@dzhechkov/skills-idea2prd 0.1.0 → 0.1.2

package/templates/.claude/skills/goap-research-ed25519/scripts/goap_planner.py

@@ -3,7 +3,7 @@
 GOAP Research Planner with Ed25519 Verification
 
 Enhanced Goal-Oriented Action Planning for research tasks with
-cryptographic verification support for anti-hallucination protection.
+cryptographic provenance and tamper-evidence support.
 
 Features:
 - A* search for optimal research paths
@@ -383,8 +383,8 @@ def find_research_plan(
         if goal_state.issubset(current_state):
             # Check if verification requirements are met
             if require_verification and current.unsigned_claims > 0:
-                # In strict/paranoid mode, penalize but don't reject
-                pass
+                # In strict/paranoid mode, unsigned or invalid claims are rejected.
+                continue
             
             # Reconstruct state progression
             states = [initial_state]
@@ -396,7 +396,7 @@ def find_research_plan(
             
             # Calculate confidence based on verification
             base_confidence = 1.0 - (current.unsigned_claims * 0.1)
-            estimated_confidence = max(0.5, min(1.0, base_confidence))
+            estimated_confidence = min(1.0, base_confidence)
             
             return ResearchPlan(
                 actions=current.actions,

package/templates/.claude/skills/goap-research-ed25519/scripts/test_ed25519_verifier.py

@@ -0,0 +1,112 @@
+#!/usr/bin/env python3
+"""Load-bearing security tests for ed25519_verifier.py."""
+
+import copy
+import unittest
+
+import ed25519_verifier as ev
+
+
+@unittest.skipIf(ev.CRYPTO_BACKEND is None, "No Ed25519 backend installed")
+class Ed25519VerifierSecurityTests(unittest.TestCase):
+    def make_pinned_pair(self):
+        signer = ev.Ed25519Verifier(auto_generate_keypair=True)
+        verifier = ev.Ed25519Verifier(
+            trusted_issuers={
+                "nature.com": {
+                    "pubkey_b64": signer.get_public_key_b64(),
+                    "status": "active",
+                }
+            }
+        )
+        return signer, verifier
+
+    def test_attacker_self_signed_trusted_string_rejected(self):
+        _, verifier = self.make_pinned_pair()
+        attacker = ev.Ed25519Verifier(auto_generate_keypair=True)
+
+        fact = attacker.create_issuer_signed_fact(
+            claim="Fabricated result was published",
+            source_url="https://nature.com/articles/example",
+            source_content="attacker-controlled content",
+            issuer="nature.com",
+        )
+
+        result = verifier.verify_fact(fact)
+
+        self.assertFalse(result.verified)
+        self.assertEqual(result.confidence, 0.0)
+        self.assertNotEqual(result.confidence, 0.95)
+
+    def test_fact_signed_by_pinned_trusted_key_verifies(self):
+        signer, verifier = self.make_pinned_pair()
+
+        fact = signer.create_issuer_signed_fact(
+            claim="Pinned-key fact",
+            source_url="https://nature.com/articles/example",
+            source_content="source content",
+            issuer="nature.com",
+        )
+
+        result = verifier.verify_fact(fact)
+
+        self.assertTrue(result.verified)
+        self.assertEqual(result.trust_class, ev.TRUST_CLASS_ISSUER_SIGNED)
+        self.assertEqual(result.confidence, 0.95)
+
+    def test_relabelled_or_moved_fact_fails(self):
+        signer, verifier = self.make_pinned_pair()
+        fact = signer.create_issuer_signed_fact(
+            claim="Pinned-key fact",
+            source_url="https://nature.com/articles/example",
+            source_content="source content",
+            issuer="nature.com",
+        )
+
+        relabelled = copy.deepcopy(fact)
+        relabelled.issuer = "science.org"
+        relabelled_result = verifier.verify_fact(relabelled)
+
+        moved = copy.deepcopy(fact)
+        moved.source_url = "https://nature.com/articles/other"
+        moved_result = verifier.verify_fact(moved)
+
+        self.assertFalse(relabelled_result.verified)
+        self.assertEqual(relabelled_result.confidence, 0.0)
+        self.assertFalse(moved_result.verified)
+        self.assertEqual(moved_result.confidence, 0.0)
+
+    def test_reordered_citation_chain_fails(self):
+        signer, verifier = self.make_pinned_pair()
+        chain = ev.CitationChain(chain_id="test-chain")
+
+        for index in range(3):
+            chain.add_fact(
+                signer.create_issuer_signed_fact(
+                    claim=f"Claim {index}",
+                    source_url=f"https://nature.com/articles/{index}",
+                    source_content=f"source content {index}",
+                    issuer="nature.com",
+                )
+            )
+
+        signer.sign_chain(chain)
+        ok, _, error = verifier.verify_citation_chain(chain, signer.get_public_key_b64())
+        self.assertTrue(ok, error)
+
+        reordered = ev.CitationChain(
+            chain_id=chain.chain_id,
+            facts=[chain.facts[1], chain.facts[0], chain.facts[2]],
+            chain_signature=chain.chain_signature,
+        )
+        reordered_ok, _, reordered_error = verifier.verify_citation_chain(
+            reordered,
+            signer.get_public_key_b64(),
+        )
+
+        self.assertFalse(reordered_ok)
+        self.assertIn("Invalid", reordered_error)
+
+
+if __name__ == "__main__":
+    unittest.main()