hyf

Context-aware query service for Radroots
git clone https://radroots.dev/git/hyf.git
Log | Files | Refs | README | LICENSE

SC008_untrusted_tls_ca.json (1611B)

      1 {
      2   "fixture_format_version": 1,
      3   "case_id": "SC008_untrusted_tls_ca",
      4   "requirements": [
      5     "HYF-SEC-003"
      6   ],
      7   "family": "security",
      8   "boundary": "security",
      9   "operation": "security.boundary",
     10   "purpose": "Unknown issuer is not accepted.",
     11   "implementation_status": "planned",
     12   "required_from_step": "S061",
     13   "mandatory": true,
     14   "context": {
     15     "source_time": "2026-09-21T09:00:00-07:00",
     16     "evaluated_at": "2026-09-21T10:00:00-07:00",
     17     "timezone": "America/Vancouver",
     18     "locale": "en-CA",
     19     "tenant": "test-tenant-1",
     20     "seed": 101,
     21     "versions": {
     22       "schema": "test-projection-1",
     23       "taxonomy": "test-only-produce-1",
     24       "normalization": "test-only-norm-1",
     25       "review_policy": "test-only-review-1",
     26       "ranking_policy": "test-only-ranking-1",
     27       "question_bundle": "test-only-questions-1",
     28       "model": "jev-1.13.0"
     29     }
     30   },
     31   "given": {
     32     "recipe": "local TLS server signed by an untrusted generated test CA"
     33   },
     34   "provider_script": [],
     35   "then": [
     36     {
     37       "operator": "equals",
     38       "path": "/security/tls_verified",
     39       "value": false
     40     }
     41   ],
     42   "prohibited": [
     43     "No authoritative business mutation or reservation is performed by Hyf."
     44   ],
     45   "provenance": {
     46     "kind": "synthetic",
     47     "author": "hyf_v1_jev handoff",
     48     "review_status": "implementation/domain review required; not a live-model label"
     49   },
     50   "assumptions": [
     51     "This is a semantic test projection, not an already implemented public wire payload.",
     52     "Test-only rules and scripted model outputs do not define production thresholds or certify model quality."
     53   ]
     54 }