@oxdeai/conformance 1.3.0 → 2.0.0

package/vectors/key-lifecycle-verification.json

@@ -0,0 +1,131 @@
+{
+  "version": "1.0.0",
+  "description": "Key lifecycle conformance vectors for AuthorizationV1. Exercises keyIsActiveAt, findKeyInKeySets, and AUTH_KEY_INACTIVE / AUTH_KID_UNKNOWN enforcement. Verification time is KL_VERIFY_NOW = 1730000010. Key windows use KL_PAST = 1729992800 (2h before) and KL_FUTURE = 1730007200 (2h after).",
+  "vectors": [
+    {
+      "id": "key-lifecycle-001",
+      "description": "Active key, no time constraints. Key found, keyIsActiveAt returns true. Signature verifies. Expected: ok.",
+      "mode": "key-active",
+      "expected": {
+        "status": "ok",
+        "violations": []
+      }
+    },
+    {
+      "id": "key-lifecycle-002",
+      "description": "Revoked key. status=revoked causes keyIsActiveAt to return false immediately, regardless of time window. Expected: AUTH_KEY_INACTIVE.",
+      "mode": "key-revoked",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          {
+            "code": "AUTH_KEY_INACTIVE",
+            "message": "key is not active at verification time"
+          }
+        ]
+      }
+    },
+    {
+      "id": "key-lifecycle-003",
+      "description": "Key not yet active: not_before is in the future (KL_FUTURE > KL_VERIFY_NOW). keyIsActiveAt returns false. Expected: AUTH_KEY_INACTIVE.",
+      "mode": "key-not-before-future",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          {
+            "code": "AUTH_KEY_INACTIVE",
+            "message": "key is not active at verification time"
+          }
+        ]
+      }
+    },
+    {
+      "id": "key-lifecycle-004",
+      "description": "Key validity window expired: not_after is in the past (KL_PAST < KL_VERIFY_NOW). keyIsActiveAt returns false. Expected: AUTH_KEY_INACTIVE.",
+      "mode": "key-not-after-past",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          {
+            "code": "AUTH_KEY_INACTIVE",
+            "message": "key is not active at verification time"
+          }
+        ]
+      }
+    },
+    {
+      "id": "key-lifecycle-005",
+      "description": "Key within valid time window: not_before=KL_PAST, not_after=KL_FUTURE. Both bounds satisfied at KL_VERIFY_NOW. keyIsActiveAt returns true. Expected: ok.",
+      "mode": "key-valid-window",
+      "expected": {
+        "status": "ok",
+        "violations": []
+      }
+    },
+    {
+      "id": "key-lifecycle-006",
+      "description": "Key window fully expired: not_before=KL_PAST-3600, not_after=KL_PAST. not_after < KL_VERIFY_NOW. keyIsActiveAt returns false. Expected: AUTH_KEY_INACTIVE.",
+      "mode": "key-expired-window",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          {
+            "code": "AUTH_KEY_INACTIVE",
+            "message": "key is not active at verification time"
+          }
+        ]
+      }
+    },
+    {
+      "id": "key-lifecycle-007",
+      "description": "Retired key within validity window: status=retired, not_before=KL_PAST, not_after=KL_FUTURE. Retired keys are accepted during dual-sign overlap window. keyIsActiveAt returns true. Expected: ok.",
+      "mode": "key-retired-within-window",
+      "expected": {
+        "status": "ok",
+        "violations": []
+      }
+    },
+    {
+      "id": "key-lifecycle-008",
+      "description": "Retired key past validity window: status=retired, not_after=KL_PAST. Retirement window has closed. keyIsActiveAt returns false. Expected: AUTH_KEY_INACTIVE.",
+      "mode": "key-retired-past-window",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          {
+            "code": "AUTH_KEY_INACTIVE",
+            "message": "key is not active at verification time"
+          }
+        ]
+      }
+    },
+    {
+      "id": "key-lifecycle-009",
+      "description": "Revoked key with otherwise-valid time window: status=revoked, not_before=KL_PAST, not_after=KL_FUTURE. Revocation takes precedence over time bounds. keyIsActiveAt returns false immediately. Expected: AUTH_KEY_INACTIVE.",
+      "mode": "key-revoked-valid-window",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          {
+            "code": "AUTH_KEY_INACTIVE",
+            "message": "key is not active at verification time"
+          }
+        ]
+      }
+    },
+    {
+      "id": "key-lifecycle-010",
+      "description": "Known issuer, wrong kid: trustedKeySets contains the correct issuer but a different kid. findKeyInKeySets returns undefined. Expected: AUTH_KID_UNKNOWN.",
+      "mode": "wrong-kid-known-issuer",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          {
+            "code": "AUTH_KID_UNKNOWN",
+            "message": "kid not found for issuer/alg"
+          }
+        ]
+      }
+    }
+  ]
+}

package/vectors/profile-c-state-verification.json

@@ -0,0 +1,217 @@
+{
+  "description": "Portable Profile C state-hash semantics vectors for cross-language conformance (Go, Python). Modes 001–005 require only canonicalization-v1 and SHA-256. Modes 006–008 additionally require AuthorizationV1 Encoding B signature verification (alg='ed25519', expires_at, base64url signature, no domain prefix). The authoritative source for this corpus is docs/spec/test-vectors/profile-c-state-verification.json; packages/conformance/vectors/profile-c-state-verification.json is its generated secondary projection for package consumers.",
+  "encoding_b_notes": {
+    "alg": "ed25519 (lowercase — Sift-compatible Encoding B)",
+    "expiry_field": "expires_at (not expiry — Encoding B wire format)",
+    "signature_encoding": "base64url (RFC 4648 §5, no padding)",
+    "signing_payload": "All auth fields except signature.sig. signature becomes { alg, kid } with sig excluded.",
+    "signing_preimage": "canonicalJson(signingPayload) — NO domain prefix. Different from SignedKRLV1 which uses 'OXDEAI_KRL_V1\\n' prefix."
+  },
+  "hash_strategies": {
+    "core": "SHA-256(canonicalJson(state)) — standard OxDeAI state hash",
+    "provider": "SHA-256('PROVIDER:' + canonicalJson(state)) — simulates external provider algorithm",
+    "throws": "Simulates a computeStateHash failure; harness must return outcome 'compute-error' without computing any hash"
+  },
+  "outcomes": {
+    "compute-error": "computeStateHash threw — execution blocked fail-closed",
+    "ok": "Committed hash equals live-state hash — Profile C step 10 passes",
+    "state-hash-mismatch": "Committed hash does not equal live-state hash — Profile C step 10 blocks execution"
+  },
+  "portable": true,
+  "profile": "C",
+  "vectors": [
+    {
+      "description": "Core strategy: same state at signing and verification — hashes are identical, outcome ok.",
+      "expected": {
+        "status": "ok"
+      },
+      "hash_strategy": "core",
+      "id": "profile-c-001",
+      "mode": "live-state-match",
+      "state_input": {
+        "period": "p1",
+        "spent": 0
+      }
+    },
+    {
+      "description": "Core strategy: live state has advanced since signing — hashes differ, outcome state-hash-mismatch.",
+      "expected": {
+        "reason": "computeStateHash(liveState) does not equal authorization.state_hash",
+        "status": "state-hash-mismatch"
+      },
+      "hash_strategy": "core",
+      "id": "profile-c-002",
+      "live_state_input": {
+        "period": "p1",
+        "spent": 500000
+      },
+      "mode": "live-state-mismatch",
+      "state_input": {
+        "period": "p1",
+        "spent": 0
+      }
+    },
+    {
+      "description": "Provider hash committed at signing; core hash used at verification. Even with the same state, hashes differ — outcome state-hash-mismatch. Models a missing or wrong computeStateHash configuration.",
+      "expected": {
+        "reason": "provider hash committed; Core strategy used at verification produces a different hash",
+        "status": "state-hash-mismatch"
+      },
+      "id": "profile-c-003",
+      "mode": "hash-strategy-mismatch",
+      "signing_strategy": "provider",
+      "state_input": {
+        "period": "p1",
+        "spent": 0
+      },
+      "verify_strategy": "core"
+    },
+    {
+      "description": "computeStateHash throws — execution blocked fail-closed. Harness must return compute-error without computing any hash.",
+      "expected": {
+        "reason": "computeStateHash threw; execution blocked fail-closed",
+        "status": "compute-error"
+      },
+      "hash_strategy": "throws",
+      "id": "profile-c-004",
+      "mode": "compute-throws"
+    },
+    {
+      "description": "TOCTOU / stale state: authorization issued against an earlier state; live state has advanced to a different period and higher spend. Core hash of live state does not match committed hash — outcome state-hash-mismatch.",
+      "expected": {
+        "reason": "TOCTOU: live state has advanced since authorization was issued",
+        "status": "state-hash-mismatch"
+      },
+      "hash_strategy": "core",
+      "id": "profile-c-005",
+      "live_state_input": {
+        "period": "p2",
+        "spent": 5000000
+      },
+      "mode": "toctou-stale-state",
+      "state_input": {
+        "period": "p1",
+        "spent": 0
+      }
+    },
+    {
+      "auth": {
+        "audience": "merchant-gateway",
+        "auth_id": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+        "decision": "ALLOW",
+        "expires_at": 1730000060,
+        "intent_hash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "issued_at": 1730000000,
+        "issuer": "oxdeai.policy-engine",
+        "policy_id": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+        "signature": {
+          "alg": "ed25519",
+          "kid": "2026-01",
+          "sig": "jMyip7h-GMgl2nV_q8Cz-MuqbD4vgba6vseRejY13e-w8WZeW7UU7ft58JHJFJR0fyZ3NGXvjJBGeKSSJLThCA"
+        },
+        "state_hash": "6a3b184144ed303c66357aa212d7432be648b5a2b3b0d56974bc91ca7a6732c7"
+      },
+      "description": "Encoding B AuthorizationV1 (alg='ed25519', expires_at, base64url sig) + provider hash strategy, matching state. Harness: (1) verify Encoding B signature independently, (2) compute committedHash=providerHash(state_input), cross-check with auth.state_hash, (3) liveHash=providerHash(state_input) — same, outcome ok.",
+      "expected": {
+        "status": "ok"
+      },
+      "hash_strategy": "provider",
+      "id": "profile-c-006",
+      "mode": "encoding-b-live-state-match",
+      "opts": {
+        "now": 1730000010,
+        "trustedKey": {
+          "alg": "Ed25519",
+          "kid": "2026-01",
+          "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAWiMMGTYK7zzHwZXLzDpCshxAH6Lgx8gVsJaixePuY7g=\n-----END PUBLIC KEY-----"
+        }
+      },
+      "state_input": {
+        "period": "p1",
+        "spent": 0
+      }
+    },
+    {
+      "auth": {
+        "audience": "merchant-gateway",
+        "auth_id": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+        "decision": "ALLOW",
+        "expires_at": 1730000060,
+        "intent_hash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "issued_at": 1730000000,
+        "issuer": "oxdeai.policy-engine",
+        "policy_id": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+        "signature": {
+          "alg": "ed25519",
+          "kid": "2026-01",
+          "sig": "jMyip7h-GMgl2nV_q8Cz-MuqbD4vgba6vseRejY13e-w8WZeW7UU7ft58JHJFJR0fyZ3NGXvjJBGeKSSJLThCA"
+        },
+        "state_hash": "6a3b184144ed303c66357aa212d7432be648b5a2b3b0d56974bc91ca7a6732c7"
+      },
+      "description": "Encoding B AuthorizationV1 + provider hash strategy, stale state. Signature verifies. committedHash=providerHash({period:p1,spent:0}), liveHash=providerHash({period:p1,spent:250000}) — mismatch, outcome state-hash-mismatch.",
+      "expected": {
+        "reason": "Encoding B auth: live state mismatch detected at Profile C step 10",
+        "status": "state-hash-mismatch"
+      },
+      "hash_strategy": "provider",
+      "id": "profile-c-007",
+      "live_state_input": {
+        "period": "p1",
+        "spent": 250000
+      },
+      "mode": "encoding-b-live-state-mismatch",
+      "opts": {
+        "now": 1730000010,
+        "trustedKey": {
+          "alg": "Ed25519",
+          "kid": "2026-01",
+          "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAWiMMGTYK7zzHwZXLzDpCshxAH6Lgx8gVsJaixePuY7g=\n-----END PUBLIC KEY-----"
+        }
+      },
+      "state_input": {
+        "period": "p1",
+        "spent": 0
+      }
+    },
+    {
+      "auth": {
+        "audience": "merchant-gateway",
+        "auth_id": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+        "decision": "ALLOW",
+        "expires_at": 1730000060,
+        "intent_hash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "issued_at": 1730000000,
+        "issuer": "oxdeai.policy-engine",
+        "policy_id": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+        "signature": {
+          "alg": "ed25519",
+          "kid": "2026-01",
+          "sig": "jMyip7h-GMgl2nV_q8Cz-MuqbD4vgba6vseRejY13e-w8WZeW7UU7ft58JHJFJR0fyZ3NGXvjJBGeKSSJLThCA"
+        },
+        "state_hash": "6a3b184144ed303c66357aa212d7432be648b5a2b3b0d56974bc91ca7a6732c7"
+      },
+      "description": "Encoding B AuthorizationV1 + hash strategy mismatch: provider committed, core used for live verification. Signature verifies. committedHash=providerHash(state_input), liveHash=coreHash(state_input) — different algorithms, mismatch, outcome state-hash-mismatch.",
+      "expected": {
+        "reason": "Encoding B auth: computeStateHash strategy mismatch produces different hash",
+        "status": "state-hash-mismatch"
+      },
+      "id": "profile-c-008",
+      "mode": "encoding-b-hash-strategy-mismatch",
+      "opts": {
+        "now": 1730000010,
+        "trustedKey": {
+          "alg": "Ed25519",
+          "kid": "2026-01",
+          "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAWiMMGTYK7zzHwZXLzDpCshxAH6Lgx8gVsJaixePuY7g=\n-----END PUBLIC KEY-----"
+        }
+      },
+      "signing_strategy": "provider",
+      "state_input": {
+        "period": "p1",
+        "spent": 0
+      },
+      "verify_strategy": "core"
+    }
+  ],
+  "version": "1.1.0"
+}

package/vectors/signed-krl-verification.json

@@ -0,0 +1,103 @@
+{
+  "version": "1.0.0",
+  "description": "SignedKRLV1 verification conformance vectors. Artifacts are built dynamically by the validator using the KRL fixture key (krl-ed25519.test-only.fixture.ts, kid: krl-2026-01, issuer: krl.issuer). Fixed timestamps: KRL_T_ISSUED=1730000000, KRL_T_NOT_AFTER=1730003600, verify now=1730000010.",
+  "vectors": [
+    {
+      "id": "krl-001",
+      "mode": "valid",
+      "description": "Valid signed KRL — signature verifies, not expired, no regression",
+      "expected": {
+        "status": "ok",
+        "violations": []
+      }
+    },
+    {
+      "id": "krl-002",
+      "mode": "invalid-signature",
+      "description": "Tampered signature (last 4 bytes replaced) — Ed25519 verification fails",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          { "code": "KRL_SIG_INVALID", "message": "Ed25519 signature verification failed" }
+        ]
+      }
+    },
+    {
+      "id": "krl-003",
+      "mode": "expired",
+      "description": "Verification time is not_after + 1 — strict zero-tolerance expiry fires",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          { "code": "KRL_EXPIRED", "message": "KRL has expired" }
+        ]
+      }
+    },
+    {
+      "id": "krl-004",
+      "mode": "malformed-revoked-kids",
+      "description": "revoked_kids is a string, not an array — structural malformation",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          { "code": "KRL_MALFORMED", "message": "revoked_kids must be an array of strings" }
+        ]
+      }
+    },
+    {
+      "id": "krl-005",
+      "mode": "duplicate-revoked-kids",
+      "description": "revoked_kids contains [\"kid-1\", \"kid-1\"] — producers must deduplicate; verifier rejects",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          { "code": "KRL_MALFORMED", "message": "duplicate entry in revoked_kids" }
+        ]
+      }
+    },
+    {
+      "id": "krl-006",
+      "mode": "unknown-signing-kid",
+      "description": "signature.kid tampered to \"unknown-kid\" after signing — not found in trusted key sets",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          { "code": "KRL_UNKNOWN_SIGNING_KID", "message": "KRL signing kid not found in trusted key sets" }
+        ]
+      }
+    },
+    {
+      "id": "krl-007",
+      "mode": "signing-key-inactive",
+      "description": "Trusted key set contains the correct kid but with status: revoked — keyIsActiveAt returns false",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          { "code": "KRL_SIGNING_KEY_INACTIVE", "message": "KRL signing key is not active at verification time" }
+        ]
+      }
+    },
+    {
+      "id": "krl-008",
+      "mode": "unsupported-alg",
+      "description": "signature.alg is \"HMAC-SHA256\" — only Ed25519 is accepted for SignedKRLV1",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          { "code": "KRL_UNSUPPORTED_ALG", "message": "only Ed25519 is supported for SignedKRLV1 signing" }
+        ]
+      }
+    },
+    {
+      "id": "krl-009",
+      "mode": "version-regression",
+      "description": "krl_version=1 but previousKrlVersionByIssuer[krl.issuer]=5 — version went backwards",
+      "expected": {
+        "status": "invalid",
+        "violations": [
+          { "code": "KRL_VERSION_REGRESSION", "message": "krl_version 1 is less than the previously accepted version 5 for issuer \"krl.issuer\"" }
+        ]
+      }
+    }
+  ]
+}

package/vectors/trusted-time.json

@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.0.0",
+  "description": "Strict trusted-time conformance vectors. Every active vector is release-blocking. Pending vectors describe unsupported normative categories and never count as passing.",
+  "vectors": [
+    {"id":"tt-issuance-before","category":"authorization_issuance","status":"active","description":"Fresh intent before evaluation time.","input":{"intent_timestamp":1729999990,"evaluation_time":1730000000,"effective_ttl":60,"authorization_action":"EXECUTE"},"expected":{"decision":"ALLOW","reasons":[],"authorization_issued_at":1730000000,"authorization_expiry":1730000060}},
+    {"id":"tt-issuance-equal","category":"authorization_issuance","status":"active","description":"Intent and evaluation clocks equal.","input":{"intent_timestamp":1730000000,"evaluation_time":1730000000,"effective_ttl":60,"authorization_action":"EXECUTE"},"expected":{"decision":"ALLOW","reasons":[],"authorization_issued_at":1730000000,"authorization_expiry":1730000060}},
+    {"id":"tt-issuance-after","category":"authorization_issuance","status":"active","description":"Fresh intent after evaluation time.","input":{"intent_timestamp":1730000010,"evaluation_time":1730000000,"effective_ttl":60,"authorization_action":"EXECUTE"},"expected":{"decision":"ALLOW","reasons":[],"authorization_issued_at":1730000000,"authorization_expiry":1730000060}},
+    {"id":"tt-noninterference-earlier","category":"authorization_issuance","status":"active","description":"Earlier freshness-valid intent has the trusted issuance window.","comparison_group":"issuance-intent-noninterference","input":{"intent_timestamp":1729999980,"evaluation_time":1730000000,"effective_ttl":60,"authorization_action":"EXECUTE"},"expected":{"decision":"ALLOW","reasons":[],"authorization_issued_at":1730000000,"authorization_expiry":1730000060}},
+    {"id":"tt-noninterference-later","category":"authorization_issuance","status":"active","description":"Later freshness-valid intent has the trusted issuance window.","comparison_group":"issuance-intent-noninterference","input":{"intent_timestamp":1730000020,"evaluation_time":1730000000,"effective_ttl":60,"authorization_action":"EXECUTE"},"expected":{"decision":"ALLOW","reasons":[],"authorization_issued_at":1730000000,"authorization_expiry":1730000060}},
+    {"id":"tt-evaluation-sensitivity-first","category":"authorization_issuance","status":"active","description":"First trusted evaluation time.","comparison_group":"issuance-evaluation-sensitivity","input":{"intent_timestamp":1730000000,"evaluation_time":1730000000,"effective_ttl":60,"authorization_action":"EXECUTE"},"expected":{"decision":"ALLOW","reasons":[],"authorization_issued_at":1730000000,"authorization_expiry":1730000060}},
+    {"id":"tt-evaluation-sensitivity-second","category":"authorization_issuance","status":"active","description":"Advancing trusted time advances issuance.","comparison_group":"issuance-evaluation-sensitivity","input":{"intent_timestamp":1730000000,"evaluation_time":1730000010,"effective_ttl":60,"authorization_action":"EXECUTE"},"expected":{"decision":"ALLOW","reasons":[],"authorization_issued_at":1730000010,"authorization_expiry":1730000070}},
+    {"id":"tt-release-issuance","category":"authorization_issuance","status":"active","description":"RELEASE uses the shared trusted issuance block.","input":{"intent_timestamp":1730000001,"evaluation_time":1730000000,"effective_ttl":60,"authorization_action":"RELEASE"},"expected":{"decision":"ALLOW","reasons":[],"authorization_issued_at":1730000000,"authorization_expiry":1730000060}},
+    {"id":"tt-freshness-denial","category":"intent_freshness","status":"active","description":"Intent one second beyond future skew denies before issuance.","input":{"intent_timestamp":1730000301,"evaluation_time":1730000000,"max_clock_skew_seconds":300,"max_intent_age_seconds":300},"expected":{"decision":"DENY","reasons":["INTENT_FRESHNESS_FUTURE"]}},
+    {"id":"tt-deterministic","category":"determinism","status":"active","description":"Identical issuance inputs produce identical normalized output.","input":{"intent_timestamp":1730000005,"evaluation_time":1730000000,"effective_ttl":60,"repeat":2},"expected":{"decision":"ALLOW","reasons":[],"authorization_issued_at":1730000000,"authorization_expiry":1730000060,"identical_output":true}},
+    {"id":"tt-invalid-ttl-zero","category":"malformed_configuration","status":"active","description":"Zero fixed issuance TTL is rejected.","input":{"configuration_field":"authorization_ttl_seconds","configuration_value":0},"expected":{"throws":true,"error_includes":"authorization_ttl_seconds"}},
+    {"id":"tt-invalid-verifier-skew-fraction","category":"malformed_configuration","status":"active","description":"Fractional verifier future-issued skew is rejected.","input":{"configuration_field":"maxFutureIssuedAtSkewSeconds","configuration_value":1.5},"expected":{"throws":true,"error_includes":"maxFutureIssuedAtSkewSeconds"}},
+    {"id":"tt-expiry-overflow","category":"protocol_seconds_validation","status":"active","description":"Issuance refuses unsafe expiry arithmetic.","input":{"case":"issuance_expiry_overflow","intent_timestamp":9007199254740932,"evaluation_time":9007199254740932,"effective_ttl":60},"expected":{"throws":true,"error_includes":"safe integer"}},
+    {"id":"tt-protocol-negative-intent","category":"protocol_seconds_validation","status":"active","description":"Negative intent protocol seconds deny.","input":{"case":"intent_timestamp","intent_timestamp":-1,"evaluation_time":1730000000},"expected":{"decision":"DENY","reasons":["STATE_INVALID"]}},
+    {"id":"tt-protocol-fractional-intent","category":"protocol_seconds_validation","status":"active","description":"Fractional intent protocol seconds deny.","input":{"case":"intent_timestamp","intent_timestamp":1729999999.5,"evaluation_time":1730000000},"expected":{"decision":"DENY","reasons":["STATE_INVALID"]}},
+    {"id":"tt-protocol-negative-evaluation","category":"protocol_seconds_validation","status":"active","description":"Negative trusted evaluation time refuses evaluation.","input":{"case":"evaluation_time","intent_timestamp":1730000000,"evaluation_time":-1},"expected":{"throws":true,"error_includes":"evaluationTime"}},
+    {"id":"tt-neg-001","category":"intent_freshness","status":"active","description":"Grossly future-dated intent denies.","input":{"intent_timestamp":4883600000,"evaluation_time":1730000000,"max_clock_skew_seconds":300,"max_intent_age_seconds":300},"expected":{"decision":"DENY","reasons":["INTENT_FRESHNESS_FUTURE"]}},
+    {"id":"tt-neg-005","category":"intent_freshness","status":"active","description":"Stale intent denies.","input":{"intent_timestamp":1729999400,"evaluation_time":1730000000,"max_clock_skew_seconds":300,"max_intent_age_seconds":300},"expected":{"decision":"DENY","reasons":["INTENT_STALE"]}},
+    {"id":"tt-pos-001","category":"intent_freshness","status":"active","description":"Fresh future-side boundary intent passes.","input":{"intent_timestamp":1730000300,"evaluation_time":1730000000,"max_clock_skew_seconds":300,"max_intent_age_seconds":300},"expected":{"decision":"ALLOW","reasons":[]}},
+    {"id":"tt-pos-004","category":"intent_freshness","status":"active","description":"Fresh stale-side boundary intent passes.","input":{"intent_timestamp":1729999700,"evaluation_time":1730000000,"max_clock_skew_seconds":300,"max_intent_age_seconds":300},"expected":{"decision":"ALLOW","reasons":[]}},
+    {"id":"tt-neg-002","category":"replay","status":"active","description":"First use is allowed and immediate replay is denied using persisted nextState.","input":{"replay_window_seconds":600,"max_nonces_per_agent":256,"steps":[{"intent_timestamp":1730000000,"evaluation_time":1730000000,"nonce":"7"},{"intent_timestamp":1730000005,"evaluation_time":1730000005,"nonce":"7"}]},"expected":{"steps":[{"decision":"ALLOW","reasons":[],"nonce_state":[{"nonce":"7","nonce_first_seen_time":1730000000}]},{"decision":"DENY","reasons":["REPLAY_NONCE"],"nonce_state":[{"nonce":"7","nonce_first_seen_time":1730000000}]}]}},
+    {"id":"tt-pos-002","category":"replay","status":"active","description":"A distinct nonce inside retention is allowed and appended.","input":{"replay_window_seconds":600,"max_nonces_per_agent":256,"steps":[{"intent_timestamp":1730000000,"evaluation_time":1730000000,"nonce":"7"},{"intent_timestamp":1730000005,"evaluation_time":1730000005,"nonce":"8"}]},"expected":{"steps":[{"decision":"ALLOW","reasons":[],"nonce_state":[{"nonce":"7","nonce_first_seen_time":1730000000}]},{"decision":"ALLOW","reasons":[],"nonce_state":[{"nonce":"7","nonce_first_seen_time":1730000000},{"nonce":"8","nonce_first_seen_time":1730000005}]}]}},
+    {"id":"tt-neg-004","category":"replay","status":"active","description":"Future freshness denial precedes retained-nonce replay.","input":{"replay_window_seconds":600,"max_nonces_per_agent":256,"initial_nonce_state":[{"nonce":"n7","nonce_first_seen_time":1730000000}],"steps":[{"intent_timestamp":1730600010,"evaluation_time":1730000005,"nonce":"n7"}]},"expected":{"steps":[{"decision":"DENY","reasons":["INTENT_FRESHNESS_FUTURE"],"nonce_state":[{"nonce":"n7","nonce_first_seen_time":1730000000}]}]}},
+    {"id":"tt-neg-006","category":"replay","status":"active","description":"Stale freshness denial precedes retained-nonce replay.","input":{"replay_window_seconds":600,"max_nonces_per_agent":256,"initial_nonce_state":[{"nonce":"n7","nonce_first_seen_time":1730000000}],"steps":[{"intent_timestamp":1729999400,"evaluation_time":1730000005,"nonce":"n7"}]},"expected":{"steps":[{"decision":"DENY","reasons":["INTENT_STALE"],"nonce_state":[{"nonce":"n7","nonce_first_seen_time":1730000000}]}]}},
+    {"id":"tt-replay-future-within-band","category":"replay","status":"active","description":"Freshness-valid future intent cannot evict trusted replay state.","input":{"replay_window_seconds":600,"max_nonces_per_agent":256,"steps":[{"intent_timestamp":1730000000,"evaluation_time":1730000000,"nonce":"9"},{"intent_timestamp":1730000300,"evaluation_time":1730000000,"nonce":"9"}]},"expected":{"steps":[{"decision":"ALLOW","reasons":[],"nonce_state":[{"nonce":"9","nonce_first_seen_time":1730000000}]},{"decision":"DENY","reasons":["REPLAY_NONCE"],"nonce_state":[{"nonce":"9","nonce_first_seen_time":1730000000}]}]}},
+    {"id":"tt-velocity-first","category":"velocity","status":"active","description":"First action starts at trusted time.","input":{"window_seconds":60,"max_actions":1,"steps":[{"intent_timestamp":1730000010,"evaluation_time":1730000000,"nonce":"v1"}]},"expected":{"steps":[{"decision":"ALLOW","reasons":[],"velocity_window_start":1730000000,"velocity_count":1}]}},
+    {"id":"tt-velocity-limit-active","category":"velocity","status":"active","description":"Persisted first action followed by active-window denial.","input":{"window_seconds":60,"max_actions":1,"steps":[{"intent_timestamp":1730000000,"evaluation_time":1730000000,"nonce":"v1"},{"intent_timestamp":1730000001,"evaluation_time":1730000000,"nonce":"v2"}]},"expected":{"steps":[{"decision":"ALLOW","reasons":[],"velocity_window_start":1730000000,"velocity_count":1},{"decision":"DENY","reasons":["VELOCITY_EXCEEDED"],"velocity_window_start":1730000000,"velocity_count":1}]}},
+    {"id":"tt-velocity-future-intent-active","category":"velocity","status":"active","description":"Fresh future intent cannot reset the active window.","input":{"window_seconds":60,"max_actions":1,"initial_velocity":{"velocity_window_start":1730000000,"velocity_count":1},"steps":[{"intent_timestamp":1730000030,"evaluation_time":1730000010,"nonce":"v2"}]},"expected":{"steps":[{"decision":"DENY","reasons":["VELOCITY_EXCEEDED"],"velocity_window_start":1730000000,"velocity_count":1}]}},
+    {"id":"tt-velocity-stale-boundary-active","category":"velocity","status":"active","description":"Fresh stale-boundary intent cannot reset the active window.","input":{"window_seconds":60,"max_actions":1,"initial_velocity":{"velocity_window_start":1730000000,"velocity_count":1},"steps":[{"intent_timestamp":1729999710,"evaluation_time":1730000010,"nonce":"v2"}]},"expected":{"steps":[{"decision":"DENY","reasons":["VELOCITY_EXCEEDED"],"velocity_window_start":1730000000,"velocity_count":1}]}},
+    {"id":"tt-velocity-before-boundary","category":"velocity","status":"active","description":"Just before boundary remains exhausted.","input":{"window_seconds":60,"max_actions":1,"initial_velocity":{"velocity_window_start":1730000000,"velocity_count":1},"steps":[{"intent_timestamp":1730000059,"evaluation_time":1730000059,"nonce":"v2"}]},"expected":{"steps":[{"decision":"DENY","reasons":["VELOCITY_EXCEEDED"],"velocity_window_start":1730000000,"velocity_count":1}]}},
+    {"id":"tt-velocity-exact-boundary","category":"velocity","status":"active","description":"Exact boundary resets at trusted time.","input":{"window_seconds":60,"max_actions":1,"initial_velocity":{"velocity_window_start":1730000000,"velocity_count":1},"steps":[{"intent_timestamp":1730000030,"evaluation_time":1730000060,"nonce":"v2"}]},"expected":{"steps":[{"decision":"ALLOW","reasons":[],"velocity_window_start":1730000060,"velocity_count":1}]}},
+    {"id":"tt-velocity-after-boundary","category":"velocity","status":"active","description":"After boundary resets at trusted time.","input":{"window_seconds":60,"max_actions":1,"initial_velocity":{"velocity_window_start":1730000000,"velocity_count":1},"steps":[{"intent_timestamp":1730000061,"evaluation_time":1730000061,"nonce":"v2"}]},"expected":{"steps":[{"decision":"ALLOW","reasons":[],"velocity_window_start":1730000061,"velocity_count":1}]}},
+    {"id":"tt-velocity-backward-evaluation","category":"velocity","status":"active","description":"Backward trusted time fails closed.","input":{"window_seconds":60,"max_actions":1,"initial_velocity":{"velocity_window_start":1730000000,"velocity_count":0},"steps":[{"intent_timestamp":1729999999,"evaluation_time":1729999999,"nonce":"v2"}]},"expected":{"steps":[{"decision":"DENY","reasons":["STATE_INVALID"],"velocity_window_start":1730000000,"velocity_count":0}]}},
+    {"id":"tt-velocity-malformed-window-start","category":"velocity","status":"active","description":"Negative stored start fails closed.","input":{"window_seconds":60,"max_actions":1,"initial_velocity":{"velocity_window_start":-1,"velocity_count":0},"steps":[{"intent_timestamp":1730000000,"evaluation_time":1730000000,"nonce":"v2"}]},"expected":{"steps":[{"decision":"DENY","reasons":["STATE_INVALID"],"velocity_window_start":-1,"velocity_count":0}]}},
+    {"id":"tt-velocity-deterministic","category":"determinism","status":"active","description":"Repeated velocity sequence is deterministic.","input":{"kind":"velocity_sequence","repeat":2,"window_seconds":60,"max_actions":2,"initial_velocity":{"velocity_window_start":1729999990,"velocity_count":0},"steps":[{"intent_timestamp":1729999990,"evaluation_time":1730000000,"nonce":"vd1"}]},"expected":{"identical_output":true}},
+    {"id":"tt-neg-003","category":"velocity","status":"active","description":"Legacy active-window case is executable.","input":{"window_seconds":60,"max_actions":1,"initial_velocity":{"velocity_window_start":1730000000,"velocity_count":1},"steps":[{"intent_timestamp":1730000005,"evaluation_time":1730000005,"nonce":"v3"}]},"expected":{"steps":[{"decision":"DENY","reasons":["VELOCITY_EXCEEDED"],"velocity_window_start":1730000000,"velocity_count":1}]}},
+    {"id":"tt-pos-003","category":"velocity","status":"active","description":"Trusted time after expiry resets the window.","input":{"window_seconds":60,"max_actions":1,"initial_velocity":{"velocity_window_start":1730000000,"velocity_count":1},"steps":[{"intent_timestamp":1730000065,"evaluation_time":1730000065,"nonce":"v4"}]},"expected":{"steps":[{"decision":"ALLOW","reasons":[],"velocity_window_start":1730000065,"velocity_count":1}]}},
+    {"id":"tt-auth-verify-future-boundary","category":"authorization_verification","status":"active","description":"Issued-at exactly at verifier skew boundary is accepted.","input":{"authorization_issued_at":1730000300,"authorization_expiry":1730000360,"verifier_time":1730000000,"max_future_issued_at_skew_seconds":300},"expected":{"status":"ok","violation_codes":[]}},
+    {"id":"tt-auth-verify-future-implausible","category":"authorization_verification","status":"active","description":"Issued-at beyond verifier skew is rejected.","input":{"authorization_issued_at":1730000301,"authorization_expiry":1730000361,"verifier_time":1730000000,"max_future_issued_at_skew_seconds":300},"expected":{"status":"invalid","violation_codes":["AUTH_ISSUED_AT_IMPLAUSIBLE"]}},
+    {"id":"tt-auth-verify-expiry-boundary","category":"authorization_verification","status":"active","description":"Verifier time at expiry rejects.","input":{"authorization_issued_at":1729999940,"authorization_expiry":1730000000,"verifier_time":1730000000,"max_future_issued_at_skew_seconds":300},"expected":{"status":"invalid","violation_codes":["AUTH_EXPIRED"]}},
+    {"id":"tt-tool-window-trusted-time","category":"tool_window","status":"active","description":"A stateful tool-call sequence uses only trusted evaluation time for creation, active-limit denial, timestamp noninterference, and the exact-boundary reset.","input":{"window_seconds":60,"max_calls":1,"steps":[{"intent_timestamp":1730000000,"evaluation_time":1730000000,"nonce":"tw1"},{"intent_timestamp":1730000300,"evaluation_time":1730000000,"nonce":"tw2"},{"intent_timestamp":1729999700,"evaluation_time":1730000000,"nonce":"tw3"},{"intent_timestamp":1730000059,"evaluation_time":1730000059,"nonce":"tw4"},{"intent_timestamp":1730000030,"evaluation_time":1730000060,"nonce":"tw5"} ]},"expected":{"steps":[{"decision":"ALLOW","reasons":[],"tool_calls":[{"tool_call_time":1730000000,"tool":"search"}]},{"decision":"DENY","reasons":["TOOL_CALL_LIMIT_EXCEEDED"],"tool_calls":[{"tool_call_time":1730000000,"tool":"search"}]},{"decision":"DENY","reasons":["TOOL_CALL_LIMIT_EXCEEDED"],"tool_calls":[{"tool_call_time":1730000000,"tool":"search"}]},{"decision":"DENY","reasons":["TOOL_CALL_LIMIT_EXCEEDED"],"tool_calls":[{"tool_call_time":1730000000,"tool":"search"}]},{"decision":"ALLOW","reasons":[],"tool_calls":[{"tool_call_time":1730000060,"tool":"search"}]}]}},
+    {"id":"tt-tool-window-after-boundary","category":"tool_window","status":"active","description":"Trusted time after the exact boundary expires the prior call and stamps the replacement with evaluation time.","input":{"window_seconds":60,"max_calls":1,"initial_tool_calls":[{"tool_call_time":1730000000,"tool":"search"}],"steps":[{"intent_timestamp":1730000030,"evaluation_time":1730000061,"nonce":"twa1"}]},"expected":{"steps":[{"decision":"ALLOW","reasons":[],"tool_calls":[{"tool_call_time":1730000061,"tool":"search"}]}]}},
+    {"id":"tt-tool-window-backward-evaluation","category":"tool_window","status":"active","description":"Trusted time behind persisted tool-call state fails closed and preserves the state.","input":{"window_seconds":60,"max_calls":1,"initial_tool_calls":[{"tool_call_time":1730000000,"tool":"search"}],"steps":[{"intent_timestamp":1729999999,"evaluation_time":1729999999,"nonce":"twb1"}]},"expected":{"steps":[{"decision":"DENY","reasons":["STATE_INVALID"],"tool_calls":[{"tool_call_time":1730000000,"tool":"search"}]}]}},
+    {"id":"tt-tool-window-malformed-state","category":"tool_window","status":"active","description":"A negative persisted tool-call timestamp fails closed and remains unchanged.","input":{"window_seconds":60,"max_calls":1,"initial_tool_calls":[{"tool_call_time":-1,"tool":"search"}],"steps":[{"intent_timestamp":1730000000,"evaluation_time":1730000000,"nonce":"twm1"}]},"expected":{"steps":[{"decision":"DENY","reasons":["STATE_INVALID"],"tool_calls":[{"tool_call_time":-1,"tool":"search"}]}]}}
+  ]
+}