approval-engine/docs/evidence/2026-09-10-presentation-exclusion.json
tegwick adb5cb0a9a test: enforce the presentation exclusion contract for approval digests
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
2026-09-10 18:39:30 +02:00

21 lines
1.5 KiB
JSON

{
"ruling": "GH-DEC-2026-015",
"condition": "normative and tested exclusion of presentation from native binding.digest",
"status": "condition-implemented-source",
"test": "tests/test_claim_contract.py::test_presentation_changes_cannot_change_the_approved_act",
"focused_tests": 7,
"full_suite_output": "........................................................................ [ 57%]\n...................................................... [100%]\n=============================== warnings summary ===============================\ntests/test_auth.py::test_jwt_authenticator_rejects_wrong_signature_and_hs256\n /tmp/hfact-attempt-20260910/approval-engine/.venv/lib/python3.12/site-packages/jwt/api_jwt.py:147: InsecureKeyLengthWarning: The HMAC key is 14 bytes long, which is below the minimum recommended length of 32 bytes for SHA256. See RFC 7518 Section 3.2.\n return self._jws.encode(\n\n-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html\n126 passed, 1 warning in 3.06s",
"mutation": {
"change": "canonical_binding returns the whole supplied input instead of only the act",
"result": "expected test failure",
"exit_code": 1,
"production_mutation_retained": false
},
"native_algorithm_changed": false,
"live_approval_issued": false,
"residuals": {
"consumer_adoption": "INFD-IN-0004 / INFD-WP-0001",
"human_control_enforcement": "APPROVAL-WP-0002-T01 / GH-DEC-2026-016",
"deployment_and_native_consumption": "APPROVAL-WP-0002-T03/T05"
}
}