Migrated from Method backlog
This issue was created from a legacy filesystem backlog card. GitHub Issues are now the live work tracker; repository docs remain Method evidence.
Source backlog: docs/method/backlog/asap/PLATFORM_decoder-negative-test-map.md
Original lane: asap
Original legend: PLATFORM
Original backlog card
Explicit negative test mapping for decoder controls
Ref: #279
Map every decoder control (CBOR boundary validation, envelope
rejection, malformed input handling) to an explicit negative test.
Status: active and partially implemented. docs/determinism/sec-claim-map.json
maps SEC-001 through SEC-005 to named echo-scene-codec negative tests, and the
G2 workflow verifies those test IDs exist. The remaining gap is exhaustiveness:
CI proves mapped tests exist, but it does not prove every decoder rejection
branch or control class is represented in the map.
T-279-1: Make decoder control coverage auditable
User Story: As a security reviewer, I want each decoder rejection control to
point at an explicit negative test so that malformed-input coverage can be
audited without reading the whole decoder by hand.
Requirements:
- R1: Inventory the active decoder controls in
crates/echo-scene-codec/src/cbor.rs, including max-count checks, trailing
bytes, truncation handling, version rejection, invalid enum tags, definite
array lengths, hash-length checks, and option-shape checks.
- R2: Extend
docs/determinism/sec-claim-map.json or a sibling control map so
every inventory row points at at least one concrete negative test.
- R3: Add missing negative tests before claiming a control is covered.
- R4: Keep the existing G2 test-ID existence check and add an exhaustiveness
check over the maintained inventory if the inventory becomes machine-readable.
Acceptance Criteria:
Migrated from Method backlog
This issue was created from a legacy filesystem backlog card. GitHub Issues are now the live work tracker; repository docs remain Method evidence.
Source backlog:
docs/method/backlog/asap/PLATFORM_decoder-negative-test-map.mdOriginal lane:
asapOriginal legend:
PLATFORMOriginal backlog card
Explicit negative test mapping for decoder controls
Ref: #279
Map every decoder control (CBOR boundary validation, envelope
rejection, malformed input handling) to an explicit negative test.
Status: active and partially implemented.
docs/determinism/sec-claim-map.jsonmaps SEC-001 through SEC-005 to named
echo-scene-codecnegative tests, and theG2 workflow verifies those test IDs exist. The remaining gap is exhaustiveness:
CI proves mapped tests exist, but it does not prove every decoder rejection
branch or control class is represented in the map.
T-279-1: Make decoder control coverage auditable
User Story: As a security reviewer, I want each decoder rejection control to
point at an explicit negative test so that malformed-input coverage can be
audited without reading the whole decoder by hand.
Requirements:
crates/echo-scene-codec/src/cbor.rs, including max-count checks, trailingbytes, truncation handling, version rejection, invalid enum tags, definite
array lengths, hash-length checks, and option-shape checks.
docs/determinism/sec-claim-map.jsonor a sibling control map soevery inventory row points at at least one concrete negative test.
check over the maintained inventory if the inventory becomes machine-readable.
Acceptance Criteria:
echo-scene-codec.inventory.
explicit unresolved status.