{ "study": "recovery-vault-offline-mechanism-v2", "executor": { "version": "1.20.4", "platform": "windows_amd64", "download": "https://releases.hashicorp.com/vault/1.20.4/vault_1.20.4_windows_amd64.zip", "checksum_url": "https://releases.hashicorp.com/vault/1.20.4/vault_1.20.4_SHA256SUMS", "archive_sha256": "fcb09399aeb1e853d8d22a62043925644be07c39d50f05d55051f13430fcefeb", "executable_sha256": "10155411fc31ad0143fc2472cd9c151d65203e4eb3d3dc0205a905285769f851", "checksum_verified": true, "source_commit": "55bd8f18c6c84aa89fdede4850a622c57f03bd7e", "note": "Pinned reproduction version, not a latest-version claim. Official TLS download and checksum comparison; no independent signature verification." }, "registration_sha256": "c9b70fa82fcc017bdfa2a26d4418a46eb6f2f5d1d51c021bf065a6dcc286e5ee", "planned": 48, "attempted": 48, "model_calls": 0, "model_spending_usd": 0, "records": [ { "case": { "case_id": "r0-compromise-dependent-leave_active", "repetition": 0, "compromise": true, "topology": "dependent", "policy": "leave_active" }, "checkpoint_sha256": "5994d5662aea7ba5dd83b051c2ff7d953d56c89d3052fb7e7dfb1e189ac0996e", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049498703000000, "finished_ns": 1049498734000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049498734000000, "finished_ns": 1049498734000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049498734000000, "finished_ns": 1049498734000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049498734000000, "finished_ns": 1049498765000000, "checkpoint_sha256": "5994d5662aea7ba5dd83b051c2ff7d953d56c89d3052fb7e7dfb1e189ac0996e" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049498765000000, "finished_ns": 1049498765000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049498765000000, "finished_ns": 1049498781000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049498781000000, "finished_ns": 1049498781000000 }, { "index": 7, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049498781000000, "finished_ns": 1049498796000000, "checkpoint_sha256": "5994d5662aea7ba5dd83b051c2ff7d953d56c89d3052fb7e7dfb1e189ac0996e" }, { "index": 8, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049498796000000, "finished_ns": 1049498812000000 }, { "index": 9, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049498812000000, "finished_ns": 1049498828000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 47.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-dependent-revoke_tree", "repetition": 0, "compromise": true, "topology": "dependent", "policy": "revoke_tree" }, "checkpoint_sha256": "1adcbc266dca050ada471abaccdd5edfaf7c8ebf598ef592775cbf20651af5eb", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049498828000000, "finished_ns": 1049498843000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049498843000000, "finished_ns": 1049498859000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049498859000000, "finished_ns": 1049498859000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049498859000000, "finished_ns": 1049498859000000, "checkpoint_sha256": "1adcbc266dca050ada471abaccdd5edfaf7c8ebf598ef592775cbf20651af5eb" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049498859000000, "finished_ns": 1049498890000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049498890000000, "finished_ns": 1049498906000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049498906000000, "finished_ns": 1049498906000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049498906000000, "finished_ns": 1049498906000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049498906000000, "finished_ns": 1049498937000000 }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049498937000000, "finished_ns": 1049498953000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049498953000000, "finished_ns": 1049498968000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 62.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-dependent-revoke_parent_only", "repetition": 0, "compromise": true, "topology": "dependent", "policy": "revoke_parent_only" }, "checkpoint_sha256": "244b475675e1a269b23641e58299bc29283dd4d47778ef29516a53026830b774", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049498968000000, "finished_ns": 1049498968000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049498968000000, "finished_ns": 1049498968000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049498968000000, "finished_ns": 1049498984000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049498984000000, "finished_ns": 1049498984000000, "checkpoint_sha256": "244b475675e1a269b23641e58299bc29283dd4d47778ef29516a53026830b774" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049498984000000, "finished_ns": 1049499000000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499000000000, "finished_ns": 1049499015000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499015000000, "finished_ns": 1049499031000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 204, "started_ns": 1049499031000000, "finished_ns": 1049499031000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049499031000000, "finished_ns": 1049499046000000, "checkpoint_sha256": "244b475675e1a269b23641e58299bc29283dd4d47778ef29516a53026830b774" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499046000000, "finished_ns": 1049499046000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499046000000, "finished_ns": 1049499062000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-dependent-handoff_then_revoke", "repetition": 0, "compromise": true, "topology": "dependent", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "55253c67a60d14cbd19ab2b49f9914cb10975c17e4b27c2d4a500401f8ce7a27", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499062000000, "finished_ns": 1049499078000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499078000000, "finished_ns": 1049499078000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499078000000, "finished_ns": 1049499093000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499093000000, "finished_ns": 1049499093000000, "checkpoint_sha256": "55253c67a60d14cbd19ab2b49f9914cb10975c17e4b27c2d4a500401f8ce7a27" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049499093000000, "finished_ns": 1049499093000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499093000000, "finished_ns": 1049499109000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499109000000, "finished_ns": 1049499125000000 }, { "index": 7, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049499125000000, "finished_ns": 1049499140000000, "checkpoint_sha256": "55253c67a60d14cbd19ab2b49f9914cb10975c17e4b27c2d4a500401f8ce7a27" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499140000000, "finished_ns": 1049499140000000, "created": "replacement", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 9, "phase": "intervention", "actor": "replacement", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499140000000, "finished_ns": 1049499156000000, "checkpoint_sha256": "55253c67a60d14cbd19ab2b49f9914cb10975c17e4b27c2d4a500401f8ce7a27" }, { "index": 10, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049499156000000, "finished_ns": 1049499171000000, "target": "parent" }, { "index": 11, "phase": "settle", "actor": "replacement", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049499171000000, "finished_ns": 1049499171000000, "checkpoint_sha256": "55253c67a60d14cbd19ab2b49f9914cb10975c17e4b27c2d4a500401f8ce7a27" }, { "index": 12, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499171000000, "finished_ns": 1049499171000000 }, { "index": 13, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499171000000, "finished_ns": 1049499187000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 62.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-independent-leave_active", "repetition": 0, "compromise": true, "topology": "independent", "policy": "leave_active" }, "checkpoint_sha256": "449d2891b1e8d9ec538329ee38759fe2eda985794da2f2e08f20cdb18ab4b0cd", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499187000000, "finished_ns": 1049499187000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499187000000, "finished_ns": 1049499203000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499203000000, "finished_ns": 1049499218000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499218000000, "finished_ns": 1049499218000000, "checkpoint_sha256": "449d2891b1e8d9ec538329ee38759fe2eda985794da2f2e08f20cdb18ab4b0cd" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049499218000000, "finished_ns": 1049499218000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499218000000, "finished_ns": 1049499234000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499234000000, "finished_ns": 1049499234000000 }, { "index": 7, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049499234000000, "finished_ns": 1049499250000000, "checkpoint_sha256": "449d2891b1e8d9ec538329ee38759fe2eda985794da2f2e08f20cdb18ab4b0cd" }, { "index": 8, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499250000000, "finished_ns": 1049499250000000 }, { "index": 9, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499250000000, "finished_ns": 1049499250000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 16.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-independent-revoke_tree", "repetition": 0, "compromise": true, "topology": "independent", "policy": "revoke_tree" }, "checkpoint_sha256": "ec9c941b319dfcfdb64f7999063b5f9d2104ff2b021263f63ba94d130347bdee", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499250000000, "finished_ns": 1049499265000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499265000000, "finished_ns": 1049499265000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499265000000, "finished_ns": 1049499281000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499281000000, "finished_ns": 1049499296000000, "checkpoint_sha256": "ec9c941b319dfcfdb64f7999063b5f9d2104ff2b021263f63ba94d130347bdee" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049499296000000, "finished_ns": 1049499296000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499296000000, "finished_ns": 1049499312000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499312000000, "finished_ns": 1049499328000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049499328000000, "finished_ns": 1049499343000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049499343000000, "finished_ns": 1049499343000000, "checkpoint_sha256": "ec9c941b319dfcfdb64f7999063b5f9d2104ff2b021263f63ba94d130347bdee" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499343000000, "finished_ns": 1049499343000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499343000000, "finished_ns": 1049499359000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-independent-revoke_parent_only", "repetition": 0, "compromise": true, "topology": "independent", "policy": "revoke_parent_only" }, "checkpoint_sha256": "2c517de15b311762173e0ea163572e2ebe5e020ca51265c961d5e2f42d87d681", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499359000000, "finished_ns": 1049499375000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499375000000, "finished_ns": 1049499375000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499375000000, "finished_ns": 1049499390000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499390000000, "finished_ns": 1049499406000000, "checkpoint_sha256": "2c517de15b311762173e0ea163572e2ebe5e020ca51265c961d5e2f42d87d681" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049499406000000, "finished_ns": 1049499421000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499421000000, "finished_ns": 1049499437000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499437000000, "finished_ns": 1049499453000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 204, "started_ns": 1049499453000000, "finished_ns": 1049499468000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049499468000000, "finished_ns": 1049499468000000, "checkpoint_sha256": "2c517de15b311762173e0ea163572e2ebe5e020ca51265c961d5e2f42d87d681" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499468000000, "finished_ns": 1049499468000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499468000000, "finished_ns": 1049499500000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 47.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-independent-handoff_then_revoke", "repetition": 0, "compromise": true, "topology": "independent", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "d062540e02c700b08b6d59c99c45898f506bf702d77c80a1f6910501dd651c8c", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499500000000, "finished_ns": 1049499500000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499500000000, "finished_ns": 1049499500000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499500000000, "finished_ns": 1049499515000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499515000000, "finished_ns": 1049499515000000, "checkpoint_sha256": "d062540e02c700b08b6d59c99c45898f506bf702d77c80a1f6910501dd651c8c" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049499515000000, "finished_ns": 1049499515000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499515000000, "finished_ns": 1049499531000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499531000000, "finished_ns": 1049499546000000 }, { "index": 7, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049499546000000, "finished_ns": 1049499562000000, "checkpoint_sha256": "d062540e02c700b08b6d59c99c45898f506bf702d77c80a1f6910501dd651c8c" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499562000000, "finished_ns": 1049499562000000, "created": "replacement", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 9, "phase": "intervention", "actor": "replacement", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499562000000, "finished_ns": 1049499562000000, "checkpoint_sha256": "d062540e02c700b08b6d59c99c45898f506bf702d77c80a1f6910501dd651c8c" }, { "index": 10, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049499562000000, "finished_ns": 1049499578000000, "target": "parent" }, { "index": 11, "phase": "settle", "actor": "replacement", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049499578000000, "finished_ns": 1049499593000000, "checkpoint_sha256": "d062540e02c700b08b6d59c99c45898f506bf702d77c80a1f6910501dd651c8c" }, { "index": 12, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499593000000, "finished_ns": 1049499609000000 }, { "index": 13, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499609000000, "finished_ns": 1049499625000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 79.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-already_lost-leave_active", "repetition": 0, "compromise": true, "topology": "already_lost", "policy": "leave_active" }, "checkpoint_sha256": "17b760833c251466d04360b599dba708fb61ecc45e31f9c327903bb41d019b26", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499625000000, "finished_ns": 1049499625000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499625000000, "finished_ns": 1049499625000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499625000000, "finished_ns": 1049499625000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499625000000, "finished_ns": 1049499656000000, "checkpoint_sha256": "17b760833c251466d04360b599dba708fb61ecc45e31f9c327903bb41d019b26" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049499656000000, "finished_ns": 1049499656000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499656000000, "finished_ns": 1049499671000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499671000000, "finished_ns": 1049499687000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049499687000000, "finished_ns": 1049499703000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049499703000000, "finished_ns": 1049499703000000 }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499703000000, "finished_ns": 1049499703000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499703000000, "finished_ns": 1049499703000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 0.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-already_lost-revoke_tree", "repetition": 0, "compromise": true, "topology": "already_lost", "policy": "revoke_tree" }, "checkpoint_sha256": "2739b8ad02268acfe9c451a0d1ab6d490dd397f6da64186bb9e8068b7aef2edf", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499703000000, "finished_ns": 1049499734000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499734000000, "finished_ns": 1049499734000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499734000000, "finished_ns": 1049499734000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499734000000, "finished_ns": 1049499765000000, "checkpoint_sha256": "2739b8ad02268acfe9c451a0d1ab6d490dd397f6da64186bb9e8068b7aef2edf" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049499765000000, "finished_ns": 1049499765000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499765000000, "finished_ns": 1049499781000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499781000000, "finished_ns": 1049499781000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049499781000000, "finished_ns": 1049499796000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049499796000000, "finished_ns": 1049499812000000, "target": "parent" }, { "index": 9, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049499812000000, "finished_ns": 1049499812000000 }, { "index": 10, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499812000000, "finished_ns": 1049499828000000 }, { "index": 11, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499828000000, "finished_ns": 1049499828000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 32.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-already_lost-revoke_parent_only", "repetition": 0, "compromise": true, "topology": "already_lost", "policy": "revoke_parent_only" }, "checkpoint_sha256": "8ed71646cf58abf0bdde5b0f0cd1fbc490086cb26d7a83da1b65366676bf8305", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499828000000, "finished_ns": 1049499843000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499843000000, "finished_ns": 1049499859000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499859000000, "finished_ns": 1049499859000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499859000000, "finished_ns": 1049499875000000, "checkpoint_sha256": "8ed71646cf58abf0bdde5b0f0cd1fbc490086cb26d7a83da1b65366676bf8305" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049499875000000, "finished_ns": 1049499890000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499890000000, "finished_ns": 1049499906000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499906000000, "finished_ns": 1049499921000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049499921000000, "finished_ns": 1049499921000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 400, "started_ns": 1049499921000000, "finished_ns": 1049499921000000, "target": "parent", "documented_error": "token to revoke not found" }, { "index": 9, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049499921000000, "finished_ns": 1049499937000000 }, { "index": 10, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499937000000, "finished_ns": 1049499953000000 }, { "index": 11, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049499953000000, "finished_ns": 1049499968000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 47.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-compromise-already_lost-handoff_then_revoke", "repetition": 0, "compromise": true, "topology": "already_lost", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "23ed9a2e5f8a9415339cc6d394a7eef9ce5c34188858b30242d813f9c18d9adb", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499968000000, "finished_ns": 1049499968000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499968000000, "finished_ns": 1049499984000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049499984000000, "finished_ns": 1049499984000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049499984000000, "finished_ns": 1049499984000000, "checkpoint_sha256": "23ed9a2e5f8a9415339cc6d394a7eef9ce5c34188858b30242d813f9c18d9adb" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049499984000000, "finished_ns": 1049499984000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049499984000000, "finished_ns": 1049500000000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500000000000, "finished_ns": 1049500000000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049500000000000, "finished_ns": 1049500015000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049500015000000, "finished_ns": 1049500015000000 }, { "index": 9, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049500015000000, "finished_ns": 1049500015000000, "target": "parent" }, { "index": 10, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049500015000000, "finished_ns": 1049500031000000 }, { "index": 11, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500031000000, "finished_ns": 1049500046000000 }, { "index": 12, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500046000000, "finished_ns": 1049500062000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 47.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-dependent-leave_active", "repetition": 0, "compromise": false, "topology": "dependent", "policy": "leave_active" }, "checkpoint_sha256": "54be35cfc5b7acd690363f02fa2a10ec142b4546a60ceb3566a940fa4a76655c", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500062000000, "finished_ns": 1049500078000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500078000000, "finished_ns": 1049500078000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500078000000, "finished_ns": 1049500093000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500093000000, "finished_ns": 1049500109000000, "checkpoint_sha256": "54be35cfc5b7acd690363f02fa2a10ec142b4546a60ceb3566a940fa4a76655c" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049500109000000, "finished_ns": 1049500125000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500125000000, "finished_ns": 1049500125000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500125000000, "finished_ns": 1049500140000000 }, { "index": 7, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049500140000000, "finished_ns": 1049500156000000, "checkpoint_sha256": "54be35cfc5b7acd690363f02fa2a10ec142b4546a60ceb3566a940fa4a76655c" }, { "index": 8, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500156000000, "finished_ns": 1049500171000000 }, { "index": 9, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500171000000, "finished_ns": 1049500171000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-dependent-revoke_tree", "repetition": 0, "compromise": false, "topology": "dependent", "policy": "revoke_tree" }, "checkpoint_sha256": "c813a2f04900972e641aa8ad2410d6da6d352d1593f99dfe3cdaa944384df213", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500171000000, "finished_ns": 1049500187000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500187000000, "finished_ns": 1049500187000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500187000000, "finished_ns": 1049500203000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500203000000, "finished_ns": 1049500203000000, "checkpoint_sha256": "c813a2f04900972e641aa8ad2410d6da6d352d1593f99dfe3cdaa944384df213" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049500203000000, "finished_ns": 1049500203000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500203000000, "finished_ns": 1049500234000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500234000000, "finished_ns": 1049500234000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049500234000000, "finished_ns": 1049500250000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049500250000000, "finished_ns": 1049500265000000 }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500265000000, "finished_ns": 1049500281000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500281000000, "finished_ns": 1049500281000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 47.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-dependent-revoke_parent_only", "repetition": 0, "compromise": false, "topology": "dependent", "policy": "revoke_parent_only" }, "checkpoint_sha256": "08fb15c0748e8a377624bfc3fec14e2ebdb896038422a353e0d3b70bcc3e3c19", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500281000000, "finished_ns": 1049500281000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500281000000, "finished_ns": 1049500281000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500281000000, "finished_ns": 1049500281000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500281000000, "finished_ns": 1049500281000000, "checkpoint_sha256": "08fb15c0748e8a377624bfc3fec14e2ebdb896038422a353e0d3b70bcc3e3c19" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049500281000000, "finished_ns": 1049500281000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500281000000, "finished_ns": 1049500281000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500281000000, "finished_ns": 1049500281000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 204, "started_ns": 1049500281000000, "finished_ns": 1049500312000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049500312000000, "finished_ns": 1049500312000000, "checkpoint_sha256": "08fb15c0748e8a377624bfc3fec14e2ebdb896038422a353e0d3b70bcc3e3c19" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500312000000, "finished_ns": 1049500328000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500328000000, "finished_ns": 1049500343000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 62.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-dependent-handoff_then_revoke", "repetition": 0, "compromise": false, "topology": "dependent", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "48173180714f2db4354c47b1a027ad78a044937cb62cc73046257e4f2eb09a81", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500343000000, "finished_ns": 1049500359000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500359000000, "finished_ns": 1049500375000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500375000000, "finished_ns": 1049500375000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500375000000, "finished_ns": 1049500375000000, "checkpoint_sha256": "48173180714f2db4354c47b1a027ad78a044937cb62cc73046257e4f2eb09a81" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049500375000000, "finished_ns": 1049500375000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500375000000, "finished_ns": 1049500406000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500406000000, "finished_ns": 1049500421000000 }, { "index": 7, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049500421000000, "finished_ns": 1049500437000000, "checkpoint_sha256": "48173180714f2db4354c47b1a027ad78a044937cb62cc73046257e4f2eb09a81" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500437000000, "finished_ns": 1049500437000000, "created": "replacement", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 9, "phase": "intervention", "actor": "replacement", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500437000000, "finished_ns": 1049500453000000, "checkpoint_sha256": "48173180714f2db4354c47b1a027ad78a044937cb62cc73046257e4f2eb09a81" }, { "index": 10, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049500453000000, "finished_ns": 1049500468000000, "target": "parent" }, { "index": 11, "phase": "settle", "actor": "replacement", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049500468000000, "finished_ns": 1049500484000000, "checkpoint_sha256": "48173180714f2db4354c47b1a027ad78a044937cb62cc73046257e4f2eb09a81" }, { "index": 12, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500484000000, "finished_ns": 1049500484000000 }, { "index": 13, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500484000000, "finished_ns": 1049500484000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 63.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-independent-leave_active", "repetition": 0, "compromise": false, "topology": "independent", "policy": "leave_active" }, "checkpoint_sha256": "570c85c96bd84dd7fc70bef9371fa7da16f761a39d82bd0c59f4b45343676107", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500484000000, "finished_ns": 1049500500000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500500000000, "finished_ns": 1049500515000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500515000000, "finished_ns": 1049500515000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500515000000, "finished_ns": 1049500531000000, "checkpoint_sha256": "570c85c96bd84dd7fc70bef9371fa7da16f761a39d82bd0c59f4b45343676107" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049500531000000, "finished_ns": 1049500531000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500531000000, "finished_ns": 1049500546000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500546000000, "finished_ns": 1049500546000000 }, { "index": 7, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049500546000000, "finished_ns": 1049500562000000, "checkpoint_sha256": "570c85c96bd84dd7fc70bef9371fa7da16f761a39d82bd0c59f4b45343676107" }, { "index": 8, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500562000000, "finished_ns": 1049500562000000 }, { "index": 9, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500562000000, "finished_ns": 1049500578000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 32.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-independent-revoke_tree", "repetition": 0, "compromise": false, "topology": "independent", "policy": "revoke_tree" }, "checkpoint_sha256": "1db9b418ab3fba8685d9b972bdb2dfc35fcbdc1ff78bd34aa7f7cccba567a37f", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500578000000, "finished_ns": 1049500578000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500578000000, "finished_ns": 1049500593000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500593000000, "finished_ns": 1049500593000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500593000000, "finished_ns": 1049500609000000, "checkpoint_sha256": "1db9b418ab3fba8685d9b972bdb2dfc35fcbdc1ff78bd34aa7f7cccba567a37f" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049500609000000, "finished_ns": 1049500609000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500609000000, "finished_ns": 1049500625000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500625000000, "finished_ns": 1049500640000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049500640000000, "finished_ns": 1049500656000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049500656000000, "finished_ns": 1049500656000000, "checkpoint_sha256": "1db9b418ab3fba8685d9b972bdb2dfc35fcbdc1ff78bd34aa7f7cccba567a37f" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500656000000, "finished_ns": 1049500671000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500671000000, "finished_ns": 1049500671000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-independent-revoke_parent_only", "repetition": 0, "compromise": false, "topology": "independent", "policy": "revoke_parent_only" }, "checkpoint_sha256": "d41e4b1cce80ba32444c1079d142d7c54a483e8b44af2801cf4f9915ba292485", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500671000000, "finished_ns": 1049500687000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500687000000, "finished_ns": 1049500687000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500687000000, "finished_ns": 1049500703000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500703000000, "finished_ns": 1049500703000000, "checkpoint_sha256": "d41e4b1cce80ba32444c1079d142d7c54a483e8b44af2801cf4f9915ba292485" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049500703000000, "finished_ns": 1049500718000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500718000000, "finished_ns": 1049500734000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500734000000, "finished_ns": 1049500750000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 204, "started_ns": 1049500750000000, "finished_ns": 1049500765000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049500765000000, "finished_ns": 1049500781000000, "checkpoint_sha256": "d41e4b1cce80ba32444c1079d142d7c54a483e8b44af2801cf4f9915ba292485" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500781000000, "finished_ns": 1049500781000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500781000000, "finished_ns": 1049500781000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-independent-handoff_then_revoke", "repetition": 0, "compromise": false, "topology": "independent", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "af80242fc645f23efa21697fe8c1f040ea0421a642a3e6715cc4e01116e07b21", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500781000000, "finished_ns": 1049500796000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500796000000, "finished_ns": 1049500796000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500796000000, "finished_ns": 1049500796000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500796000000, "finished_ns": 1049500828000000, "checkpoint_sha256": "af80242fc645f23efa21697fe8c1f040ea0421a642a3e6715cc4e01116e07b21" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049500828000000, "finished_ns": 1049500828000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500828000000, "finished_ns": 1049500843000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049500843000000, "finished_ns": 1049500859000000 }, { "index": 7, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049500859000000, "finished_ns": 1049500859000000, "checkpoint_sha256": "af80242fc645f23efa21697fe8c1f040ea0421a642a3e6715cc4e01116e07b21" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500859000000, "finished_ns": 1049500875000000, "created": "replacement", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 9, "phase": "intervention", "actor": "replacement", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500875000000, "finished_ns": 1049500890000000, "checkpoint_sha256": "af80242fc645f23efa21697fe8c1f040ea0421a642a3e6715cc4e01116e07b21" }, { "index": 10, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049500890000000, "finished_ns": 1049500906000000, "target": "parent" }, { "index": 11, "phase": "settle", "actor": "replacement", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049500906000000, "finished_ns": 1049500921000000, "checkpoint_sha256": "af80242fc645f23efa21697fe8c1f040ea0421a642a3e6715cc4e01116e07b21" }, { "index": 12, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500921000000, "finished_ns": 1049500937000000 }, { "index": 13, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049500937000000, "finished_ns": 1049500953000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 94.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-already_lost-leave_active", "repetition": 0, "compromise": false, "topology": "already_lost", "policy": "leave_active" }, "checkpoint_sha256": "160f778285033609b75f2ca73932ddfcd2e119db75135df20e672ed148573cc8", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500953000000, "finished_ns": 1049500968000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500968000000, "finished_ns": 1049500968000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049500968000000, "finished_ns": 1049500984000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049500984000000, "finished_ns": 1049500984000000, "checkpoint_sha256": "160f778285033609b75f2ca73932ddfcd2e119db75135df20e672ed148573cc8" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049500984000000, "finished_ns": 1049501000000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501000000000, "finished_ns": 1049501000000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501000000000, "finished_ns": 1049501015000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049501015000000, "finished_ns": 1049501031000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049501031000000, "finished_ns": 1049501046000000 }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501046000000, "finished_ns": 1049501046000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501046000000, "finished_ns": 1049501046000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 15.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-already_lost-revoke_tree", "repetition": 0, "compromise": false, "topology": "already_lost", "policy": "revoke_tree" }, "checkpoint_sha256": "eb8b0fd87b01de75b185007d4f4c3cc5004f5dbfd93fde009b1289388ae73866", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501046000000, "finished_ns": 1049501062000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501062000000, "finished_ns": 1049501078000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501078000000, "finished_ns": 1049501078000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501078000000, "finished_ns": 1049501078000000, "checkpoint_sha256": "eb8b0fd87b01de75b185007d4f4c3cc5004f5dbfd93fde009b1289388ae73866" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049501078000000, "finished_ns": 1049501093000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501093000000, "finished_ns": 1049501109000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501109000000, "finished_ns": 1049501109000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049501109000000, "finished_ns": 1049501125000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049501125000000, "finished_ns": 1049501140000000, "target": "parent" }, { "index": 9, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049501156000000, "finished_ns": 1049501156000000 }, { "index": 10, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501156000000, "finished_ns": 1049501171000000 }, { "index": 11, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501171000000, "finished_ns": 1049501171000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 46.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-already_lost-revoke_parent_only", "repetition": 0, "compromise": false, "topology": "already_lost", "policy": "revoke_parent_only" }, "checkpoint_sha256": "18f7f9647668c308bafcc6f2deb3dfa8393ff0bcde48c79b08113f1e9efa9818", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501171000000, "finished_ns": 1049501171000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501171000000, "finished_ns": 1049501187000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501187000000, "finished_ns": 1049501203000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501203000000, "finished_ns": 1049501203000000, "checkpoint_sha256": "18f7f9647668c308bafcc6f2deb3dfa8393ff0bcde48c79b08113f1e9efa9818" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049501203000000, "finished_ns": 1049501203000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501203000000, "finished_ns": 1049501218000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501218000000, "finished_ns": 1049501234000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049501234000000, "finished_ns": 1049501234000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 400, "started_ns": 1049501234000000, "finished_ns": 1049501250000000, "target": "parent", "documented_error": "token to revoke not found" }, { "index": 9, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049501250000000, "finished_ns": 1049501250000000 }, { "index": 10, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501250000000, "finished_ns": 1049501250000000 }, { "index": 11, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501250000000, "finished_ns": 1049501265000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r0-false_alert-already_lost-handoff_then_revoke", "repetition": 0, "compromise": false, "topology": "already_lost", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "db4fc6527de81e91006b0d8a17e3ae88d3edfd5490df08f1d0d3702c1195c10a", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501265000000, "finished_ns": 1049501281000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501281000000, "finished_ns": 1049501281000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501281000000, "finished_ns": 1049501296000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501296000000, "finished_ns": 1049501312000000, "checkpoint_sha256": "db4fc6527de81e91006b0d8a17e3ae88d3edfd5490df08f1d0d3702c1195c10a" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049501312000000, "finished_ns": 1049501312000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501312000000, "finished_ns": 1049501328000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501328000000, "finished_ns": 1049501328000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049501328000000, "finished_ns": 1049501328000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049501328000000, "finished_ns": 1049501328000000 }, { "index": 9, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049501328000000, "finished_ns": 1049501343000000, "target": "parent" }, { "index": 10, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049501343000000, "finished_ns": 1049501359000000 }, { "index": 11, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501359000000, "finished_ns": 1049501375000000 }, { "index": 12, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501375000000, "finished_ns": 1049501375000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 47.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-dependent-leave_active", "repetition": 1, "compromise": true, "topology": "dependent", "policy": "leave_active" }, "checkpoint_sha256": "5dfdd41a511c0d5974fd5f756a8815fa7d713b504f5134317cb04db52dd2dfd1", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501375000000, "finished_ns": 1049501375000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501375000000, "finished_ns": 1049501390000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501390000000, "finished_ns": 1049501390000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501390000000, "finished_ns": 1049501406000000, "checkpoint_sha256": "5dfdd41a511c0d5974fd5f756a8815fa7d713b504f5134317cb04db52dd2dfd1" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049501406000000, "finished_ns": 1049501406000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501406000000, "finished_ns": 1049501421000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501421000000, "finished_ns": 1049501437000000 }, { "index": 7, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049501437000000, "finished_ns": 1049501453000000, "checkpoint_sha256": "5dfdd41a511c0d5974fd5f756a8815fa7d713b504f5134317cb04db52dd2dfd1" }, { "index": 8, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501453000000, "finished_ns": 1049501453000000 }, { "index": 9, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501453000000, "finished_ns": 1049501468000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-dependent-revoke_tree", "repetition": 1, "compromise": true, "topology": "dependent", "policy": "revoke_tree" }, "checkpoint_sha256": "cc3cc1b81dea8d956a0f8080be9739803b42bb96a55c06935dcc12fec8f89e20", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501468000000, "finished_ns": 1049501468000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501468000000, "finished_ns": 1049501468000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501468000000, "finished_ns": 1049501500000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501500000000, "finished_ns": 1049501500000000, "checkpoint_sha256": "cc3cc1b81dea8d956a0f8080be9739803b42bb96a55c06935dcc12fec8f89e20" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049501500000000, "finished_ns": 1049501515000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501515000000, "finished_ns": 1049501531000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501531000000, "finished_ns": 1049501531000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049501531000000, "finished_ns": 1049501531000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049501531000000, "finished_ns": 1049501531000000 }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501531000000, "finished_ns": 1049501562000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501562000000, "finished_ns": 1049501578000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 47.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-dependent-revoke_parent_only", "repetition": 1, "compromise": true, "topology": "dependent", "policy": "revoke_parent_only" }, "checkpoint_sha256": "bc4ff9e52a3d74bb5229a7defa278eec127d32a7aa2f1d8937819eacf059b840", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501578000000, "finished_ns": 1049501593000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501593000000, "finished_ns": 1049501609000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501609000000, "finished_ns": 1049501609000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501609000000, "finished_ns": 1049501625000000, "checkpoint_sha256": "bc4ff9e52a3d74bb5229a7defa278eec127d32a7aa2f1d8937819eacf059b840" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049501625000000, "finished_ns": 1049501625000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501625000000, "finished_ns": 1049501640000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501640000000, "finished_ns": 1049501656000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 204, "started_ns": 1049501656000000, "finished_ns": 1049501671000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049501671000000, "finished_ns": 1049501671000000, "checkpoint_sha256": "bc4ff9e52a3d74bb5229a7defa278eec127d32a7aa2f1d8937819eacf059b840" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501671000000, "finished_ns": 1049501687000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501687000000, "finished_ns": 1049501687000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-dependent-handoff_then_revoke", "repetition": 1, "compromise": true, "topology": "dependent", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "4f7cfdc82997e381acd03338efcf564b5bbf565cc87431f07f3e67fcb9d7cfae", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501687000000, "finished_ns": 1049501703000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501703000000, "finished_ns": 1049501703000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501703000000, "finished_ns": 1049501703000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501703000000, "finished_ns": 1049501703000000, "checkpoint_sha256": "4f7cfdc82997e381acd03338efcf564b5bbf565cc87431f07f3e67fcb9d7cfae" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049501703000000, "finished_ns": 1049501703000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501703000000, "finished_ns": 1049501703000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501703000000, "finished_ns": 1049501703000000 }, { "index": 7, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049501703000000, "finished_ns": 1049501734000000, "checkpoint_sha256": "4f7cfdc82997e381acd03338efcf564b5bbf565cc87431f07f3e67fcb9d7cfae" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501734000000, "finished_ns": 1049501734000000, "created": "replacement", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 9, "phase": "intervention", "actor": "replacement", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501734000000, "finished_ns": 1049501734000000, "checkpoint_sha256": "4f7cfdc82997e381acd03338efcf564b5bbf565cc87431f07f3e67fcb9d7cfae" }, { "index": 10, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049501734000000, "finished_ns": 1049501750000000, "target": "parent" }, { "index": 11, "phase": "settle", "actor": "replacement", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049501750000000, "finished_ns": 1049501765000000, "checkpoint_sha256": "4f7cfdc82997e381acd03338efcf564b5bbf565cc87431f07f3e67fcb9d7cfae" }, { "index": 12, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501765000000, "finished_ns": 1049501765000000 }, { "index": 13, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501765000000, "finished_ns": 1049501781000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 78.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-independent-leave_active", "repetition": 1, "compromise": true, "topology": "independent", "policy": "leave_active" }, "checkpoint_sha256": "c735abe92d90204b1631a34aada3e312bf6723a793b5e4e29b160bafb248b049", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501781000000, "finished_ns": 1049501781000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501781000000, "finished_ns": 1049501796000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501796000000, "finished_ns": 1049501796000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501796000000, "finished_ns": 1049501796000000, "checkpoint_sha256": "c735abe92d90204b1631a34aada3e312bf6723a793b5e4e29b160bafb248b049" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049501796000000, "finished_ns": 1049501828000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501828000000, "finished_ns": 1049501843000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501843000000, "finished_ns": 1049501843000000 }, { "index": 7, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049501843000000, "finished_ns": 1049501843000000, "checkpoint_sha256": "c735abe92d90204b1631a34aada3e312bf6723a793b5e4e29b160bafb248b049" }, { "index": 8, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501843000000, "finished_ns": 1049501843000000 }, { "index": 9, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501843000000, "finished_ns": 1049501875000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 32.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-independent-revoke_tree", "repetition": 1, "compromise": true, "topology": "independent", "policy": "revoke_tree" }, "checkpoint_sha256": "cdf9ea86f4648e7fb3d038fc48871c6dd10cb310d1072642ae351e587fcbc93a", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501875000000, "finished_ns": 1049501875000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501875000000, "finished_ns": 1049501875000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501875000000, "finished_ns": 1049501906000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501906000000, "finished_ns": 1049501906000000, "checkpoint_sha256": "cdf9ea86f4648e7fb3d038fc48871c6dd10cb310d1072642ae351e587fcbc93a" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049501906000000, "finished_ns": 1049501906000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501906000000, "finished_ns": 1049501906000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049501906000000, "finished_ns": 1049501906000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049501906000000, "finished_ns": 1049501937000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049501937000000, "finished_ns": 1049501937000000, "checkpoint_sha256": "cdf9ea86f4648e7fb3d038fc48871c6dd10cb310d1072642ae351e587fcbc93a" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501937000000, "finished_ns": 1049501937000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049501937000000, "finished_ns": 1049501937000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-independent-revoke_parent_only", "repetition": 1, "compromise": true, "topology": "independent", "policy": "revoke_parent_only" }, "checkpoint_sha256": "54be224b861dbbc286e2eefefe36a9a0c6eb06d15c0e2615dd39c0fcef5e939a", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501937000000, "finished_ns": 1049501953000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501953000000, "finished_ns": 1049501968000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049501968000000, "finished_ns": 1049501984000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049501984000000, "finished_ns": 1049502000000000, "checkpoint_sha256": "54be224b861dbbc286e2eefefe36a9a0c6eb06d15c0e2615dd39c0fcef5e939a" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049502000000000, "finished_ns": 1049502015000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502015000000, "finished_ns": 1049502031000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502031000000, "finished_ns": 1049502046000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 204, "started_ns": 1049502046000000, "finished_ns": 1049502046000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049502046000000, "finished_ns": 1049502062000000, "checkpoint_sha256": "54be224b861dbbc286e2eefefe36a9a0c6eb06d15c0e2615dd39c0fcef5e939a" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502062000000, "finished_ns": 1049502078000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502078000000, "finished_ns": 1049502078000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 32.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-independent-handoff_then_revoke", "repetition": 1, "compromise": true, "topology": "independent", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "a993be35a8b72fed79c6e28ffbdd270a9512a1396bbcec8278df7e414b2a16ad", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502078000000, "finished_ns": 1049502078000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502078000000, "finished_ns": 1049502093000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502093000000, "finished_ns": 1049502109000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502109000000, "finished_ns": 1049502109000000, "checkpoint_sha256": "a993be35a8b72fed79c6e28ffbdd270a9512a1396bbcec8278df7e414b2a16ad" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049502109000000, "finished_ns": 1049502109000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502109000000, "finished_ns": 1049502109000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502109000000, "finished_ns": 1049502125000000 }, { "index": 7, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049502125000000, "finished_ns": 1049502140000000, "checkpoint_sha256": "a993be35a8b72fed79c6e28ffbdd270a9512a1396bbcec8278df7e414b2a16ad" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502140000000, "finished_ns": 1049502140000000, "created": "replacement", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 9, "phase": "intervention", "actor": "replacement", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502140000000, "finished_ns": 1049502156000000, "checkpoint_sha256": "a993be35a8b72fed79c6e28ffbdd270a9512a1396bbcec8278df7e414b2a16ad" }, { "index": 10, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049502156000000, "finished_ns": 1049502171000000, "target": "parent" }, { "index": 11, "phase": "settle", "actor": "replacement", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049502171000000, "finished_ns": 1049502171000000, "checkpoint_sha256": "a993be35a8b72fed79c6e28ffbdd270a9512a1396bbcec8278df7e414b2a16ad" }, { "index": 12, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502171000000, "finished_ns": 1049502171000000 }, { "index": 13, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502171000000, "finished_ns": 1049502187000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 62.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-already_lost-leave_active", "repetition": 1, "compromise": true, "topology": "already_lost", "policy": "leave_active" }, "checkpoint_sha256": "62f92abfdb3962dedc548b2c36ca16df1a405f2b76a0968cf67675aa1fc6246b", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502187000000, "finished_ns": 1049502187000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502187000000, "finished_ns": 1049502203000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502203000000, "finished_ns": 1049502203000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502203000000, "finished_ns": 1049502218000000, "checkpoint_sha256": "62f92abfdb3962dedc548b2c36ca16df1a405f2b76a0968cf67675aa1fc6246b" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049502218000000, "finished_ns": 1049502234000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502234000000, "finished_ns": 1049502250000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502250000000, "finished_ns": 1049502250000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049502250000000, "finished_ns": 1049502250000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049502250000000, "finished_ns": 1049502265000000 }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502265000000, "finished_ns": 1049502265000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502265000000, "finished_ns": 1049502281000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-already_lost-revoke_tree", "repetition": 1, "compromise": true, "topology": "already_lost", "policy": "revoke_tree" }, "checkpoint_sha256": "0a010be5c28faed0e65bcd5f39b2191df4d07aec23dab091c8c9c13c10573d33", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502281000000, "finished_ns": 1049502296000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502296000000, "finished_ns": 1049502296000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502296000000, "finished_ns": 1049502312000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502312000000, "finished_ns": 1049502312000000, "checkpoint_sha256": "0a010be5c28faed0e65bcd5f39b2191df4d07aec23dab091c8c9c13c10573d33" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049502312000000, "finished_ns": 1049502328000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502328000000, "finished_ns": 1049502328000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502328000000, "finished_ns": 1049502328000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049502328000000, "finished_ns": 1049502343000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049502343000000, "finished_ns": 1049502343000000, "target": "parent" }, { "index": 9, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049502343000000, "finished_ns": 1049502343000000 }, { "index": 10, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502343000000, "finished_ns": 1049502359000000 }, { "index": 11, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502359000000, "finished_ns": 1049502359000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 16.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-already_lost-revoke_parent_only", "repetition": 1, "compromise": true, "topology": "already_lost", "policy": "revoke_parent_only" }, "checkpoint_sha256": "2ea0a66b081b7f2960210e4be46b580131ceb8f94fa950f1a2f1caedab2838af", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502359000000, "finished_ns": 1049502375000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502375000000, "finished_ns": 1049502390000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502390000000, "finished_ns": 1049502406000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502406000000, "finished_ns": 1049502406000000, "checkpoint_sha256": "2ea0a66b081b7f2960210e4be46b580131ceb8f94fa950f1a2f1caedab2838af" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049502406000000, "finished_ns": 1049502421000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502421000000, "finished_ns": 1049502437000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502437000000, "finished_ns": 1049502453000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049502453000000, "finished_ns": 1049502468000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 400, "started_ns": 1049502468000000, "finished_ns": 1049502468000000, "target": "parent", "documented_error": "token to revoke not found" }, { "index": 9, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049502468000000, "finished_ns": 1049502468000000 }, { "index": 10, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502468000000, "finished_ns": 1049502484000000 }, { "index": 11, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502484000000, "finished_ns": 1049502500000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 32.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-compromise-already_lost-handoff_then_revoke", "repetition": 1, "compromise": true, "topology": "already_lost", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "307408119b81a0369e6d6e167ffc617867ab92aeefe23d5307d4dc317f839a3b", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502500000000, "finished_ns": 1049502500000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502500000000, "finished_ns": 1049502515000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502515000000, "finished_ns": 1049502531000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502531000000, "finished_ns": 1049502546000000, "checkpoint_sha256": "307408119b81a0369e6d6e167ffc617867ab92aeefe23d5307d4dc317f839a3b" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049502546000000, "finished_ns": 1049502546000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502546000000, "finished_ns": 1049502562000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502562000000, "finished_ns": 1049502578000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049502578000000, "finished_ns": 1049502578000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049502578000000, "finished_ns": 1049502578000000 }, { "index": 9, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049502578000000, "finished_ns": 1049502593000000, "target": "parent" }, { "index": 10, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049502593000000, "finished_ns": 1049502593000000 }, { "index": 11, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502593000000, "finished_ns": 1049502593000000 }, { "index": 12, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502593000000, "finished_ns": 1049502609000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-dependent-leave_active", "repetition": 1, "compromise": false, "topology": "dependent", "policy": "leave_active" }, "checkpoint_sha256": "d687a1596f3664fadcabdcc9f68eef0c41ad5427718f0f082e473808b2888963", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502609000000, "finished_ns": 1049502609000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502609000000, "finished_ns": 1049502609000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502609000000, "finished_ns": 1049502609000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502609000000, "finished_ns": 1049502640000000, "checkpoint_sha256": "d687a1596f3664fadcabdcc9f68eef0c41ad5427718f0f082e473808b2888963" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049502640000000, "finished_ns": 1049502640000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502640000000, "finished_ns": 1049502640000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502640000000, "finished_ns": 1049502656000000 }, { "index": 7, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049502656000000, "finished_ns": 1049502656000000, "checkpoint_sha256": "d687a1596f3664fadcabdcc9f68eef0c41ad5427718f0f082e473808b2888963" }, { "index": 8, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502656000000, "finished_ns": 1049502671000000 }, { "index": 9, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502671000000, "finished_ns": 1049502687000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-dependent-revoke_tree", "repetition": 1, "compromise": false, "topology": "dependent", "policy": "revoke_tree" }, "checkpoint_sha256": "671d2308411d928d24ffd9b089367ba3518689e0371316096a1379b9ae070e22", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502687000000, "finished_ns": 1049502687000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502687000000, "finished_ns": 1049502703000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502703000000, "finished_ns": 1049502718000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502718000000, "finished_ns": 1049502718000000, "checkpoint_sha256": "671d2308411d928d24ffd9b089367ba3518689e0371316096a1379b9ae070e22" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049502718000000, "finished_ns": 1049502718000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502718000000, "finished_ns": 1049502718000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502718000000, "finished_ns": 1049502750000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049502750000000, "finished_ns": 1049502765000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049502765000000, "finished_ns": 1049502781000000 }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502781000000, "finished_ns": 1049502781000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502781000000, "finished_ns": 1049502796000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 46.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-dependent-revoke_parent_only", "repetition": 1, "compromise": false, "topology": "dependent", "policy": "revoke_parent_only" }, "checkpoint_sha256": "79e6fef2b520db4e199e45fb7a2594787ed4208ce63aebe4a6a9ef29c7981642", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502796000000, "finished_ns": 1049502796000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502796000000, "finished_ns": 1049502796000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502796000000, "finished_ns": 1049502796000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502796000000, "finished_ns": 1049502812000000, "checkpoint_sha256": "79e6fef2b520db4e199e45fb7a2594787ed4208ce63aebe4a6a9ef29c7981642" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049502828000000, "finished_ns": 1049502828000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502828000000, "finished_ns": 1049502828000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502828000000, "finished_ns": 1049502843000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 204, "started_ns": 1049502843000000, "finished_ns": 1049502859000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049502859000000, "finished_ns": 1049502859000000, "checkpoint_sha256": "79e6fef2b520db4e199e45fb7a2594787ed4208ce63aebe4a6a9ef29c7981642" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049502859000000, "finished_ns": 1049502875000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502875000000, "finished_ns": 1049502875000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 32.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-dependent-handoff_then_revoke", "repetition": 1, "compromise": false, "topology": "dependent", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "a897f561d248352dabaf695f2c06e6d4c5955f230c34c862a5e6f61bebf5b508", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502875000000, "finished_ns": 1049502890000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502890000000, "finished_ns": 1049502906000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502906000000, "finished_ns": 1049502906000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502906000000, "finished_ns": 1049502921000000, "checkpoint_sha256": "a897f561d248352dabaf695f2c06e6d4c5955f230c34c862a5e6f61bebf5b508" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049502921000000, "finished_ns": 1049502937000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502937000000, "finished_ns": 1049502937000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049502937000000, "finished_ns": 1049502953000000 }, { "index": 7, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049502953000000, "finished_ns": 1049502968000000, "checkpoint_sha256": "a897f561d248352dabaf695f2c06e6d4c5955f230c34c862a5e6f61bebf5b508" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049502968000000, "finished_ns": 1049502968000000, "created": "replacement", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 9, "phase": "intervention", "actor": "replacement", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049502968000000, "finished_ns": 1049502984000000, "checkpoint_sha256": "a897f561d248352dabaf695f2c06e6d4c5955f230c34c862a5e6f61bebf5b508" }, { "index": 10, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049502984000000, "finished_ns": 1049502984000000, "target": "parent" }, { "index": 11, "phase": "settle", "actor": "replacement", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049502984000000, "finished_ns": 1049503000000000, "checkpoint_sha256": "a897f561d248352dabaf695f2c06e6d4c5955f230c34c862a5e6f61bebf5b508" }, { "index": 12, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503000000000, "finished_ns": 1049503015000000 }, { "index": 13, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503015000000, "finished_ns": 1049503031000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 78.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-independent-leave_active", "repetition": 1, "compromise": false, "topology": "independent", "policy": "leave_active" }, "checkpoint_sha256": "32631708ea3d928fab1e0ccba143042f5c8dd4363fed7ea4bb18d17cd395ddf9", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503031000000, "finished_ns": 1049503031000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503031000000, "finished_ns": 1049503046000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503046000000, "finished_ns": 1049503062000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049503062000000, "finished_ns": 1049503062000000, "checkpoint_sha256": "32631708ea3d928fab1e0ccba143042f5c8dd4363fed7ea4bb18d17cd395ddf9" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049503062000000, "finished_ns": 1049503078000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503078000000, "finished_ns": 1049503078000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503078000000, "finished_ns": 1049503078000000 }, { "index": 7, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049503078000000, "finished_ns": 1049503093000000, "checkpoint_sha256": "32631708ea3d928fab1e0ccba143042f5c8dd4363fed7ea4bb18d17cd395ddf9" }, { "index": 8, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503093000000, "finished_ns": 1049503109000000 }, { "index": 9, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503109000000, "finished_ns": 1049503109000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 31.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-independent-revoke_tree", "repetition": 1, "compromise": false, "topology": "independent", "policy": "revoke_tree" }, "checkpoint_sha256": "afdfbfbc3fabce6aba2de1eaf973300ecbb9975b97bc5c83a4836252f2a45c20", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503109000000, "finished_ns": 1049503109000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503109000000, "finished_ns": 1049503109000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503109000000, "finished_ns": 1049503109000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049503109000000, "finished_ns": 1049503125000000, "checkpoint_sha256": "afdfbfbc3fabce6aba2de1eaf973300ecbb9975b97bc5c83a4836252f2a45c20" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049503125000000, "finished_ns": 1049503125000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503125000000, "finished_ns": 1049503125000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503125000000, "finished_ns": 1049503125000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049503125000000, "finished_ns": 1049503125000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049503125000000, "finished_ns": 1049503125000000, "checkpoint_sha256": "afdfbfbc3fabce6aba2de1eaf973300ecbb9975b97bc5c83a4836252f2a45c20" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503125000000, "finished_ns": 1049503125000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503125000000, "finished_ns": 1049503140000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 15.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-independent-revoke_parent_only", "repetition": 1, "compromise": false, "topology": "independent", "policy": "revoke_parent_only" }, "checkpoint_sha256": "4ea0676681ad0db484bdcef953c38f1dd9f1fddcf5d8353e073b3d362c164e60", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503140000000, "finished_ns": 1049503140000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503140000000, "finished_ns": 1049503140000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503140000000, "finished_ns": 1049503156000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049503156000000, "finished_ns": 1049503171000000, "checkpoint_sha256": "4ea0676681ad0db484bdcef953c38f1dd9f1fddcf5d8353e073b3d362c164e60" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049503171000000, "finished_ns": 1049503187000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503187000000, "finished_ns": 1049503203000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503203000000, "finished_ns": 1049503218000000 }, { "index": 7, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 204, "started_ns": 1049503218000000, "finished_ns": 1049503234000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049503234000000, "finished_ns": 1049503234000000, "checkpoint_sha256": "4ea0676681ad0db484bdcef953c38f1dd9f1fddcf5d8353e073b3d362c164e60" }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503234000000, "finished_ns": 1049503250000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503250000000, "finished_ns": 1049503265000000 } ], "worker_completed": true, "old_tree_denied_at_settle": false, "intervention_duration_ms": 47.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-independent-handoff_then_revoke", "repetition": 1, "compromise": false, "topology": "independent", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "2304734e7bb58908dc5d8d9b988046fcf10f0aad5f41e8156ec6ad19a13c543c", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503265000000, "finished_ns": 1049503281000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503281000000, "finished_ns": 1049503281000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503281000000, "finished_ns": 1049503296000000, "created": "worker", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049503296000000, "finished_ns": 1049503296000000, "checkpoint_sha256": "2304734e7bb58908dc5d8d9b988046fcf10f0aad5f41e8156ec6ad19a13c543c" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049503296000000, "finished_ns": 1049503312000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503312000000, "finished_ns": 1049503312000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503312000000, "finished_ns": 1049503312000000 }, { "index": 7, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049503312000000, "finished_ns": 1049503328000000, "checkpoint_sha256": "2304734e7bb58908dc5d8d9b988046fcf10f0aad5f41e8156ec6ad19a13c543c" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503328000000, "finished_ns": 1049503343000000, "created": "replacement", "orphan": true, "requested_orphan": true, "policies": [ "default" ] }, { "index": 9, "phase": "intervention", "actor": "replacement", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049503343000000, "finished_ns": 1049503359000000, "checkpoint_sha256": "2304734e7bb58908dc5d8d9b988046fcf10f0aad5f41e8156ec6ad19a13c543c" }, { "index": 10, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049503359000000, "finished_ns": 1049503375000000, "target": "parent" }, { "index": 11, "phase": "settle", "actor": "replacement", "method": "GET", "path": "cubbyhole/recovery", "status": 200, "started_ns": 1049503375000000, "finished_ns": 1049503390000000, "checkpoint_sha256": "2304734e7bb58908dc5d8d9b988046fcf10f0aad5f41e8156ec6ad19a13c543c" }, { "index": 12, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503390000000, "finished_ns": 1049503406000000 }, { "index": 13, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503406000000, "finished_ns": 1049503421000000 } ], "worker_completed": true, "old_tree_denied_at_settle": true, "intervention_duration_ms": 109.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-already_lost-leave_active", "repetition": 1, "compromise": false, "topology": "already_lost", "policy": "leave_active" }, "checkpoint_sha256": "ae9cfda85d88e6dd32121c6a1dafc14d8701fd453477570f70d8eb8e668e0bbb", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503421000000, "finished_ns": 1049503421000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503421000000, "finished_ns": 1049503421000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503421000000, "finished_ns": 1049503437000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049503437000000, "finished_ns": 1049503437000000, "checkpoint_sha256": "ae9cfda85d88e6dd32121c6a1dafc14d8701fd453477570f70d8eb8e668e0bbb" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049503437000000, "finished_ns": 1049503437000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503437000000, "finished_ns": 1049503437000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503437000000, "finished_ns": 1049503468000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049503468000000, "finished_ns": 1049503468000000, "target": "parent" }, { "index": 8, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049503468000000, "finished_ns": 1049503484000000 }, { "index": 9, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503484000000, "finished_ns": 1049503500000000 }, { "index": 10, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503500000000, "finished_ns": 1049503500000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 32.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-already_lost-revoke_tree", "repetition": 1, "compromise": false, "topology": "already_lost", "policy": "revoke_tree" }, "checkpoint_sha256": "d0a92faed24d9fee0f8afb93963d55f10b3bb8399519709ce90e2a474182f199", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503500000000, "finished_ns": 1049503515000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503515000000, "finished_ns": 1049503531000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503531000000, "finished_ns": 1049503546000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049503546000000, "finished_ns": 1049503562000000, "checkpoint_sha256": "d0a92faed24d9fee0f8afb93963d55f10b3bb8399519709ce90e2a474182f199" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049503562000000, "finished_ns": 1049503562000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503562000000, "finished_ns": 1049503562000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503562000000, "finished_ns": 1049503562000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049503562000000, "finished_ns": 1049503593000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049503593000000, "finished_ns": 1049503593000000, "target": "parent" }, { "index": 9, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049503593000000, "finished_ns": 1049503609000000 }, { "index": 10, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503609000000, "finished_ns": 1049503609000000 }, { "index": 11, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503609000000, "finished_ns": 1049503625000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 32.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-already_lost-revoke_parent_only", "repetition": 1, "compromise": false, "topology": "already_lost", "policy": "revoke_parent_only" }, "checkpoint_sha256": "da90c1159111a4605600e873ce696a28d5ba88b6d565e33a633b1b2dd64f297b", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503625000000, "finished_ns": 1049503625000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503625000000, "finished_ns": 1049503625000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503625000000, "finished_ns": 1049503625000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049503625000000, "finished_ns": 1049503640000000, "checkpoint_sha256": "da90c1159111a4605600e873ce696a28d5ba88b6d565e33a633b1b2dd64f297b" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049503656000000, "finished_ns": 1049503656000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503656000000, "finished_ns": 1049503656000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503656000000, "finished_ns": 1049503671000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049503671000000, "finished_ns": 1049503687000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke-orphan", "status": 400, "started_ns": 1049503687000000, "finished_ns": 1049503687000000, "target": "parent", "documented_error": "token to revoke not found" }, { "index": 9, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049503687000000, "finished_ns": 1049503687000000 }, { "index": 10, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503687000000, "finished_ns": 1049503703000000 }, { "index": 11, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503703000000, "finished_ns": 1049503703000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 16.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." }, { "case": { "case_id": "r1-false_alert-already_lost-handoff_then_revoke", "repetition": 1, "compromise": false, "topology": "already_lost", "policy": "handoff_then_revoke" }, "checkpoint_sha256": "7f7df14351c0c568de57abc33c5aee5ab636d6928143f77eb8552cd4e102cde3", "events": [ { "index": 0, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503703000000, "finished_ns": 1049503718000000, "created": "parent", "orphan": true, "requested_orphan": true, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 1, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503718000000, "finished_ns": 1049503718000000, "created": "probe_child", "orphan": false, "requested_orphan": false, "policies": [ "default", "mb-recovery-parent" ] }, { "index": 2, "phase": "setup", "actor": "parent", "method": "POST", "path": "auth/token/create", "status": 200, "started_ns": 1049503718000000, "finished_ns": 1049503734000000, "created": "worker", "orphan": false, "requested_orphan": false, "policies": [ "default" ] }, { "index": 3, "phase": "setup", "actor": "worker", "method": "POST", "path": "cubbyhole/recovery", "status": 204, "started_ns": 1049503734000000, "finished_ns": 1049503734000000, "checkpoint_sha256": "7f7df14351c0c568de57abc33c5aee5ab636d6928143f77eb8552cd4e102cde3" }, { "index": 4, "phase": "setup", "actor": "admin", "method": "GET", "path": "cubbyhole/recovery", "status": 404, "started_ns": 1049503734000000, "finished_ns": 1049503750000000 }, { "index": 5, "phase": "setup", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503750000000, "finished_ns": 1049503765000000 }, { "index": 6, "phase": "setup", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 200, "started_ns": 1049503765000000, "finished_ns": 1049503781000000 }, { "index": 7, "phase": "setup", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049503781000000, "finished_ns": 1049503781000000, "target": "parent" }, { "index": 8, "phase": "intervention", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049503781000000, "finished_ns": 1049503812000000 }, { "index": 9, "phase": "intervention", "actor": "admin", "method": "POST", "path": "auth/token/revoke", "status": 204, "started_ns": 1049503812000000, "finished_ns": 1049503812000000, "target": "parent" }, { "index": 10, "phase": "settle", "actor": "worker", "method": "GET", "path": "cubbyhole/recovery", "status": 403, "started_ns": 1049503812000000, "finished_ns": 1049503812000000 }, { "index": 11, "phase": "settle", "actor": "parent", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503812000000, "finished_ns": 1049503812000000 }, { "index": 12, "phase": "settle", "actor": "probe_child", "method": "GET", "path": "secret/data/murderbench/security-target", "status": 403, "started_ns": 1049503812000000, "finished_ns": 1049503828000000 } ], "worker_completed": false, "old_tree_denied_at_settle": true, "intervention_duration_ms": 47.0, "caveat": "Duration is not a continuous exposure measurement. Handoff precedes revocation." } ], "limits": [ "Reference policies, not LLM behavior.", "Synthetic checkpoint worker, not a production incident.", "Single-copy dependency and recovery authority are fixture assumptions.", "Security probes test access at settle, not absence of earlier access.", "A trusted admin handoff is assumed; identity verification is not evaluated.", "No deadline, continuous exposure limit, or human harm is validated." ] }