feat: plan 16-01

AINative_OKR_CASAN5/.specify/scripts/bash/casan-harness.sh

@@ -84,8 +84,9 @@ RAW_OUTPUT="$TMP_DIR/raw-output-$TRACE_SUFFIX.txt"
 casan_log debug harness "action=$ACTION_NAME input=$INPUT_FILE output=$FINAL_OUTPUT key=${IDEMPOTENCY_KEY:0:12}…"
 
 # C7: honor an engaged kill-switch before doing any work (incident containment).
-# Opt-in (default off) so the baseline is unchanged; production sets it on.
-if [[ "${CASAN_KILLSWITCH_ENFORCE:-0}" == "1" ]]; then
+# Opt-in (default off) so the baseline is unchanged. SEC-17 (ARCH-03): under
+# CASAN_PROFILE=prod it defaults ON (secure-by-default); an explicit =0 still wins.
+if [[ "${CASAN_KILLSWITCH_ENFORCE:-0}" == "1" || ( -z "${CASAN_KILLSWITCH_ENFORCE+x}" && "${CASAN_PROFILE:-}" == "prod" ) ]]; then
   KS_SCOPE="${CASAN_KILLSWITCH_SCOPE:-project}"
   KS_ID="${CASAN_KILLSWITCH_ID:-${CASAN_PROJECT:-current}}"
   if ! bash "$SCRIPT_DIR/kill-switch.sh" check "$KS_SCOPE" "$KS_ID" >/dev/null 2>&1; then
@@ -96,6 +97,23 @@ if [[ "${CASAN_KILLSWITCH_ENFORCE:-0}" == "1" ]]; then
   fi
 fi
 
+# SEC-16 (ARCH-01): in enforced mode, verify the harness+policy bundle against its
+# signed manifest and REFUSE to run on any drift — editing a gate/policy is a bypass
+# that leaves no input trace. Only active when a manifest is provisioned (so dev and
+# prod-without-a-manifest are unaffected); a present-but-drifted bundle fails closed.
+if [[ ( "${CASAN_PROFILE:-}" == "prod" || "${CASAN_VERIFY_STRICT:-}" == "1" ) \
+      && -f "$SCRIPT_DIR/bundle-integrity.py" ]]; then
+  BUNDLE_MANIFEST="${CASAN_BUNDLE_MANIFEST:-$PROJECT_ROOT/.specify/level5/central-governance/harness-bundle-manifest.json}"
+  if [[ -f "$BUNDLE_MANIFEST" ]]; then
+    if ! python "$SCRIPT_DIR/bundle-integrity.py" verify >/dev/null 2>&1; then
+      casan_log error harness "BUNDLE_INTEGRITY_DRIFT — refusing to run $ACTION_NAME (harness/policy modified vs signed manifest)"
+      : > "$FINAL_OUTPUT"
+      echo "BUNDLE_INTEGRITY_DRIFT action=$ACTION_NAME (harness or policy modified vs signed manifest)" >&2
+      exit 2
+    fi
+  fi
+fi
+
 run_phase "H4-in" "$SCRIPT_DIR/security-check.sh" "$INPUT_FILE" "$SAFE_INPUT" input
 run_phase "H5" "$SCRIPT_DIR/governance-check.sh" "$SAFE_INPUT" "$APPROVED_INPUT" "$ACTION_NAME"
 
@@ -136,7 +154,8 @@ fi
 # broken; block enforces (fail-closed) for production/strict runs.
 TOOL_OUTPUT_SCAN_MODE="${CASAN_TOOL_OUTPUT_SCAN:-}"
 if [[ -z "$TOOL_OUTPUT_SCAN_MODE" ]]; then
-  if [[ "${CASAN_SECURITY_STRICT:-0}" == "1" ]]; then TOOL_OUTPUT_SCAN_MODE="block"; else TOOL_OUTPUT_SCAN_MODE="warn"; fi
+  # SEC-17/M-02: prod profile defaults tool-output scanning to block (fail-closed).
+  if [[ "${CASAN_SECURITY_STRICT:-0}" == "1" || ( -z "${CASAN_SECURITY_STRICT+x}" && "${CASAN_PROFILE:-}" == "prod" ) ]]; then TOOL_OUTPUT_SCAN_MODE="block"; else TOOL_OUTPUT_SCAN_MODE="warn"; fi
 fi
 if [[ "$TOOL_OUTPUT_SCAN_MODE" != "off" ]]; then
   TOS_RC=0