Live authorization matrices abort during fixture setup in full merge-round verification #957

Open
opened 2026-10-02 22:55:05 +00:00 by kayg · 0 comments
Owner

Found by the full real-server adversarial run in merge-round-7a Round 4 (#427). Both live authorization matrices stopped during fixture creation after Search recovery. Static classification passed (342 operations, 960 generated tools, 39 admin operations), but it is not live authorization coverage.

RuntimeError: fixture Upload create returned HTTP -1
RuntimeError: Admin denial App Password fixture api_read returned -1

XUser stopped in create_fixtures -> create_upload. The admin matrix stopped in create_admin_denial_passwords. No complete matrix summaries were produced. Determine whether failed Search recovery, server availability, or the fixture request timeout caused these failures. Preserve status-code expectations and run each matrix to a complete summary on a fresh server. The shared host was busy; this alone is not enough to claim that authorization passed.

Logs: artifacts/round4/adversarial.log in /home/kayg/Developer/calternal-wt/merge-round-7a. This is a verification gap, not evidence of an authorization hole. It blocks a positive deploy-readiness verdict.

Found by the full real-server adversarial run in merge-round-7a Round 4 (#427). Both live authorization matrices stopped during fixture creation after Search recovery. Static classification passed (342 operations, 960 generated tools, 39 admin operations), but it is not live authorization coverage. ``` RuntimeError: fixture Upload create returned HTTP -1 RuntimeError: Admin denial App Password fixture api_read returned -1 ``` XUser stopped in create_fixtures -> create_upload. The admin matrix stopped in create_admin_denial_passwords. No complete matrix summaries were produced. Determine whether failed Search recovery, server availability, or the fixture request timeout caused these failures. Preserve status-code expectations and run each matrix to a complete summary on a fresh server. The shared host was busy; this alone is not enough to claim that authorization passed. Logs: artifacts/round4/adversarial.log in /home/kayg/Developer/calternal-wt/merge-round-7a. This is a verification gap, not evidence of an authorization hole. It blocks a positive deploy-readiness verdict.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/calternal#957
No description provided.