thanhnvandClaude Opus 4.8
3adc48ed82
Resolve every root by marker walk-up instead of a fixed depth that only lands on the app via the .specify compat symlink, so the harness runs correctly when invoked by its real packages/casan-harness path — proven by a full gate run via that path: 64/0/0. - 95 scripts/tests: PROJECT_ROOT/ROOT "$SCRIPT_DIR/../.."-style computations -> $CASAN_APP_ROOT. - 6 leaf scripts (infra-lab, context-validate, secrets-scan, path-guard, toolchain-verify, phase2-sourcegen) now source casan-paths + use CASAN_APP_ROOT. - run-casan4: source casan-paths as a package sibling (facade-independent), PROJECT_ROOT=CASAN_APP_ROOT. - 8 Python files: project_root()/REPO_ROOT/bundle_root walk UP for the .specify marker (control-plane-settings, loop_common, model-call, context-compress, test-integrity, bundle-integrity, traceability-matrix; generate-* fixed earlier). - evidence-pack-build.py + traceability-matrix.py: domain refs -> apps/okr/domain (input/, corpus/redteam-vectors.jsonl, traceability-map.json). - ci-harness-gate.sh: export CASAN_TESTS_DIR/CASAN_TEST_MANIFEST/CASAN_BUNDLE_ROOT so the integrity Python resolves via the harness root regardless of invocation path; ROOT=CASAN_APP_ROOT. - Remove the domain compat symlinks from packages/casan-harness/security (redteam-corpus, redteam-vectors, benign-corpus) — packages now holds NO domain data. Both invocation paths pass (compat facade still present): .specify/... and packages/... Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
80 lines
3.8 KiB
Bash
80 lines
3.8 KiB
Bash
#!/usr/bin/env bash
|
|
set -uo pipefail
|
|
|
|
# CASAN Plan-16 SEC-06 (H-06) — control-plane audit head is SIGNED.
|
|
#
|
|
# The control-plane audit chain is a recomputable hash chain: a file-writer who
|
|
# edits the store could recompute every hash and the chain-only `verify-audit`
|
|
# would still PASS, so governance-report would falsely report CERTIFIED. Signing
|
|
# the head with an off-repo key closes this:
|
|
# * an intact signed store verifies (permissive + strict),
|
|
# * a recompute-tampered store FAILS (signature no longer matches the head),
|
|
# * a fully unsigned store FAILS in enforced mode (governance-report inherits
|
|
# CASAN_PROFILE=prod, so a certified run demands a signature).
|
|
#
|
|
# Deterministic; hermetic (temp store + temp keys + temp pubkey).
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
source "$SCRIPT_DIR/../scripts/bash/casan-paths.sh"
|
|
PROJECT_ROOT="$CASAN_APP_ROOT"
|
|
CP="$CASAN_HARNESS_ROOT/scripts/bash/control-plane-settings.py"
|
|
WORK="$(mktemp -d)"
|
|
trap 'rm -rf "$WORK"' EXIT
|
|
|
|
export CASAN_CP_STORE_FILE="$WORK/store.json"
|
|
export CASAN_CP_KEY_DIR="$WORK/keys"
|
|
export CASAN_CP_PUB="$WORK/cp-public.pem" # provisioned out-of-band (attacker cannot rewrite in this test)
|
|
|
|
PASS=0; FAIL=0
|
|
pass() { echo "PASS: $1"; PASS=$((PASS + 1)); }
|
|
fail() { echo "FAIL: $1"; FAIL=$((FAIL + 1)); }
|
|
rc_of() { set +e; "$@" >/dev/null 2>&1; echo $?; set -e 2>/dev/null || true; }
|
|
|
|
echo "===== Plan-16 SEC-06: control-plane audit head signed ====="
|
|
|
|
python3 "$CP" set compression.enabled true --actor a@x --reason r >/dev/null 2>&1
|
|
python3 "$CP" set compression.mode structural --actor a@x --reason r >/dev/null 2>&1
|
|
|
|
[[ "$(rc_of python3 "$CP" verify-audit)" -eq 0 ]] \
|
|
&& pass "intact signed store verifies (permissive)" || fail "intact store rejected"
|
|
[[ "$(rc_of env CASAN_VERIFY_STRICT=1 python3 "$CP" verify-audit)" -eq 0 ]] \
|
|
&& pass "intact signed store verifies (strict)" || fail "intact store rejected in strict"
|
|
|
|
# Recompute-attack: tamper a value AND recompute the entire hash chain so it is
|
|
# internally consistent. The head signature (over the original head) must not match.
|
|
python3 - "$CASAN_CP_STORE_FILE" <<'PY'
|
|
import hashlib, json, sys
|
|
p = sys.argv[1]; d = json.load(open(p))
|
|
d["settings"]["compression.enabled"]["value"] = False
|
|
prev = "0" * 64
|
|
def he(e): return hashlib.sha256(json.dumps(e, sort_keys=True, ensure_ascii=False).encode()).hexdigest()
|
|
for e in d["audit"]:
|
|
if e.get("key") == "compression.enabled" and e.get("action") == "set":
|
|
e["value"] = False
|
|
rest = {k: v for k, v in e.items() if k != "hash"}; rest["prevHash"] = prev
|
|
for k in list(e):
|
|
if k != "hash": e[k] = rest[k]
|
|
e["hash"] = he(rest); prev = e["hash"]
|
|
json.dump(d, open(p, "w"), indent=2)
|
|
PY
|
|
[[ "$(rc_of python3 "$CP" verify-audit)" -ne 0 ]] \
|
|
&& pass "recompute-tampered store FAILS (head signature mismatch)" \
|
|
|| fail "recompute attack passed verification (H-06 not closed!)"
|
|
|
|
# Keyless attacker: delete the signature artifacts entirely. Enforced mode (what a
|
|
# certified run / prod profile uses) must reject an unsigned store; dev stays lax.
|
|
rm -f "$CASAN_CP_STORE_FILE.head" "$CASAN_CP_STORE_FILE.head.sig" "$CASAN_CP_PUB"
|
|
# rebuild a clean, internally-valid but UNSIGNED store (fresh sets would re-sign, so
|
|
# strip the signature after): easiest is to reuse the tampered chain which is
|
|
# internally valid; with sig files gone it is "unsigned".
|
|
[[ "$(rc_of env CASAN_VERIFY_STRICT=1 python3 "$CP" verify-audit)" -ne 0 ]] \
|
|
&& pass "unsigned store FAILS in enforced mode (prod / certified run)" \
|
|
|| fail "unsigned store accepted in enforced mode"
|
|
[[ "$(rc_of python3 "$CP" verify-audit)" -eq 0 ]] \
|
|
&& pass "unsigned store still OK in permissive dev mode (backward compat)" \
|
|
|| fail "permissive mode wrongly rejected unsigned store"
|
|
|
|
echo ""
|
|
echo "===== SEC-06 SUMMARY: PASS=$PASS FAIL=$FAIL ====="
|
|
[[ "$FAIL" -eq 0 ]] || exit 1
|