{
  "schema": "adl.wp12.csm_cav_red_blue_proof.v1",
  "issue": 4914,
  "parent_issue": 4639,
  "sprint_issue": 4656,
  "status": "passed_with_bounded_residuals",
  "run_id": "wp12-4914-cav-red-blue",
  "generated_at": "2026-07-10T00:00:00Z",
  "operator_ref": "e89ea0f9ebb9513d",
  "threat_scenarios": [
    {
      "id": "malformed_snapshot",
      "target_surface": "snapshot/freeze-dry bundle",
      "attacker_goal": "force restore from corrupted bundle",
      "blue_team_control": "capsule staging integrity guard"
    },
    {
      "id": "unauthorized_control_command",
      "target_surface": "operator control boundary",
      "attacker_goal": "resume without fresh invariant pass",
      "blue_team_control": "runtime-v2 security boundary refusal"
    },
    {
      "id": "telemetry_injection",
      "target_surface": "OTel/log export",
      "attacker_goal": "inject untrusted telemetry fields",
      "blue_team_control": "schema-bound security event classifier"
    },
    {
      "id": "credential_path_leakage",
      "target_surface": "provider secrets and local paths",
      "attacker_goal": "exfiltrate credential-like keys or host paths",
      "blue_team_control": "portable artifact redaction scan"
    },
    {
      "id": "replay_tampering",
      "target_surface": "agent/DAG execution replay",
      "attacker_goal": "alter replay manifest or DAG evidence",
      "blue_team_control": "hash and lineage replay guard"
    },
    {
      "id": "cloud_hook_denial",
      "target_surface": "AWS hooks",
      "attacker_goal": "force unauthenticated cloud-control mutation",
      "blue_team_control": "local denial without AWS mutation"
    }
  ],
  "red_blue_scenarios": [
    {
      "id": "malformed_snapshot",
      "red_team_attempt": "tamper continuity capsule manifest and snapshot segment",
      "decision": "refused",
      "observed_event": "csm_security_event.snapshot_integrity_refused",
      "observed_result": "rejected_malformed_snapshot:EOF_while_parsing_an_object_at_line_1_column_1"
    },
    {
      "id": "unauthorized_control_command",
      "red_team_attempt": "request resume while invariant evidence is blocking",
      "decision": "refused",
      "observed_event": "csm_security_event.operator_command_refused",
      "observed_result": "resume_refused_with_blocking_invariant_present"
    },
    {
      "id": "telemetry_injection",
      "red_team_attempt": "submit forged telemetry field with control characters and secret marker",
      "decision": "detected",
      "observed_event": "csm_security_event.telemetry_injection_detected",
      "observed_result": "telemetry_payload_sanitized_without_secret_retention"
    },
    {
      "id": "credential_path_leakage",
      "red_team_attempt": "add api_key and host-private path fields to retained artifact",
      "decision": "refused",
      "observed_event": "csm_security_event.credential_path_leakage_refused",
      "observed_result": "artifact_refused:credential-like_key"
    },
    {
      "id": "replay_tampering",
      "red_team_attempt": "change replay manifest hash and DAG lineage reference",
      "decision": "refused",
      "observed_event": "csm_security_event.replay_tampering_refused",
      "observed_result": "replay_tampering_rejected_hash_mismatch"
    },
    {
      "id": "cloud_hook_denial",
      "red_team_attempt": "call cloud hook without approved account proof or operator token",
      "decision": "refused",
      "observed_event": "csm_security_event.cloud_hook_denial",
      "observed_result": "cloud_hook_denied:missing_approved_account_proof_or_operator_token"
    }
  ],
  "pass_fail_register": [
    {
      "scenario_id": "malformed_snapshot",
      "severity": "high",
      "result": "pass",
      "residual_risk": "no residual beyond fixture expansion"
    },
    {
      "scenario_id": "unauthorized_control_command",
      "severity": "critical",
      "result": "pass",
      "residual_risk": "runtime-v2 boundary proof is local/static but retained and correlated"
    },
    {
      "scenario_id": "telemetry_injection",
      "severity": "medium",
      "result": "pass",
      "residual_risk": "live collector fuzzing remains future CAV expansion"
    },
    {
      "scenario_id": "credential_path_leakage",
      "severity": "critical",
      "result": "pass",
      "residual_risk": "credential rotation live-provider mutation remains #4920 non-claim"
    },
    {
      "scenario_id": "replay_tampering",
      "severity": "high",
      "result": "pass",
      "residual_risk": "distributed replay consensus remains future milestone work"
    },
    {
      "scenario_id": "cloud_hook_denial",
      "severity": "high",
      "result": "pass",
      "residual_risk": "no live destructive AWS action was attempted"
    }
  ],
  "retained_artifacts": [
    "cav_red_blue_summary.json",
    "cav_red_blue_events.jsonl",
    "cav_pass_fail_register.json",
    "red_team_fixtures.json"
  ],
  "redaction": {
    "secret_values_retained": false,
    "raw_credential_paths_retained": false,
    "host_private_paths_retained": false,
    "cloud_mutation_performed": false,
    "operator_identity_hashed": true
  },
  "non_claims": [
    "does not perform destructive cloud actions",
    "does not claim production WebSocket runtime API integration",
    "does not retain provider, AWS, or operator secret values",
    "does not claim live adversarial coverage beyond these retained scenarios"
  ]
}