gitea-admin/CASAN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: update plan 16 sec14-26

Browse Source
This commit is contained in:
thanhnv
2026-07-07 15:46:36 +09:00
parent 0c60ed33e9
commit ae4fc7112c
64 changed files with 2231 additions and 116 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AINative_OKR_CASAN5/.specify/scripts/bash/ci-harness-gate.sh
+13
View File
@@ -81,6 +81,7 @@ run "phase10-traceability" bash "$TESTS/phase10-traceability-tests.sh"
run "phase08-compression" bash "$TESTS/phase08-compression-tests.sh"
run "phase-control-plane" bash "$TESTS/phase-control-plane-tests.sh"
run "phase-rbac" bash "$TESTS/phase-rbac-tests.sh"
run "phase-rbac-audit" bash "$TESTS/phase-rbac-audit-tests.sh"
run "phase-rai" bash "$TESTS/phase-rai-tests.sh"
run "phase-selfimprove" bash "$TESTS/phase-selfimprove-tests.sh"
run "phase-governance-report" bash "$TESTS/phase-governance-report-tests.sh"
@@ -106,12 +107,24 @@ run "phase-sec07-approval" bash "$TESTS/phase-sec07-tests.sh"
run "phase-sec10-agent-identity" bash "$TESTS/phase-sec10-tests.sh"
# Plan-16 P2 (depth / hardening)
run "phase-sec13-ssrf" bash "$TESTS/phase-sec13-tests.sh"
run "phase-sec14-model-digest" bash "$TESTS/phase-sec14-tests.sh"
run "phase-sec27-log-controlchar" bash "$TESTS/phase-sec27-tests.sh"
run "phase-sec28-path-traversal" bash "$TESTS/phase-sec28-tests.sh"
run "phase-sec26-stored-inject" bash "$TESTS/phase-sec26-tests.sh"
run "phase-sec22-trusted-time" bash "$TESTS/phase-sec22-tests.sh"
run "phase-sec12-drift-invariant" bash "$TESTS/phase-sec12-tests.sh"
run "phase-sec29-audit-failclosed" bash "$TESTS/phase-sec29-tests.sh"
run "phase-sec30-approval-replay" bash "$TESTS/phase-sec30-tests.sh"
run "phase-sec15-low-cluster" bash "$TESTS/phase-sec15-tests.sh"
# Plan-16 SEC-23 (multi-tenant partition) — phased
run "phase-sec23-tenant-store" bash "$TESTS/phase-sec23-tenant-store-tests.sh"
run "phase-sec23-state-isolation" bash "$TESTS/phase-sec23-state-isolation-tests.sh"
run "phase-sec23-rbac-tenant" bash "$TESTS/phase-sec23-rbac-tenant-tests.sh"
run "phase-sec23-scope" bash "$TESTS/phase-sec23-scope-tests.sh"
run "phase-sec23-registry-crypt" bash "$TESTS/phase-sec23-registry-crypt-tests.sh"
# Plan-16 SEC-24/25 supply-chain (offline slice)
run "phase-sec24-supplychain" bash "$TESTS/phase-sec24-tests.sh"
run "phase-sec25-attestation" bash "$TESTS/phase-sec25-tests.sh"
# ARCH-02: coverage cannot silently drop; ARCH-01: harness/policy cannot silently
# drift. Both SKIP cleanly when no manifest is provisioned (non-strict dev/CI).