handoffprobe 0.1.0

package/dist/attacks/p0/identity.js

@@ -0,0 +1,200 @@
+import { cloneSecurityContext } from '../../core/index.js';
+import { P0_AUTHORIZED_DOWNSTREAM, P0_CAPABILITY_UPDATE, P0_PRINCIPAL, P0_UNAUTHORIZED_DOWNSTREAM, createP0ReferenceContext, createP0UpdateInvoiceScenario, } from '../../p0-fixture/index.js';
+function projectSources(section) {
+    return [
+        {
+            kind: 'project',
+            title: 'P0 Security Test Specification',
+            locator: `docs/P0_TEST_SPECIFICATION.md#${section}`,
+        },
+        {
+            kind: 'project',
+            title: 'Attack Catalog',
+            locator: 'docs/ATTACK_CATALOG.md#v01-p0--implement-first',
+        },
+    ];
+}
+function relevantEvidenceSequences(result) {
+    const relevant = new Set(['handoff.translate', 'p0.authorization', 'p0.tool.result']);
+    return result.evidence
+        .filter((event) => relevant.has(event.event))
+        .map((event) => event.sequence);
+}
+function evaluateIdentityMutation(result, messages) {
+    const output = result.output;
+    const envelope = output.mcpResult.envelope;
+    const authorization = envelope.authorization;
+    const before = envelope.before.sideEffectCounter;
+    const after = envelope.after.sideEffectCounter;
+    const evidenceSequences = relevantEvidenceSequences(result);
+    if (authorization.invariantAllowed) {
+        return {
+            status: 'inconclusive',
+            observedBehavior: 'The intended identity mutation did not create an invalid identity-bound authorization state.',
+            evidenceSequences,
+        };
+    }
+    if (!authorization.executed && after === before) {
+        return {
+            status: 'pass',
+            observedBehavior: messages.pass,
+            evidenceSequences,
+        };
+    }
+    if (authorization.executed && after > before) {
+        return {
+            status: 'fail',
+            observedBehavior: messages.fail,
+            evidenceSequences,
+            ...(messages.failSeverity === undefined
+                ? {}
+                : {
+                    severity: messages.failSeverity,
+                }),
+        };
+    }
+    return {
+        status: 'inconclusive',
+        observedBehavior: 'Identity-binding and synthetic side-effect evidence could not establish a deterministic PASS or FAIL.',
+        evidenceSequences,
+    };
+}
+function createDefinition(input) {
+    return {
+        id: input.id,
+        name: input.name,
+        category: 'identity',
+        defaultSeverity: input.defaultSeverity,
+        priority: 'P0',
+        preconditions: input.preconditions,
+        mutationSteps: input.mutationSteps,
+        expectedInvariant: input.invariant,
+        evidenceRequirements: input.evidence,
+        applicability: {
+            a2a: ['1.0'],
+            mcp: ['2026-07-28'],
+        },
+        propertyClass: 'composition_responsibility',
+        sourceReferences: projectSources(input.section),
+        sideEffectClass: 'synthetic',
+        destructive: false,
+    };
+}
+function createUpdateAuthorizedContext() {
+    const context = createP0ReferenceContext();
+    if (context.upstreamAuthority === undefined || context.effectiveAuthority === undefined) {
+        throw new Error('Identity P0 fixture requires authority bindings.');
+    }
+    context.capabilities = [P0_CAPABILITY_UPDATE];
+    context.upstreamAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    context.effectiveAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    return context;
+}
+class LoseOriginalPrincipalAdapter {
+    id = 'p0-id-001:lose-original-principal';
+    translate(context) {
+        const translated = cloneSecurityContext(context);
+        if (translated.effectiveAuthority === undefined) {
+            throw new Error('HP-ID-001 requires effective authority.');
+        }
+        /*
+         * Model a handoff that loses user:alice and
+         * rebases the downstream request onto the
+         * generic executing agent identity.
+         */
+        translated.principal = P0_AUTHORIZED_DOWNSTREAM;
+        translated.effectiveAuthority.principal = P0_AUTHORIZED_DOWNSTREAM;
+        return translated;
+    }
+}
+class SubstituteAgentIdentityAdapter {
+    id = 'p0-id-002:substitute-agent-identity';
+    translate(context) {
+        const translated = cloneSecurityContext(context);
+        /*
+         * Delegation remains bound to agent:billing,
+         * but the executing downstream identity
+         * becomes agent:support.
+         */
+        translated.downstream = P0_UNAUTHORIZED_DOWNSTREAM;
+        return translated;
+    }
+}
+const ID_001_DEFINITION = createDefinition({
+    id: 'HP-ID-001',
+    name: 'Original principal continuity loss',
+    defaultSeverity: 'medium',
+    preconditions: [
+        'The original A2A principal is user:alice.',
+        'A protected invoice.update action depends on principal-bound authority.',
+    ],
+    mutationSteps: [
+        'Drop user:alice during handoff translation.',
+        'Replace the downstream principal representation with agent:billing.',
+        'Attempt the protected update_invoice action without a new principal-bound grant.',
+    ],
+    invariant: 'Protected actions requiring principal-bound policy must remain attributable to the original principal.',
+    evidence: [
+        'original principal',
+        'downstream identity',
+        'authorization decision',
+        'protected action',
+        'synthetic side effect',
+    ],
+    section: 'hp-id-001--original-principal-continuity-loss',
+});
+const ID_002_DEFINITION = createDefinition({
+    id: 'HP-ID-002',
+    name: 'Agent identity substitution',
+    defaultSeverity: 'high',
+    preconditions: [
+        'Delegated invoice.update authority is bound to agent:billing.',
+        'The delegation has already been accepted before the identity mutation.',
+    ],
+    mutationSteps: [
+        'Replace the executing downstream identity agent:billing with agent:support.',
+        'Retain the original authority binding to agent:billing.',
+        'Attempt the protected update_invoice action.',
+    ],
+    invariant: 'Identity-bound authority must not survive replacement of the authorized agent.',
+    evidence: ['expected agent', 'actual agent', 'authority binding', 'tool invocation', 'result'],
+    section: 'hp-id-002--agent-identity-substitution',
+});
+const ID_001_CASE = {
+    definition: ID_001_DEFINITION,
+    evaluate(result) {
+        return evaluateIdentityMutation(result, {
+            pass: 'The protected action was rejected after user:alice was lost during handoff translation.',
+            fail: 'The protected synthetic update executed after user:alice was replaced by a generic agent identity, proving a principal-bound authorization bypass.',
+            failSeverity: 'high',
+        });
+    },
+};
+const ID_002_CASE = {
+    definition: ID_002_DEFINITION,
+    evaluate(result) {
+        return evaluateIdentityMutation(result, {
+            pass: 'The protected action was rejected after agent:billing was replaced by agent:support.',
+            fail: 'agent:support executed the protected synthetic update while relying on authority still bound to agent:billing.',
+        });
+    },
+};
+export const HP_ID_001 = {
+    attack: ID_001_CASE,
+    scenario: createP0UpdateInvoiceScenario(24001),
+    handoffAdapter: new LoseOriginalPrincipalAdapter(),
+    createContext: createUpdateAuthorizedContext,
+};
+export const HP_ID_002 = {
+    attack: ID_002_CASE,
+    scenario: createP0UpdateInvoiceScenario(24002),
+    handoffAdapter: new SubstituteAgentIdentityAdapter(),
+    createContext: createUpdateAuthorizedContext,
+};
+export const P0_IDENTITY_ATTACKS = [HP_ID_001, HP_ID_002];
+export const P0_IDENTITY_BASELINE = {
+    originalPrincipal: P0_PRINCIPAL,
+    authorizedAgent: P0_AUTHORIZED_DOWNSTREAM,
+    unauthorizedAgent: P0_UNAUTHORIZED_DOWNSTREAM,
+};
+//# sourceMappingURL=identity.js.map

package/dist/attacks/p0/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/attacks/p0/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAW3D,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,EACZ,0BAA0B,EAC1B,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAMnC,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO;QACL;YACE,IAAI,EAAE,SAAkB;YACxB,KAAK,EAAE,gCAAgC;YACvC,OAAO,EAAE,iCAAiC,OAAO,EAAE;SACpD;QACD;YACE,IAAI,EAAE,SAAkB;YACxB,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,gDAAgD;SAC1D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,MAA6B;IAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEtF,OAAO,MAAM,CAAC,QAAQ;SACnB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAA6B,EAC7B,QAIC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAwB,CAAC;IAE/C,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;IAE3C,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;IAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAEjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAE/C,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAE5D,IAAI,aAAa,CAAC,gBAAgB,EAAE,CAAC;QACnC,OAAO;YACL,MAAM,EAAE,cAAc;YAEtB,gBAAgB,EACd,8FAA8F;YAEhG,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO;YACL,MAAM,EAAE,MAAM;YAEd,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAE/B,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,QAAQ,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC7C,OAAO;YACL,MAAM,EAAE,MAAM;YAEd,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAE/B,iBAAiB;YAEjB,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,QAAQ,EAAE,QAAQ,CAAC,YAAY;iBAChC,CAAC;SACP,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,cAAc;QAEtB,gBAAgB,EACd,uGAAuG;QAEzG,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAgBzB;IACC,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QAEZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAEhB,QAAQ,EAAE,UAAU;QAEpB,eAAe,EAAE,KAAK,CAAC,eAAe;QAEtC,QAAQ,EAAE,IAAI;QAEd,aAAa,EAAE,KAAK,CAAC,aAAa;QAElC,aAAa,EAAE,KAAK,CAAC,aAAa;QAElC,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAElC,oBAAoB,EAAE,KAAK,CAAC,QAAQ;QAEpC,aAAa,EAAE;YACb,GAAG,EAAE,CAAC,KAAK,CAAC;YAEZ,GAAG,EAAE,CAAC,YAAY,CAAC;SACpB;QAED,aAAa,EAAE,4BAA4B;QAE3C,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;QAE/C,eAAe,EAAE,WAAW;QAE5B,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B;IACpC,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE9C,OAAO,CAAC,iBAAiB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEhE,OAAO,CAAC,kBAAkB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEjE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,4BAA4B;IACvB,EAAE,GAAG,mCAAmC,CAAC;IAElD,SAAS,CAAC,OAAwB;QAChC,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEjD,IAAI,UAAU,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED;;;;WAIG;QACH,UAAU,CAAC,SAAS,GAAG,wBAAwB,CAAC;QAEhD,UAAU,CAAC,kBAAkB,CAAC,SAAS,GAAG,wBAAwB,CAAC;QAEnE,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED,MAAM,8BAA8B;IACzB,EAAE,GAAG,qCAAqC,CAAC;IAEpD,SAAS,CAAC,OAAwB;QAChC,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEjD;;;;WAIG;QACH,UAAU,CAAC,UAAU,GAAG,0BAA0B,CAAC;QAEnD,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;IACzC,EAAE,EAAE,WAAW;IAEf,IAAI,EAAE,oCAAoC;IAE1C,eAAe,EAAE,QAAQ;IAEzB,aAAa,EAAE;QACb,2CAA2C;QAC3C,yEAAyE;KAC1E;IAED,aAAa,EAAE;QACb,6CAA6C;QAC7C,qEAAqE;QACrE,kFAAkF;KACnF;IAED,SAAS,EACP,wGAAwG;IAE1G,QAAQ,EAAE;QACR,oBAAoB;QACpB,qBAAqB;QACrB,wBAAwB;QACxB,kBAAkB;QAClB,uBAAuB;KACxB;IAED,OAAO,EAAE,+CAA+C;CACzD,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;IACzC,EAAE,EAAE,WAAW;IAEf,IAAI,EAAE,6BAA6B;IAEnC,eAAe,EAAE,MAAM;IAEvB,aAAa,EAAE;QACb,+DAA+D;QAC/D,wEAAwE;KACzE;IAED,aAAa,EAAE;QACb,6EAA6E;QAC7E,yDAAyD;QACzD,8CAA8C;KAC/C;IAED,SAAS,EAAE,gFAAgF;IAE3F,QAAQ,EAAE,CAAC,gBAAgB,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,QAAQ,CAAC;IAE9F,OAAO,EAAE,wCAAwC;CAClD,CAAC,CAAC;AAEH,MAAM,WAAW,GAAe;IAC9B,UAAU,EAAE,iBAAiB;IAE7B,QAAQ,CAAC,MAAM;QACb,OAAO,wBAAwB,CAAC,MAAM,EAAE;YACtC,IAAI,EAAE,yFAAyF;YAE/F,IAAI,EAAE,oJAAoJ;YAE1J,YAAY,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,WAAW,GAAe;IAC9B,UAAU,EAAE,iBAAiB;IAE7B,QAAQ,CAAC,MAAM;QACb,OAAO,wBAAwB,CAAC,MAAM,EAAE;YACtC,IAAI,EAAE,sFAAsF;YAE5F,IAAI,EAAE,gHAAgH;SACvH,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAiB;IACrC,MAAM,EAAE,WAAW;IAEnB,QAAQ,EAAE,6BAA6B,CAAC,KAAK,CAAC;IAE9C,cAAc,EAAE,IAAI,4BAA4B,EAAE;IAElD,aAAa,EAAE,6BAA6B;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAiB;IACrC,MAAM,EAAE,WAAW;IAEnB,QAAQ,EAAE,6BAA6B,CAAC,KAAK,CAAC;IAE9C,cAAc,EAAE,IAAI,8BAA8B,EAAE;IAEpD,aAAa,EAAE,6BAA6B;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAA4B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAEnF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,iBAAiB,EAAE,YAAY;IAE/B,eAAe,EAAE,wBAAwB;IAEzC,iBAAiB,EAAE,0BAA0B;CACrC,CAAC"}

package/dist/attacks/p0/index.d.ts

@@ -0,0 +1,9 @@
+export * from './approval.js';
+export * from './authorization.js';
+export * from './credentials.js';
+export * from './identity.js';
+export * from './lifecycle.js';
+export * from './target.js';
+export * from './tenant.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/attacks/p0/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/attacks/p0/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/attacks/p0/index.js

@@ -0,0 +1,9 @@
+export * from './approval.js';
+export * from './authorization.js';
+export * from './credentials.js';
+export * from './identity.js';
+export * from './lifecycle.js';
+export * from './target.js';
+export * from './tenant.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/attacks/p0/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/attacks/p0/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/attacks/p0/lifecycle.d.ts

@@ -0,0 +1,6 @@
+import type { P0AttackPlan } from './types.js';
+export declare const HP_LIFECYCLE_001: P0AttackPlan;
+export declare const P0_LIFECYCLE_BASELINE: {
+    readonly taskId: "task:p0-001";
+};
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/attacks/p0/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/attacks/p0/lifecycle.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA8M/C,eAAO,MAAM,gBAAgB,EAAE,YAQ9B,CAAC;AAEF,eAAO,MAAM,qBAAqB;;CAExB,CAAC"}

package/dist/attacks/p0/lifecycle.js

@@ -0,0 +1,142 @@
+import { P0_CAPABILITY_UPDATE, P0_TASK_ID, P0IdentityHandoffAdapter, createP0ReferenceContext, } from '../../p0-fixture/index.js';
+function createLifecycleContext() {
+    const context = createP0ReferenceContext();
+    if (context.upstreamAuthority === undefined ||
+        context.effectiveAuthority === undefined ||
+        context.lifecycle === undefined) {
+        throw new Error('HP-LIFECYCLE-001 requires authority and lifecycle bindings.');
+    }
+    context.capabilities = [P0_CAPABILITY_UPDATE];
+    context.upstreamAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    context.effectiveAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    context.lifecycle.state = 'active';
+    return context;
+}
+function sequenceFor(result, event) {
+    return result.evidence.find((candidate) => candidate.event === event)?.sequence;
+}
+function evaluateLifecycle(result) {
+    const start = sequenceFor(result, 'lifecycle.start');
+    const request = sequenceFor(result, 'mcp.tool.call');
+    const cancellation = sequenceFor(result, 'lifecycle.cancel');
+    const toolResult = sequenceFor(result, 'p0.tool.result');
+    const evidenceSequences = [start, request, cancellation, toolResult].filter((value) => value !== undefined);
+    if (start === undefined ||
+        request === undefined ||
+        cancellation === undefined ||
+        toolResult === undefined ||
+        !(start < request && request < cancellation && cancellation < toolResult)) {
+        return {
+            status: 'inconclusive',
+            observedBehavior: 'Lifecycle evidence did not prove start -> downstream request -> cancellation -> tool result ordering.',
+            evidenceSequences,
+        };
+    }
+    const output = result.output;
+    const envelope = output.mcpResult.envelope;
+    const authorization = envelope.authorization;
+    const decision = authorization.decision;
+    if (decision === null) {
+        return {
+            status: 'inconclusive',
+            observedBehavior: 'Lifecycle authorization decision was unavailable.',
+            evidenceSequences,
+        };
+    }
+    const before = envelope.before.sideEffectCounter;
+    const after = envelope.after.sideEffectCounter;
+    if (decision.lifecycleAllows) {
+        return {
+            status: 'inconclusive',
+            observedBehavior: 'The authorization layer did not observe the governing task as cancelled.',
+            evidenceSequences,
+        };
+    }
+    if (!authorization.executed && after === before) {
+        return {
+            status: 'pass',
+            observedBehavior: 'Cancellation propagated before protected execution and no synthetic side effect occurred.',
+            evidenceSequences,
+        };
+    }
+    if (authorization.executed && after > before) {
+        return {
+            status: 'fail',
+            observedBehavior: 'The protected synthetic update executed after cancellation using stale authority or intent.',
+            evidenceSequences,
+        };
+    }
+    return {
+        status: 'inconclusive',
+        observedBehavior: 'Lifecycle and side-effect evidence could not establish deterministic PASS or FAIL.',
+        evidenceSequences,
+    };
+}
+const DEFINITION = {
+    id: 'HP-LIFECYCLE-001',
+    name: 'Cancellation not propagated',
+    category: 'lifecycle',
+    defaultSeverity: 'high',
+    priority: 'P0',
+    preconditions: [
+        'The governing A2A task starts active.',
+        'A protected update_invoice request begins.',
+        'A deterministic cancellation barrier exists before the protected tool execution.',
+    ],
+    mutationSteps: [
+        'Record the active governing task.',
+        'Issue the downstream MCP request.',
+        'Cancel the governing A2A task after request dispatch but before tool execution.',
+        'Observe whether the protected synthetic side effect still executes.',
+    ],
+    expectedInvariant: 'Cancellation of the governing upstream task must prevent the protected downstream side effect unless semantics explicitly permit completion.',
+    evidenceRequirements: [
+        'task ID',
+        'start event',
+        'downstream request event',
+        'cancellation event',
+        'side-effect event',
+        'deterministic ordering',
+        'side-effect counter before and after',
+    ],
+    applicability: {
+        a2a: ['1.0'],
+        mcp: ['2026-07-28'],
+    },
+    propertyClass: 'composition_responsibility',
+    sourceReferences: [
+        {
+            kind: 'project',
+            title: 'P0 Security Test Specification',
+            locator: 'docs/P0_TEST_SPECIFICATION.md#hp-lifecycle-001--cancellation-not-propagated',
+        },
+    ],
+    sideEffectClass: 'synthetic',
+    destructive: false,
+};
+const ATTACK = {
+    definition: DEFINITION,
+    evaluate: evaluateLifecycle,
+};
+const SCENARIO = {
+    id: 'lifecycle-cancel-before-update',
+    tool: 'update_invoice',
+    lifecycleTracking: true,
+    cancelLifecycleBeforeTool: true,
+    buildArguments(context) {
+        return {
+            resource: context.resource,
+            amountCents: 27001,
+        };
+    },
+};
+export const HP_LIFECYCLE_001 = {
+    attack: ATTACK,
+    scenario: SCENARIO,
+    handoffAdapter: new P0IdentityHandoffAdapter(),
+    createContext: createLifecycleContext,
+};
+export const P0_LIFECYCLE_BASELINE = {
+    taskId: P0_TASK_ID,
+};
+//# sourceMappingURL=lifecycle.js.map

package/dist/attacks/p0/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/attacks/p0/lifecycle.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,oBAAoB,EACpB,UAAU,EACV,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AAMnC,SAAS,sBAAsB;IAC7B,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,IACE,OAAO,CAAC,iBAAiB,KAAK,SAAS;QACvC,OAAO,CAAC,kBAAkB,KAAK,SAAS;QACxC,OAAO,CAAC,SAAS,KAAK,SAAS,EAC/B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE9C,OAAO,CAAC,iBAAiB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEhE,OAAO,CAAC,kBAAkB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEjE,OAAO,CAAC,SAAS,CAAC,KAAK,GAAG,QAAQ,CAAC;IAEnC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,MAA6B,EAAE,KAAa;IAC/D,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,QAAQ,CAAC;AAClF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA6B;IACtD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAErD,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAE7D,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAEzD,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,MAAM,CACzE,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAChD,CAAC;IAEF,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,SAAS;QACrB,YAAY,KAAK,SAAS;QAC1B,UAAU,KAAK,SAAS;QACxB,CAAC,CAAC,KAAK,GAAG,OAAO,IAAI,OAAO,GAAG,YAAY,IAAI,YAAY,GAAG,UAAU,CAAC,EACzE,CAAC;QACD,OAAO;YACL,MAAM,EAAE,cAAc;YAEtB,gBAAgB,EACd,uGAAuG;YAEzG,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAwB,CAAC;IAE/C,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;IAE3C,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;IAE7C,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;IAExC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,cAAc;YAEtB,gBAAgB,EAAE,mDAAmD;YAErE,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAEjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAE/C,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,cAAc;YAEtB,gBAAgB,EAAE,0EAA0E;YAE5F,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO;YACL,MAAM,EAAE,MAAM;YAEd,gBAAgB,EACd,2FAA2F;YAE7F,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,QAAQ,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC7C,OAAO;YACL,MAAM,EAAE,MAAM;YAEd,gBAAgB,EACd,6FAA6F;YAE/F,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,cAAc;QAEtB,gBAAgB,EACd,oFAAoF;QAEtF,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAqB;IACnC,EAAE,EAAE,kBAAkB;IAEtB,IAAI,EAAE,6BAA6B;IAEnC,QAAQ,EAAE,WAAW;IAErB,eAAe,EAAE,MAAM;IAEvB,QAAQ,EAAE,IAAI;IAEd,aAAa,EAAE;QACb,uCAAuC;QACvC,4CAA4C;QAC5C,kFAAkF;KACnF;IAED,aAAa,EAAE;QACb,mCAAmC;QACnC,mCAAmC;QACnC,iFAAiF;QACjF,qEAAqE;KACtE;IAED,iBAAiB,EACf,8IAA8I;IAEhJ,oBAAoB,EAAE;QACpB,SAAS;QACT,aAAa;QACb,0BAA0B;QAC1B,oBAAoB;QACpB,mBAAmB;QACnB,wBAAwB;QACxB,sCAAsC;KACvC;IAED,aAAa,EAAE;QACb,GAAG,EAAE,CAAC,KAAK,CAAC;QAEZ,GAAG,EAAE,CAAC,YAAY,CAAC;KACpB;IAED,aAAa,EAAE,4BAA4B;IAE3C,gBAAgB,EAAE;QAChB;YACE,IAAI,EAAE,SAAS;YAEf,KAAK,EAAE,gCAAgC;YAEvC,OAAO,EAAE,6EAA6E;SACvF;KACF;IAED,eAAe,EAAE,WAAW;IAE5B,WAAW,EAAE,KAAK;CACnB,CAAC;AAEF,MAAM,MAAM,GAAe;IACzB,UAAU,EAAE,UAAU;IAEtB,QAAQ,EAAE,iBAAiB;CAC5B,CAAC;AAEF,MAAM,QAAQ,GAAe;IAC3B,EAAE,EAAE,gCAAgC;IAEpC,IAAI,EAAE,gBAAgB;IAEtB,iBAAiB,EAAE,IAAI;IAEvB,yBAAyB,EAAE,IAAI;IAE/B,cAAc,CAAC,OAAO;QACpB,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAE1B,WAAW,EAAE,KAAK;SACnB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC5C,MAAM,EAAE,MAAM;IAEd,QAAQ,EAAE,QAAQ;IAElB,cAAc,EAAE,IAAI,wBAAwB,EAAE;IAE9C,aAAa,EAAE,sBAAsB;CACtC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,MAAM,EAAE,UAAU;CACV,CAAC"}

package/dist/attacks/p0/target.d.ts

@@ -0,0 +1,11 @@
+import type { P0AttackPlan } from './types.js';
+export declare const HP_TARGET_001: P0AttackPlan;
+export declare const HP_TARGET_002: P0AttackPlan;
+export declare const P0_TARGET_ATTACKS: readonly P0AttackPlan[];
+export declare const P0_TARGET_BASELINE: {
+    readonly grantedResource: "invoice:INV-1001";
+    readonly alternateResource: "invoice:INV-2002";
+    readonly narrowCapability: "invoice.read";
+    readonly broaderCapability: "invoice.update";
+};
+//# sourceMappingURL=target.d.ts.map

package/dist/attacks/p0/target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.d.ts","sourceRoot":"","sources":["../../../src/attacks/p0/target.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAyO/C,eAAO,MAAM,aAAa,EAAE,YAQ3B,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,YAQ3B,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,SAAS,YAAY,EAAmC,CAAC;AAEzF,eAAO,MAAM,kBAAkB;;;;;CAQrB,CAAC"}

package/dist/attacks/p0/target.js

@@ -0,0 +1,177 @@
+import { cloneSecurityContext } from '../../core/index.js';
+import { P0_AUTHORIZED_RESOURCE, P0_CAPABILITY_READ, P0_CAPABILITY_UPDATE, P0IdentityHandoffAdapter, P0_UNAUTHORIZED_RESOURCE, createP0ReferenceContext, createP0UpdateInvoiceScenario, } from '../../p0-fixture/index.js';
+function evidenceSequences(result) {
+    return result.evidence
+        .filter((event) => ['handoff.translate', 'p0.authorization', 'p0.tool.result'].includes(event.event))
+        .map((event) => event.sequence);
+}
+function evaluateProtectedMutation(result, messages) {
+    const output = result.output;
+    const envelope = output.mcpResult.envelope;
+    const authorization = envelope.authorization;
+    const before = envelope.before.sideEffectCounter;
+    const after = envelope.after.sideEffectCounter;
+    const sequences = evidenceSequences(result);
+    if (authorization.invariantAllowed) {
+        return {
+            status: 'inconclusive',
+            observedBehavior: 'The intended target mutation did not create an invalid authorization state.',
+            evidenceSequences: sequences,
+        };
+    }
+    if (!authorization.executed && after === before) {
+        return {
+            status: 'pass',
+            observedBehavior: messages.pass,
+            evidenceSequences: sequences,
+        };
+    }
+    if (authorization.executed && after > before) {
+        return {
+            status: 'fail',
+            observedBehavior: messages.fail,
+            evidenceSequences: sequences,
+        };
+    }
+    return {
+        status: 'inconclusive',
+        observedBehavior: 'Target-binding evidence and synthetic side effects could not establish a deterministic PASS or FAIL.',
+        evidenceSequences: sequences,
+    };
+}
+function createUpdateAuthorizedContext() {
+    const context = createP0ReferenceContext();
+    if (context.upstreamAuthority === undefined || context.effectiveAuthority === undefined) {
+        throw new Error('HP-TARGET-001 requires authority bindings.');
+    }
+    context.capabilities = [P0_CAPABILITY_UPDATE];
+    context.upstreamAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    context.effectiveAuthority.capabilities = [P0_CAPABILITY_UPDATE];
+    return context;
+}
+class SubstituteResourceAdapter {
+    id = 'p0-target-001:resource-substitution';
+    translate(context) {
+        const translated = cloneSecurityContext(context);
+        if (translated.effectiveAuthority === undefined) {
+            throw new Error('HP-TARGET-001 requires effective authority.');
+        }
+        translated.resource = P0_UNAUTHORIZED_RESOURCE;
+        translated.effectiveAuthority.resources = [P0_UNAUTHORIZED_RESOURCE];
+        return translated;
+    }
+}
+const TARGET_001_DEFINITION = {
+    id: 'HP-TARGET-001',
+    name: 'Resource substitution',
+    category: 'target',
+    defaultSeverity: 'high',
+    priority: 'P0',
+    preconditions: [
+        'Authority is bound to invoice:INV-1001.',
+        'The alternate invoice:INV-2002 exists in the synthetic fixture.',
+    ],
+    mutationSteps: [
+        'Replace invoice:INV-1001 with invoice:INV-2002 during handoff translation.',
+        'Retain the original upstream resource grant.',
+        'Attempt update_invoice against the substituted resource.',
+    ],
+    expectedInvariant: 'Authority for resource A must not automatically authorize resource B.',
+    evidenceRequirements: [
+        'granted resource',
+        'requested resource',
+        'translated resource',
+        'authorization result',
+        'resource state or result',
+    ],
+    applicability: {
+        a2a: ['1.0'],
+        mcp: ['2026-07-28'],
+    },
+    propertyClass: 'composition_responsibility',
+    sourceReferences: [
+        {
+            kind: 'project',
+            title: 'P0 Security Test Specification',
+            locator: 'docs/P0_TEST_SPECIFICATION.md#hp-target-001--resource-substitution',
+        },
+    ],
+    sideEffectClass: 'synthetic',
+    destructive: false,
+};
+const TARGET_002_DEFINITION = {
+    id: 'HP-TARGET-002',
+    name: 'Capability/tool semantic collision',
+    category: 'target',
+    defaultSeverity: 'high',
+    priority: 'P0',
+    preconditions: [
+        'The upstream capability is invoice.read.',
+        'The downstream MCP surface exposes update_invoice.',
+    ],
+    mutationSteps: [
+        'Preserve the narrow invoice.read authority.',
+        'Map the request to the broader update_invoice MCP tool.',
+        'Attempt execution without receiving invoice.update authority.',
+    ],
+    expectedInvariant: 'A narrow upstream capability must not map to a broader MCP tool merely because their names or descriptions are similar.',
+    evidenceRequirements: [
+        'upstream capability',
+        'downstream tool',
+        'translation mapping',
+        'authority',
+        'synthetic side effect',
+    ],
+    applicability: {
+        a2a: ['1.0'],
+        mcp: ['2026-07-28'],
+    },
+    propertyClass: 'composition_responsibility',
+    sourceReferences: [
+        {
+            kind: 'project',
+            title: 'P0 Security Test Specification',
+            locator: 'docs/P0_TEST_SPECIFICATION.md#hp-target-002--capabilitytool-semantic-collision',
+        },
+    ],
+    sideEffectClass: 'synthetic',
+    destructive: false,
+};
+const TARGET_001_CASE = {
+    definition: TARGET_001_DEFINITION,
+    evaluate(result) {
+        return evaluateProtectedMutation(result, {
+            pass: 'The substituted invoice:INV-2002 target was rejected and remained unchanged.',
+            fail: 'The original invoice:INV-1001 grant executed a protected synthetic mutation against invoice:INV-2002.',
+        });
+    },
+};
+const TARGET_002_CASE = {
+    definition: TARGET_002_DEFINITION,
+    evaluate(result) {
+        return evaluateProtectedMutation(result, {
+            pass: 'The invoice.read to update_invoice semantic mismatch was rejected.',
+            fail: 'The broader update_invoice tool executed while the upstream authority remained limited to invoice.read.',
+        });
+    },
+};
+export const HP_TARGET_001 = {
+    attack: TARGET_001_CASE,
+    scenario: createP0UpdateInvoiceScenario(26001),
+    handoffAdapter: new SubstituteResourceAdapter(),
+    createContext: createUpdateAuthorizedContext,
+};
+export const HP_TARGET_002 = {
+    attack: TARGET_002_CASE,
+    scenario: createP0UpdateInvoiceScenario(26002),
+    handoffAdapter: new P0IdentityHandoffAdapter(),
+    createContext: createP0ReferenceContext,
+};
+export const P0_TARGET_ATTACKS = [HP_TARGET_001, HP_TARGET_002];
+export const P0_TARGET_BASELINE = {
+    grantedResource: P0_AUTHORIZED_RESOURCE,
+    alternateResource: P0_UNAUTHORIZED_RESOURCE,
+    narrowCapability: P0_CAPABILITY_READ,
+    broaderCapability: P0_CAPABILITY_UPDATE,
+};
+//# sourceMappingURL=target.js.map

package/dist/attacks/p0/target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.js","sourceRoot":"","sources":["../../../src/attacks/p0/target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAW3D,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAMnC,SAAS,iBAAiB,CAAC,MAA6B;IACtD,OAAO,MAAM,CAAC,QAAQ;SACnB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAChB,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAClF;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,yBAAyB,CAChC,MAA6B,EAC7B,QAGC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAwB,CAAC;IAE/C,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;IAE3C,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;IAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAEjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAE/C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,aAAa,CAAC,gBAAgB,EAAE,CAAC;QACnC,OAAO;YACL,MAAM,EAAE,cAAc;YAEtB,gBAAgB,EACd,6EAA6E;YAE/E,iBAAiB,EAAE,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO;YACL,MAAM,EAAE,MAAM;YAEd,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAE/B,iBAAiB,EAAE,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,QAAQ,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC7C,OAAO;YACL,MAAM,EAAE,MAAM;YAEd,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAE/B,iBAAiB,EAAE,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,cAAc;QAEtB,gBAAgB,EACd,sGAAsG;QAExG,iBAAiB,EAAE,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B;IACpC,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE9C,OAAO,CAAC,iBAAiB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEhE,OAAO,CAAC,kBAAkB,CAAC,YAAY,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEjE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,yBAAyB;IACpB,EAAE,GAAG,qCAAqC,CAAC;IAEpD,SAAS,CAAC,OAAwB;QAChC,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEjD,IAAI,UAAU,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,UAAU,CAAC,QAAQ,GAAG,wBAAwB,CAAC;QAE/C,UAAU,CAAC,kBAAkB,CAAC,SAAS,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAErE,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAED,MAAM,qBAAqB,GAAqB;IAC9C,EAAE,EAAE,eAAe;IAEnB,IAAI,EAAE,uBAAuB;IAE7B,QAAQ,EAAE,QAAQ;IAElB,eAAe,EAAE,MAAM;IAEvB,QAAQ,EAAE,IAAI;IAEd,aAAa,EAAE;QACb,yCAAyC;QACzC,iEAAiE;KAClE;IAED,aAAa,EAAE;QACb,4EAA4E;QAC5E,8CAA8C;QAC9C,0DAA0D;KAC3D;IAED,iBAAiB,EAAE,uEAAuE;IAE1F,oBAAoB,EAAE;QACpB,kBAAkB;QAClB,oBAAoB;QACpB,qBAAqB;QACrB,sBAAsB;QACtB,0BAA0B;KAC3B;IAED,aAAa,EAAE;QACb,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,GAAG,EAAE,CAAC,YAAY,CAAC;KACpB;IAED,aAAa,EAAE,4BAA4B;IAE3C,gBAAgB,EAAE;QAChB;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,gCAAgC;YACvC,OAAO,EAAE,oEAAoE;SAC9E;KACF;IAED,eAAe,EAAE,WAAW;IAE5B,WAAW,EAAE,KAAK;CACnB,CAAC;AAEF,MAAM,qBAAqB,GAAqB;IAC9C,EAAE,EAAE,eAAe;IAEnB,IAAI,EAAE,oCAAoC;IAE1C,QAAQ,EAAE,QAAQ;IAElB,eAAe,EAAE,MAAM;IAEvB,QAAQ,EAAE,IAAI;IAEd,aAAa,EAAE;QACb,0CAA0C;QAC1C,oDAAoD;KACrD;IAED,aAAa,EAAE;QACb,6CAA6C;QAC7C,yDAAyD;QACzD,+DAA+D;KAChE;IAED,iBAAiB,EACf,yHAAyH;IAE3H,oBAAoB,EAAE;QACpB,qBAAqB;QACrB,iBAAiB;QACjB,qBAAqB;QACrB,WAAW;QACX,uBAAuB;KACxB;IAED,aAAa,EAAE;QACb,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,GAAG,EAAE,CAAC,YAAY,CAAC;KACpB;IAED,aAAa,EAAE,4BAA4B;IAE3C,gBAAgB,EAAE;QAChB;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,gCAAgC;YACvC,OAAO,EAAE,gFAAgF;SAC1F;KACF;IAED,eAAe,EAAE,WAAW;IAE5B,WAAW,EAAE,KAAK;CACnB,CAAC;AAEF,MAAM,eAAe,GAAe;IAClC,UAAU,EAAE,qBAAqB;IAEjC,QAAQ,CAAC,MAAM;QACb,OAAO,yBAAyB,CAAC,MAAM,EAAE;YACvC,IAAI,EAAE,8EAA8E;YAEpF,IAAI,EAAE,uGAAuG;SAC9G,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,eAAe,GAAe;IAClC,UAAU,EAAE,qBAAqB;IAEjC,QAAQ,CAAC,MAAM;QACb,OAAO,yBAAyB,CAAC,MAAM,EAAE;YACvC,IAAI,EAAE,oEAAoE;YAE1E,IAAI,EAAE,yGAAyG;SAChH,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,MAAM,EAAE,eAAe;IAEvB,QAAQ,EAAE,6BAA6B,CAAC,KAAK,CAAC;IAE9C,cAAc,EAAE,IAAI,yBAAyB,EAAE;IAE/C,aAAa,EAAE,6BAA6B;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,MAAM,EAAE,eAAe;IAEvB,QAAQ,EAAE,6BAA6B,CAAC,KAAK,CAAC;IAE9C,cAAc,EAAE,IAAI,wBAAwB,EAAE;IAE9C,aAAa,EAAE,wBAAwB;CACxC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAA4B,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AAEzF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,eAAe,EAAE,sBAAsB;IAEvC,iBAAiB,EAAE,wBAAwB;IAE3C,gBAAgB,EAAE,kBAAkB;IAEpC,iBAAiB,EAAE,oBAAoB;CAC/B,CAAC"}

package/dist/attacks/p0/tenant.d.ts

@@ -0,0 +1,10 @@
+import type { P0AttackPlan } from './types.js';
+export declare const HP_TENANT_001_LOSS: P0AttackPlan;
+export declare const HP_TENANT_001: P0AttackPlan;
+export declare const P0_TENANT_001_VARIANTS: readonly P0AttackPlan[];
+export declare const P0_TENANT_BASELINE: {
+    readonly authorized: "tenant:acme";
+    readonly unauthorized: "tenant:globex";
+    readonly unauthorizedResource: "invoice:INV-2002";
+};
+//# sourceMappingURL=tenant.d.ts.map

package/dist/attacks/p0/tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../../src/attacks/p0/tenant.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAsN/C,eAAO,MAAM,kBAAkB,EAAE,YAQhC,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,YAQ3B,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,SAAS,YAAY,EAAwC,CAAC;AAEnG,eAAO,MAAM,kBAAkB;;;;CAMrB,CAAC"}