deadbyte-mcp 0.8.7

package/proof/V070-NODE-TESTS.txt

@@ -0,0 +1,752 @@
+
+> deadbyte-mcp@0.7.0 test
+> node --test test/*.test.mjs
+
+TAP version 13
+# Subtest: contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF
+ok 1 - contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF
+  ---
+  duration_ms: 15.700942
+  type: 'test'
+  ...
+# Subtest: contained executor rejects a launcher-reported truncated stdin import
+ok 2 - contained executor rejects a launcher-reported truncated stdin import
+  ---
+  duration_ms: 5.3284
+  type: 'test'
+  ...
+# Subtest: contained invocation request digest binds challenge input operation manifest and worker identity
+ok 3 - contained invocation request digest binds challenge input operation manifest and worker identity
+  ---
+  duration_ms: 1.784248
+  type: 'test'
+  ...
+# Subtest: contained result rejects stale invocation challenge or request digest
+ok 4 - contained result rejects stale invocation challenge or request digest
+  ---
+  duration_ms: 2.081158
+  type: 'test'
+  ...
+# Subtest: native launcher independently recomputes invocation digest before worker launch and workers echo it
+ok 5 - native launcher independently recomputes invocation digest before worker launch and workers echo it
+  ---
+  duration_ms: 14.163193
+  type: 'test'
+  ...
+# Subtest: contained executor cross-checks native manifest and selected-worker hashes before signing receipt
+ok 6 - contained executor cross-checks native manifest and selected-worker hashes before signing receipt
+  ---
+  duration_ms: 5.780295
+  type: 'test'
+  ...
+# Subtest: trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset
+ok 7 - trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset
+  ---
+  duration_ms: 6.996317
+  type: 'test'
+  ...
+# Subtest: AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state
+ok 8 - AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state
+  ---
+  duration_ms: 4.659307
+  type: 'test'
+  ...
+# Subtest: contained launcher reports the exact bootstrap environment policy in runtime evidence
+ok 9 - contained launcher reports the exact bootstrap environment policy in runtime evidence
+  ---
+  duration_ms: 9.433836
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a missing LOCALAPPDATA bootstrap marker
+ok 10 - contained execution validator rejects a missing LOCALAPPDATA bootstrap marker
+  ---
+  duration_ms: 1.768949
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a non-exact worker environment allowlist
+ok 11 - contained execution validator rejects a non-exact worker environment allowlist
+  ---
+  duration_ms: 0.514615
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a missing drive-current-directory environment entry
+ok 12 - contained execution validator rejects a missing drive-current-directory environment entry
+  ---
+  duration_ms: 0.274372
+  type: 'test'
+  ...
+# Subtest: contained execution validator accepts the complete fixed-transform invariant set
+ok 13 - contained execution validator accepts the complete fixed-transform invariant set
+  ---
+  duration_ms: 0.487125
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects any granted capability
+ok 14 - contained execution validator rejects any granted capability
+  ---
+  duration_ms: 0.350277
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects host workspace mounting
+ok 15 - contained execution validator rejects host workspace mounting
+  ---
+  duration_ms: 0.347877
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects non-atomic Job assignment
+ok 16 - contained execution validator rejects non-atomic Job assignment
+  ---
+  duration_ms: 0.73485
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects normal child payload execution
+ok 17 - contained execution validator rejects normal child payload execution
+  ---
+  duration_ms: 0.404197
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects explicit breakaway payload execution
+ok 18 - contained execution validator rejects explicit breakaway payload execution
+  ---
+  duration_ms: 0.520365
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a non-AppContainer worker
+ok 19 - contained execution validator rejects a non-AppContainer worker
+  ---
+  duration_ms: 0.218355
+  type: 'test'
+  ...
+# Subtest: contained execution source has a compile-time worker registry and no user executable parameter
+ok 20 - contained execution source has a compile-time worker registry and no user executable parameter
+  ---
+  duration_ms: 19.216017
+  type: 'test'
+  ...
+# Subtest: contained launcher imports by stdin/profile copy and never mounts a host workspace
+ok 21 - contained launcher imports by stdin/profile copy and never mounts a host workspace
+  ---
+  duration_ms: 6.955476
+  type: 'test'
+  ...
+# Subtest: contained workers recheck AppContainer, zero capabilities, canaries, Job and child denial
+ok 22 - contained workers recheck AppContainer, zero capabilities, canaries, Job and child denial
+  ---
+  duration_ms: 3.105687
+  type: 'test'
+  ...
+# Subtest: native build produces the contained launcher and worker with static runtime
+ok 23 - native build produces the contained launcher and worker with static runtime
+  ---
+  duration_ms: 1.500083
+  type: 'test'
+  ...
+# Subtest: native build emits a deterministic worker registry manifest and launcher verifies it before execution
+ok 24 - native build emits a deterministic worker registry manifest and launcher verifies it before execution
+  ---
+  duration_ms: 4.832381
+  type: 'test'
+  ...
+# Subtest: V0.7 contained execution has compile-time budgets and a pre-export semantic gate
+ok 25 - V0.7 contained execution has compile-time budgets and a pre-export semantic gate
+  ---
+  duration_ms: 15.497664
+  type: 'test'
+  ...
+# Subtest: receipt and verifier bind contained worker, launcher and independent transform semantics
+ok 26 - receipt and verifier bind contained worker, launcher and independent transform semantics
+  ---
+  duration_ms: 2.001344
+  type: 'test'
+  ...
+# Subtest: MCP protocol smoke expects the stable five-tool V0.7 catalog
+ok 27 - MCP protocol smoke expects the stable five-tool V0.7 catalog
+  ---
+  duration_ms: 4.384315
+  type: 'test'
+  ...
+# Subtest: contained receipt verifies fixed runtime hashes and independently recomputed transform semantics
+ok 28 - contained receipt verifies fixed runtime hashes and independently recomputed transform semantics
+  ---
+  duration_ms: 107.710581
+  type: 'test'
+  ...
+# Subtest: independent verifier rejects invocation digest tamper and partial invocation evidence
+ok 29 - independent verifier rejects invocation digest tamper and partial invocation evidence
+  ---
+  duration_ms: 70.736296
+  type: 'test'
+  ...
+# Subtest: independent verifier preserves pre-V0.4.7 contained receipt compatibility but rejects partial manifest evidence
+ok 30 - independent verifier preserves pre-V0.4.7 contained receipt compatibility but rejects partial manifest evidence
+  ---
+  duration_ms: 34.366046
+  type: 'test'
+  ...
+# Subtest: contained operation registry accepts lowercase_ascii and rejects unknown operations
+ok 31 - contained operation registry accepts lowercase_ascii and rejects unknown operations
+  ---
+  duration_ms: 0.4501
+  type: 'test'
+  ...
+# Subtest: native launcher uses a compile-time operation-to-executable registry
+ok 32 - native launcher uses a compile-time operation-to-executable registry
+  ---
+  duration_ms: 12.949259
+  type: 'test'
+  ...
+# Subtest: contained execution validator binds operation to fixed worker identity and executable
+ok 33 - contained execution validator binds operation to fixed worker identity and executable
+  ---
+  duration_ms: 0.428766
+  type: 'test'
+  ...
+# Subtest: build-generated worker registry manifest binds launcher and both worker hashes and rejects tamper
+ok 34 - build-generated worker registry manifest binds launcher and both worker hashes and rejects tamper
+  ---
+  duration_ms: 6.887102
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects missing or altered worker manifest evidence
+ok 35 - contained execution validator rejects missing or altered worker manifest evidence
+  ---
+  duration_ms: 0.329721
+  type: 'test'
+  ...
+# Subtest: MCP contained_transform schema is a compile-time operation enum with no executable or invocation-control surface
+ok 36 - MCP contained_transform schema is a compile-time operation enum with no executable or invocation-control surface
+  ---
+  duration_ms: 5.857665
+  type: 'test'
+  ...
+# Subtest: Windows batch gate runs all target proof stages in one command and is PowerShell 5.1 safe
+ok 37 - Windows batch gate runs all target proof stages in one command and is PowerShell 5.1 safe
+  ---
+  duration_ms: 2.393024
+  type: 'test'
+  ...
+# Subtest: contained receipt verifies lowercase_ascii semantics and rejects semantic tamper
+ok 38 - contained receipt verifies lowercase_ascii semantics and rejects semantic tamper
+  ---
+  duration_ms: 32.392266
+  type: 'test'
+  ...
+# Subtest: contained receipt verifies reverse_bytes through the fixed reverse worker and rejects tamper
+ok 39 - contained receipt verifies reverse_bytes through the fixed reverse worker and rejects tamper
+  ---
+  duration_ms: 53.116389
+  type: 'test'
+  ...
+# Subtest: active network proof uses a host-positive-control loopback listener and requires AppContainer denial
+ok 40 - active network proof uses a host-positive-control loopback listener and requires AppContainer denial
+  ---
+  duration_ms: 4.15961
+  type: 'test'
+  ...
+# Subtest: contained execution validator fails closed on active network evidence
+ok 41 - contained execution validator fails closed on active network evidence
+  ---
+  duration_ms: 0.534061
+  type: 'test'
+  ...
+# Subtest: execution authority is strict at MCP and native argv boundaries
+ok 42 - execution authority is strict at MCP and native argv boundaries
+  ---
+  duration_ms: 4.139732
+  type: 'test'
+  ...
+# Subtest: containment result validator accepts the complete LPAC invariant set
+ok 43 - containment result validator accepts the complete LPAC invariant set
+  ---
+  duration_ms: 3.864746
+  type: 'test'
+  ...
+# Subtest: containment result validator accepts the complete regular AppContainer invariant set
+ok 44 - containment result validator accepts the complete regular AppContainer invariant set
+  ---
+  duration_ms: 0.496483
+  type: 'test'
+  ...
+# Subtest: containment result validator refuses mode confusion
+ok 45 - containment result validator refuses mode confusion
+  ---
+  duration_ms: 0.744028
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects a readable host canary
+ok 46 - containment result validator rejects a readable host canary
+  ---
+  duration_ms: 0.287103
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects any granted capability
+ok 47 - containment result validator rejects any granted capability
+  ---
+  duration_ms: 3.566658
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects child payload execution
+ok 48 - containment result validator rejects child payload execution
+  ---
+  duration_ms: 0.262449
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects a non-LPAC token when LPAC is expected
+ok 49 - containment result validator rejects a non-LPAC token when LPAC is expected
+  ---
+  duration_ms: 0.183266
+  type: 'test'
+  ...
+# Subtest: containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode
+ok 50 - containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode
+  ---
+  duration_ms: 0.235511
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects LPAC when regular AppContainer is expected
+ok 51 - containment result validator rejects LPAC when regular AppContainer is expected
+  ---
+  duration_ms: 0.902117
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails
+ok 52 - containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails
+  ---
+  duration_ms: 1.082345
+  type: 'test'
+  ...
+# Subtest: containment result validator requires LPAC-specific token query for LPAC mode
+ok 53 - containment result validator requires LPAC-specific token query for LPAC mode
+  ---
+  duration_ms: 0.599115
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects LPAC that can read the AAP canary
+ok 54 - containment result validator rejects LPAC that can read the AAP canary
+  ---
+  duration_ms: 0.300264
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects missing Job assignment
+ok 55 - containment result validator rejects missing Job assignment
+  ---
+  duration_ms: 0.443304
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects timeout
+ok 56 - containment result validator rejects timeout
+  ---
+  duration_ms: 0.243064
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects non-atomic Job assignment
+ok 57 - containment result validator rejects non-atomic Job assignment
+  ---
+  duration_ms: 0.581714
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects enabled breakaway
+ok 58 - containment result validator rejects enabled breakaway
+  ---
+  duration_ms: 0.416278
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects the broken token child-policy mechanism
+ok 59 - containment result validator rejects the broken token child-policy mechanism
+  ---
+  duration_ms: 0.387935
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects breakaway child payload execution
+ok 60 - containment result validator rejects breakaway child payload execution
+  ---
+  duration_ms: 0.563719
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects a filesystem result channel
+ok 61 - containment result validator rejects a filesystem result channel
+  ---
+  duration_ms: 0.383723
+  type: 'test'
+  ...
+# Subtest: native launcher uses atomic Job assignment and excludes the broken child-policy attribute
+ok 62 - native launcher uses atomic Job assignment and excludes the broken child-policy attribute
+  ---
+  duration_ms: 28.607674
+  type: 'test'
+  ...
+# Subtest: native build script targets Windows 10 and preserves MSVC diagnostics
+ok 63 - native build script targets Windows 10 and preserves MSVC diagnostics
+  ---
+  duration_ms: 7.986093
+  type: 'test'
+  ...
+# Subtest: native build command composition is Windows PowerShell 5.1 parser-safe
+ok 64 - native build command composition is Windows PowerShell 5.1 parser-safe
+  ---
+  duration_ms: 7.829274
+  type: 'test'
+  ...
+# Subtest: native launcher link contract includes Ole32 for CoTaskMemFree
+ok 65 - native launcher link contract includes Ole32 for CoTaskMemFree
+  ---
+  duration_ms: 4.115299
+  type: 'test'
+  ...
+# Subtest: native probe link contract includes Advapi32 for token inspection APIs
+ok 66 - native probe link contract includes Advapi32 for token inspection APIs
+  ---
+  duration_ms: 2.853683
+  type: 'test'
+  ...
+# Subtest: native launcher narrows SID text only through explicit ASCII validation
+ok 67 - native launcher narrows SID text only through explicit ASCII validation
+  ---
+  duration_ms: 3.463361
+  type: 'test'
+  ...
+# Subtest: native result channel is an explicitly inherited one-way handle, not a result path grant
+ok 68 - native result channel is an explicitly inherited one-way handle, not a result path grant
+  ---
+  duration_ms: 6.348568
+  type: 'test'
+  ...
+# Subtest: containment smoke preserves parseable failed measurements instead of discarding child exit evidence
+ok 69 - containment smoke preserves parseable failed measurements instead of discarding child exit evidence
+  ---
+  duration_ms: 2.088367
+  type: 'test'
+  ...
+# Subtest: containment validator reports the probe invariant before aggregate failed status
+ok 70 - containment validator reports the probe invariant before aggregate failed status
+  ---
+  duration_ms: 0.239349
+  type: 'test'
+  ...
+# Subtest: containment smoke includes the raw probe measurement on invariant failure
+ok 71 - containment smoke includes the raw probe measurement on invariant failure
+  ---
+  duration_ms: 1.353194
+  type: 'test'
+  ...
+# Subtest: native LPAC probe uses the static MSVC runtime
+ok 72 - native LPAC probe uses the static MSVC runtime
+  ---
+  duration_ms: 12.853472
+  type: 'test'
+  ...
+# Subtest: native build audits the probe for dynamic MSVC and UCRT dependencies
+ok 73 - native build audits the probe for dynamic MSVC and UCRT dependencies
+  ---
+  duration_ms: 5.739724
+  type: 'test'
+  ...
+# Subtest: native launcher preserves symbolic early-loader failure evidence
+ok 74 - native launcher preserves symbolic early-loader failure evidence
+  ---
+  duration_ms: 4.907587
+  type: 'test'
+  ...
+# Subtest: native bootstrap probes have custom no-CRT entrypoints
+ok 75 - native bootstrap probes have custom no-CRT entrypoints
+  ---
+  duration_ms: 11.002622
+  type: 'test'
+  ...
+# Subtest: native build links bootstrap probes without default CRT libraries
+ok 76 - native build links bootstrap probes without default CRT libraries
+  ---
+  duration_ms: 1.591289
+  type: 'test'
+  ...
+# Subtest: native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode
+ok 77 - native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode
+  ---
+  duration_ms: 1.715545
+  type: 'test'
+  ...
+# Subtest: full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence
+ok 78 - full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence
+  ---
+  duration_ms: 4.722406
+  type: 'test'
+  ...
+# Subtest: full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure
+ok 79 - full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure
+  ---
+  duration_ms: 2.657675
+  type: 'test'
+  ...
+# Subtest: full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence
+ok 80 - full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence
+  ---
+  duration_ms: 3.272463
+  type: 'test'
+  ...
+# Subtest: bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities
+ok 81 - bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities
+  ---
+  duration_ms: 1.63251
+  type: 'test'
+  ...
+# Subtest: package exposes separate LPAC and regular AppContainer smoke gates
+ok 82 - package exposes separate LPAC and regular AppContainer smoke gates
+  ---
+  duration_ms: 1.46436
+  type: 'test'
+  ...
+# Subtest: construction ladder starts from Microsoft-style security-capabilities-only baseline
+ok 83 - construction ladder starts from Microsoft-style security-capabilities-only baseline
+  ---
+  duration_ms: 5.216953
+  type: 'test'
+  ...
+# Subtest: construction ladder adds containment mechanisms as isolated transitions
+ok 84 - construction ladder adds containment mechanisms as isolated transitions
+  ---
+  duration_ms: 0.982435
+  type: 'test'
+  ...
+# Subtest: construction entrypoint probe is no-CRT and proves execution only through exit code 66
+ok 85 - construction entrypoint probe is no-CRT and proves execution only through exit code 66
+  ---
+  duration_ms: 1.409564
+  type: 'test'
+  ...
+# Subtest: construction diagnostic reports the first failing transition without fallback
+ok 86 - construction diagnostic reports the first failing transition without fallback
+  ---
+  duration_ms: 4.87543
+  type: 'test'
+  ...
+# Subtest: construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW
+ok 87 - construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW
+  ---
+  duration_ms: 2.694486
+  type: 'test'
+  ...
+# Subtest: construction diagnostic refuses to run when native build artifacts are missing
+ok 88 - construction diagnostic refuses to run when native build artifacts are missing
+  ---
+  duration_ms: 3.282964
+  type: 'test'
+  ...
+# Subtest: child-control matrix isolates policy, suspended start, delayed Job, and atomic Job
+ok 89 - child-control matrix isolates policy, suspended start, delayed Job, and atomic Job
+  ---
+  duration_ms: 2.393286
+  type: 'test'
+  ...
+# Subtest: Job child-control candidate sets active process limit one and never enables breakaway
+ok 90 - Job child-control candidate sets active process limit one and never enables breakaway
+  ---
+  duration_ms: 2.519062
+  type: 'test'
+  ...
+# Subtest: child-control hostile probe tests normal creation and explicit Job breakaway execution
+ok 91 - child-control hostile probe tests normal creation and explicit Job breakaway execution
+  ---
+  duration_ms: 2.716956
+  type: 'test'
+  ...
+# Subtest: child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial
+ok 92 - child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial
+  ---
+  duration_ms: 2.286976
+  type: 'test'
+  ...
+# Subtest: native build produces child-control launcher and hostile probe with MSVC
+ok 93 - native build produces child-control launcher and hostile probe with MSVC
+  ---
+  duration_ms: 1.329035
+  type: 'test'
+  ...
+# Subtest: package exposes explicit child-control diagnostic gate
+ok 94 - package exposes explicit child-control diagnostic gate
+  ---
+  duration_ms: 3.648394
+  type: 'test'
+  ...
+# Subtest: full containment probe verifies normal and explicit breakaway child payload denial
+ok 95 - full containment probe verifies normal and explicit breakaway child payload denial
+  ---
+  duration_ms: 1.563895
+  type: 'test'
+  ...
+# Subtest: package default containment smoke targets the observed regular AppContainer baseline
+ok 96 - package default containment smoke targets the observed regular AppContainer baseline
+  ---
+  duration_ms: 1.695706
+  type: 'test'
+  ...
+# Subtest: controller derives runtime state from observed identities and readiness
+ok 97 - controller derives runtime state from observed identities and readiness
+  ---
+  duration_ms: 21.166307
+  type: 'test'
+  ...
+# Subtest: controller ownership resists PID reuse and executable substitution
+ok 98 - controller ownership resists PID reuse and executable substitution
+  ---
+  duration_ms: 7.241531
+  type: 'test'
+  ...
+# Subtest: controller starts detached processes and exit does not imply stop
+ok 99 - controller starts detached processes and exit does not imply stop
+  ---
+  duration_ms: 15.961257
+  type: 'test'
+  ...
+# Subtest: controller public smoke uses a real modern MCP client and fulltest adds canonical contained gate
+ok 100 - controller public smoke uses a real modern MCP client and fulltest adds canonical contained gate
+  ---
+  duration_ms: 8.272116
+  type: 'test'
+  ...
+# Subtest: package exposes one top-level CMD entry and controller supports explicit CoreRoot when deployed beside bridge
+ok 101 - package exposes one top-level CMD entry and controller supports explicit CoreRoot when deployed beside bridge
+  ---
+  duration_ms: 4.294401
+  type: 'test'
+  ...
+# Subtest: path traversal is denied
+ok 102 - path traversal is denied
+  ---
+  duration_ms: 43.492083
+  type: 'test'
+  ...
+# Subtest: absolute path is denied
+ok 103 - absolute path is denied
+  ---
+  duration_ms: 5.250587
+  type: 'test'
+  ...
+# Subtest: Windows ADS, device aliases and trailing-dot paths are denied portably
+ok 104 - Windows ADS, device aliases and trailing-dot paths are denied portably
+  ---
+  duration_ms: 2.124933
+  type: 'test'
+  ...
+# Subtest: symlink escape is denied where symlinks are permitted
+ok 105 - symlink escape is denied where symlinks are permitted
+  ---
+  duration_ms: 8.218376
+  type: 'test'
+  ...
+# Subtest: proof execution creates deterministic output and signed verifiable receipt
+ok 106 - proof execution creates deterministic output and signed verifiable receipt
+  ---
+  duration_ms: 198.253112
+  type: 'test'
+  ...
+# Subtest: independent verifier process accepts valid signed evidence
+ok 107 - independent verifier process accepts valid signed evidence
+  ---
+  duration_ms: 286.840538
+  type: 'test'
+  ...
+# Subtest: input source may change later because receipt preserves exact input snapshot
+ok 108 - input source may change later because receipt preserves exact input snapshot
+  ---
+  duration_ms: 151.954668
+  type: 'test'
+  ...
+# Subtest: tampered output fails independent verification
+ok 109 - tampered output fails independent verification
+  ---
+  duration_ms: 183.072329
+  type: 'test'
+  ...
+# Subtest: tampered input snapshot fails independent verification
+ok 110 - tampered input snapshot fails independent verification
+  ---
+  duration_ms: 143.041574
+  type: 'test'
+  ...
+# Subtest: tampered receipt fails its canonical self hash
+ok 111 - tampered receipt fails its canonical self hash
+  ---
+  duration_ms: 196.060388
+  type: 'test'
+  ...
+# Subtest: recomputed self hash cannot forge Ed25519 attestation
+ok 112 - recomputed self hash cannot forge Ed25519 attestation
+  ---
+  duration_ms: 164.21138
+  type: 'test'
+  ...
+# Subtest: wrong public key cannot verify receipt
+ok 113 - wrong public key cannot verify receipt
+  ---
+  duration_ms: 173.926019
+  type: 'test'
+  ...
+# Subtest: signing key inside workspace is denied
+ok 114 - signing key inside workspace is denied
+  ---
+  duration_ms: 7.951559
+  type: 'test'
+  ...
+# Subtest: proof execution refuses to run without a signing key
+ok 115 - proof execution refuses to run without a signing key
+  ---
+  duration_ms: 9.972115
+  type: 'test'
+  ...
+# Subtest: trust key generation refuses to overwrite an existing keypair
+ok 116 - trust key generation refuses to overwrite an existing keypair
+  ---
+  duration_ms: 3.210454
+  type: 'test'
+  ...
+# Subtest: pre-existing output is denied instead of overwritten
+ok 117 - pre-existing output is denied instead of overwritten
+  ---
+  duration_ms: 6.698199
+  type: 'test'
+  ...
+# Subtest: output parent symlink escape is denied
+ok 118 - output parent symlink escape is denied
+  ---
+  duration_ms: 5.017368
+  type: 'test'
+  ...
+# Subtest: distinct output names allow repeated signed proofs without weakening no-overwrite
+ok 119 - distinct output names allow repeated signed proofs without weakening no-overwrite
+  ---
+  duration_ms: 309.001685
+  type: 'test'
+  ...
+# Subtest: V0.7 creates request identity before worker process execution and authenticates before V2 interpretation
+ok 120 - V0.7 creates request identity before worker process execution and authenticates before V2 interpretation
+  ---
+  duration_ms: 9.402043
+  type: 'test'
+  ...
+# Subtest: strict UTF-8 decoder rejects malformed byte sequences
+ok 121 - strict UTF-8 decoder rejects malformed byte sequences
+  ---
+  duration_ms: 0.921503
+  type: 'test'
+  ...
+# Subtest: proof execution enforces compile-time input and timeout budgets
+ok 122 - proof execution enforces compile-time input and timeout budgets
+  ---
+  duration_ms: 21.044751
+  type: 'test'
+  ...
+# Subtest: request identity validator rejects digest, worker and invocation substitution
+ok 123 - request identity validator rejects digest, worker and invocation substitution
+  ---
+  duration_ms: 1.442869
+  type: 'test'
+  ...
+1..123
+# tests 123
+# suites 0
+# pass 123
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 2510.68639