coulomb/mail-address-semantics
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
mail-address-semantics/mas_modes/conformance/flows.json
tegwick bdf200a600 MAS-WP-0011 finished: peer authentication in mode contract v0.1 
CONTRACT.md section 7 (founder-reviewed): pairwise HMAC-SHA256 over
TIMESTAMP.BODY in MAS-Modes-* headers, 300 s window; master commands only
from the configured master; statuses only at the handoff's tokenized URL
from its peer; primed webhooks must name a known peer. mas_modes.signing,
signed contract.post, authenticating json_server, EmailMode/stubs/gateway
signing. conformance/auth.json vectors + 7 authorization flows.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5787@bnt-lap001
Assistant-Session: 5db26b82-138b-40cc-9856-4d5eb0f752fd
2026-10-19 11:25:24 +02:00

703 lines
16 KiB
JSON
Raw Blame History

{
"description": "Scripted flows (CONTRACT.md section 7). Each runs against a fresh email side with the callback stub and, for 'slave', a stub outside master that assigns EXT-100, EXT-101, ... The statute is statute.json. Placeholders: {case_id}, {message_ref}, {handoff_id} come from the latest response that carried them; {callback} is the stub's handoff URL. Peers: email, callback-1 (the stub), cms-1 (the stub master); every request is signed (CONTRACT.md section 7). Master role config: ticket, modes {callback}, fields phone/time, timeout 3600 s. Slave role config: case, defaults autonomous_send false, transfers block, overridden by 'config'.",
"flows": [
{
"id": "m-001",
"role": "master",
"title": "callback completes",
"scenario": "completed",
"steps": [
{
"mail": {
"to": "ticket!callback",
"text": "Phone: +49 30 1234567\nTime: tomorrow 10:00"
},
"expect": {
"response_status": "created"
}
},
{
"mode": "run",
"expect": {
"statuses": [
"scheduled",
"running",
"completed"
],
"last_mail_contains": "has taken place"
}
}
]
},
{
"id": "m-002",
"role": "master",
"title": "negotiation over email",
"scenario": "negotiate",
"steps": [
{
"mail": {
"to": "ticket!callback",
"text": "Please call me."
},
"expect": {
"response_status": "created"
}
},
{
"mode": "run",
"expect": {
"statuses": [
"negotiating"
],
"last_mail_contains": "Phone: ..."
}
},
{
"mail": {
"to": "ticket={case_id}",
"text": "Phone: +49 30 1234567\nTime: tomorrow 10:00"
},
"expect": {
"response_status": "correlated"
}
},
{
"mode": "run",
"expect": {
"statuses": [
"negotiating",
"scheduled",
"running",
"completed"
],
"last_mail_contains": "has taken place"
}
}
]
},
{
"id": "m-003",
"role": "master",
"title": "no answer, retried, completed",
"scenario": "no-answer-retry",
"steps": [
{
"mail": {
"to": "ticket!callback",
"text": "Phone: +49 30 1234567\nTime: tomorrow 10:00"
}
},
{
"mode": "run",
"expect": {
"statuses": [
"scheduled",
"attempted",
"scheduled",
"running",
"completed"
]
}
}
]
},
{
"id": "m-004",
"role": "master",
"title": "no answer twice, failed",
"scenario": "no-answer-fail",
"steps": [
{
"mail": {
"to": "ticket!callback",
"text": "Phone: +49 30 1234567\nTime: tomorrow 10:00"
}
},
{
"mode": "run",
"expect": {
"statuses": [
"scheduled",
"attempted",
"scheduled",
"attempted",
"failed"
],
"last_mail_contains": "did not succeed"
}
}
]
},
{
"id": "m-005",
"role": "master",
"title": "refused out of hours",
"scenario": "out-of-hours",
"steps": [
{
"mail": {
"to": "ticket!callback",
"text": "Phone: +49 30 1234567\nTime: tomorrow 10:00"
}
},
{
"mode": "run",
"expect": {
"statuses": [
"refused"
],
"last_mail_contains": "out-of-hours"
}
}
]
},
{
"id": "m-006",
"role": "master",
"title": "email owns the timeout",
"scenario": "silent",
"steps": [
{
"mail": {
"to": "ticket!callback",
"text": "Phone: +49 30 1234567\nTime: tomorrow 10:00"
}
},
{
"mode": "run",
"expect": {
"statuses": []
}
},
{
"advance": 3599,
"expect": {
"timed_out": 0
}
},
{
"advance": 2,
"expect": {
"timed_out": 1,
"mode_received_last": "handoff.cancel",
"last_mail_contains": "could not arrange"
}
}
]
},
{
"id": "m-007",
"role": "master",
"title": "mode not enabled by the statute",
"scenario": "completed",
"steps": [
{
"mail": {
"to": "ticket!chat",
"text": "hi"
},
"expect": {
"response_status": "created",
"mode_received": 0,
"outbox_count": 1
}
}
]
},
{
"id": "m-008",
"role": "master",
"title": "unauthenticated sender gets no mail",
"scenario": "negotiate",
"steps": [
{
"mail": {
"to": "ticket!callback",
"text": "call me",
"dmarc": "fail"
},
"expect": {
"response_status": "created"
}
},
{
"mode": "run",
"expect": {
"statuses": [
"negotiating"
],
"outbox_count": 0
}
}
]
},
{
"id": "s-001",
"role": "slave",
"title": "master issues the id; email sends only on instruction",
"steps": [
{
"mail": {
"to": "case",
"text": "My order is late"
},
"expect": {
"response_status": "intake-reported",
"master_received": {
"case.intake": 1
},
"outbox_count": 0
}
},
{
"pump": true,
"expect": {
"case_address": "case=EXT-100@modes.example"
}
},
{
"mail": {
"to": "case={case_id}",
"text": "more"
},
"expect": {
"response_status": "reported",
"master_received": {
"case.message": 1
},
"outbox_count": 0
}
},
{
"master": {
"command": "send",
"in_reply_to": "{message_ref}",
"body": "We are on it."
},
"expect": {
"command_ok": true,
"outbox_count": 1
}
}
]
},
{
"id": "s-002",
"role": "slave",
"title": "principle 10 refuses a master send",
"steps": [
{
"mail": {
"to": "case",
"text": "hi",
"dmarc": "fail"
}
},
{
"pump": true
},
{
"master": {
"command": "send",
"in_reply_to": "{message_ref}",
"body": "x"
},
"expect": {
"command_ok": false,
"command_reason": "unauthenticated-sender",
"outbox_count": 0
}
}
]
},
{
"id": "s-003",
"role": "slave",
"title": "transfer blocked",
"steps": [
{
"mail": {
"to": "case!callback",
"text": "Phone: +49 30 1234567\nTime: tomorrow 10:00"
}
},
{
"pump": true,
"expect": {
"master_received": {
"handoff.requested": 1,
"handoff.status": 1
},
"mode_received": 0
}
}
]
},
{
"id": "s-004",
"role": "slave",
"title": "transfer to the primed webhook; statuses relayed",
"config": {
"transfers": {
"webhook": "{callback}",
"peer": "callback-1"
}
},
"scenario": "completed",
"steps": [
{
"mail": {
"to": "case!callback",
"text": "Phone: +49 30 1234567\nTime: tomorrow 10:00"
}
},
{
"pump": true,
"expect": {
"mode_received": 1
}
},
{
"mode": "run",
"expect": {
"relayed": [
"scheduled",
"running",
"completed"
],
"outbox_count": 0
}
},
{
"advance": 1000000,
"expect": {
"timed_out": 0
}
}
]
},
{
"id": "s-005",
"role": "slave",
"title": "the master owns the timeout",
"config": {
"transfers": {
"webhook": "{callback}",
"peer": "callback-1"
}
},
"scenario": "silent",
"steps": [
{
"mail": {
"to": "case!callback",
"text": "Phone: +49 30 1234567\nTime: tomorrow 10:00"
}
},
{
"pump": true
},
{
"mode": "run",
"expect": {
"relayed": []
}
},
{
"master": {
"command": "cancel",
"handoff_id": "{handoff_id}"
},
"expect": {
"command_ok": true,
"mode_received_last": "handoff.cancel"
}
},
{
"mode": "run",
"expect": {
"relayed": [
"cancelled"
]
}
}
]
},
{
"id": "a-001",
"role": "slave",
"title": "unsigned master command refused",
"steps": [
{
"mail": {
"to": "case",
"text": "hi"
}
},
{
"pump": true
},
{
"inject": {
"endpoint": "master",
"sign": "none",
"message": {
"type": "mail.send",
"case": "current",
"in_reply_to": "{message_ref}",
"body": "hello"
}
},
"expect": {
"http_status": 401,
"error": "unauthenticated-peer",
"outbox_count": 0
}
}
]
},
{
"id": "a-002",
"role": "slave",
"title": "a mode cannot assign case ids",
"steps": [
{
"mail": {
"to": "case",
"text": "hi"
},
"expect": {
"response_status": "intake-reported"
}
},
{
"inject": {
"endpoint": "master",
"as": "callback-1",
"message": {
"type": "case.assign",
"intake_ref": "{intake_ref}",
"resource_id": "EVIL-1"
}
},
"expect": {
"http_status": 403,
"error": "wrong-peer"
}
},
{
"pump": true,
"expect": {
"case_address": "case=EXT-100@modes.example"
}
}
]
},
{
"id": "a-003",
"role": "slave",
"title": "webhook to a peer email has no key for",
"steps": [
{
"mail": {
"to": "case",
"text": "hi"
}
},
{
"pump": true
},
{
"inject": {
"endpoint": "master",
"as": "cms-1",
"message": {
"type": "case.policy",
"case": "current",
"transfers": {
"webhook": "http://attacker.example/h",
"peer": "mallory"
}
}
},
"expect": {
"http_status": 400,
"error": "unknown-peer"
}
}
]
},
{
"id": "a-004",
"role": "slave",
"title": "replayed master command",
"steps": [
{
"mail": {
"to": "case",
"text": "hi"
}
},
{
"pump": true
},
{
"inject": {
"endpoint": "master",
"as": "cms-1",
"sign": "stale",
"message": {
"type": "mail.send",
"case": "current",
"in_reply_to": "{message_ref}",
"body": "hello"
}
},
"expect": {
"http_status": 401,
"error": "replayed",
"outbox_count": 0
}
}
]
},
{
"id": "a-005",
"role": "slave",
"title": "master command signed with the wrong key",
"steps": [
{
"mail": {
"to": "case",
"text": "hi"
}
},
{
"pump": true
},
{
"inject": {
"endpoint": "master",
"as": "cms-1",
"sign": "wrong-key",
"message": {
"type": "mail.send",
"case": "current",
"in_reply_to": "{message_ref}",
"body": "hello"
}
},
"expect": {
"http_status": 401,
"error": "unauthenticated-peer",
"outbox_count": 0
}
},
{
"inject": {
"endpoint": "master",
"as": "cms-1",
"message": {
"type": "mail.send",
"case": "current",
"in_reply_to": "{message_ref}",
"body": "hello"
}
},
"expect": {
"http_status": 200,
"outbox_count": 1
}
}
]
},
{
"id": "a-006",
"role": "master",
"title": "statuses only from the handoff's peer, at its URL",
"scenario": "silent",
"steps": [
{
"mail": {
"to": "ticket!callback",
"text": "Phone: +49 30 1234567\nTime: tomorrow 10:00"
},
"expect": {
"outbox_count": 1
}
},
{
"inject": {
"endpoint": "status",
"as": "cms-1",
"message": {
"type": "handoff.status",
"case": "current",
"seq": 1,
"status": "completed"
}
},
"expect": {
"http_status": 403,
"error": "wrong-peer"
}
},
{
"inject": {
"endpoint": "status",
"as": "callback-1",
"token": "bogus",
"message": {
"type": "handoff.status",
"case": "current",
"seq": 1,
"status": "completed"
}
},
"expect": {
"http_status": 404,
"error": "unknown-handoff",
"outbox_count": 1
}
},
{
"inject": {
"endpoint": "status",
"as": "callback-1",
"message": {
"type": "handoff.status",
"case": "current",
"seq": 1,
"status": "scheduled",
"at": "x"
}
},
"expect": {
"http_status": 200
}
}
]
},
{
"id": "a-007",
"role": "master",
"title": "only the gateway posts events",
"steps": [
{
"inject": {
"endpoint": "events",
"as": "callback-1",
"message": {
"type": "x"
}
},
"expect": {
"http_status": 403,
"error": "wrong-peer"
}
}
]
}
]
}
Reference in a new issue View git blame Copy permalink