deadbyte-mcp 0.8.7

package/proof/TESTS.txt

@@ -0,0 +1,686 @@
+
+> deadbyte-mcp@0.6.0 test
+> node --test test/*.test.mjs
+
+TAP version 13
+# Subtest: contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF
+ok 1 - contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF
+  ---
+  duration_ms: 16.156606
+  type: 'test'
+  ...
+# Subtest: contained executor rejects a launcher-reported truncated stdin import
+ok 2 - contained executor rejects a launcher-reported truncated stdin import
+  ---
+  duration_ms: 2.455033
+  type: 'test'
+  ...
+# Subtest: contained invocation request digest binds challenge input operation manifest and worker identity
+ok 3 - contained invocation request digest binds challenge input operation manifest and worker identity
+  ---
+  duration_ms: 1.940179
+  type: 'test'
+  ...
+# Subtest: contained result rejects stale invocation challenge or request digest
+ok 4 - contained result rejects stale invocation challenge or request digest
+  ---
+  duration_ms: 1.807001
+  type: 'test'
+  ...
+# Subtest: native launcher independently recomputes invocation digest before worker launch and workers echo it
+ok 5 - native launcher independently recomputes invocation digest before worker launch and workers echo it
+  ---
+  duration_ms: 14.918914
+  type: 'test'
+  ...
+# Subtest: contained executor cross-checks native manifest and selected-worker hashes before signing receipt
+ok 6 - contained executor cross-checks native manifest and selected-worker hashes before signing receipt
+  ---
+  duration_ms: 3.642794
+  type: 'test'
+  ...
+# Subtest: trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset
+ok 7 - trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset
+  ---
+  duration_ms: 3.502323
+  type: 'test'
+  ...
+# Subtest: AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state
+ok 8 - AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state
+  ---
+  duration_ms: 2.457621
+  type: 'test'
+  ...
+# Subtest: contained launcher reports the exact bootstrap environment policy in runtime evidence
+ok 9 - contained launcher reports the exact bootstrap environment policy in runtime evidence
+  ---
+  duration_ms: 10.258442
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a missing LOCALAPPDATA bootstrap marker
+ok 10 - contained execution validator rejects a missing LOCALAPPDATA bootstrap marker
+  ---
+  duration_ms: 1.300914
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a non-exact worker environment allowlist
+ok 11 - contained execution validator rejects a non-exact worker environment allowlist
+  ---
+  duration_ms: 0.477667
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a missing drive-current-directory environment entry
+ok 12 - contained execution validator rejects a missing drive-current-directory environment entry
+  ---
+  duration_ms: 0.351295
+  type: 'test'
+  ...
+# Subtest: contained execution validator accepts the complete fixed-transform invariant set
+ok 13 - contained execution validator accepts the complete fixed-transform invariant set
+  ---
+  duration_ms: 0.449656
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects any granted capability
+ok 14 - contained execution validator rejects any granted capability
+  ---
+  duration_ms: 0.271493
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects host workspace mounting
+ok 15 - contained execution validator rejects host workspace mounting
+  ---
+  duration_ms: 0.413474
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects non-atomic Job assignment
+ok 16 - contained execution validator rejects non-atomic Job assignment
+  ---
+  duration_ms: 0.276121
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects normal child payload execution
+ok 17 - contained execution validator rejects normal child payload execution
+  ---
+  duration_ms: 0.300628
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects explicit breakaway payload execution
+ok 18 - contained execution validator rejects explicit breakaway payload execution
+  ---
+  duration_ms: 0.293215
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a non-AppContainer worker
+ok 19 - contained execution validator rejects a non-AppContainer worker
+  ---
+  duration_ms: 0.492116
+  type: 'test'
+  ...
+# Subtest: contained execution source has a compile-time worker registry and no user executable parameter
+ok 20 - contained execution source has a compile-time worker registry and no user executable parameter
+  ---
+  duration_ms: 24.49247
+  type: 'test'
+  ...
+# Subtest: contained launcher imports by stdin/profile copy and never mounts a host workspace
+ok 21 - contained launcher imports by stdin/profile copy and never mounts a host workspace
+  ---
+  duration_ms: 7.382428
+  type: 'test'
+  ...
+# Subtest: contained workers recheck AppContainer, zero capabilities, canaries, Job and child denial
+ok 22 - contained workers recheck AppContainer, zero capabilities, canaries, Job and child denial
+  ---
+  duration_ms: 1.726779
+  type: 'test'
+  ...
+# Subtest: native build produces the contained launcher and worker with static runtime
+ok 23 - native build produces the contained launcher and worker with static runtime
+  ---
+  duration_ms: 6.796429
+  type: 'test'
+  ...
+# Subtest: native build emits a deterministic worker registry manifest and launcher verifies it before execution
+ok 24 - native build emits a deterministic worker registry manifest and launcher verifies it before execution
+  ---
+  duration_ms: 1.838484
+  type: 'test'
+  ...
+# Subtest: receipt and verifier bind contained worker, launcher and independent transform semantics
+ok 25 - receipt and verifier bind contained worker, launcher and independent transform semantics
+  ---
+  duration_ms: 2.3764
+  type: 'test'
+  ...
+# Subtest: MCP protocol smoke expects the stable five-tool V0.6 catalog
+ok 26 - MCP protocol smoke expects the stable five-tool V0.6 catalog
+  ---
+  duration_ms: 5.051095
+  type: 'test'
+  ...
+# Subtest: contained receipt verifies fixed runtime hashes and independently recomputed transform semantics
+ok 27 - contained receipt verifies fixed runtime hashes and independently recomputed transform semantics
+  ---
+  duration_ms: 72.80757
+  type: 'test'
+  ...
+# Subtest: independent verifier rejects invocation digest tamper and partial invocation evidence
+ok 28 - independent verifier rejects invocation digest tamper and partial invocation evidence
+  ---
+  duration_ms: 53.981267
+  type: 'test'
+  ...
+# Subtest: independent verifier preserves pre-V0.4.7 contained receipt compatibility but rejects partial manifest evidence
+ok 29 - independent verifier preserves pre-V0.4.7 contained receipt compatibility but rejects partial manifest evidence
+  ---
+  duration_ms: 52.862137
+  type: 'test'
+  ...
+# Subtest: contained operation registry accepts lowercase_ascii and rejects unknown operations
+ok 30 - contained operation registry accepts lowercase_ascii and rejects unknown operations
+  ---
+  duration_ms: 0.670485
+  type: 'test'
+  ...
+# Subtest: native launcher uses a compile-time operation-to-executable registry
+ok 31 - native launcher uses a compile-time operation-to-executable registry
+  ---
+  duration_ms: 3.171165
+  type: 'test'
+  ...
+# Subtest: contained execution validator binds operation to fixed worker identity and executable
+ok 32 - contained execution validator binds operation to fixed worker identity and executable
+  ---
+  duration_ms: 0.425857
+  type: 'test'
+  ...
+# Subtest: build-generated worker registry manifest binds launcher and both worker hashes and rejects tamper
+ok 33 - build-generated worker registry manifest binds launcher and both worker hashes and rejects tamper
+  ---
+  duration_ms: 12.443079
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects missing or altered worker manifest evidence
+ok 34 - contained execution validator rejects missing or altered worker manifest evidence
+  ---
+  duration_ms: 0.313318
+  type: 'test'
+  ...
+# Subtest: MCP contained_transform schema is a compile-time operation enum with no executable or invocation-control surface
+ok 35 - MCP contained_transform schema is a compile-time operation enum with no executable or invocation-control surface
+  ---
+  duration_ms: 2.430921
+  type: 'test'
+  ...
+# Subtest: Windows batch gate runs all target proof stages in one command and is PowerShell 5.1 safe
+ok 36 - Windows batch gate runs all target proof stages in one command and is PowerShell 5.1 safe
+  ---
+  duration_ms: 1.535786
+  type: 'test'
+  ...
+# Subtest: contained receipt verifies lowercase_ascii semantics and rejects semantic tamper
+ok 37 - contained receipt verifies lowercase_ascii semantics and rejects semantic tamper
+  ---
+  duration_ms: 39.117654
+  type: 'test'
+  ...
+# Subtest: contained receipt verifies reverse_bytes through the fixed reverse worker and rejects tamper
+ok 38 - contained receipt verifies reverse_bytes through the fixed reverse worker and rejects tamper
+  ---
+  duration_ms: 38.971884
+  type: 'test'
+  ...
+# Subtest: active network proof uses a host-positive-control loopback listener and requires AppContainer denial
+ok 39 - active network proof uses a host-positive-control loopback listener and requires AppContainer denial
+  ---
+  duration_ms: 3.429741
+  type: 'test'
+  ...
+# Subtest: contained execution validator fails closed on active network evidence
+ok 40 - contained execution validator fails closed on active network evidence
+  ---
+  duration_ms: 0.511185
+  type: 'test'
+  ...
+# Subtest: execution authority is strict at MCP and native argv boundaries
+ok 41 - execution authority is strict at MCP and native argv boundaries
+  ---
+  duration_ms: 2.58521
+  type: 'test'
+  ...
+# Subtest: containment result validator accepts the complete LPAC invariant set
+ok 42 - containment result validator accepts the complete LPAC invariant set
+  ---
+  duration_ms: 3.453238
+  type: 'test'
+  ...
+# Subtest: containment result validator accepts the complete regular AppContainer invariant set
+ok 43 - containment result validator accepts the complete regular AppContainer invariant set
+  ---
+  duration_ms: 0.849987
+  type: 'test'
+  ...
+# Subtest: containment result validator refuses mode confusion
+ok 44 - containment result validator refuses mode confusion
+  ---
+  duration_ms: 0.696701
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects a readable host canary
+ok 45 - containment result validator rejects a readable host canary
+  ---
+  duration_ms: 0.306724
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects any granted capability
+ok 46 - containment result validator rejects any granted capability
+  ---
+  duration_ms: 3.388007
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects child payload execution
+ok 47 - containment result validator rejects child payload execution
+  ---
+  duration_ms: 0.231641
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects a non-LPAC token when LPAC is expected
+ok 48 - containment result validator rejects a non-LPAC token when LPAC is expected
+  ---
+  duration_ms: 0.52326
+  type: 'test'
+  ...
+# Subtest: containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode
+ok 49 - containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode
+  ---
+  duration_ms: 0.242435
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects LPAC when regular AppContainer is expected
+ok 50 - containment result validator rejects LPAC when regular AppContainer is expected
+  ---
+  duration_ms: 0.667066
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails
+ok 51 - containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails
+  ---
+  duration_ms: 0.998593
+  type: 'test'
+  ...
+# Subtest: containment result validator requires LPAC-specific token query for LPAC mode
+ok 52 - containment result validator requires LPAC-specific token query for LPAC mode
+  ---
+  duration_ms: 0.493513
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects LPAC that can read the AAP canary
+ok 53 - containment result validator rejects LPAC that can read the AAP canary
+  ---
+  duration_ms: 0.224917
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects missing Job assignment
+ok 54 - containment result validator rejects missing Job assignment
+  ---
+  duration_ms: 0.51438
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects timeout
+ok 55 - containment result validator rejects timeout
+  ---
+  duration_ms: 0.594637
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects non-atomic Job assignment
+ok 56 - containment result validator rejects non-atomic Job assignment
+  ---
+  duration_ms: 0.590772
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects enabled breakaway
+ok 57 - containment result validator rejects enabled breakaway
+  ---
+  duration_ms: 0.579918
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects the broken token child-policy mechanism
+ok 58 - containment result validator rejects the broken token child-policy mechanism
+  ---
+  duration_ms: 0.428908
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects breakaway child payload execution
+ok 59 - containment result validator rejects breakaway child payload execution
+  ---
+  duration_ms: 0.466011
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects a filesystem result channel
+ok 60 - containment result validator rejects a filesystem result channel
+  ---
+  duration_ms: 0.207009
+  type: 'test'
+  ...
+# Subtest: native launcher uses atomic Job assignment and excludes the broken child-policy attribute
+ok 61 - native launcher uses atomic Job assignment and excludes the broken child-policy attribute
+  ---
+  duration_ms: 32.237169
+  type: 'test'
+  ...
+# Subtest: native build script targets Windows 10 and preserves MSVC diagnostics
+ok 62 - native build script targets Windows 10 and preserves MSVC diagnostics
+  ---
+  duration_ms: 1.844892
+  type: 'test'
+  ...
+# Subtest: native build command composition is Windows PowerShell 5.1 parser-safe
+ok 63 - native build command composition is Windows PowerShell 5.1 parser-safe
+  ---
+  duration_ms: 8.967225
+  type: 'test'
+  ...
+# Subtest: native launcher link contract includes Ole32 for CoTaskMemFree
+ok 64 - native launcher link contract includes Ole32 for CoTaskMemFree
+  ---
+  duration_ms: 6.269927
+  type: 'test'
+  ...
+# Subtest: native probe link contract includes Advapi32 for token inspection APIs
+ok 65 - native probe link contract includes Advapi32 for token inspection APIs
+  ---
+  duration_ms: 1.77308
+  type: 'test'
+  ...
+# Subtest: native launcher narrows SID text only through explicit ASCII validation
+ok 66 - native launcher narrows SID text only through explicit ASCII validation
+  ---
+  duration_ms: 1.450261
+  type: 'test'
+  ...
+# Subtest: native result channel is an explicitly inherited one-way handle, not a result path grant
+ok 67 - native result channel is an explicitly inherited one-way handle, not a result path grant
+  ---
+  duration_ms: 1.775051
+  type: 'test'
+  ...
+# Subtest: containment smoke preserves parseable failed measurements instead of discarding child exit evidence
+ok 68 - containment smoke preserves parseable failed measurements instead of discarding child exit evidence
+  ---
+  duration_ms: 4.756839
+  type: 'test'
+  ...
+# Subtest: containment validator reports the probe invariant before aggregate failed status
+ok 69 - containment validator reports the probe invariant before aggregate failed status
+  ---
+  duration_ms: 0.697733
+  type: 'test'
+  ...
+# Subtest: containment smoke includes the raw probe measurement on invariant failure
+ok 70 - containment smoke includes the raw probe measurement on invariant failure
+  ---
+  duration_ms: 1.461142
+  type: 'test'
+  ...
+# Subtest: native LPAC probe uses the static MSVC runtime
+ok 71 - native LPAC probe uses the static MSVC runtime
+  ---
+  duration_ms: 6.626352
+  type: 'test'
+  ...
+# Subtest: native build audits the probe for dynamic MSVC and UCRT dependencies
+ok 72 - native build audits the probe for dynamic MSVC and UCRT dependencies
+  ---
+  duration_ms: 6.570347
+  type: 'test'
+  ...
+# Subtest: native launcher preserves symbolic early-loader failure evidence
+ok 73 - native launcher preserves symbolic early-loader failure evidence
+  ---
+  duration_ms: 3.389259
+  type: 'test'
+  ...
+# Subtest: native bootstrap probes have custom no-CRT entrypoints
+ok 74 - native bootstrap probes have custom no-CRT entrypoints
+  ---
+  duration_ms: 11.537532
+  type: 'test'
+  ...
+# Subtest: native build links bootstrap probes without default CRT libraries
+ok 75 - native build links bootstrap probes without default CRT libraries
+  ---
+  duration_ms: 8.423376
+  type: 'test'
+  ...
+# Subtest: native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode
+ok 76 - native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode
+  ---
+  duration_ms: 2.297404
+  type: 'test'
+  ...
+# Subtest: full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence
+ok 77 - full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence
+  ---
+  duration_ms: 3.672443
+  type: 'test'
+  ...
+# Subtest: full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure
+ok 78 - full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure
+  ---
+  duration_ms: 4.230238
+  type: 'test'
+  ...
+# Subtest: full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence
+ok 79 - full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence
+  ---
+  duration_ms: 3.087641
+  type: 'test'
+  ...
+# Subtest: bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities
+ok 80 - bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities
+  ---
+  duration_ms: 6.875981
+  type: 'test'
+  ...
+# Subtest: package exposes separate LPAC and regular AppContainer smoke gates
+ok 81 - package exposes separate LPAC and regular AppContainer smoke gates
+  ---
+  duration_ms: 1.091862
+  type: 'test'
+  ...
+# Subtest: construction ladder starts from Microsoft-style security-capabilities-only baseline
+ok 82 - construction ladder starts from Microsoft-style security-capabilities-only baseline
+  ---
+  duration_ms: 1.048634
+  type: 'test'
+  ...
+# Subtest: construction ladder adds containment mechanisms as isolated transitions
+ok 83 - construction ladder adds containment mechanisms as isolated transitions
+  ---
+  duration_ms: 1.286598
+  type: 'test'
+  ...
+# Subtest: construction entrypoint probe is no-CRT and proves execution only through exit code 66
+ok 84 - construction entrypoint probe is no-CRT and proves execution only through exit code 66
+  ---
+  duration_ms: 1.349438
+  type: 'test'
+  ...
+# Subtest: construction diagnostic reports the first failing transition without fallback
+ok 85 - construction diagnostic reports the first failing transition without fallback
+  ---
+  duration_ms: 1.020385
+  type: 'test'
+  ...
+# Subtest: construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW
+ok 86 - construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW
+  ---
+  duration_ms: 4.821782
+  type: 'test'
+  ...
+# Subtest: construction diagnostic refuses to run when native build artifacts are missing
+ok 87 - construction diagnostic refuses to run when native build artifacts are missing
+  ---
+  duration_ms: 1.053982
+  type: 'test'
+  ...
+# Subtest: child-control matrix isolates policy, suspended start, delayed Job, and atomic Job
+ok 88 - child-control matrix isolates policy, suspended start, delayed Job, and atomic Job
+  ---
+  duration_ms: 1.172789
+  type: 'test'
+  ...
+# Subtest: Job child-control candidate sets active process limit one and never enables breakaway
+ok 89 - Job child-control candidate sets active process limit one and never enables breakaway
+  ---
+  duration_ms: 1.535724
+  type: 'test'
+  ...
+# Subtest: child-control hostile probe tests normal creation and explicit Job breakaway execution
+ok 90 - child-control hostile probe tests normal creation and explicit Job breakaway execution
+  ---
+  duration_ms: 0.702067
+  type: 'test'
+  ...
+# Subtest: child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial
+ok 91 - child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial
+  ---
+  duration_ms: 1.011015
+  type: 'test'
+  ...
+# Subtest: native build produces child-control launcher and hostile probe with MSVC
+ok 92 - native build produces child-control launcher and hostile probe with MSVC
+  ---
+  duration_ms: 0.850126
+  type: 'test'
+  ...
+# Subtest: package exposes explicit child-control diagnostic gate
+ok 93 - package exposes explicit child-control diagnostic gate
+  ---
+  duration_ms: 0.980426
+  type: 'test'
+  ...
+# Subtest: full containment probe verifies normal and explicit breakaway child payload denial
+ok 94 - full containment probe verifies normal and explicit breakaway child payload denial
+  ---
+  duration_ms: 5.158714
+  type: 'test'
+  ...
+# Subtest: package default containment smoke targets the observed regular AppContainer baseline
+ok 95 - package default containment smoke targets the observed regular AppContainer baseline
+  ---
+  duration_ms: 1.052391
+  type: 'test'
+  ...
+# Subtest: path traversal is denied
+ok 96 - path traversal is denied
+  ---
+  duration_ms: 37.439219
+  type: 'test'
+  ...
+# Subtest: absolute path is denied
+ok 97 - absolute path is denied
+  ---
+  duration_ms: 15.113872
+  type: 'test'
+  ...
+# Subtest: symlink escape is denied where symlinks are permitted
+ok 98 - symlink escape is denied where symlinks are permitted
+  ---
+  duration_ms: 13.42299
+  type: 'test'
+  ...
+# Subtest: proof execution creates deterministic output and signed verifiable receipt
+ok 99 - proof execution creates deterministic output and signed verifiable receipt
+  ---
+  duration_ms: 211.203043
+  type: 'test'
+  ...
+# Subtest: independent verifier process accepts valid signed evidence
+ok 100 - independent verifier process accepts valid signed evidence
+  ---
+  duration_ms: 320.967309
+  type: 'test'
+  ...
+# Subtest: input source may change later because receipt preserves exact input snapshot
+ok 101 - input source may change later because receipt preserves exact input snapshot
+  ---
+  duration_ms: 153.209741
+  type: 'test'
+  ...
+# Subtest: tampered output fails independent verification
+ok 102 - tampered output fails independent verification
+  ---
+  duration_ms: 173.656912
+  type: 'test'
+  ...
+# Subtest: tampered input snapshot fails independent verification
+ok 103 - tampered input snapshot fails independent verification
+  ---
+  duration_ms: 167.174753
+  type: 'test'
+  ...
+# Subtest: tampered receipt fails its canonical self hash
+ok 104 - tampered receipt fails its canonical self hash
+  ---
+  duration_ms: 134.398277
+  type: 'test'
+  ...
+# Subtest: recomputed self hash cannot forge Ed25519 attestation
+ok 105 - recomputed self hash cannot forge Ed25519 attestation
+  ---
+  duration_ms: 178.301179
+  type: 'test'
+  ...
+# Subtest: wrong public key cannot verify receipt
+ok 106 - wrong public key cannot verify receipt
+  ---
+  duration_ms: 151.067917
+  type: 'test'
+  ...
+# Subtest: signing key inside workspace is denied
+ok 107 - signing key inside workspace is denied
+  ---
+  duration_ms: 13.61394
+  type: 'test'
+  ...
+# Subtest: proof execution refuses to run without a signing key
+ok 108 - proof execution refuses to run without a signing key
+  ---
+  duration_ms: 3.986904
+  type: 'test'
+  ...
+# Subtest: trust key generation refuses to overwrite an existing keypair
+ok 109 - trust key generation refuses to overwrite an existing keypair
+  ---
+  duration_ms: 8.898649
+  type: 'test'
+  ...
+# Subtest: pre-existing output is denied instead of overwritten
+ok 110 - pre-existing output is denied instead of overwritten
+  ---
+  duration_ms: 8.675225
+  type: 'test'
+  ...
+# Subtest: output parent symlink escape is denied
+ok 111 - output parent symlink escape is denied
+  ---
+  duration_ms: 10.695786
+  type: 'test'
+  ...
+# Subtest: distinct output names allow repeated signed proofs without weakening no-overwrite
+ok 112 - distinct output names allow repeated signed proofs without weakening no-overwrite
+  ---
+  duration_ms: 317.383658
+  type: 'test'
+  ...
+1..112
+# tests 112
+# suites 0
+# pass 112
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 2198.992733

package/proof/TRUST-EPHEMERAL.txt

@@ -0,0 +1,4 @@
+PASS
+Ephemeral Ed25519 trust keypair generated outside the workspace for packaging regression.
+Private key material was deleted after verification and is not present in this package.
+KEY_ID=64ee8445e138c19a2049dc4242924d056f2b62913ed65364916413eb684a946e