informed-decision/docs/evidence/2026-09-10-browser-authentication.json

59 lines
2.9 KiB
JSON
Raw Normal View History

{
"schema": "helixforge.browser-authentication-source.v1",
"observed_at": "2026-09-10T19:20:43.362423+00:00",
"status": "passed",
"implementation_base": "4e103f62a0e68d9a273c0abec76ee6ab35db2531",
"contracts": {
"key-cape": "f9812ab3b2bfe8f0817185f44071e612264ec3ee",
"approval-engine": "2fdb01d42aa721f3b44f46abe018e53a7813e916"
},
"validation": {
"tests_passed": 206,
"tests_failed": 0,
"tests_skipped": 0,
"existing_tests": 100,
"real_engine_component_tests": 3,
"command": "INFD_APPROVAL_ENGINE_SOURCE=/home/worsch/approval-engine /tmp/hfact-browser-20260910/.venv/bin/python -m pytest -q",
"identity_evidence": "locally signed synthetic fixture, validated by login and actual Approval Engine JWT verifier; not a native KeyCape human login",
"local_http_smoke": {
"status": "passed",
"checks": {
"installed_entrypoint_health": true,
"fixed_issuer_authorization_redirect": true,
"exact_registered_callback_and_scopes": true,
"pkce_s256_and_browser_cookie": true,
"incomplete_approval_path_not_ready": true,
"binding_route_unavailable": true
},
"issuer_contacted": false,
"native_human_login": false,
"model_calls": 0
}
},
"source_sha256": {
"informed_decision/approval_http.py": "14187ab81f0ce2d9d61ec548ff4da8563d7d1d6084f3d91dddfba9cc90d1864d",
"informed_decision/http_transport.py": "d861f9cea798af7afeffb78b93b353ade0037b4536cf44b6e71ef7d6dc794940",
"informed_decision/oidc.py": "f68d0145e0eb08e46fbbaeaf21b34bfaf51b4fdddc247e46d57c20a19f692134",
"informed_decision/web.py": "c4eb8f828e38437aec305796adf30b947207a2d34b2e5fc9c63ed9d5eff99729",
"informed_decision/provenance.py": "de02c6bf162865ba9619d74cfd68dd0a5d7f81e6c9e427f67f848cb2c2214f83",
"pyproject.toml": "8e8e008035077e409c883fb1198387b24c4c63b37a3d695c8740a237cd3258d9",
"tests/test_approval_component.py": "eea6cd523b81fb99478b72666a50ea46d5c031b7459241e0522a2606534ecbbc",
"tests/test_approval_http.py": "81bdd8aaa0c039d6e9c37ba030a87956adf132fa2391882f18120f8ec578b4fd",
"tests/test_browser_auth.py": "01f4088968eea87c58ac0b30806111f1367349e6eaf55f1d3c59499e6c68b590",
"tests/test_http_transport.py": "314f7210748a548adebedb7c63cbc9b2b5790db00c082ef1fff2664e871e350e",
"tools/smoke_browser_shell.py": "373524286e0bd475b6c6afa974f1836f0f12a39b041e8b4682c42bdd91ebc56d"
},
"native_human_login_proven": false,
"browser_approval_route_available": false,
"deployed": false,
"factory_attempts": 0,
"paid_model_calls": 0,
"remaining_owner_record": "INFD-WP-0001-T08",
"remaining": [
"durable presentation/disposition plus transactional evidence outbox",
"entitlement before render and actor/version/ack guards in browser path",
"independent audit custody/delivery and duplicate/ambiguous entry reconciliation",
"native client registration/login and deployed Approval Engine proof"
]
}