eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

test: cover adversarial auth diagnostics

Browse source
This commit is contained in:
Eric Wendland 2026-07-05 23:12:01 +02:00
commit f06db17066
3 changed files with 120 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

20
docs/production-readiness-roadmap.md
View file

@ -154,22 +154,22 @@ it.
Goal: finish the authorization and remote-input audit before deployment.
- `[~]` Complete remote authorization matrix coverage.
- `[x]` Complete remote authorization matrix coverage.
Acceptance criteria:
- `[ ]` Denied and allowed paths are tested for CAS, KV, DB, document,
- `[x]` Denied and allowed paths are tested for CAS, KV, DB, document,
pubsub, pipe, SSH proxy/admin shell, SSH cert metadata, and revocations.
- `[x]` Every remote mutating or service-opening operation has an explicit
resource capability check before mutation or host access.
- `[x]` The matrix fails tests when a new remote operation lacks a guard.
- `[ ]` Add adversarial identity and bearer tests.
- `[x]` Add adversarial identity and bearer tests.
Acceptance criteria:
- `[ ]` Tests cover discovered-only peers.
- `[ ]` Tests cover wrong endpoint bindings.
- `[ ]` Tests cover revoked nodes.
- `[ ]` Tests cover stale or mismatched peer cards.
- `[ ]` Tests cover bearer secrets with wrong capabilities.
- `[ ]` Tests cover bearer attempts to mutate trust graph state.
- `[x]` Tests cover discovered-only peers.
- `[x]` Tests cover wrong endpoint bindings.
- `[x]` Tests cover revoked nodes.
- `[x]` Tests cover stale or mismatched peer cards.
- `[x]` Tests cover bearer secrets with wrong capabilities.
- `[x]` Tests cover bearer attempts to mutate trust graph state.
- `[x]` Bound all remote input paths.
Acceptance criteria:
@ -342,7 +342,7 @@ Goal: prove the system works as an actual base layer before broader use.
2. `[~]` Refactor `geth-node` into daemon subsystems.
3. `[x]` Add stable contract and golden JSON tests.
4. `[x]` Harden store migrations and backup.
5. `[ ]` Complete security-boundary test coverage.
5. `[x]` Complete security-boundary test coverage.
6. `[x]` Replace prototype private CAS cryptography.
7. `[ ]` Add fault-injection sync tests.
8. `[ ]` Improve automation commands and JSON errors.