deadbyte-mcp 0.8.7

package/proof/V071-NODE-TESTS.txt

@@ -0,0 +1,796 @@
+TAP version 13
+# Subtest: contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF
+ok 1 - contained launcher treats anonymous-pipe ERROR_BROKEN_PIPE as normal stdin EOF
+  ---
+  duration_ms: 13.223622
+  type: 'test'
+  ...
+# Subtest: contained executor rejects a launcher-reported truncated stdin import
+ok 2 - contained executor rejects a launcher-reported truncated stdin import
+  ---
+  duration_ms: 1.234425
+  type: 'test'
+  ...
+# Subtest: contained invocation request digest binds challenge input operation manifest and worker identity
+ok 3 - contained invocation request digest binds challenge input operation manifest and worker identity
+  ---
+  duration_ms: 1.105684
+  type: 'test'
+  ...
+# Subtest: contained result rejects stale invocation challenge or request digest
+ok 4 - contained result rejects stale invocation challenge or request digest
+  ---
+  duration_ms: 0.734917
+  type: 'test'
+  ...
+# Subtest: native launcher independently recomputes invocation digest before worker launch and workers echo it
+ok 5 - native launcher independently recomputes invocation digest before worker launch and workers echo it
+  ---
+  duration_ms: 3.716185
+  type: 'test'
+  ...
+# Subtest: contained executor cross-checks native manifest and selected-worker hashes before signing receipt
+ok 6 - contained executor cross-checks native manifest and selected-worker hashes before signing receipt
+  ---
+  duration_ms: 1.14295
+  type: 'test'
+  ...
+# Subtest: trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset
+ok 7 - trusted contained host launcher inherits Windows host environment instead of a lossy hand-picked subset
+  ---
+  duration_ms: 1.317438
+  type: 'test'
+  ...
+# Subtest: AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state
+ok 8 - AppContainer worker receives only the fixed bootstrap allowlist plus drive current-directory state
+  ---
+  duration_ms: 2.441425
+  type: 'test'
+  ...
+# Subtest: contained launcher reports the exact bootstrap environment policy in runtime evidence
+ok 9 - contained launcher reports the exact bootstrap environment policy in runtime evidence
+  ---
+  duration_ms: 1.344388
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a missing LOCALAPPDATA bootstrap marker
+ok 10 - contained execution validator rejects a missing LOCALAPPDATA bootstrap marker
+  ---
+  duration_ms: 0.524796
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a non-exact worker environment allowlist
+ok 11 - contained execution validator rejects a non-exact worker environment allowlist
+  ---
+  duration_ms: 0.288837
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a missing drive-current-directory environment entry
+ok 12 - contained execution validator rejects a missing drive-current-directory environment entry
+  ---
+  duration_ms: 0.150262
+  type: 'test'
+  ...
+# Subtest: contained execution validator accepts the complete fixed-transform invariant set
+ok 13 - contained execution validator accepts the complete fixed-transform invariant set
+  ---
+  duration_ms: 0.187127
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects any granted capability
+ok 14 - contained execution validator rejects any granted capability
+  ---
+  duration_ms: 0.198363
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects host workspace mounting
+ok 15 - contained execution validator rejects host workspace mounting
+  ---
+  duration_ms: 0.152345
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects non-atomic Job assignment
+ok 16 - contained execution validator rejects non-atomic Job assignment
+  ---
+  duration_ms: 0.150162
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects normal child payload execution
+ok 17 - contained execution validator rejects normal child payload execution
+  ---
+  duration_ms: 0.130162
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects explicit breakaway payload execution
+ok 18 - contained execution validator rejects explicit breakaway payload execution
+  ---
+  duration_ms: 0.151824
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects a non-AppContainer worker
+ok 19 - contained execution validator rejects a non-AppContainer worker
+  ---
+  duration_ms: 0.133527
+  type: 'test'
+  ...
+# Subtest: contained execution source has a compile-time worker registry and no user executable parameter
+ok 20 - contained execution source has a compile-time worker registry and no user executable parameter
+  ---
+  duration_ms: 11.315982
+  type: 'test'
+  ...
+# Subtest: contained launcher imports by stdin/profile copy and never mounts a host workspace
+ok 21 - contained launcher imports by stdin/profile copy and never mounts a host workspace
+  ---
+  duration_ms: 2.943572
+  type: 'test'
+  ...
+# Subtest: contained workers recheck AppContainer, zero capabilities, canaries, Job and child denial
+ok 22 - contained workers recheck AppContainer, zero capabilities, canaries, Job and child denial
+  ---
+  duration_ms: 10.910102
+  type: 'test'
+  ...
+# Subtest: native build produces the contained launcher and worker with static runtime
+ok 23 - native build produces the contained launcher and worker with static runtime
+  ---
+  duration_ms: 1.895012
+  type: 'test'
+  ...
+# Subtest: native build emits a deterministic worker registry manifest and launcher verifies it before execution
+ok 24 - native build emits a deterministic worker registry manifest and launcher verifies it before execution
+  ---
+  duration_ms: 5.28516
+  type: 'test'
+  ...
+# Subtest: V0.7 contained execution has compile-time budgets and a pre-export semantic gate
+ok 25 - V0.7 contained execution has compile-time budgets and a pre-export semantic gate
+  ---
+  duration_ms: 1.355804
+  type: 'test'
+  ...
+# Subtest: receipt and verifier bind contained worker, launcher and independent transform semantics
+ok 26 - receipt and verifier bind contained worker, launcher and independent transform semantics
+  ---
+  duration_ms: 1.392348
+  type: 'test'
+  ...
+# Subtest: MCP protocol smoke preserves the stable five-tool containment core catalog
+ok 27 - MCP protocol smoke preserves the stable five-tool containment core catalog
+  ---
+  duration_ms: 5.516376
+  type: 'test'
+  ...
+# Subtest: contained receipt verifies fixed runtime hashes and independently recomputed transform semantics
+ok 28 - contained receipt verifies fixed runtime hashes and independently recomputed transform semantics
+  ---
+  duration_ms: 39.639586
+  type: 'test'
+  ...
+# Subtest: independent verifier rejects invocation digest tamper and partial invocation evidence
+ok 29 - independent verifier rejects invocation digest tamper and partial invocation evidence
+  ---
+  duration_ms: 33.440795
+  type: 'test'
+  ...
+# Subtest: independent verifier preserves pre-V0.4.7 contained receipt compatibility but rejects partial manifest evidence
+ok 30 - independent verifier preserves pre-V0.4.7 contained receipt compatibility but rejects partial manifest evidence
+  ---
+  duration_ms: 38.439846
+  type: 'test'
+  ...
+# Subtest: contained operation registry accepts lowercase_ascii and rejects unknown operations
+ok 31 - contained operation registry accepts lowercase_ascii and rejects unknown operations
+  ---
+  duration_ms: 0.376437
+  type: 'test'
+  ...
+# Subtest: native launcher uses a compile-time operation-to-executable registry
+ok 32 - native launcher uses a compile-time operation-to-executable registry
+  ---
+  duration_ms: 2.838026
+  type: 'test'
+  ...
+# Subtest: contained execution validator binds operation to fixed worker identity and executable
+ok 33 - contained execution validator binds operation to fixed worker identity and executable
+  ---
+  duration_ms: 0.404228
+  type: 'test'
+  ...
+# Subtest: build-generated worker registry manifest binds launcher and both worker hashes and rejects tamper
+ok 34 - build-generated worker registry manifest binds launcher and both worker hashes and rejects tamper
+  ---
+  duration_ms: 10.177258
+  type: 'test'
+  ...
+# Subtest: contained execution validator rejects missing or altered worker manifest evidence
+ok 35 - contained execution validator rejects missing or altered worker manifest evidence
+  ---
+  duration_ms: 0.26336
+  type: 'test'
+  ...
+# Subtest: MCP contained_transform schema is a compile-time operation enum with no executable or invocation-control surface
+ok 36 - MCP contained_transform schema is a compile-time operation enum with no executable or invocation-control surface
+  ---
+  duration_ms: 6.29012
+  type: 'test'
+  ...
+# Subtest: Windows batch gate runs all target proof stages in one command and is PowerShell 5.1 safe
+ok 37 - Windows batch gate runs all target proof stages in one command and is PowerShell 5.1 safe
+  ---
+  duration_ms: 1.330247
+  type: 'test'
+  ...
+# Subtest: contained receipt verifies lowercase_ascii semantics and rejects semantic tamper
+ok 38 - contained receipt verifies lowercase_ascii semantics and rejects semantic tamper
+  ---
+  duration_ms: 34.36007
+  type: 'test'
+  ...
+# Subtest: contained receipt verifies reverse_bytes through the fixed reverse worker and rejects tamper
+ok 39 - contained receipt verifies reverse_bytes through the fixed reverse worker and rejects tamper
+  ---
+  duration_ms: 31.865721
+  type: 'test'
+  ...
+# Subtest: active network proof uses a host-positive-control loopback listener and requires AppContainer denial
+ok 40 - active network proof uses a host-positive-control loopback listener and requires AppContainer denial
+  ---
+  duration_ms: 4.492098
+  type: 'test'
+  ...
+# Subtest: contained execution validator fails closed on active network evidence
+ok 41 - contained execution validator fails closed on active network evidence
+  ---
+  duration_ms: 0.363367
+  type: 'test'
+  ...
+# Subtest: execution authority is strict at MCP and native argv boundaries
+ok 42 - execution authority is strict at MCP and native argv boundaries
+  ---
+  duration_ms: 9.530912
+  type: 'test'
+  ...
+# Subtest: containment result validator accepts the complete LPAC invariant set
+ok 43 - containment result validator accepts the complete LPAC invariant set
+  ---
+  duration_ms: 1.75856
+  type: 'test'
+  ...
+# Subtest: containment result validator accepts the complete regular AppContainer invariant set
+ok 44 - containment result validator accepts the complete regular AppContainer invariant set
+  ---
+  duration_ms: 0.308717
+  type: 'test'
+  ...
+# Subtest: containment result validator refuses mode confusion
+ok 45 - containment result validator refuses mode confusion
+  ---
+  duration_ms: 0.457126
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects a readable host canary
+ok 46 - containment result validator rejects a readable host canary
+  ---
+  duration_ms: 0.186466
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects any granted capability
+ok 47 - containment result validator rejects any granted capability
+  ---
+  duration_ms: 1.324178
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects child payload execution
+ok 48 - containment result validator rejects child payload execution
+  ---
+  duration_ms: 0.251432
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects a non-LPAC token when LPAC is expected
+ok 49 - containment result validator rejects a non-LPAC token when LPAC is expected
+  ---
+  duration_ms: 0.201428
+  type: 'test'
+  ...
+# Subtest: containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode
+ok 50 - containment result validator accepts regular AppContainer when LPAC-specific query is unavailable but AAP behavior proves regular mode
+  ---
+  duration_ms: 0.191903
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects LPAC when regular AppContainer is expected
+ok 51 - containment result validator rejects LPAC when regular AppContainer is expected
+  ---
+  duration_ms: 0.411579
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails
+ok 52 - containment result validator rejects regular AppContainer when AAP behavioral mode evidence fails
+  ---
+  duration_ms: 0.558476
+  type: 'test'
+  ...
+# Subtest: containment result validator requires LPAC-specific token query for LPAC mode
+ok 53 - containment result validator requires LPAC-specific token query for LPAC mode
+  ---
+  duration_ms: 0.264832
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects LPAC that can read the AAP canary
+ok 54 - containment result validator rejects LPAC that can read the AAP canary
+  ---
+  duration_ms: 0.158244
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects missing Job assignment
+ok 55 - containment result validator rejects missing Job assignment
+  ---
+  duration_ms: 0.276569
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects timeout
+ok 56 - containment result validator rejects timeout
+  ---
+  duration_ms: 0.154499
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects non-atomic Job assignment
+ok 57 - containment result validator rejects non-atomic Job assignment
+  ---
+  duration_ms: 0.185975
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects enabled breakaway
+ok 58 - containment result validator rejects enabled breakaway
+  ---
+  duration_ms: 0.181158
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects the broken token child-policy mechanism
+ok 59 - containment result validator rejects the broken token child-policy mechanism
+  ---
+  duration_ms: 0.194377
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects breakaway child payload execution
+ok 60 - containment result validator rejects breakaway child payload execution
+  ---
+  duration_ms: 0.236199
+  type: 'test'
+  ...
+# Subtest: containment result validator rejects a filesystem result channel
+ok 61 - containment result validator rejects a filesystem result channel
+  ---
+  duration_ms: 0.146056
+  type: 'test'
+  ...
+# Subtest: native launcher uses atomic Job assignment and excludes the broken child-policy attribute
+ok 62 - native launcher uses atomic Job assignment and excludes the broken child-policy attribute
+  ---
+  duration_ms: 17.928529
+  type: 'test'
+  ...
+# Subtest: native build script targets Windows 10 and preserves MSVC diagnostics
+ok 63 - native build script targets Windows 10 and preserves MSVC diagnostics
+  ---
+  duration_ms: 1.199153
+  type: 'test'
+  ...
+# Subtest: native build command composition is Windows PowerShell 5.1 parser-safe
+ok 64 - native build command composition is Windows PowerShell 5.1 parser-safe
+  ---
+  duration_ms: 10.245229
+  type: 'test'
+  ...
+# Subtest: native launcher link contract includes Ole32 for CoTaskMemFree
+ok 65 - native launcher link contract includes Ole32 for CoTaskMemFree
+  ---
+  duration_ms: 6.894004
+  type: 'test'
+  ...
+# Subtest: native probe link contract includes Advapi32 for token inspection APIs
+ok 66 - native probe link contract includes Advapi32 for token inspection APIs
+  ---
+  duration_ms: 0.996864
+  type: 'test'
+  ...
+# Subtest: native launcher narrows SID text only through explicit ASCII validation
+ok 67 - native launcher narrows SID text only through explicit ASCII validation
+  ---
+  duration_ms: 0.89254
+  type: 'test'
+  ...
+# Subtest: native result channel is an explicitly inherited one-way handle, not a result path grant
+ok 68 - native result channel is an explicitly inherited one-way handle, not a result path grant
+  ---
+  duration_ms: 1.984114
+  type: 'test'
+  ...
+# Subtest: containment smoke preserves parseable failed measurements instead of discarding child exit evidence
+ok 69 - containment smoke preserves parseable failed measurements instead of discarding child exit evidence
+  ---
+  duration_ms: 3.275833
+  type: 'test'
+  ...
+# Subtest: containment validator reports the probe invariant before aggregate failed status
+ok 70 - containment validator reports the probe invariant before aggregate failed status
+  ---
+  duration_ms: 0.171113
+  type: 'test'
+  ...
+# Subtest: containment smoke includes the raw probe measurement on invariant failure
+ok 71 - containment smoke includes the raw probe measurement on invariant failure
+  ---
+  duration_ms: 0.746684
+  type: 'test'
+  ...
+# Subtest: native LPAC probe uses the static MSVC runtime
+ok 72 - native LPAC probe uses the static MSVC runtime
+  ---
+  duration_ms: 0.63557
+  type: 'test'
+  ...
+# Subtest: native build audits the probe for dynamic MSVC and UCRT dependencies
+ok 73 - native build audits the probe for dynamic MSVC and UCRT dependencies
+  ---
+  duration_ms: 9.993095
+  type: 'test'
+  ...
+# Subtest: native launcher preserves symbolic early-loader failure evidence
+ok 74 - native launcher preserves symbolic early-loader failure evidence
+  ---
+  duration_ms: 0.689699
+  type: 'test'
+  ...
+# Subtest: native bootstrap probes have custom no-CRT entrypoints
+ok 75 - native bootstrap probes have custom no-CRT entrypoints
+  ---
+  duration_ms: 4.529467
+  type: 'test'
+  ...
+# Subtest: native build links bootstrap probes without default CRT libraries
+ok 76 - native build links bootstrap probes without default CRT libraries
+  ---
+  duration_ms: 2.450614
+  type: 'test'
+  ...
+# Subtest: native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode
+ok 77 - native launcher applies ALL_APPLICATION_PACKAGES opt-out only in LPAC mode
+  ---
+  duration_ms: 1.004205
+  type: 'test'
+  ...
+# Subtest: full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence
+ok 78 - full probe validates requested mode with LPAC API evidence plus AAP behavioral evidence
+  ---
+  duration_ms: 1.839009
+  type: 'test'
+  ...
+# Subtest: full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure
+ok 79 - full probe records per-query Win32 evidence instead of collapsing LPAC query failure into a generic token failure
+  ---
+  duration_ms: 0.598515
+  type: 'test'
+  ...
+# Subtest: full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence
+ok 80 - full containment uses an ALL_APPLICATION_PACKAGES canary as behavioral regular-vs-LPAC evidence
+  ---
+  duration_ms: 1.645853
+  type: 'test'
+  ...
+# Subtest: bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities
+ok 81 - bootstrap diagnostic compares regular AppContainer and LPAC with zero capabilities
+  ---
+  duration_ms: 2.615737
+  type: 'test'
+  ...
+# Subtest: package exposes separate LPAC and regular AppContainer smoke gates
+ok 82 - package exposes separate LPAC and regular AppContainer smoke gates
+  ---
+  duration_ms: 0.648418
+  type: 'test'
+  ...
+# Subtest: construction ladder starts from Microsoft-style security-capabilities-only baseline
+ok 83 - construction ladder starts from Microsoft-style security-capabilities-only baseline
+  ---
+  duration_ms: 0.667517
+  type: 'test'
+  ...
+# Subtest: construction ladder adds containment mechanisms as isolated transitions
+ok 84 - construction ladder adds containment mechanisms as isolated transitions
+  ---
+  duration_ms: 0.822446
+  type: 'test'
+  ...
+# Subtest: construction entrypoint probe is no-CRT and proves execution only through exit code 66
+ok 85 - construction entrypoint probe is no-CRT and proves execution only through exit code 66
+  ---
+  duration_ms: 1.633976
+  type: 'test'
+  ...
+# Subtest: construction diagnostic reports the first failing transition without fallback
+ok 86 - construction diagnostic reports the first failing transition without fallback
+  ---
+  duration_ms: 3.381135
+  type: 'test'
+  ...
+# Subtest: construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW
+ok 87 - construction launcher includes the SDDL declaration and retains Advapi32 linkage for ConvertSidToStringSidW
+  ---
+  duration_ms: 1.354512
+  type: 'test'
+  ...
+# Subtest: construction diagnostic refuses to run when native build artifacts are missing
+ok 88 - construction diagnostic refuses to run when native build artifacts are missing
+  ---
+  duration_ms: 0.745413
+  type: 'test'
+  ...
+# Subtest: child-control matrix isolates policy, suspended start, delayed Job, and atomic Job
+ok 89 - child-control matrix isolates policy, suspended start, delayed Job, and atomic Job
+  ---
+  duration_ms: 0.610273
+  type: 'test'
+  ...
+# Subtest: Job child-control candidate sets active process limit one and never enables breakaway
+ok 90 - Job child-control candidate sets active process limit one and never enables breakaway
+  ---
+  duration_ms: 0.949494
+  type: 'test'
+  ...
+# Subtest: child-control hostile probe tests normal creation and explicit Job breakaway execution
+ok 91 - child-control hostile probe tests normal creation and explicit Job breakaway execution
+  ---
+  duration_ms: 0.53386
+  type: 'test'
+  ...
+# Subtest: child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial
+ok 92 - child-control diagnostic has no automatic fallback and prefers atomic Job only after observed denial
+  ---
+  duration_ms: 3.484993
+  type: 'test'
+  ...
+# Subtest: native build produces child-control launcher and hostile probe with MSVC
+ok 93 - native build produces child-control launcher and hostile probe with MSVC
+  ---
+  duration_ms: 0.597414
+  type: 'test'
+  ...
+# Subtest: package exposes explicit child-control diagnostic gate
+ok 94 - package exposes explicit child-control diagnostic gate
+  ---
+  duration_ms: 0.630663
+  type: 'test'
+  ...
+# Subtest: full containment probe verifies normal and explicit breakaway child payload denial
+ok 95 - full containment probe verifies normal and explicit breakaway child payload denial
+  ---
+  duration_ms: 1.598489
+  type: 'test'
+  ...
+# Subtest: package default containment smoke targets the observed regular AppContainer baseline
+ok 96 - package default containment smoke targets the observed regular AppContainer baseline
+  ---
+  duration_ms: 0.582732
+  type: 'test'
+  ...
+# Subtest: controller derives runtime state from observed identities and readiness
+ok 97 - controller derives runtime state from observed identities and readiness
+  ---
+  duration_ms: 7.077164
+  type: 'test'
+  ...
+# Subtest: controller ownership resists PID reuse and executable substitution
+ok 98 - controller ownership resists PID reuse and executable substitution
+  ---
+  duration_ms: 1.94139
+  type: 'test'
+  ...
+# Subtest: controller starts detached processes and exit does not imply stop
+ok 99 - controller starts detached processes and exit does not imply stop
+  ---
+  duration_ms: 3.894177
+  type: 'test'
+  ...
+# Subtest: controller public smoke uses a real modern MCP client and fulltest adds canonical contained gate
+ok 100 - controller public smoke uses a real modern MCP client and fulltest adds canonical contained gate
+  ---
+  duration_ms: 1.108429
+  type: 'test'
+  ...
+# Subtest: package exposes one top-level CMD entry and controller supports explicit CoreRoot when deployed beside bridge
+ok 101 - package exposes one top-level CMD entry and controller supports explicit CoreRoot when deployed beside bridge
+  ---
+  duration_ms: 4.147222
+  type: 'test'
+  ...
+# Subtest: controller exposes a bounded local arm lease for the optional privileged host plane
+ok 102 - controller exposes a bounded local arm lease for the optional privileged host plane
+  ---
+  duration_ms: 3.545993
+  type: 'test'
+  ...
+# Subtest: controller keeps privileged policy optional and propagates it only to the bridge process
+ok 103 - controller keeps privileged policy optional and propagates it only to the bridge process
+  ---
+  duration_ms: 0.73042
+  type: 'test'
+  ...
+# Subtest: Windows host policy bootstrap pins executables and creates only explicit local roots
+ok 104 - Windows host policy bootstrap pins executables and creates only explicit local roots
+  ---
+  duration_ms: 1.058355
+  type: 'test'
+  ...
+# Subtest: controller hosttest requires an armed lease and uses the public remote host smoke client
+ok 105 - controller hosttest requires an armed lease and uses the public remote host smoke client
+  ---
+  duration_ms: 0.968512
+  type: 'test'
+  ...
+# Subtest: path traversal is denied
+ok 106 - path traversal is denied
+  ---
+  duration_ms: 15.540137
+  type: 'test'
+  ...
+# Subtest: absolute path is denied
+ok 107 - absolute path is denied
+  ---
+  duration_ms: 7.817328
+  type: 'test'
+  ...
+# Subtest: Windows ADS, device aliases and trailing-dot paths are denied portably
+ok 108 - Windows ADS, device aliases and trailing-dot paths are denied portably
+  ---
+  duration_ms: 0.626406
+  type: 'test'
+  ...
+# Subtest: symlink escape is denied where symlinks are permitted
+ok 109 - symlink escape is denied where symlinks are permitted
+  ---
+  duration_ms: 8.838878
+  type: 'test'
+  ...
+# Subtest: proof execution creates deterministic output and signed verifiable receipt
+ok 110 - proof execution creates deterministic output and signed verifiable receipt
+  ---
+  duration_ms: 69.733577
+  type: 'test'
+  ...
+# Subtest: independent verifier process accepts valid signed evidence
+ok 111 - independent verifier process accepts valid signed evidence
+  ---
+  duration_ms: 347.923215
+  type: 'test'
+  ...
+# Subtest: input source may change later because receipt preserves exact input snapshot
+ok 112 - input source may change later because receipt preserves exact input snapshot
+  ---
+  duration_ms: 68.917235
+  type: 'test'
+  ...
+# Subtest: tampered output fails independent verification
+ok 113 - tampered output fails independent verification
+  ---
+  duration_ms: 57.953727
+  type: 'test'
+  ...
+# Subtest: tampered input snapshot fails independent verification
+ok 114 - tampered input snapshot fails independent verification
+  ---
+  duration_ms: 50.530654
+  type: 'test'
+  ...
+# Subtest: tampered receipt fails its canonical self hash
+ok 115 - tampered receipt fails its canonical self hash
+  ---
+  duration_ms: 49.408285
+  type: 'test'
+  ...
+# Subtest: recomputed self hash cannot forge Ed25519 attestation
+ok 116 - recomputed self hash cannot forge Ed25519 attestation
+  ---
+  duration_ms: 55.850266
+  type: 'test'
+  ...
+# Subtest: wrong public key cannot verify receipt
+ok 117 - wrong public key cannot verify receipt
+  ---
+  duration_ms: 43.0551
+  type: 'test'
+  ...
+# Subtest: signing key inside workspace is denied
+ok 118 - signing key inside workspace is denied
+  ---
+  duration_ms: 5.300268
+  type: 'test'
+  ...
+# Subtest: proof execution refuses to run without a signing key
+ok 119 - proof execution refuses to run without a signing key
+  ---
+  duration_ms: 3.262895
+  type: 'test'
+  ...
+# Subtest: trust key generation refuses to overwrite an existing keypair
+ok 120 - trust key generation refuses to overwrite an existing keypair
+  ---
+  duration_ms: 1.81589
+  type: 'test'
+  ...
+# Subtest: pre-existing output is denied instead of overwritten
+ok 121 - pre-existing output is denied instead of overwritten
+  ---
+  duration_ms: 3.574461
+  type: 'test'
+  ...
+# Subtest: output parent symlink escape is denied
+ok 122 - output parent symlink escape is denied
+  ---
+  duration_ms: 3.073185
+  type: 'test'
+  ...
+# Subtest: distinct output names allow repeated signed proofs without weakening no-overwrite
+ok 123 - distinct output names allow repeated signed proofs without weakening no-overwrite
+  ---
+  duration_ms: 105.052036
+  type: 'test'
+  ...
+# Subtest: V0.7 creates request identity before worker process execution and authenticates before V2 interpretation
+ok 124 - V0.7 creates request identity before worker process execution and authenticates before V2 interpretation
+  ---
+  duration_ms: 0.94001
+  type: 'test'
+  ...
+# Subtest: strict UTF-8 decoder rejects malformed byte sequences
+ok 125 - strict UTF-8 decoder rejects malformed byte sequences
+  ---
+  duration_ms: 0.506479
+  type: 'test'
+  ...
+# Subtest: proof execution enforces compile-time input and timeout budgets
+ok 126 - proof execution enforces compile-time input and timeout budgets
+  ---
+  duration_ms: 6.189342
+  type: 'test'
+  ...
+# Subtest: request identity validator rejects digest, worker and invocation substitution
+ok 127 - request identity validator rejects digest, worker and invocation substitution
+  ---
+  duration_ms: 0.681718
+  type: 'test'
+  ...
+# Subtest: privileged host plane requires a live policy-bound arm lease
+ok 128 - privileged host plane requires a live policy-bound arm lease
+  ---
+  duration_ms: 968.17387
+  type: 'test'
+  ...
+# Subtest: host_file_write is root-scoped hash-precondition and host_file_read returns a verified digest
+ok 129 - host_file_write is root-scoped hash-precondition and host_file_read returns a verified digest
+  ---
+  duration_ms: 326.432555
+  type: 'test'
+  ...
+# Subtest: host file plane denies path traversal and symlink escape
+ok 130 - host file plane denies path traversal and symlink escape
+  ---
+  duration_ms: 325.629097
+  type: 'test'
+  ...
+# Subtest: host_exec runs only a hash-pinned script through a hash-pinned executable with no shell string
+ok 131 - host_exec runs only a hash-pinned script through a hash-pinned executable with no shell string
+  ---
+  duration_ms: 621.223268
+  type: 'test'
+  ...
+1..131
+# tests 131
+# suites 0
+# pass 131
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 2474.639696