✔ real retrieve/store/copy reports and disk expiry preserve original acquisition (8.955125ms)
✔ zero retention never writes a managed asset to disk (1.361291ms)
✔ lost acknowledgement retries identical payload and event identity (1.745416ms)
✔ unresolved report deadline blocks dependent use and does not claim completion (1.965542ms)
✔ verified original on-time intake can resolve lost acknowledgement after deadline (2.123417ms)
✔ a truly late collector receipt remains late and cannot silently restore compliance (1.668041ms)
✔ wrong digest, reporter and unverified adapter responses never complete a report (2.18275ms)
✔ slow report transport cannot hold a managed file past its retention timer (2.330084ms)
✔ combined duties take the shortest retention and report deadline (1.544584ms)
✔ attribution output preserves all required distinct names and source links (1.316458ms)
✔ unsupported duties and irreversible or model uses are refused (1.126666ms)
✔ unoffered resources, expired use windows and backwards clocks refuse new operations (1.179083ms)
✔ graceful close deletes unexpired files; fresh session never silently resumes old cache (2.214917ms)
✔ unrelated files and a symlink storage root are not deleted (1.548125ms)
✔ a forged ownership-marker symlink cannot overwrite an unrelated file (1.2135ms)
✔ strict parser keeps exact JSON meaning and rejects ambiguous encodings (1.055083ms)
✔ ES256 verifies exact payload bytes, including significant whitespace (1.492792ms)
✔ JWS rejects attacker signatures, type confusion and unknown keys (0.764791ms)
✔ JWS rejects none, padding, unknown headers and DER instead of P1363 (0.237708ms)
✔ valid metadata requires separately provisioned pin, exact origin and live authority (1.220459ms)
✔ valid signed client report remains a declaration (1.04275ms)
✔ collector cannot change reported bytes or authenticated reporter association (1.671208ms)
✔ collector cannot promote client statements to origin/source assurance (0.917041ms)
✔ self-consistent attacker export cannot replace independent origin trust (0.481792ms)
✔ collector capability, revoked keys and origin references are enforced (0.658ms)
✔ signed manifest binds selected representation bytes and media type (0.835458ms)
✔ operation counts resist distinct-event duplication, checkpoints and anonymous spoofing (1.612375ms)
✔ same operation with different resource or policy context stays conflicted (3.567833ms)
✔ offline preservation witness detects deletion and reordering of genuine signed records (3.874792ms)
ℹ tests 29
ℹ suites 0
ℹ pass 29
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 71.305292
