feat: plan 16 P2 batch 2 (SEC-12 drift, SEC-29 audit fail-closed, SEC-30 replay, SEC-15 low)

- SEC-12: drift-detect adds semantic invariants — negation-flip detection (a dropped
  "not" now FAILS despite high char-similarity) + env must-keep patterns.
- SEC-29 (X-05): governance-check audit write fails CLOSED — an unwritable audit log
  denies the action and empties the output (no unaudited output).
- SEC-30 (X-06): approval-verify records a one-time-use nonce (sha of token/sig) and
  rejects replays (enforced mode / when a nonce ledger is set); dev unchanged.
- SEC-15 (low): typosquat distance<=2 with the levenshtein length-sentinel bug fixed
  (no false positives); tool-exec fails closed with no timeout backend in enforced
  mode; validate-tool-input now validates nested objects/arrays recursively.

Verify: new SEC suites all green via gate, run-casan4 0-FAIL, adversarial 44/44,
track-c 29/0, h5-approval 12/0, no regressions.

Plan-16 P2 remaining: infra-gated only (SEC-14/22/23/24/25/26).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

This commit is contained in:

thanhnv

2026-07-06 22:55:24 +09:00

co-authored by

Claude Opus 4.8

parent 8c06a55aed

commit d695a598ee

14 changed files with 365 additions and 30 deletions

AINative_OKR_CASAN5/.specify/tests/test-integrity-manifest.json.head

+1 -1

View File

@@ -1 +1 @@
 c4a4e4e7392bcb48b91f7d4b9ea93338c6f3feb469605215917d317e12
 b8b459788953626b052536f8fc7a8493c9ec72361af5fc05a940c21fcab03f4