Adversarial Appearance first-open assertion lacks the app-opening fixture #1381

Open
opened 2026-10-07 16:43:09 +00:00 by kayg · 0 comments
Owner

Found during merge33b (#1122), head 5382ca7a1, combined release server built at parent 4f3273473. The normal security/API continuation provisions its owner with setup.mjs. authenticatedPage() visits /healthz to avoid passkey autofill. The ordinary setup path does not open the app before browser.close(); app navigation is inside optional screenshot/focused blocks.

attack.py:1651 says the browser completed first-open System setup (#507), then keeps this expectation: auto_scheme == {mode: system}. The live GET returns null, producing:

appearance Auto default: first-open System choice was not retained: None

This fixture does not perform the User action that its assertion describes. I retained the expectation, per the owner rule; I did not replace it with null. Decide how the shared setup must complete first-open before this assertion. No production Appearance behavior changed in this continuation. Full run/log follows on #1122. This is a probe-precondition inconsistency, not evidence that an actual first-open User loses a saved choice.

Found during merge33b (#1122), head 5382ca7a1, combined release server built at parent 4f3273473. The normal security/API continuation provisions its owner with setup.mjs. authenticatedPage() visits /healthz to avoid passkey autofill. The ordinary setup path does not open the app before browser.close(); app navigation is inside optional screenshot/focused blocks. attack.py:1651 says the browser completed first-open System setup (#507), then keeps this expectation: auto_scheme == {mode: system}. The live GET returns null, producing: ``` appearance Auto default: first-open System choice was not retained: None ``` This fixture does not perform the User action that its assertion describes. I retained the expectation, per the owner rule; I did not replace it with null. Decide how the shared setup must complete first-open before this assertion. No production Appearance behavior changed in this continuation. Full run/log follows on #1122. This is a probe-precondition inconsistency, not evidence that an actual first-open User loses a saved choice.
Commenting is not possible because the repository is archived.
No labels
No milestone
No project
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/calternal-v0#1381
No description provided.