fix(security): enforce audited account, network and resource boundaries

Implement B01-B06 with regression coverage and retained validation evidence. Preserve the production ingress preflight; F04 runtime verification remains open.
2026-09-09 18:21:47 +02:00
parent 7d641edc7b
commit 0954876295
116 changed files with 10101 additions and 122 deletions
@@ -0,0 +1,88 @@
+[
+  {
+    "probe": "URL guard with non-network HTTP fake",
+    "target": "http://10.1.2.3/",
+    "Calls": 0,
+    "Parser": "none",
+    "Error": "Local or private network URLs are not allowed."
+  },
+  {
+    "probe": "URL guard with non-network HTTP fake",
+    "target": "http://[::ffff:10.1.2.3]/",
+    "Calls": 1,
+    "Parser": "universal",
+    "Error": "No JobPosting schema found."
+  },
+  {
+    "probe": "URL guard with non-network HTTP fake",
+    "target": "http://169.254.169.254/",
+    "Calls": 0,
+    "Parser": "none",
+    "Error": "Local or private network URLs are not allowed."
+  },
+  {
+    "probe": "URL guard with non-network HTTP fake",
+    "target": "http://[::ffff:169.254.169.254]/",
+    "Calls": 1,
+    "Parser": "universal",
+    "Error": "No JobPosting schema found."
+  },
+  {
+    "probe": "URL guard with non-network HTTP fake",
+    "target": "http://192.168.1.1/",
+    "Calls": 0,
+    "Parser": "none",
+    "Error": "Local or private network URLs are not allowed."
+  },
+  {
+    "probe": "URL guard with non-network HTTP fake",
+    "target": "http://[::ffff:192.168.1.1]/",
+    "Calls": 1,
+    "Parser": "universal",
+    "Error": "No JobPosting schema found."
+  },
+  {
+    "probe": "URL guard with non-network HTTP fake",
+    "target": "http://[::1]/",
+    "Calls": 0,
+    "Parser": "none",
+    "Error": "Local or private network URLs are not allowed."
+  },
+  {
+    "probe": "URL guard with non-network HTTP fake",
+    "target": "http://[::ffff:127.0.0.1]/",
+    "Calls": 0,
+    "Parser": "none",
+    "Error": "Local or private network URLs are not allowed."
+  },
+  {
+    "probe": "actual PDF exporter with three inert child processes",
+    "concurrentLaunches": 3
+  },
+  {
+    "probe": "two preloaded real SQLite contexts",
+    "Name": "Writer B",
+    "Version": 2,
+    "historyVersions": [
+      1,
+      2,
+      2
+    ]
+  },
+  {
+    "probe": "one transient database command failure",
+    "concurrency": 1,
+    "Failures": 1,
+    "hostStopping": true,
+    "hostedTaskFaulted": true,
+    "error": "TimeoutException"
+  },
+  {
+    "probe": "one transient database command failure",
+    "concurrency": 2,
+    "Failures": 1,
+    "hostStopping": false,
+    "hostedTaskFaulted": false,
+    "error": null
+  }
+]