From e07183ee6d3e57da325213e898cdcd6687320f53 Mon Sep 17 00:00:00 2001 From: tanaka takashi Date: Thu, 13 Aug 2026 23:20:20 +0900 Subject: test(security): close on-demand elevation acceptance gaps Add an actual-process acceptance harness for the administrative Named Pipe boundary. Exercise production pipe creation and peer PID inspection, remote-form client rejection, Task and protocol identity mismatch, duplicate network application, oversized frames, and an intentional helper-crash recovery point without adding test-only operations to the privileged protocol. Add a reusable PowerShell attack-matrix runner that preserves the helper parent-image check and drives the self-contained published helper through real UAC. Refactor the client pipe setup into internal diagnostic hooks while leaving the production DACL, PIPE_REJECT_REMOTE_CLIENTS, PID comparison, and helper lifetime behavior unchanged. Record the completed UAC rejection, HTTP MCP server-continuity, helper crash, startup Recovery rejection/success, loopback restoration, WFP residue, and regression evidence. Promote the three on-demand elevation traceability rows from PARTIAL to PASS and capture the 80-test Windows Security/Recovery result and final Bundle checksum. Verified: Release build warning/error 0; Core 105 PASS; Planner 10 PASS; administrative boundary 4 PASS; Windows Security/Recovery 80 PASS with skip 0; actual IPC attack matrix PASS; actual Task-time and Recovery-time UAC rejection PASS; Journal/backup/main/helper residue 0; fresh self-contained Bundle show PASS. --- .../Agent.Admin.AcceptanceHarness.csproj | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj (limited to 'tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj') diff --git a/tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj b/tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj new file mode 100644 index 0000000..cbca477 --- /dev/null +++ b/tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj @@ -0,0 +1,12 @@ + + + Exe + Agent.Admin.AcceptanceHarness + Agent.Admin.AcceptanceHarness + net10.0-windows10.0.26100.0 + + + + + + -- cgit v1.2.3