tamperward 2.38.1 → 2.38.2

package/dist/cli/index.js

@@ -23832,8 +23832,10 @@ function assessCapabilities(caps, evidence) {
 }
 function aggregateInLoop(assessments) {
   const byId = new Map(assessments.map((a) => [a.id, a]));
-  const required = REQUIRED_IN_LOOP_IDS.map((id) => byId.get(id)).filter((a) => a !== void 0);
-  const anyDangerous = required.some((a) => a.state === "FAIL-OPEN" || a.state === "INCONCLUSIVE");
+  const required = REQUIRED_IN_LOOP_IDS.map((id) => byId.get(id));
+  const presentRequired = required.filter((a) => a !== void 0);
+  const completeRequiredSet = required.every((a) => a !== void 0) && REQUIRED_IN_LOOP_IDS.every((id) => assessments.filter((a) => a.id === id).length === 1);
+  const anyDangerous = presentRequired.some((a) => a.state === "FAIL-OPEN" || a.state === "INCONCLUSIVE");
   const present = (id) => {
     const s = byId.get(id)?.state;
     return s === "PROVEN" || s === "PARTIAL";
@@ -23841,7 +23843,7 @@ function aggregateInLoop(assessments) {
   const anyPreDenyPresent = PRE_DENY_IDS.some(present);
   const endOfTurnPresent = present("end-of-turn");
   if (!anyPreDenyPresent && !endOfTurnPresent) return "NONE";
-  if (!anyDangerous && required.every((a) => a.state === "PROVEN")) return "FULL";
+  if (!anyDangerous && completeRequiredSet && presentRequired.every((a) => a.state === "PROVEN")) return "FULL";
   return "PARTIAL";
 }
 function sha16(s) {
@@ -24045,11 +24047,20 @@ function validateStoredReport(value) {
     if (!source || typeof detail !== "string") return { reason: "invalid capability evidence" };
     capabilities.push({ id, state, evidence: { source, detail } });
   }
+  const capabilityIds = capabilities.map((c) => c.id);
+  const capabilitySet = new Set(capabilityIds);
+  const testedSet = new Set(testedCapabilities);
+  if (capabilityIds.length !== capabilitySet.size || testedCapabilities.length !== testedSet.size || capabilitySet.size !== testedSet.size || capabilityIds.some((id) => !testedSet.has(id)) || testedCapabilities.some((id) => !capabilitySet.has(id))) {
+    return { reason: "capabilities do not exactly match tested_capabilities" };
+  }
   const inLoop = value.in_loop_protection;
   if (inLoop !== "FULL" && inLoop !== "PARTIAL" && inLoop !== "NONE") return { reason: "invalid in_loop_protection" };
   if (value.final_authority !== FINAL_AUTHORITY) return { reason: "invalid final_authority" };
   const note = value.note;
   if (typeof note !== "string") return { reason: "invalid note" };
+  if (!recorded && (capabilities.length > 0 || inLoop !== "NONE")) {
+    return { reason: "unrecorded report carries capability data" };
+  }
   const base = {
     runtime: { id: rId, label: rLabel, version: rVersion },
     tamperward: { version: twVersion, commit: twCommit },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.38.1",
+  "version": "2.38.2",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",