Publish Chimera GFX source

tests/test_phase10t_shsrv_transcript.py

@@ -0,0 +1,128 @@
+#!/usr/bin/env python3
+# SPDX-License-Identifier: GPL-3.0-or-later
+"""Offline synthetic-transcript tests for Phase-1.0T sanitization."""
+
+from __future__ import annotations
+
+import argparse
+import importlib.util
+import json
+from pathlib import Path
+import sys
+
+
+def load(path: Path):
+    spec = importlib.util.spec_from_file_location("phase10t_transcript", path)
+    assert spec and spec.loader
+    module = importlib.util.module_from_spec(spec)
+    sys.modules[spec.name] = module
+    spec.loader.exec_module(module)
+    return module
+
+
+def require(value: bool, message: str) -> None:
+    if not value:
+        raise RuntimeError(message)
+
+
+def greeting(extra: str = "") -> str:
+    return (
+        "Welcome to shsrv.elf running on pid 123, compiled Jul 22 2026 at 12:34:56\n"
+        "Model:    synthetic-model\n"
+        "S/N:     SYNTHETIC-SERIAL-DO-NOT-RETAIN\n"
+        "S/W:     9.60\n"
+        "SoC temp:               40 C\n"
+        "CPU temp:               41 C\n"
+        "CPU freq:            3500 MHz\n" + extra)
+
+
+def help_text(commands: list[str]) -> str:
+    return "Builtin commands:\n" + "".join(
+        f"  {command} - synthetic\n" for command in commands) + "\n"
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser()
+    parser.add_argument("--root", type=Path, required=True)
+    args = parser.parse_args()
+    module = load(args.root.resolve() / "tools/phase10t_shsrv_transcript.py")
+    current_commands = "authid browse cat cd chgrp chmod chown chroot cmp cp df echo env exec exit export file find grep hbdbg hbldr hexdump http2_get id kill launch ln ls mkdir mknod mount mv notify pkg_install procstat ps pwd reptyr rm rmdir sfocreate sfoinfo sleep stat sum suspend sync sysctl touch umount".split()
+    v07_commands = "browse cat cd chgrp chmod chown chroot cmp cp echo env exec exit export file find grep hbldr help hexdump http2_get id kill launch ln ls mkdir mknod mount mv notify ps pwd rm rmdir sfocreate sfoinfo sleep stat sum sync sysctl touch umount".split()
+    cases = []
+
+    def case(name):
+        def register(function):
+            cases.append((name, function))
+            return function
+        return register
+
+    @case("01 empty transcript is invalid and non-exact")
+    def _():
+        result = module.parse_transcript("")
+        require(result["classification"] == "INVALID_OR_INCOMPLETE" and result["exact_identity"] is False, "empty input accepted")
+
+    @case("02 greeting is compile metadata only")
+    def _(): require(module.parse_transcript(greeting())["classification"] == "COMPILE_METADATA_ONLY", "greeting promoted")
+
+    @case("03 serial value is discarded")
+    def _():
+        result = module.parse_transcript(greeting())
+        require(result["sensitive_input"]["serial_line_seen"] is True and "SYNTHETIC-SERIAL" not in json.dumps(result), "serial retained")
+
+    @case("04 telemetry values are discarded")
+    def _():
+        result = module.parse_transcript(greeting())
+        require(result["sensitive_input"]["telemetry_line_seen"] is True and "3500" not in json.dumps(result), "telemetry retained")
+
+    @case("05 firmware metadata is retained")
+    def _(): require(module.parse_transcript(greeting())["compile_metadata"]["firmware"] == "9.60", "firmware lost")
+
+    @case("06 v0.19 help matches only a source family")
+    def _():
+        result = module.parse_transcript(greeting(help_text(current_commands)))
+        require(result["command_fingerprint"]["sha256"] == module.CURRENT_COMMAND_HASH and result["command_fingerprint"]["source_family_match"] == "OFFICIAL_V019_SOURCE_FAMILY_CANDIDATE" and result["command_fingerprint"]["proves_exact_binary"] is False, "v0.19 fingerprint mismatch")
+
+    @case("07 v0.7 help matches only a source family")
+    def _():
+        result = module.parse_transcript(greeting(help_text(v07_commands)))
+        require(result["command_fingerprint"]["sha256"] == module.V07_COMMAND_HASH and result["command_fingerprint"]["source_family_match"] == "OFFICIAL_V07_SOURCE_FAMILY_CANDIDATE", "v0.7 fingerprint mismatch")
+
+    @case("08 altered help stays unresolved")
+    def _(): require(module.parse_transcript(greeting(help_text(["help", "unknown"])))["command_fingerprint"]["source_family_match"] == "UNRESOLVED", "unknown family promoted")
+
+    @case("09 unknown stat path is discarded")
+    def _(): require(module.parse_transcript(greeting("filename: /unknown\nsize: 123\n"), {"/approved"})["file_observations"] == [], "unknown path retained")
+
+    @case("10 approved stat path is retained")
+    def _():
+        result = module.parse_transcript(greeting("filename: /approved\nsize: 123\nmtime: 456\n"), {"/approved"})
+        require(result["file_observations"] == [{"path": "/approved", "metadata_seen": True, "size": 123, "mtime": 456, "proves_exact_binary": False}], "approved metadata mismatch")
+
+    @case("11 sum is labeled weak and non-cryptographic")
+    def _():
+        result = module.parse_transcript(greeting("12345 /approved\n"), {"/approved"})
+        observation = result["file_observations"][0]
+        require(observation["weak_checksum_algorithm"] == "BSD_ROTATE_16" and observation["cryptographic_checksum"] is False, "weak sum promoted")
+
+    @case("12 all combined metadata remains non-exact")
+    def _():
+        text = greeting(help_text(current_commands) + "filename: /approved\nsize: 123\n12345 /approved\n")
+        result = module.parse_transcript(text, {"/approved"})
+        require(result["exact_identity"] is False and all(not item["proves_exact_binary"] for item in result["file_observations"]), "combined metadata promoted")
+
+    failures = []
+    for name, function in cases:
+        try:
+            function()
+            print(f"PASS {name}")
+        except Exception as error:  # noqa: BLE001 - test harness
+            failures.append(f"{name}: {error}")
+            print(f"FAIL {name}: {error}")
+    if failures:
+        return 1
+    print(f"Phase-1.0T transcript tests passed: {len(cases)}")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())