✔ strict parser keeps exact JSON meaning and rejects ambiguous encodings (1.886834ms)
✔ ES256 verifies exact payload bytes, including significant whitespace (2.1385ms)
✔ JWS rejects attacker signatures, type confusion and unknown keys (0.933541ms)
✔ JWS rejects none, padding, unknown headers and DER instead of P1363 (0.327416ms)
✔ valid metadata requires separately provisioned pin, exact origin and live authority (1.249ms)
✔ valid signed client report remains a declaration (0.887708ms)
✔ collector cannot change reported bytes or authenticated reporter association (1.012958ms)
✔ collector cannot promote client statements to origin/source assurance (1.100542ms)
✔ self-consistent attacker export cannot replace independent origin trust (0.576667ms)
✔ collector capability, revoked keys and origin references are enforced (0.902ms)
✔ signed manifest binds selected representation bytes and media type (0.918917ms)
✔ operation counts resist distinct-event duplication, checkpoints and anonymous spoofing (1.640584ms)
✔ offline preservation witness detects deletion and reordering of genuine signed records (6.500083ms)
ℹ tests 13
ℹ suites 0
ℹ pass 13
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 93.457583