Repository navigation
TEST 115
Use synthetic desktop images and structured text with unique fake credential/activation canaries inside and outside approved regions. Exercise no-image approval, approved crop, deterministic masking, explicit full-frame approval, malformed/out-of-range regions, changed transformation policy, and a model attempting to broaden approval through its response. Return schema-valid prose that echoes a canary, raw prompt, private path, or unsupported command. Inject transport, validation, checkpoint, and receipt-write failures. Inspect every submitted payload, log, error, receipt, temporary file, and checkpoint plus actual directory/file permissions or ACLs; use no real secrets.
Without explicit disclosure, no image is submitted. Region-only approval sends only the exact transformed image, with original and submitted hashes bound to the approved policy and original bytes unchanged. Full-frame approval does not grant retention of arbitrary desktop text. Retained fields follow the allowlist and known-canary leakage is suppressed/rejected with sanitized errors; diagnostic paths never dump raw responses or prompts. Unsafe custody fails closed. Expired policy blocks reuse and reports cleanup needs without deleting operator-owned data. The test demonstrates its defined canary/minimization cases, not perfect discovery of arbitrary unknown secrets. Planned tests do not themselves authorize live full-desktop disclosure.