diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/action-gate.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/action-gate.sh index f39b409..3cea9cd 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/action-gate.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/action-gate.sh @@ -24,7 +24,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" LOG="$CASAN_STATE_ROOT/logs/level5/action-gate.jsonl" mkdir -p "$(dirname "$LOG")" # shellcheck source=casan-log.sh diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/agent-metrics.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/agent-metrics.sh index 5ddc7c0..24c36f8 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/agent-metrics.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/agent-metrics.sh @@ -22,7 +22,7 @@ fi SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" LOG_DIR="$CASAN_STATE_ROOT/logs" TRACE_DIR="$LOG_DIR/trace" # SEC-23 (MT-01): telemetry dir is tenant-scoped when CASAN_METRICS_DIR is set diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/alert-dispatch.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/alert-dispatch.sh index 27eb166..dd9b122 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/alert-dispatch.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/alert-dispatch.sh @@ -22,7 +22,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" AGENTOPS_DIR="${CASAN_AGENTOPS_DIR:-$CASAN_HARNESS_ROOT/agentops}" STATE="$AGENTOPS_DIR/alert-dispatch-state.jsonl" DEADLETTER="$AGENTOPS_DIR/alert-deadletter.jsonl" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/approval-verify.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/approval-verify.sh index 85f75a9..a941c54 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/approval-verify.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/approval-verify.sh @@ -29,7 +29,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" GOV_DIR="$CASAN_GOVERNANCE_ROOT" REVIEWERS_FILE="${CASAN_REVIEWERS_FILE:-$GOV_DIR/reviewers.registry}" REVIEWERS_DIR="${CASAN_REVIEWERS_DIR:-$GOV_DIR/reviewers}" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/audit-ship.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/audit-ship.sh index 3f5e856..f8e2869 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/audit-ship.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/audit-ship.sh @@ -12,7 +12,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" HEAD_FILE="${1:-$CASAN_STATE_ROOT/logs/audit/audit-head.txt}" LEDGER="${2:-${CASAN_WORM_LEDGER:-$CASAN_STATE_ROOT/logs/worm/anchor-ledger.jsonl}}" mkdir -p "$(dirname "$LEDGER")" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/benign-fp-report.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/benign-fp-report.sh index e26a409..7553de9 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/benign-fp-report.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/benign-fp-report.sh @@ -21,7 +21,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SEC_DIR="$CASAN_HARNESS_ROOT/security" CORPUS_DIR="$CASAN_DOMAIN_ROOT/corpus/benign-corpus" VECTORS="$CASAN_DOMAIN_ROOT/corpus/redteam-vectors.jsonl" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/bundle-integrity.py b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/bundle-integrity.py index d14e813..9654a31 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/bundle-integrity.py +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/bundle-integrity.py @@ -23,6 +23,19 @@ import glob import hashlib import json import os + + +def _casan_app_root(): + # Plan-01: walk UP for the `.specify` state marker (harness code lives in + # packages/casan-harness/, so a fixed __file__ depth would mis-root). + _d = os.path.abspath(os.path.dirname(__file__)) + _p = _d + while _p != os.path.dirname(_p): + if os.path.isdir(os.path.join(_p, ".specify")): + return _p + _p = os.path.dirname(_p) + return os.path.abspath(os.path.join(_d, "..", "..", "..")) + import shutil import subprocess import sys @@ -48,7 +61,7 @@ EXCLUDE_SUBSTR = ["/logs/", "/output/", "bundle-integrity", "test-integrity"] def bundle_root() -> str: return os.environ.get("CASAN_BUNDLE_ROOT") or os.path.join( - os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "..", "..")), ".specify") + _casan_app_root(), ".specify") def manifest_path() -> str: diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/casan-harness.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/casan-harness.sh index 9b910db..65da677 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/casan-harness.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/casan-harness.sh @@ -23,7 +23,7 @@ fi SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" # SEC-23 (MT-01): make state (control-plane settings, telemetry, audit) tenant-scoped # when CASAN_TENANT_ID is set, so a run for tenant A never touches tenant B's state. # No-op when no tenant is set (baseline unchanged); invalid tenant fails closed. diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/ci-harness-gate.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/ci-harness-gate.sh index 5aa826c..a0b6352 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/ci-harness-gate.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/ci-harness-gate.sh @@ -13,9 +13,17 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +ROOT="$CASAN_APP_ROOT" TESTS="$CASAN_HARNESS_ROOT/tests" +# Plan-01: the integrity Python self-locates via __file__ and would mis-root when the +# package is invoked by its real path (no .specify facade). Export the harness-relative +# locations so test-integrity.py / bundle-integrity.py resolve correctly whether the gate +# is reached via .specify/... (compat symlink) or packages/casan-harness/... directly. +export CASAN_TESTS_DIR="$CASAN_HARNESS_ROOT/tests" +export CASAN_TEST_MANIFEST="$CASAN_HARNESS_ROOT/tests/test-integrity-manifest.json" +export CASAN_BUNDLE_ROOT="$CASAN_HARNESS_ROOT" + PASS=0 FAIL=0 SKIP=0 diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/circuit-breaker-check.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/circuit-breaker-check.sh index a1ffffb..65a32cc 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/circuit-breaker-check.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/circuit-breaker-check.sh @@ -23,7 +23,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +ROOT="$CASAN_APP_ROOT" PROVIDER_LOG="${CASAN_PROVIDER_LOG:-$CASAN_STATE_ROOT/logs/level5/provider-usage.jsonl}" CIRCUIT_BREAKER_THRESHOLD="${CIRCUIT_BREAKER_THRESHOLD:-5}" CIRCUIT_WINDOW="${CIRCUIT_WINDOW:-10}" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/context-compress.py b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/context-compress.py index e5a0e8e..c9bce03 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/context-compress.py +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/context-compress.py @@ -19,6 +19,19 @@ model, so it cannot be used as a path to evade H4. import argparse import json import os + + +def _casan_app_root(): + # Plan-01: walk UP for the `.specify` state marker (harness code lives in + # packages/casan-harness/, so a fixed __file__ depth would mis-root). + _d = os.path.abspath(os.path.dirname(__file__)) + _p = _d + while _p != os.path.dirname(_p): + if os.path.isdir(os.path.join(_p, ".specify")): + return _p + _p = os.path.dirname(_p) + return os.path.abspath(os.path.join(_d, "..", "..", "..")) + import re import sys @@ -30,7 +43,7 @@ def compression_enabled() -> bool: store_file = os.environ.get( "CASAN_CP_STORE_FILE", os.path.join( - os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "..", "..")), + _casan_app_root(), ".specify/level5/control-plane-settings.json", ), ) diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/context-validate.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/context-validate.sh index 77bbc90..5733739 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/context-validate.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/context-validate.sh @@ -19,7 +19,8 @@ fi CTX_DIR="$(cd "$(dirname "$CTX")" && pwd)" # Resolve paths relative to the repo root (3 levels up from this script). SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +source "$SCRIPT_DIR/casan-paths.sh" +PROJECT_ROOT="$CASAN_APP_ROOT" python - "$CTX" "$PROJECT_ROOT" "${CASAN_CONTEXT_TTL_SECONDS:-0}" <<'PY' import os, re, sys, subprocess diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/control-plane-settings.py b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/control-plane-settings.py index 022ad8a..966dbb7 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/control-plane-settings.py +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/control-plane-settings.py @@ -51,7 +51,13 @@ GENESIS_HASH = "0" * 64 def project_root() -> str: - return os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "..", "..")) + d = os.path.abspath(os.path.dirname(__file__)) + p = d + while p != os.path.dirname(p): + if os.path.isdir(os.path.join(p, ".specify")): + return p + p = os.path.dirname(p) + return os.path.abspath(os.path.join(d, "..", "..", "..")) def _tenant_id(): diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/cost-spike-detect.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/cost-spike-detect.sh index 4d6c395..6def114 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/cost-spike-detect.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/cost-spike-detect.sh @@ -20,7 +20,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" # SEC-23 (MT-03): per-tenant cost/quota. With no explicit log arg, a tenant run # evaluates its OWN usage log so one tenant's spend never counts against another's # budget (noisy-neighbor isolation). No tenant set -> the shared default log. diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/dashboard-serve.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/dashboard-serve.sh index 4d5bdd8..9f0d8b2 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/dashboard-serve.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/dashboard-serve.sh @@ -18,7 +18,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" AGENTOPS_DIR="${CASAN_AGENTOPS_DIR:-$CASAN_HARNESS_ROOT/agentops}" PID_FILE="$AGENTOPS_DIR/dashboard.pid" PORT_FILE="$AGENTOPS_DIR/dashboard.port" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/drift-detect.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/drift-detect.sh index 3188de5..7f1821e 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/drift-detect.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/drift-detect.sh @@ -16,7 +16,7 @@ fi SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" mkdir -p "$(dirname "$REPORT")" "$CASAN_STATE_ROOT/logs/level5" python - "$GOLDEN" "$CANDIDATE" "$REPORT" <<'PY' diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/evidence-pack-build.py b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/evidence-pack-build.py index 595f405..226bff0 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/evidence-pack-build.py +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/evidence-pack-build.py @@ -85,9 +85,9 @@ def main(): sys.executable, traceability_script, "--requirements", - os.path.join(root, "docs/input/okr-requirement.md"), + os.path.join(root, "apps/okr/domain/input/okr-requirement.md"), "--map", - os.path.join(root, ".specify/traceability-map.json"), + os.path.join(root, "apps/okr/domain/traceability-map.json"), "--out", traceability_out, "--gate", @@ -145,7 +145,7 @@ def main(): fp = json.load(open(fp_json, encoding="utf-8")) except ValueError: fp = None - vectors_path = os.path.join(root, ".specify/security/redteam-vectors.jsonl") + vectors_path = os.path.join(root, "apps/okr/domain/corpus/redteam-vectors.jsonl") vectors = read_jsonl(vectors_path) reports["redteam-result.json"] = { "run_id": run_id, "vectors_defined": len(vectors), diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/evidence-pack.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/evidence-pack.sh index c93c050..89d3b4d 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/evidence-pack.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/evidence-pack.sh @@ -22,7 +22,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" # shellcheck source=casan-log.sh source "$SCRIPT_DIR/casan-log.sh" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/governance-check.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/governance-check.sh index b3c409a..1888959 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/governance-check.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/governance-check.sh @@ -19,7 +19,7 @@ fi SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" LOG_DIR="$CASAN_STATE_ROOT/logs" TRACE_DIR="$LOG_DIR/trace" AUDIT_DIR="$LOG_DIR/audit" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/import-provider-telemetry.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/import-provider-telemetry.sh index 8068ceb..f1ddff8 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/import-provider-telemetry.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/import-provider-telemetry.sh @@ -13,7 +13,7 @@ fi SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" LOG_DIR="$CASAN_STATE_ROOT/logs/level5" OUT="$LOG_DIR/provider-usage.jsonl" mkdir -p "$LOG_DIR" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/incident.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/incident.sh index cfaa527..d16f12e 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/incident.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/incident.sh @@ -16,7 +16,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SEC_DIR="$CASAN_HARNESS_ROOT/security" LOG="$CASAN_STATE_ROOT/logs/level5/incidents.jsonl" RUNBOOK="$SEC_DIR/incident-runbook.md" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/infra-lab.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/infra-lab.sh index dcf8882..76fa00b 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/infra-lab.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/infra-lab.sh @@ -7,7 +7,8 @@ set -uo pipefail # infra-lab.sh start|stop|status|verify|env SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +source "$SCRIPT_DIR/casan-paths.sh" +PROJECT_ROOT="$CASAN_APP_ROOT" COMPOSE="$PROJECT_ROOT/infra/local-prod/docker-compose.yml" CMD="${1:-status}" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/kill-switch.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/kill-switch.sh index 7b25a50..910efe1 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/kill-switch.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/kill-switch.sh @@ -18,7 +18,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" KS_DIR="${CASAN_KILLSWITCH_DIR:-$CASAN_STATE_ROOT/logs/level5/kill-switch}" mkdir -p "$KS_DIR" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/loop_common.py b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/loop_common.py index b53a49a..bc16b12 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/loop_common.py +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/loop_common.py @@ -58,7 +58,13 @@ class PolicyError(Exception): def project_root() -> str: - return os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "..", "..")) + d = os.path.abspath(os.path.dirname(__file__)) + p = d + while p != os.path.dirname(p): + if os.path.isdir(os.path.join(p, ".specify")): + return p + p = os.path.dirname(p) + return os.path.abspath(os.path.join(d, "..", "..", "..")) def now_iso() -> str: diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-call.py b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-call.py index 142808a..8fa043f 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-call.py +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-call.py @@ -23,6 +23,19 @@ Usage: import argparse import json import os + + +def _casan_app_root(): + # Plan-01: walk UP for the `.specify` state marker (harness code lives in + # packages/casan-harness/, so a fixed __file__ depth would mis-root). + _d = os.path.abspath(os.path.dirname(__file__)) + _p = _d + while _p != os.path.dirname(_p): + if os.path.isdir(os.path.join(_p, ".specify")): + return _p + _p = os.path.dirname(_p) + return os.path.abspath(os.path.join(_d, "..", "..", "..")) + import subprocess import sys import time @@ -31,7 +44,7 @@ from datetime import datetime, timezone OLLAMA_HOST = "127.0.0.1:11434" # the only allowed ollama endpoint ALLOWED_CLOUD = {"api.anthropic.com", "api.openai.com"} -REPO_ROOT = os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "..", "..")) +REPO_ROOT = _casan_app_root() PROVIDER_LOG = os.path.join(REPO_ROOT, ".specify/logs/level5/provider-usage.jsonl") # SEC-21 (ARCH-07): a 180s-per-call timeout across many pipeline steps let a hung diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-digest-check.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-digest-check.sh index 55c46cd..afb137a 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-digest-check.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-digest-check.sh @@ -22,7 +22,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" PIN_FILE="${CASAN_MODEL_DIGEST_PIN:-$CASAN_HARNESS_ROOT/security/model-digest.pin}" mkdir -p "$(dirname "$PIN_FILE")" CMD="${1:-verify}" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-fallback.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-fallback.sh index d8bea88..4887155 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-fallback.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/model-fallback.sh @@ -35,7 +35,7 @@ fi SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" LOG_DIR="$CASAN_STATE_ROOT/logs/level5" mkdir -p "$LOG_DIR" "$(dirname "$OUTPUT_FILE")" FALLBACK_LOG="$LOG_DIR/fallback.jsonl" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/path-guard.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/path-guard.sh index 9718b00..8765242 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/path-guard.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/path-guard.sh @@ -12,7 +12,8 @@ set -uo pipefail # Exit: 0 inside the root, 1 outside / unresolvable. SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +source "$SCRIPT_DIR/casan-paths.sh" +PROJECT_ROOT="$CASAN_APP_ROOT" TARGET="${1:-}" ROOT="${2:-$PROJECT_ROOT}" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/provider-usage-fetch.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/provider-usage-fetch.sh index 2e3e4d4..f886827 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/provider-usage-fetch.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/provider-usage-fetch.sh @@ -21,7 +21,7 @@ fi SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" OUT="${2:-$CASAN_STATE_ROOT/logs/level5/provider-usage.jsonl}" mkdir -p "$(dirname "$OUT")" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/rollback-manager.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/rollback-manager.sh index fb78867..8c35754 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/rollback-manager.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/rollback-manager.sh @@ -13,7 +13,7 @@ ROLLBACK_COMMAND="${3:-}" SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" LOG_DIR="$CASAN_STATE_ROOT/logs/level5" BACKUP_DIR="$LOG_DIR/rollback-backups" TX_LOG="$LOG_DIR/rollback-transactions.jsonl" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/secrets-scan.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/secrets-scan.sh index bd5da00..3e428e3 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/secrets-scan.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/secrets-scan.sh @@ -15,7 +15,8 @@ set -uo pipefail # Exit: 0 all checks pass, 1 violation found, 2 scan error. SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" -ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +source "$SCRIPT_DIR/casan-paths.sh" +ROOT="$CASAN_APP_ROOT" PASS=0; FAIL=0; WARN=0 ok() { echo " PASS $1"; PASS=$((PASS+1)); } diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/security-check.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/security-check.sh index 49af858..2e024ed 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/security-check.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/security-check.sh @@ -19,7 +19,7 @@ fi SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" LOG_DIR="$CASAN_STATE_ROOT/logs" TRACE_DIR="$LOG_DIR/trace" AUDIT_DIR="$LOG_DIR/audit" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/security-gate.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/security-gate.sh index e46a709..2352f96 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/security-gate.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/security-gate.sh @@ -8,7 +8,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +ROOT="$CASAN_APP_ROOT" PASS=0; FAIL=0; SKIP=0 run() { # local name="$1"; shift diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/sign-audit-head.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/sign-audit-head.sh index 6a0b834..c83b07e 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/sign-audit-head.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/sign-audit-head.sh @@ -22,7 +22,7 @@ set -euo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" AUDIT_LOG="${1:-$CASAN_STATE_ROOT/logs/audit/audit.jsonl}" AUDIT_DIR="$(dirname "$AUDIT_LOG")" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/sign-policy-bundle.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/sign-policy-bundle.sh index 3db81ab..d47f3b2 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/sign-policy-bundle.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/sign-policy-bundle.sh @@ -9,7 +9,7 @@ set -euo pipefail MODE="${1:-}" SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" GOV_DIR="$CASAN_GOVERNANCE_ROOT" BUNDLE="$GOV_DIR/policy-bundle.yaml" MANIFEST="$GOV_DIR/policy-manifest.json" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/supply-chain-gate.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/supply-chain-gate.sh index 60d6de9..f61312f 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/supply-chain-gate.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/supply-chain-gate.sh @@ -21,7 +21,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SEC_DIR="$CASAN_HARNESS_ROOT/security" # shellcheck source=casan-log.sh source "$SCRIPT_DIR/casan-log.sh" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/telemetry-integrity.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/telemetry-integrity.sh index b794ce8..755e5b8 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/telemetry-integrity.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/telemetry-integrity.sh @@ -25,7 +25,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" L5_DIR="$CASAN_STATE_ROOT/logs/level5" COST_DIR="$CASAN_STATE_ROOT/logs/cost" mkdir -p "$L5_DIR" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/tenant-store.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/tenant-store.sh index 460e510..4157141 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/tenant-store.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/tenant-store.sh @@ -24,7 +24,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" STATE_ROOT="${CASAN_TENANT_STATE_ROOT:-$CASAN_STATE_ROOT/state/tenants}" die() { echo "TENANT_DENIED reason=$1" >&2; exit 3; } diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/test-integrity.py b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/test-integrity.py index 624433d..130a17a 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/test-integrity.py +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/test-integrity.py @@ -36,7 +36,13 @@ CHECK_RE = re.compile(r'(?:(? str: - return os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "..", "..")) + d = os.path.abspath(os.path.dirname(__file__)) + p = d + while p != os.path.dirname(p): + if os.path.isdir(os.path.join(p, ".specify")): + return p + p = os.path.dirname(p) + return os.path.abspath(os.path.join(d, "..", "..", "..")) def tests_dir() -> str: diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/tool-registry-gate.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/tool-registry-gate.sh index a40c64b..acf70c2 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/tool-registry-gate.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/tool-registry-gate.sh @@ -13,7 +13,7 @@ fi SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" REGISTRY="$CASAN_HARNESS_ROOT/level5/tool-registry.yaml" LOG_DIR="$CASAN_STATE_ROOT/logs/level5" AUDIT_DIR="$CASAN_STATE_ROOT/logs/audit" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/toolchain-verify.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/toolchain-verify.sh index 3598354..e7f1488 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/toolchain-verify.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/toolchain-verify.sh @@ -16,7 +16,8 @@ set -uo pipefail # Exit: 0 ok, 1 missing/shadowed/untrusted. SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +source "$SCRIPT_DIR/casan-paths.sh" +PROJECT_ROOT="$CASAN_APP_ROOT" REQUIRED=("$@") if [[ ${#REQUIRED[@]} -eq 0 ]]; then diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/traceability-matrix.py b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/traceability-matrix.py index bba1c9e..e3d17b6 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/traceability-matrix.py +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/traceability-matrix.py @@ -16,7 +16,16 @@ FR_RE = re.compile(r"\|\s*(FR-\d+)\s*\|\s*([^|]+?)\s*\|") def project_root() -> str: - return os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "..", "..")) + # Plan-01: harness code lives in packages/casan-harness/; a fixed __file__ parent + # depth lands on the package, not the app. Walk UP for the `.specify` state marker + # so this resolves the app root whether invoked via packages/... or the .specify facade. + d = os.path.abspath(os.path.dirname(__file__)) + p = d + while p != os.path.dirname(p): + if os.path.isdir(os.path.join(p, ".specify")): + return p + p = os.path.dirname(p) + return os.path.abspath(os.path.join(d, "..", "..", "..")) def parse_requirements(path: str): @@ -102,8 +111,8 @@ def resolve_files(root: str, values): def main() -> int: root = project_root() ap = argparse.ArgumentParser() - ap.add_argument("--requirements", default=os.path.join(root, "docs/input/okr-requirement.md")) - ap.add_argument("--map", default=os.path.join(root, ".specify/traceability-map.json")) + ap.add_argument("--requirements", default=os.path.join(root, "apps/okr/domain/input/okr-requirement.md")) + ap.add_argument("--map", default=os.path.join(root, "apps/okr/domain/traceability-map.json")) ap.add_argument("--out", default=os.path.join(root, "docs/output/casan/traceability-matrix.json")) ap.add_argument("--gate", action="store_true") args = ap.parse_args() diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-audit-chain.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-audit-chain.sh index 23b3070..fc09024 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-audit-chain.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-audit-chain.sh @@ -7,7 +7,7 @@ set -euo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" AUDIT_LOG="${1:-$CASAN_STATE_ROOT/logs/audit/audit.jsonl}" if [[ ! -f "$AUDIT_LOG" ]]; then diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-audit-gap.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-audit-gap.sh index efc5841..f6bad1d 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-audit-gap.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-audit-gap.sh @@ -12,7 +12,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" HEAD_FILE="${1:-$CASAN_STATE_ROOT/logs/audit/audit-head.txt}" LEDGER="${2:-${CASAN_WORM_LEDGER:-$CASAN_STATE_ROOT/logs/worm/anchor-ledger.jsonl}}" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-harness-reuse.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-harness-reuse.sh index c88f02f..f7f89b9 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-harness-reuse.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-harness-reuse.sh @@ -5,7 +5,7 @@ set -euo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" REGISTRY="$CASAN_HARNESS_ROOT/level5/project-registry.json" PACKAGE="$CASAN_HARNESS_ROOT/level5/harness-package.json" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-tool-audit.sh b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-tool-audit.sh index 21200e3..d00a97c 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-tool-audit.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/scripts/bash/verify-tool-audit.sh @@ -9,7 +9,7 @@ set -euo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" LOG="${1:-$CASAN_STATE_ROOT/logs/audit/tool-calls.jsonl}" if [[ ! -f "$LOG" ]]; then diff --git a/AINative_OKR_CASAN5/packages/casan-harness/security/benign-corpus b/AINative_OKR_CASAN5/packages/casan-harness/security/benign-corpus deleted file mode 120000 index 6137ca0..0000000 --- a/AINative_OKR_CASAN5/packages/casan-harness/security/benign-corpus +++ /dev/null @@ -1 +0,0 @@ -../../../apps/okr/domain/corpus/benign-corpus \ No newline at end of file diff --git a/AINative_OKR_CASAN5/packages/casan-harness/security/redteam-corpus.jsonl b/AINative_OKR_CASAN5/packages/casan-harness/security/redteam-corpus.jsonl deleted file mode 120000 index 1b6c053..0000000 --- a/AINative_OKR_CASAN5/packages/casan-harness/security/redteam-corpus.jsonl +++ /dev/null @@ -1 +0,0 @@ -../../../apps/okr/domain/corpus/redteam-corpus.jsonl \ No newline at end of file diff --git a/AINative_OKR_CASAN5/packages/casan-harness/security/redteam-vectors.jsonl b/AINative_OKR_CASAN5/packages/casan-harness/security/redteam-vectors.jsonl deleted file mode 120000 index 7538bdb..0000000 --- a/AINative_OKR_CASAN5/packages/casan-harness/security/redteam-vectors.jsonl +++ /dev/null @@ -1 +0,0 @@ -../../../apps/okr/domain/corpus/redteam-vectors.jsonl \ No newline at end of file diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/adversarial-harness-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/adversarial-harness-tests.sh index 8cedbe3..ec2913c 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/adversarial-harness-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/adversarial-harness-tests.sh @@ -15,7 +15,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SCRIPTS="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-c6-sandbox-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-c6-sandbox-tests.sh index 23a20ad..b408819 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-c6-sandbox-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-c6-sandbox-tests.sh @@ -10,7 +10,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" SB="$S/sandbox-container.sh" WORK="$(mktemp -d)"; trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-c7-incident-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-c7-incident-tests.sh index e0b4c66..d415b7b 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-c7-incident-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-c7-incident-tests.sh @@ -9,7 +9,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)"; trap 'rm -rf "$WORK"' EXIT export CASAN_KILLSWITCH_DIR="$WORK/ks" # isolate the kill-switch state diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-control-plane-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-control-plane-tests.sh index 51caed0..f7d40a7 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-control-plane-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-control-plane-tests.sh @@ -7,7 +7,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" CP="$CASAN_HARNESS_ROOT/scripts/bash/control-plane-settings.py" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-governance-report-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-governance-report-tests.sh index 5a55ef3..8f69415 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-governance-report-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-governance-report-tests.sh @@ -8,7 +8,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" GR="$CASAN_HARNESS_ROOT/scripts/bash/governance-report.py" CPS="$CASAN_HARNESS_ROOT/scripts/bash/control-plane-settings.py" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h4-multilingual-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h4-multilingual-tests.sh index 4809927..5829db4 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h4-multilingual-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h4-multilingual-tests.sh @@ -11,7 +11,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SC="$CASAN_HARNESS_ROOT/scripts/bash/security-check.sh" CORPUS="$CASAN_DOMAIN_ROOT/corpus/benign-corpus" WORK="$(mktemp -d)"; trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h4-split-inject-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h4-split-inject-tests.sh index 6000063..1f6b5a3 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h4-split-inject-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h4-split-inject-tests.sh @@ -11,7 +11,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" SC="$S/security-check.sh" CORPUS="$CASAN_DOMAIN_ROOT/corpus/benign-corpus" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h5-approval-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h5-approval-tests.sh index 7a60835..80646d9 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h5-approval-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h5-approval-tests.sh @@ -13,7 +13,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" REG="$CASAN_GOVERNANCE_ROOT/reviewers.registry" WORK="$(mktemp -d)"; RV="$WORK/reviewers"; mkdir -p "$RV" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h5-infra-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h5-infra-tests.sh index a58e5de..a695ad5 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h5-infra-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h5-infra-tests.sh @@ -11,7 +11,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)"; trap 'rm -rf "$WORK"' EXIT PASS=0; FAIL=0 diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h6-agentops-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h6-agentops-tests.sh index e5cba6d..a07a8a2 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h6-agentops-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-h6-agentops-tests.sh @@ -10,7 +10,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)" SINK_PID=""; API_PID="" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-convergence-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-convergence-tests.sh index cdb086e..62b0674 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-convergence-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-convergence-tests.sh @@ -17,7 +17,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" CONV="$CASAN_HARNESS_ROOT/scripts/bash/loop-convergence.py" POLICY="$CASAN_HARNESS_ROOT/config/loop-policy.yaml" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-gate-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-gate-tests.sh index e011db0..e4d26a9 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-gate-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-gate-tests.sh @@ -19,7 +19,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" GATE="$CASAN_HARNESS_ROOT/scripts/bash/loop-gate.py" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-governor-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-governor-tests.sh index f2367e8..ee20716 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-governor-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-governor-tests.sh @@ -17,7 +17,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" GOV="$CASAN_HARNESS_ROOT/scripts/bash/loop-governor.py" POLICY="$CASAN_HARNESS_ROOT/config/loop-policy.yaml" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-metaloop-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-metaloop-tests.sh index 19b2370..f6760b7 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-metaloop-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-metaloop-tests.sh @@ -18,7 +18,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" BIN="$CASAN_HARNESS_ROOT/scripts/bash" META="$BIN/loop-metaloop.py" GOV="$BIN/loop-governor.py" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-run-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-run-tests.sh index fddaaa3..02ad206 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-run-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-run-tests.sh @@ -18,7 +18,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" BIN="$CASAN_HARNESS_ROOT/scripts/bash" RUN="$BIN/loop-run.sh" TRACE="$BIN/loop-trace.py" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-trace-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-trace-tests.sh index 4ee3112..e7bf746 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-trace-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-loop-trace-tests.sh @@ -17,7 +17,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" TRACE="$CASAN_HARNESS_ROOT/scripts/bash/loop-trace.py" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-preflight-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-preflight-tests.sh index 11246d7..5123279 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-preflight-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-preflight-tests.sh @@ -7,7 +7,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" PF="$S/harness-preflight.sh" ROUTER="$S/model-router.sh" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-prod-infra-lab-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-prod-infra-lab-tests.sh index b934540..7164f6b 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-prod-infra-lab-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-prod-infra-lab-tests.sh @@ -6,7 +6,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" PASS=0; FAIL=0; SKIP=0 diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rai-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rai-tests.sh index 23cb669..dbbda3d 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rai-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rai-tests.sh @@ -7,7 +7,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" RAI="$CASAN_HARNESS_ROOT/scripts/bash/rai-guard.py" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rbac-audit-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rbac-audit-tests.sh index d995d0c..9181d06 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rbac-audit-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rbac-audit-tests.sh @@ -15,7 +15,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" RBAC="$CASAN_HARNESS_ROOT/scripts/bash/rbac-check.py" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rbac-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rbac-tests.sh index b394252..728f25a 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rbac-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-rbac-tests.sh @@ -7,7 +7,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" RBAC="$CASAN_HARNESS_ROOT/scripts/bash/rbac-check.py" PASS=0; FAIL=0 diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec01-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec01-tests.sh index b827f17..d38eb7d 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec01-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec01-tests.sh @@ -13,7 +13,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" BASH_DIR="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec02-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec02-tests.sh index f5e04ef..41a777d 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec02-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec02-tests.sh @@ -16,7 +16,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" BASH_DIR="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec03-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec03-tests.sh index fdecdbd..9953e06 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec03-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec03-tests.sh @@ -15,7 +15,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" RM="$CASAN_HARNESS_ROOT/scripts/bash/rollback-manager.sh" TX_LOG="$CASAN_STATE_ROOT/logs/level5/rollback-transactions.jsonl" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec04-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec04-tests.sh index 21a8786..0b32938 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec04-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec04-tests.sh @@ -12,7 +12,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" GATE="$CASAN_HARNESS_ROOT/scripts/bash/action-gate.sh" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec05-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec05-tests.sh index 3ef4415..700a925 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec05-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec05-tests.sh @@ -13,7 +13,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" BASH_DIR="$CASAN_HARNESS_ROOT/scripts/bash" AUDIT="$CASAN_STATE_ROOT/logs/audit/audit.jsonl" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec06-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec06-tests.sh index 6515414..85a1879 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec06-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec06-tests.sh @@ -16,7 +16,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" CP="$CASAN_HARNESS_ROOT/scripts/bash/control-plane-settings.py" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec07-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec07-tests.sh index 62aaeab..64df83c 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec07-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec07-tests.sh @@ -14,7 +14,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" REG="$CASAN_GOVERNANCE_ROOT/reviewers.registry" WORK="$(mktemp -d)"; RV="$WORK/reviewers"; mkdir -p "$RV" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec08-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec08-tests.sh index c7aa0a1..6dbb291 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec08-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec08-tests.sh @@ -12,7 +12,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" PM="$CASAN_HARNESS_ROOT/scripts/bash/pii-mask.py" RULES="$CASAN_HARNESS_ROOT/security/pii-rules.yaml" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec09-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec09-tests.sh index f2a92f4..5682c16 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec09-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec09-tests.sh @@ -13,7 +13,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" BASH_DIR="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)" # security-check / drift-detect touch shared logs; restore on exit. diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec10-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec10-tests.sh index a0f38f2..b0633aa 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec10-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec10-tests.sh @@ -16,7 +16,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" GATE="$S/tool-registry-gate.sh" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec12-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec12-tests.sh index 65d3a25..7b66677 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec12-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec12-tests.sh @@ -13,7 +13,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" DD="$CASAN_HARNESS_ROOT/scripts/bash/drift-detect.sh" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec13-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec13-tests.sh index e03143d..d9b4ddc 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec13-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec13-tests.sh @@ -14,7 +14,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" FETCH="$S/provider-usage-fetch.sh" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec14-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec14-tests.sh index f2fc300..67b62d8 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec14-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec14-tests.sh @@ -18,7 +18,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" MDC="$CASAN_HARNESS_ROOT/scripts/bash/model-digest-check.sh" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec15-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec15-tests.sh index 9d36dc1..6f294f7 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec15-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec15-tests.sh @@ -11,7 +11,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec16-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec16-tests.sh index 6d5813b..6b32608 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec16-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec16-tests.sh @@ -17,7 +17,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" BASH_DIR="$CASAN_HARNESS_ROOT/scripts/bash" BI="$BASH_DIR/bundle-integrity.py" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec17-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec17-tests.sh index cde998f..d15e646 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec17-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec17-tests.sh @@ -16,7 +16,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" BASH_DIR="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec18-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec18-tests.sh index c78a878..5ec3c22 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec18-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec18-tests.sh @@ -15,7 +15,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" TI="$CASAN_HARNESS_ROOT/scripts/bash/test-integrity.py" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec19-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec19-tests.sh index e154ae4..349c2bb 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec19-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec19-tests.sh @@ -13,7 +13,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" CP="$CASAN_HARNESS_ROOT/scripts/bash/control-plane-settings.py" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec20-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec20-tests.sh index aac5001..2f445eb 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec20-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec20-tests.sh @@ -15,7 +15,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" BASH_DIR="$CASAN_HARNESS_ROOT/scripts/bash" TV="$BASH_DIR/toolchain-verify.sh" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec21-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec21-tests.sh index 354a3b6..dd28260 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec21-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec21-tests.sh @@ -13,7 +13,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" MC="$CASAN_HARNESS_ROOT/scripts/bash/model-call.py" WORK="$(mktemp -d)" trap 'git -C "$PROJECT_ROOT" checkout -- .specify/logs/level5/provider-usage.jsonl 2>/dev/null; rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec22-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec22-tests.sh index 04134ee..b3b4281 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec22-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec22-tests.sh @@ -19,7 +19,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" AV="$S/approval-verify.sh" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-rbac-tenant-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-rbac-tenant-tests.sh index 575db07..faf9e1e 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-rbac-tenant-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-rbac-tenant-tests.sh @@ -17,7 +17,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" RBAC="$S/rbac-check.py" HARNESS="$S/casan-harness.sh" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-registry-crypt-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-registry-crypt-tests.sh index 6af0f64..bac79f5 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-registry-crypt-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-registry-crypt-tests.sh @@ -11,7 +11,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" RV="$S/tenant-registry-verify.sh" TC="$S/tenant-crypt.sh" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-scope-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-scope-tests.sh index a1d15d3..ea5bae1 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-scope-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-scope-tests.sh @@ -14,7 +14,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" HARNESS="$S/casan-harness.sh" KS="$S/kill-switch.sh" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-state-isolation-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-state-isolation-tests.sh index f5b4dbf..e9afd5a 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-state-isolation-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-state-isolation-tests.sh @@ -17,7 +17,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" CPS="$S/control-plane-settings.py" TS="$S/tenant-store.sh" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-tenant-store-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-tenant-store-tests.sh index 43b54b9..1291bd3 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-tenant-store-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec23-tenant-store-tests.sh @@ -16,7 +16,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" TS="$CASAN_HARNESS_ROOT/scripts/bash/tenant-store.sh" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec24-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec24-tests.sh index 961cbaf..05f1aaa 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec24-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec24-tests.sh @@ -13,7 +13,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SCI="$CASAN_HARNESS_ROOT/scripts/bash/supply-chain-integrity.sh" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec25-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec25-tests.sh index 9cb3510..7ff4260 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec25-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec25-tests.sh @@ -13,7 +13,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" AA="$CASAN_HARNESS_ROOT/scripts/bash/artifact-attest.sh" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec26-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec26-tests.sh index da8e96e..6b2b954 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec26-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec26-tests.sh @@ -16,7 +16,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SCS="$CASAN_HARNESS_ROOT/scripts/bash/stored-content-scan.sh" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec27-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec27-tests.sh index cbbe8cb..db07f92 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec27-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec27-tests.sh @@ -12,7 +12,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" PASS=0; FAIL=0 pass() { echo "PASS: $1"; PASS=$((PASS + 1)); } diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec28-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec28-tests.sh index 1f04604..4dfd351 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec28-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec28-tests.sh @@ -12,7 +12,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" PG="$CASAN_HARNESS_ROOT/scripts/bash/path-guard.sh" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec29-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec29-tests.sh index ad1efbb..0471600 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec29-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec29-tests.sh @@ -12,7 +12,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" GC="$CASAN_HARNESS_ROOT/scripts/bash/governance-check.sh" AUD="$CASAN_STATE_ROOT/logs/audit/audit.jsonl" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec30-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec30-tests.sh index ec51546..ec22b06 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec30-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-sec30-tests.sh @@ -13,7 +13,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" REG="$CASAN_GOVERNANCE_ROOT/reviewers.registry" WORK="$(mktemp -d)"; RV="$WORK/reviewers"; mkdir -p "$RV" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-selfimprove-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-selfimprove-tests.sh index 220f8c7..aae28ce 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-selfimprove-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase-selfimprove-tests.sh @@ -8,7 +8,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SI="$CASAN_HARNESS_ROOT/scripts/bash/self-improve.py" CPS="$CASAN_HARNESS_ROOT/scripts/bash/control-plane-settings.py" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase08-compression-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase08-compression-tests.sh index 59abffd..b3b4f56 100644 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase08-compression-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase08-compression-tests.sh @@ -8,7 +8,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" CC="$CASAN_HARNESS_ROOT/scripts/bash/context-compress.py" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase1-track-a-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase1-track-a-tests.sh index a24a440..9e248a5 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase1-track-a-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase1-track-a-tests.sh @@ -17,7 +17,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SCRIPTS="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase10-traceability-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase10-traceability-tests.sh index 750a5ac..0f9c393 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase10-traceability-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase10-traceability-tests.sh @@ -8,7 +8,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase2-sourcegen-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase2-sourcegen-tests.sh index e93d7f8..fa25a41 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase2-sourcegen-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase2-sourcegen-tests.sh @@ -2,7 +2,8 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" +PROJECT_ROOT="$CASAN_APP_ROOT" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase2-track-c-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase2-track-c-tests.sh index 5790967..f46f3f9 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase2-track-c-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase2-track-c-tests.sh @@ -12,7 +12,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" WORK="$(mktemp -d)" trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-evidence-pack-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-evidence-pack-tests.sh index 2ec653e..6d08f2d 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-evidence-pack-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-evidence-pack-tests.sh @@ -10,7 +10,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" S="$CASAN_HARNESS_ROOT/scripts/bash" EP="$S/evidence-pack.sh" WORK="$(mktemp -d)" diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-judge-gate-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-judge-gate-tests.sh index 50481d6..a9f4870 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-judge-gate-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-judge-gate-tests.sh @@ -22,7 +22,7 @@ fi SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +ROOT="$CASAN_APP_ROOT" WORK="$(mktemp -d)"; trap 'rm -rf "$WORK"' EXIT PASS=0; FAIL=0; SKIP=0 diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-model-router-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-model-router-tests.sh index 584580e..053b2d0 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-model-router-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-model-router-tests.sh @@ -7,7 +7,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SCRIPTS="$CASAN_HARNESS_ROOT/scripts/bash" ROUTER="$SCRIPTS/model-router.sh" WORK="$(mktemp -d)"; trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-redteam-metrics.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-redteam-metrics.sh index e10b6a5..0eda12f 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-redteam-metrics.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/phase3-redteam-metrics.sh @@ -12,7 +12,7 @@ set -uo pipefail SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh" -PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)" +PROJECT_ROOT="$CASAN_APP_ROOT" SCRIPTS="$CASAN_HARNESS_ROOT/scripts/bash" CORPUS="$CASAN_DOMAIN_ROOT/corpus/redteam-corpus.jsonl" WORK="$(mktemp -d)"; trap 'rm -rf "$WORK"' EXIT diff --git a/AINative_OKR_CASAN5/packages/casan-harness/tests/run-casan4-harness-tests.sh b/AINative_OKR_CASAN5/packages/casan-harness/tests/run-casan4-harness-tests.sh index 72f2f3d..70554ec 100755 --- a/AINative_OKR_CASAN5/packages/casan-harness/tests/run-casan4-harness-tests.sh +++ b/AINative_OKR_CASAN5/packages/casan-harness/tests/run-casan4-harness-tests.sh @@ -1,8 +1,10 @@ #!/usr/bin/env bash set -euo pipefail -PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)" -source "$PROJECT_ROOT/.specify/scripts/bash/casan-paths.sh" +# Locate casan-paths as a sibling of this suite's package (facade-independent), then +# derive all roots from it — PROJECT_ROOT is the app root regardless of how we're invoked. +source "$(cd "$(dirname "${BASH_SOURCE[0]}")/../scripts/bash" && pwd)/casan-paths.sh" +PROJECT_ROOT="$CASAN_APP_ROOT" SCRIPTS="$CASAN_HARNESS_ROOT/scripts/bash" EVIDENCE_DIR="$PROJECT_ROOT/docs/output/casan/evidence" REPORT="$EVIDENCE_DIR/harness-test-report.md"