diff options
| author | tanaka takashi <isazaka@gmail.com> | 2026-08-13 23:20:20 +0900 |
|---|---|---|
| committer | tanaka takashi <isazaka@gmail.com> | 2026-08-13 23:20:20 +0900 |
| commit | e07183ee6d3e57da325213e898cdcd6687320f53 (patch) | |
| tree | a05a71ec3ed419d54f450a0105ec22973c66a66b /AgentSandboxMcp.slnx | |
| parent | 9337ac3e5edd42bb17f5e2ade6c2de02c7ef576d (diff) | |
test(security): close on-demand elevation acceptance gaps
Add an actual-process acceptance harness for the administrative Named Pipe boundary. Exercise production pipe creation and peer PID inspection, remote-form client rejection, Task and protocol identity mismatch, duplicate network application, oversized frames, and an intentional helper-crash recovery point without adding test-only operations to the privileged protocol.
Add a reusable PowerShell attack-matrix runner that preserves the helper parent-image check and drives the self-contained published helper through real UAC. Refactor the client pipe setup into internal diagnostic hooks while leaving the production DACL, PIPE_REJECT_REMOTE_CLIENTS, PID comparison, and helper lifetime behavior unchanged.
Record the completed UAC rejection, HTTP MCP server-continuity, helper crash, startup Recovery rejection/success, loopback restoration, WFP residue, and regression evidence. Promote the three on-demand elevation traceability rows from PARTIAL to PASS and capture the 80-test Windows Security/Recovery result and final Bundle checksum.
Verified: Release build warning/error 0; Core 105 PASS; Planner 10 PASS; administrative boundary 4 PASS; Windows Security/Recovery 80 PASS with skip 0; actual IPC attack matrix PASS; actual Task-time and Recovery-time UAC rejection PASS; Journal/backup/main/helper residue 0; fresh self-contained Bundle show PASS.
Diffstat (limited to 'AgentSandboxMcp.slnx')
| -rw-r--r-- | AgentSandboxMcp.slnx | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/AgentSandboxMcp.slnx b/AgentSandboxMcp.slnx index 33c59f0..276acf6 100644 --- a/AgentSandboxMcp.slnx +++ b/AgentSandboxMcp.slnx @@ -9,6 +9,7 @@ <Project Path="src/Agent.Windows/Agent.Windows.csproj" /> </Folder> <Folder Name="/tests/"> + <Project Path="tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj" /> <Project Path="tests/Agent.Mcp.TestHost/Agent.Mcp.TestHost.csproj" /> <Project Path="tests/Agent.Core.Tests/Agent.Core.Tests.csproj" /> <Project Path="tests/Agent.Planner.Tests/Agent.Planner.Tests.csproj" /> |