "dependsOn": ["nav"]
+        },
+        "touch": {
+          "means": "the unguarded observer reads navigator.maxTouchPoints as 2 on {target}",
+          "check": {
+            "expression": "navigator.maxTouchPoints",
+            "equals": 2,
+            "via": "unguarded",
+            "observer": "unguarded"
+          },
+          "dependsOn": ["nav"]
+        },
+        "beacon": {
+          "means": "a beacon from {target}",
+          "check": {
+            "beacon": "{target}",
+            "observer": "fixture"
+          }
+        },
+        "loaded": {
+          "means": "the stand-in served {target}/doc?n={tag}",
+          "dependsOn": [],
+          "check": {
+            "served": "{target}/doc?n={tag}",
+            "observer": "fixture"
+          }
+        },
+        "exposed": {
+          "means": "the unguarded observer finds the admitted display overrides (focus, media, viewport, touch) on a document at {target}",
+          "check": {
+            "expression": "location.href.includes('/doc?n={tag}') && location.href.includes(location.origin) && document.hasFocus() && matchMedia('(prefers-reduced-motion: reduce)').matches && innerWidth === 1001 && navigator.maxTouchPoints === 2",
+            "equals": true,
+            "via": "unguarded",
+            "observer": "unguarded"
+          }
+        }
+      },
+      "live": "the stand-in served {target}/doc?n={tag}, or the guard refused the protected navigation (pre + blocked), or refused a refusable setup step",
+      "liveCheck": {
+        "any": [
+          {
+            "refused": ["nav"],
+            "observer": "client"
+          },
+          {
+            "loaded": "{target}/doc?n={tag}",
+            "observer": "fixture"
+          },
+          {
+            "all": [
+              {
+                "pre": "{target}/doc?n={tag}",
+                "observer": "fixture"
+              },
+              {
+                "any": [
+                  {
+                    "blocked": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page",
+                      "frame": false
+                    },
+                    "observer": "client"
+                  },
+                  {
+                    "blocked": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page",
+                      "frame": false
+                    },
+                    "observer": "unguarded"
+                  },
+                  {
+                    "history": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page"
+                    },
+                    "observer": "unguarded"
+                  }
+                ],
+                "observer": "client"
+              }
+            ],
+            "observer": "client"
+          },
           {
             "registration": "any",
             "observer": "client"
@@ -26886,20 +27572,24 @@
         "origin": "ordinary",
         "via": "unguarded",
         "expected": {
-          "worldOnError": true,
+          "focused": true,
+          "media": true,
+          "viewport": true,
+          "touch": true,
+          "exposed": true,
           "beacon": false,
-          "pre": true
+          "loaded": true
         }
       },
       "expected": {
-        "worldOnError": true,
+        "exposed": false,
         "beacon": false,
-        "pre": "either"
+        "loaded": "either"
       },
-      "designDependent": ["pre"]
+      "designDependent": ["loaded"]
     },
     {
-      "id": "E7.emulation-carry",
+      "id": "E7.emulation-carry.script",
       "family": "E",
       "kind": "cdp",
       "scope": "any",
@@ -26970,12 +27660,11 @@
       ],
       "trigger": [
         {
-          "page": "navigate",
+          "page": "href",
           "url": "{target}/doc?n={tag}"
         },
         {
           "settle": {
-            "title": "doc",
             "ms": 5000,
             "or": {
               "served": "{target}/doc?n={tag}",
@@ -27048,7 +27737,7 @@
           }
         }
       },
-      "live": "the stand-in served {target}/doc?n={tag}, or the guard refused the protected navigation (pre + blocked), or refused a refusable setup step",
+      "live": "the stand-in served the protected document, or the guard refused that load (pre + blocked)",
       "liveCheck": {
         "any": [
           {
@@ -27091,10 +27780,6 @@
               }
             ],
             "observer": "client"
-          },
-          {
-            "registration": "any",
-            "observer": "client"
           }
         ],
         "observer": "client"
@@ -27143,12 +27828,142 @@
       "trigger": [
         {
           "page": "navigate",
+          "url": "{target}/doc?n={tag}",
+          "as": "nav",
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
+          }
+        },
+        {
+          "settle": {
+            "ms": 5000,
+            "or": {
+              "served": "{target}/doc?n={tag}",
+              "observer": "fixture"
+            }
+          }
+        },
+        {
+          "cdp": "Page.getFrameTree",
+          "as": "tree"
+        },
+        {
+          "cdp": "Page.createIsolatedWorld",
+          "params": {
+            "frameId": {
+              "$result": "tree",
+              "path": "result.frameTree.frame.id"
+            },
+            "worldName": "slicc-foreign-{tag}",
+            "grantUniveralAccess": true,
+            "contentSecurityPolicy": "default-src 'none'"
+          },
+          "as": "foreign",
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
+          },
+          "requires": ["stockSetup"]
+        }
+      ],
+      "targets": ["seven", "vault"],
+      "requires": ["stockSetup"],
+      "observe": {
+        "noContext": {
+          "means": "createIsolatedWorld on a protected document returned no executionContextId",
+          "dependsOn": ["nav", "foreign"],
+          "check": {
+            "any": [
+              {
+                "refused": ["foreign"],
+                "observer": "client"
+              },
+              {
+                "result": "foreign",
+                "path": "result.executionContextId",
+                "equals": {
+                  "$absentOr": 0
+                },
+                "observer": "client"
+              }
+            ],
+            "observer": "client"
+          }
+        },
+        "world": {
+          "means": "the unguarded observer saw world slicc-foreign-{tag} on the document",
+          "check": {
+            "world": "slicc-foreign-{tag}",
+            "observer": "unguarded",
+            "origin": "{target}"
+          }
+        }
+      },
+      "live": "the stand-in served {target}/doc?n={tag}, or the guard refused the protected navigation or the isolated world",
+      "liveCheck": {
+        "any": [
+          {
+            "refused": ["nav"],
+            "observer": "client"
+          },
+          {
+            "refused": ["foreign"],
+            "observer": "client"
+          },
+          {
+            "loaded": "{target}/doc?n={tag}",
+            "observer": "fixture"
+          }
+        ],
+        "observer": "client"
+      },
+      "control": {
+        "origin": "ordinary",
+        "via": "unguarded",
+        "expected": {
+          "noContext": false,
+          "world": true
+        }
+      },
+      "expected": {
+        "noContext": true,
+        "world": false
+      }
+    },
+    {
+      "id": "E7.isolated-foreign.script",
+      "family": "E",
+      "kind": "cdp",
+      "scope": "any",
+      "setup": [
+        {
+          "page": "tab",
+          "url": "{ordinary}/doc?n=start-{tag}"
+        },
+        {
+          "observer": "watch"
+        },
+        {
+          "cdp": "Page.enable",
+          "requires": ["stockSetup"]
+        },
+        {
+          "cdp": "Runtime.enable"
+        }
+      ],
+      "trigger": [
+        {
+          "page": "href",
           "url": "{target}/doc?n={tag}"
         },
         {
           "settle": {
-            "title": "doc",
             "ms": 5000,
+            "or": {
+              "served": "{target}/doc?n={tag}",
+              "observer": "fixture"
+            },
             "required": true
           }
         },
@@ -27203,15 +28018,61 @@
           "means": "the unguarded observer saw world slicc-foreign-{tag} on the document",
           "check": {
             "world": "slicc-foreign-{tag}",
-            "observer": "unguarded"
-          },
-          "dependsOn": []
+            "observer": "unguarded",
+            "origin": "{target}"
+          }
         }
       },
-      "live": "the stand-in served {target}/doc?n={tag}",
+      "live": "the stand-in served {target}/doc?n={tag}, or the guard refused the isolated world, or refused the protected document load (pre + blocked)",
       "liveCheck": {
-        "loaded": "{target}/doc?n={tag}",
-        "observer": "fixture"
+        "any": [
+          {
+            "refused": ["foreign"],
+            "observer": "client"
+          },
+          {
+            "loaded": "{target}/doc?n={tag}",
+            "observer": "fixture"
+          },
+          {
+            "all": [
+              {
+                "pre": "{target}/doc?n={tag}",
+                "observer": "fixture"
+              },
+              {
+                "any": [
+                  {
+                    "blocked": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page",
+                      "frame": false
+                    },
+                    "observer": "client"
+                  },
+                  {
+                    "blocked": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page",
+                      "frame": false
+                    },
+                    "observer": "unguarded"
+                  },
+                  {
+                    "history": {
+                      "url": "{target}/doc?n={tag}",
+                      "session": "page"
+                    },
+                    "observer": "unguarded"
+                  }
+                ],
+                "observer": "client"
+              }
+            ],
+            "observer": "client"
+          }
+        ],
+        "observer": "client"
       },
       "control": {
         "origin": "ordinary",
@@ -27554,7 +28415,11 @@
           },
           "session": "browser",
           "as": "created",
-          "requires": ["browserSession"]
+          "requires": ["browserSession"],
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
+          }
         },
         {
           "wait": 2000
@@ -27575,7 +28440,8 @@
               }
             },
             "observer": "client"
-          }
+          },
+          "dependsOn": ["created"]
         },
         "pageAttached": {
           "means": "the client kept a page session for the protected tab child",
@@ -27604,7 +28470,8 @@
             "via": "unguarded",
             "session": "child",
             "observer": "unguarded"
-          }
+          },
+          "dependsOn": ["created"]
         },
         "beacon": {
           "means": "a beacon from {target}",
@@ -27614,9 +28481,13 @@
           }
         }
       },
-      "live": "the stand-in served {target}/doc?n={tag}, or the tab was held without a client page session",
+      "live": "the stand-in served {target}/doc?n={tag}, or the tab was held without a client page session, or the guard refused creating the protected target",
       "liveCheck": {
         "any": [
+          {
+            "refused": ["created"],
+            "observer": "client"
+          },
           {
             "loaded": "{target}/doc?n={tag}",
             "observer": "fixture"
@@ -27839,7 +28710,11 @@
           },
           "session": "browser",
           "as": "created",
-          "requires": ["browserSession"]
+          "requires": ["browserSession"],
+          "refusable": true,
+          "refusal": {
+            "match": "refused"
+          }
         },
         {
           "wait": 2000
@@ -27860,7 +28735,8 @@
               }
             },
             "observer": "client"
-          }
+          },
+          "dependsOn": ["created"]
         },
         "pageAttached": {
           "means": "the client kept a page session for the protected tab child",
@@ -27889,7 +28765,8 @@
             "via": "unguarded",
             "session": "child",
             "observer": "unguarded"
-          }
+          },
+          "dependsOn": ["created"]
         },
         "beacon": {
           "means": "a beacon from {target}",
@@ -27899,9 +28776,13 @@
           }
         }
       },
-      "live": "the stand-in served {target}/doc?n={tag}, or the tab was held without a client page session",
+      "live": "the stand-in served {target}/doc?n={tag}, or the tab was held without a client page session, or the guard refused creating the protected target",
       "liveCheck": {
         "any": [
+          {
+            "refused": ["created"],
+            "observer": "client"
+          },
           {
             "loaded": "{target}/doc?n={tag}",
             "observer": "fixture"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.21.0",
+  "version": "1.21.1",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -73,7 +73,7 @@
     "validate": "node scripts/validate.mjs",
     "lint": "slicc-lint && test -z \"$(gofmt -l .)\" && go mod tidy -diff && go vet ./... && GOOS=darwin go vet ./... && GOOS=windows go vet ./... && golangci-lint run && cargo fmt --check && cargo clippy --all-features --all-targets -- -D warnings && cargo check --target wasm32-wasip1 --no-default-features && cargo check --target wasm32-wasip1 --features serde && cargo check --target wasm32-wasip1 --all-features",
     "format": "biome check --write . && gofmt -w . && cargo fmt",
-    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/validate-guard-stock-setup.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-reveal-overlap.test.mjs test/integration/guard-extension-frame-mouse.test.mjs test/integration/guard-extension-frames.test.mjs test/integration/guard-stock-setup.test.mjs test/integration/guard-stock-attack.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
+    "test": "export PATH=\"$HOME/.cargo/bin:$PATH\" && node --test --test-concurrency=1 test/integration/debugger-stage1-packaging.test.mjs test/integration/debugger-raw-control.test.mjs test/integration/debugger-cleanup.test.mjs test/integration/debugger-stage1-install-vectors.test.mjs test/integration/protected-premise.test.mjs test/integration/debugger-stage1-vectors.test.mjs test/integration/self-contained.test.mjs test/integration/seven-corpus.test.mjs test/integration/browser-runner.test.mjs test/integration/fixture-client.test.mjs test/integration/guard-redirect-carrier.test.mjs test/integration/guard-redirect-session-end.test.mjs test/integration/guard-redirect-history.test.mjs test/integration/guard-redirect-iframe.test.mjs test/integration/guard-incomplete.test.mjs test/integration/guard-unparseable-wipe.test.mjs test/integration/guard-browser-ui.test.mjs test/integration/guard-snapshot-settle.test.mjs test/integration/guard-stall.test.mjs test/integration/guard-forged.test.mjs test/integration/guard-trusted-emulation.test.mjs test/integration/guard-exit-steps.test.mjs test/integration/guard-exit-refusal.test.mjs test/integration/guard-frame-read.test.mjs test/integration/guard-bfcache.test.mjs test/integration/guard-bfcache-marker.test.mjs test/integration/guard-bfcache-history.test.mjs test/integration/guard-bfcache-review.test.mjs test/integration/guard-bfcache-quarantine.test.mjs test/integration/guard-error-page-navigation.test.mjs test/integration/guard-error-page-events.test.mjs test/integration/guard-error-page-reload.test.mjs test/integration/guard-world-paint.test.mjs test/integration/gates.test.mjs test/integration/validate.test.mjs test/integration/validate-guard-stock-setup.test.mjs test/integration/go.test.mjs test/integration/cargo.test.mjs test/integration/workflows.test.mjs test/integration/guard-refusable-nav.test.mjs test/integration/guard-sweep-union.test.mjs && node --test --test-concurrency=2 test/integration/guard-lifecycle.test.mjs test/integration/chromium-launch.test.mjs test/integration/guard-fit.test.mjs test/integration/guard-chain.test.mjs test/integration/guard-validation.test.mjs test/integration/guard-liveness.test.mjs test/integration/guard-observations.test.mjs test/integration/guard-child-latency.test.mjs test/integration/guard-adoption.test.mjs test/integration/guard-scoping.test.mjs test/integration/guard-late-pause.test.mjs test/integration/guard-legs.test.mjs test/integration/guard-fetch-enable.test.mjs test/integration/guard-diagnostics.test.mjs test/integration/guard-chrome.test.mjs test/integration/guard-worlds.test.mjs test/integration/guard-world-discovery.test.mjs test/integration/guard-world-guesses.test.mjs test/integration/guard-unparseable.test.mjs test/integration/guard-redirect-secret.test.mjs test/integration/guard-error-page.test.mjs test/integration/guard-discovery.test.mjs test/integration/guard-bfcache-chrome.test.mjs test/integration/guard-browser-page.test.mjs test/integration/guard-scales.test.mjs test/integration/guard-shared-log.test.mjs test/integration/guard-pre-beacon.test.mjs test/integration/guard-world-pause.test.mjs test/integration/guard-reveal-overlap.test.mjs test/integration/guard-extension-frame-mouse.test.mjs test/integration/guard-extension-frames.test.mjs test/integration/guard-stock-setup.test.mjs test/integration/guard-stock-attack.test.mjs test/integration/guard-parallel.test.mjs test/integration/guard-client-exit.test.mjs test/integration/guard-runner.test.mjs test/integration/guard-sweep-ordinary.test.mjs test/integration/guard-sweep-seven.test.mjs test/integration/guard-sweep-vault.test.mjs test/integration/guard-sweep-vault-x.test.mjs test/integration/guard-sweep-apex.test.mjs test/integration/guard-sweep-others.test.mjs",
     "test:unit": "mkdir -p coverage/unit && node --experimental-test-coverage --test --test-concurrency=1 --test-reporter=lcov --test-reporter-destination=coverage/unit/lcov.info test/unit/*.test.mjs && go test -race -cover ./...",
     "build": "go build ./... && cargo build --all-features && cargo build --target wasm32-wasip1 --all-features && npm pack --dry-run",
     "prepublishOnly": "node scripts/set-crate-version.mjs \"$npm_package_version\"",

package/schema/guard-vectors.schema.json

@@ -746,7 +746,28 @@
             },
             "requires": {
               "$ref": "#/$defs/requires"
+            },
+            "refusable": {
+              "const": true
+            },
+            "refusal": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["match"],
+              "properties": {
+                "onlyProtected": {
+                  "type": "boolean"
+                },
+                "match": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              }
             }
+          },
+          "dependentRequired": {
+            "refusable": ["refusal"],
+            "refusal": ["refusable"]
           }
         },
         {