TEST 130

TEST-130

Stimulus

Send MCP initialization, capability discovery, resource-list/read, approved read-only tool, arbitrary command/tool, oversized body/URI, wrong VM/source, foreign capture UUID, and over-limit frame requests through the guest relay and host-loopback forward.

Required observation

Only the pinned Actor stdio process and fixed allowlisted methods are reachable; the host listener is loopback-only and guest ingress is restricted to the verified NAT peer. Only the exact active capture run can be read, frame and response bounds hold, and a timeout or transport failure is non-retryable. No arbitrary shell, direct Actor storage crawl, public host path, or raw frame artifact is exposed. Native relay and firewall-source tests remain planned.