thanhnvandClaude Opus 4.8
fbcef967e5
Freeze current submission/demo baseline: - casan-next-plans/: full task-level plan set (Plan 00 index + 02/04/06/07/08/09/12, QA, slide deck) - optimize-docs/video-steps/: per-vector scene breakdown (commands/screen-text/script) + start-tmux - run-all.sh / scorecard.sh / map-live.sh: REAL=1 live-battery wiring - regenerated evidence + audit/telemetry logs from live REAL=1 run - submission README + video recording guide updates - dry-run pipeline logs for 001-okr-web-app Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
26 lines
939 B
Bash
Executable File
26 lines
939 B
Bash
Executable File
#!/usr/bin/env bash
|
|
# B1 — Tamper 1 ký tự → hash-chain gãy (repudiation) 🔥 HIGHLIGHT
|
|
# cwd = thư mục gốc dự án. Offline OK.
|
|
|
|
# 1) Sinh vài record audit thật
|
|
for i in 1 2 3; do
|
|
printf 'attack %s\n' "$i" > /tmp/b$i.txt
|
|
bash .specify/scripts/bash/security-check.sh /tmp/b$i.txt /tmp/o.txt input >/dev/null 2>&1
|
|
done
|
|
|
|
# 2) Ký head + verify → VALID
|
|
bash .specify/scripts/bash/sign-audit-head.sh
|
|
bash .specify/scripts/bash/verify-audit-chain.sh; echo "exit=$?" # VALID
|
|
|
|
# 3) Sao lưu rồi SỬA 1 KÝ TỰ trong record đầu
|
|
cp .specify/logs/audit/audit.jsonl /tmp/audit.bak
|
|
sed -i '1s/high/LOW/' .specify/logs/audit/audit.jsonl
|
|
|
|
# 4) Verify lại → hash-chain gãy
|
|
bash .specify/scripts/bash/verify-audit-chain.sh; echo "exit=$?" # HASH_MISMATCH
|
|
|
|
# 5) Khôi phục
|
|
cp /tmp/audit.bak .specify/logs/audit/audit.jsonl
|
|
|
|
# Kỳ vọng: lần đầu VALID → sau khi sửa: AUDIT_HASH_MISMATCH line=1
|