Skip to content

v0.7.0: Authorized Runtime Validation & Bounded Exploitability Confirmation

Choose a tag to compare

View all tags
@githubmofo githubmofo released this 01 Sep 06:17
· 16 commits to main since this release
v0.7.0
ee39044

TorusGuard v0.7.0 Release Notes

Release Tag: v0.7.0
Release Title: Authorized Runtime Validation & Bounded Exploitability Confirmation
Previous Release: v0.6.3
Status: Stable Release

🎯 Executive Summary

TorusGuard v0.7.0 extends TorusGuard from a governed static remediation and recheck system into an authorized runtime validation and bounded exploitability confirmation system.

While v0.6.x established stable finding identities, root-cause clustering, minimal patch bounds, and targeted rechecks, v0.7.0 bridges static findings with live, authorized application verification. It allows security architects and AI coding agents to confirm whether static findings are practically reachable and exploitable without introducing destructive offensive tooling, unbounded fuzzing, or unmanaged denial-of-service risks.

🚀 Key Deliverables & New Capabilities

1. 🔒 Scope & Authorization Gate (core/authorization.py)

  • Explicit Target Consent: Requires signed, unexpired target ownership confirmation or written consent before any runtime interaction is dispatched.
  • Strict Boundary Enforcement: Enforces whitelisted target hosts, allowed path prefixes, forbidden sensitive paths (/admin/delete, /system/reset), and request budgets.
  • Run Artifacts: Emits authorization.md and scope.json into every run folder.
  • Hard Gate: Dispatches AuthorizationError to halt runtime execution immediately if authorization is missing or expired.

2. 🛡️ Safety Review Gates (core/safety_gate.py)

  • Risk Escalation Hierarchy:
    • Auto-Allowed: Read-only GET/HEAD queries against non-sensitive in-scope routes.
    • Approval Required: Requests touching authentication, tenancy, file uploads, or state-changing HTTP verbs (POST, PUT, PATCH, DELETE).
    • Manual Only: Destructive routes (/admin/delete, /system/shutdown), account resets, or privileged infrastructure changes.
  • Records all safety evaluations in safety-decisions.json.

3. 🌐 Web Validation & Secret Redaction (core/runtime_validator.py, core/runtime_evidence.py)

  • Bounded HTTP Probing: Executes targeted, non-destructive HTTP requests against authorized application endpoints.
  • Session State Tracking: Maintains cookies, tenant identifiers, and custom headers across probes, logged to session-notes.md.
  • Automatic Secret Redaction: Employs regex redaction rules masking Bearer JWTs, Basic Auth credentials, Stripe/AWS keys, and passwords before writing requests.json and responses.json.

4. ⚡ Bounded Exploitability Confirmation (core/exploit_checker.py)

  • Evaluates practical exploitability across 5 approved issue classes:
    1. Authentication Bypass: Probes unauthenticated access to protected views.
    2. Multi-Tenant Scoping / IDOR: Evaluates cross-tenant data leaks with test credentials.
    3. Header Trust Injection: Probes backend adoption of spoofed X-Tenant-ID or role headers.
    4. Path Traversal Reachability: Asserts directory traversal handling without writing files.
    5. Exposed Debug/Profiler Routes: Validates public reachability of development profiler endpoints.
  • Classifies exploitability into 5 formal statuses:
    • Runtime Confirmed (Indisputable proof with sensitive marker)
    • Runtime Likely (Strong runtime indicators)
    • Needs Manual Review (Inconclusive or complex boundary)
    • Not Reproducible in Scope (Protected by active gateway/middleware)
    • Blocked by Environment / Controls (Safety gate halted probe)

5. 🖥️ Browser-Assisted Route Guard Verification (core/browser_verifier.py)

  • Validates client-side router guards, unauthenticated DOM leaks, and form security policies.
  • Enforces navigation depth limits (default: max 3 levels) and records UI action traces to browser-validation.md.

6. 👥 4-Role Multi-Agent Governance Model (core/agent_roles.py)

  • Splits validation into four discrete agent roles with explicit handoff contracts:
    • Profiler: Detects tech stack, framework layout, route ASTs, and storage boundaries.
    • Validator: Executes authorized runtime probes and captures technical evidence.
    • Remediator: Enriches remediation bundles and patch plans with exploitability context.
    • Reviewer: Verifies evidence sufficiency, evaluates safety compliance, and signs off on reports.
  • Emits agent-handoffs.md and role-audit.json.

7. 🔁 Replayable Validation Traces (core/replay_trace.py)

  • Serializes deterministic, step-by-step verification sequences into replay.json and replay.md.
  • Implements ReplayManager.execute_replay() to rerun traces against test environments for continuous regression validation.

8. 📊 Unified Reporting & Multi-Analysis SARIF (core/v070_reporter.py, core/sarif.py)

  • Emits combined Markdown reports merging static code findings with live exploitability outcomes, route contexts, and residual risks.
  • Emits GitHub Code Scanning SARIF v2.1.0 logs partitioned by analysis slice via automationDetails.id: torusguard/runtime/.

🧪 Verification Matrix

  • Runtime Validation Harness: harness/validate_v0_7_0_runtime.py (28/28 tests passed).
  • Hardening & Drift Suite: harness/validate_v0_6_3_hardening.py (24/24 tests passed).
  • Modern Stacks Suite: harness/validate_v0_6_2_modern_stacks.py (19/19 tests passed).
  • Scale & Clustering Suite: harness/validate_v0_6_1_scale.py (23/23 tests passed).
  • Governed Remediation QA: harness/validate_qa_v0_6_0.py (93/93 tests passed).
  • Base Verification Harness: harness/runner.py (75/75 tests passed).
  • Total Test Success: 270 / 270 passed across all test suites (0 failures).
Assets 2
Loading