proofbundle 3.1.1__tar.gz → 3.1.2__tar.gz

{proofbundle-3.1.1/src/proofbundle.egg-info → proofbundle-3.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: proofbundle
-Version: 3.1.1
+Version: 3.1.2
 Summary: Emit and verify portable cryptographic evidence bundles, offline: Ed25519 + RFC 6962 Merkle + optional SD-JWT.
 Author: Konrad Gruszka
 License: MIT

{proofbundle-3.1.1 → proofbundle-3.1.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "proofbundle"
-version = "3.1.1"
+version = "3.1.2"
 description = "Emit and verify portable cryptographic evidence bundles, offline: Ed25519 + RFC 6962 Merkle + optional SD-JWT."
 readme = "README.md"
 requires-python = ">=3.10"

{proofbundle-3.1.1 → proofbundle-3.1.2}/src/proofbundle/__init__.py

@@ -13,7 +13,7 @@ from __future__ import annotations
 
 from typing import TYPE_CHECKING
 
-__version__ = "3.1.1"
+__version__ = "3.1.2"
 
 # The `proofbundle/v0.1` normative spec revision this build implements — kept in sync with the
 # `Revision:` line at the top of SPEC.md by tests/test_docs_truth.py (WP-B1, closes #28). Bump

{proofbundle-3.1.1 → proofbundle-3.1.2}/src/proofbundle/decision.py

@@ -429,16 +429,27 @@ def verify_decision_receipt(envelope: dict, public_key: bytes, *, strict: bool =
         # confirmation is a separate step (resolve_evidence_ref), never implied by evidence_bound.
         if isinstance(ev, list) and ev:
             r["evidence_bound"] = all(isinstance(x, dict) and _is_digest(x.get("digest")) for x in ev)
-        val = predicate.get("validity")
-        if isinstance(val, dict):
-            if expected_audience is not None:
-                r["audience_ok"] = expected_audience in (val.get("audience") or [])
-                if not r["audience_ok"]:
-                    r["errors"].append("audience mismatch (cross-audience replay?)")
-            if expected_nonce is not None:
-                r["nonce_ok"] = val.get("nonce") == expected_nonce
-                if not r["nonce_ok"]:
-                    r["errors"].append("nonce mismatch (replay?)")
+        # 3.1.2 fail-closed fix (audit 2026-07-13, sibling of the eval-path F4 hardening and the decision
+        # template/expiry gates): a relying party who supplies expected_audience/expected_nonce is ASKING for
+        # RFC-9901-§7.3-style replay/audience binding. If the receipt carries NO validity object (or a
+        # non-dict one), the previous `if isinstance(val, dict):` guard SKIPPED the checks entirely →
+        # audience_ok/nonce_ok stayed None → the CLI exit gate (None is not False) let it pass exit 0: a
+        # requested binding silently unenforced (fail-OPEN downgrade). Evaluate against {} instead, so an
+        # absent validity/audience/nonce is a FAIL (fail-closed), never a silent pass.
+        _val = predicate.get("validity")
+        _validity = _val if isinstance(_val, dict) else {}
+        if expected_audience is not None:
+            r["audience_ok"] = expected_audience in (_validity.get("audience") or [])
+            if not r["audience_ok"]:
+                r["errors"].append(
+                    "audience mismatch or absent validity.audience — requested audience binding cannot be "
+                    "enforced (cross-audience replay?, fail-closed)")
+        if expected_nonce is not None:
+            r["nonce_ok"] = _validity.get("nonce") == expected_nonce
+            if not r["nonce_ok"]:
+                r["errors"].append(
+                    "nonce mismatch or absent validity.nonce — requested replay binding cannot be enforced "
+                    "(replay?, fail-closed)")
 
     # Detached anchors (Fix 2): verify anchor evidence for the statement's OWN content root — sha256 over the
     # EXACT signed payload bytes (never re-canonicalized), computed only once the bytes are authentic+canonical.

{proofbundle-3.1.1 → proofbundle-3.1.2/src/proofbundle.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: proofbundle
-Version: 3.1.1
+Version: 3.1.2
 Summary: Emit and verify portable cryptographic evidence bundles, offline: Ed25519 + RFC 6962 Merkle + optional SD-JWT.
 Author: Konrad Gruszka
 License: MIT

{proofbundle-3.1.1 → proofbundle-3.1.2}/tests/test_decision_hardening.py

@@ -96,6 +96,23 @@ class TestDecisionHardening(unittest.TestCase):
                       "--nonce", "deadbeefdeadbeef"])
         self.assertEqual(rc, 2)
 
+    def test_missing_validity_with_expected_aud_nonce_fails_closed(self):
+        # 3.1.2 fail-closed fix (audit 2026-07-13): a receipt with NO validity object must NOT silently pass
+        # when the relying party requested --aud/--nonce binding. The previous `if isinstance(val, dict):`
+        # guard skipped the checks → audience_ok/nonce_ok stayed None → exit 0 (a requested binding silently
+        # unenforced, fail-OPEN). Now an absent validity/audience/nonce is a FAIL (exit 2).
+        from proofbundle.decision import emit_decision_receipt  # noqa: PLC0415
+        pred = _pred("deny")
+        pred.pop("validity", None)
+        env = emit_decision_receipt(pred, self.signer, strict=False)
+        r = verify_decision_receipt(env, self.pub, expected_audience="https://relying.example",
+                                    expected_nonce="n-123")
+        self.assertIs(r["audience_ok"], False, "absent validity must fail the requested audience binding")
+        self.assertIs(r["nonce_ok"], False, "absent validity must fail the requested nonce binding")
+        rc, _ = _run(["decision", "verify", self._write_env(env), "--pub", self.pub_b64,
+                      "--aud", "https://relying.example", "--nonce", "n-123"])
+        self.assertEqual(rc, 2, "a requested binding that cannot be enforced must not exit 0")
+
     def test_crypto_fail_has_no_positive_trailer(self):
         env = copy.deepcopy(self.env)
         body = json.loads(base64.b64decode(env["payload"]))