test(authenticator): audit Stack 09 identity and consent contracts - #121
Draft
BitHighlander wants to merge 2 commits into
Draft
BitHighlander wants to merge 2 commits into
BitHighlander wants to merge 2 commits into
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Authenticator requests now have wire regressions for complete identity/secret review, cancellation and immediate retry, duplicate refusal, deletion consent, malformed identity and OTP timing fields. The generated report requires all four new contracts on full and Bitcoin-only firmware and rejects missing, skipped or failed evidence. Existing authorization-loss coverage is unchanged.
Stacked on #120 at
d9a02d981ee43fe3e80b28ba02466670e6e8409d; source head41af909(audit/715-stack09-host-agent2-20260927). Companion final firmware head isad7a3fe0d46b0cd6f8595b6c23b07933113a1424on block08db7c711a6c824c42e7096d4867429bbe94cb6ffb; locally qualified runtime source2c37cce7fis unchanged by final integration.Validation: full firmware host suite 804 passed / 89 inherited skips; Bitcoin-only 347 passed / 546 inherited skips. All five authenticator wire cases pass on both variants with zero owned skips. Nine report-validator tests pass, including negative controls for each required case on both variants. Two enrollment OLED frames inspected. Historical-firmware controls detect missing cancellation text, skipped identity components and OTP prefix aliases; prior-code timing controls fail on junk/overflow/countdown inputs. Root canonical preflight passed before this push. No dirty dependencies.
Final combined local audit and exact-head hosted qualification are complete. Firmware draft #875 at ad7a3fe0d46b0cd6f8595b6c23b07933113a1424 integrates completed block08
db7c711a6. CI36357317080 passes every required job; firmware/Python/PR/run identity and PDF/JUnit/OLED/ARM hashes verified. Both PRs remain drafts. No Copilot request is authorized or requested for this unit. No product merge or release approval.