Skip to content

KineGrant Machine Permission Test v0.1

Choose a tag to compare

View all tags
@zoahdev zoahdev released this 10 Aug 16:11
mpt-v0.1
0e84cd2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

KineGrant Machine Permission Test v0.1

This release turns the KGP-001 Challenge into a reproducible software permission-boundary test with machine-readable evidence.

Required assertions

  1. No capability means zero actuator calls.
  2. A valid capability authorizes exactly one actuator call.
  3. Reusing a consumed capability is denied.
  4. Changing agent, target, action, or purpose is denied.
  5. A capability from an untrusted issuer is denied.
  6. A capability is denied at its exact expiry.
  7. Exactly one of 64 concurrent consumers wins.
  8. Persistent replay state survives a gate restart.
  9. Trusted receipts verify; tampered and untrusted receipts do not.

Evidence and provenance

The JSON evidence records an explicit PASS/FAIL for every case, actual sandbox actuator-call counts, the tested source commit, a SHA-256 digest of the runner, and the Python/runtime environment. The independent verifier checks the Draft 2020-12 Schema, required and unique case IDs, summary consistency, and overall-result consistency.

The included reference run reports 9/9 PASS against commit 0e84cd2b53e8bfe0b8c147fb9feb62c91aac30ed. It is a published reference artifact, not a substitute for independent reproduction.

Run

python -m pip install -e '.[test]'
kinegrant-mpt --source-commit "$(git rev-parse HEAD)" --output machine-permission-test.evidence.json
python challenge/verify_evidence.py machine-permission-test.evidence.json

This is a software authorization test. It does not prove functional safety, physical actuation, or independent physical truth. KGP-001 remains an experimental open draft.

Verify all downloadable assets with SHA256SUMS.txt.

Assets 6
Loading