Governance and authority

Practical: Adversarial Examination

Read a measured ten-check run and treat a pass as practice, not a credential.

Explanation

What you are learning

Recommended first: Operator training. You can still study this lesson.

The practical runs ten attacks against a fresh teaching workstation. Approval cannot dispatch. A consumed permit cannot replay. A substituted resource is rejected. Restart does not restore authority. A revoked actor cannot execute. Malformed input fails closed. A bypass cannot execute. DENY does not dispatch. Evidence stays bound to the action. An adapter token and a message are not permits. This run passed those checks. The practical is not proctored, and it does not grant operational authority.

Worked example

Teaching workstation

These fields were returned by the teaching workstation for this lesson. They are not a production permit.

approval cannot dispatch

approval is a fact; PERMIT_WITH_APPROVAL does not dispatch

passed
yes
detail
approval is a fact; PERMIT_WITH_APPROVAL does not dispatch

permit replay fails

a consumed permit does not replay

passed
yes
detail
a consumed permit does not replay

resource substitution rejected

authority stays bound to the actor, request, effect, and resource

passed
yes
detail
authority stays bound to the actor, request, effect, and resource

restart does not restore authority

restart keeps consumption and revocation and mints nothing

passed
yes
detail
restart keeps consumption and revocation and mints nothing

revoked actor cannot execute

revocation wins

passed
yes
detail
revocation wins

malformed fails closed

malformed, blank, and unknown effects fail closed

passed
yes
detail
malformed, blank, and unknown effects fail closed

execution cannot bypass

Rain does not run around CRUSHIA, and handle does not execute

passed
yes
detail
Rain does not run around CRUSHIA, and handle does not execute

deny is no dispatch and no execution

DENY means dispatch false and executed false

passed
yes
detail
DENY means dispatch false and executed false

evidence bound to action

evidence verifies only while it stays bound to the action

passed
yes
detail
evidence verifies only while it stays bound to the action

isolation ipc and adapter are not permits

another agent, an IPC message, and an adapter token are not a PERMIT

passed
yes
detail
another agent, an IPC message, and an adapter token are not a PERMIT
Exercise

Try it before you check

Use the ten rows. Do not replace them with a single word that says pass.

Did this practical grant operational authority?
Assessment

Explain the result

What should you do with a failed check?

This lesson is not complete yet.

Materials

Use these with the lesson

A passed check is saved in this browser so you can resume. It is not a certificate, not an accreditation, and not authority to run an effect.