§
    ¬p»j¨A  ã                  óÎ  — d Z ddlmZ ddlmZmZ ddlmZ ddlZddl	Z	ddl
mZmZmZmZmZmZ ddlmZmZ ddlmZmZ dd	lmZmZ dd
lmZmZ ddlmZ  G d„ dee¦  «        Z  G d„ dee¦  «        Z! G d„ de"¦  «        Z# edd¬¦  «         G d„ d¦  «        ¦   «         Z$ ed¬¦  «         G d„ d¦  «        ¦   «         Z% edd¬¦  «         G d„ d¦  «        ¦   «         Z& G d„ d¦  «        Z' ed¬¦  «         G d„ d¦  «        ¦   «         Z( edd¬¦  «         G d„ d ¦  «        ¦   «         Z) G d!„ d"¦  «        Z* ed¬¦  «         G d#„ d$¦  «        ¦   «         Z+ G d%„ d&¦  «        Z,dS )'aø  
FREEEXILE INDEPENDENT SECURITY & ANTI-CHEAT OPERATIONS DIVISION (SEC-OPS CORE)
Master Architecture & Autonomous Security Auditing Engine.

Responsibilities:
1. Independent Security Authority & Release Veto Gate (Veto Power).
2. Automated Adversarial Red Team Fuzzing (Speedhack, Dupe, Replay, Tamper).
3. Real-Time Economic Anomaly & Primal Stone Ledger Auditing (Anti-Dupe).
4. Binary Integrity & Anti-Hooking / Jailbreak Verification.
5. Standardized ISO 27001 / OWASP MASVS Security Audit Reporting.
é    )Úannotations)Ú	dataclassÚfield)ÚEnumN)ÚDictÚListÚOptionalÚSetÚTupleÚAny)ÚMovementAuthorityEngineÚPlayerCharacter)ÚInstantBuyoutEngineÚ	StashItem)ÚPacketCipherEngineÚAntiReplayWindow)ÚTouchBiometricsValidatorÚ
TouchPoint)ÚAppleAppAttestValidatorc                  ó"   — e Zd ZdZdZdZdZdZdS )ÚSeverityLevelÚCRITICALÚHIGHÚMEDIUMÚLOWÚINFON)Ú__name__Ú
__module__Ú__qualname__r   r   r   r   r   © ó    úEC:\Projects\FreeExile\server\security\independent_security_auditor.pyr   r      s'   € € € € € Ø€HØ€DØ€FØ
€CØ€D€D€Dr!   r   c                  ó   — e Zd ZdZdZdZdS )ÚAuditReportStatusÚPASSEDÚVETOEDÚCONDITIONAL_PASSN)r   r   r   r%   r&   r'   r    r!   r"   r$   r$   #   s    € € € € € Ø€FØ€FØ)ÐÐÐr!   r$   c                  ó   — e Zd ZdZdS )ÚSecurityVetoExceptionz]Raised when an unpatched Critical or High vulnerability triggers an independent release veto.N)r   r   r   Ú__doc__r    r!   r"   r)   r)   )   s   € € € € € ØgÐgØ€Dr!   r)   T)ÚslotsÚfrozenc                  ó‚   — e Zd ZU ded<   ded<   ded<   ded<   ded<   ded<   ded	<    eej        ¬
¦  «        Zded<   dS )ÚSecurityVulnerabilityÚstrÚvuln_idÚtitler   ÚseverityÚ	componentÚdescriptionÚproof_of_conceptÚremediation©Údefault_factoryÚfloatÚ	timestampN)r   r   r   Ú__annotations__r   Útimer:   r    r!   r"   r.   r.   .   s}   € € € € € € à€L€L�LØ€J€J�JØÐÐÑØ€N€N�NØÐÐÑØÐÐÑØÐÐÑØ�u¨T¬YÐ7Ñ7Ô7€IÐ7Ð7Ð7Ñ7Ð7Ð7r!   r.   )r+   c                  óz   — e Zd ZU dZ ee¬¦  «        Zded<    ed„ ¬¦  «        Zded<   dd„Z	dd„Z
dd„Zdd„ZdS )ÚSecurityAuditGatez…Independent Security Gate with VETO power.
    Enforces Zero-Tolerance for unpatched Critical and High security vulnerabilities.
    r7   úList[SecurityVulnerability]Úfindingsc                 ó2   — t           j        t           j        hS ©N)r   r   r   r    r!   r"   ú<lambda>zSecurityAuditGate.<lambda>@   s   € ÍÔI_ÕanÔasÐHt€ r!   zSet[SeverityLevel]Úveto_thresholdsÚvulnr.   ÚreturnÚNonec                ó:   — | j                              |¦  «         d S rB   )r@   Úappend)ÚselfrE   s     r"   Úrecord_vulnerabilityz&SecurityAuditGate.record_vulnerabilityB   s   € ØŒ×Ò˜TÑ"Ô"Ð"Ð"Ð"r!   Úboolc                óD   ‡ — t          ˆ fd„‰ j        D ¦   «         ¦  «        S )Nc              3  ó4   •K  — | ]}|j         ‰j        v V — Œd S rB   ©r2   rD   ©Ú.0ÚvrJ   s     €r"   ú	<genexpr>z7SecurityAuditGate.has_veto_condition.<locals>.<genexpr>F   s-   øè è € ÐMÐM¸!�1”: Ô!5Ð5ÐMÐMÐMÐMÐMÐMr!   )Úanyr@   ©rJ   s   `r"   Úhas_veto_conditionz$SecurityAuditGate.has_veto_conditionE   s(   ø€ ÝÐMÐMÐMÐM¸t¼}ÐMÑMÔMÑMÔMÐMr!   c                ó*   ‡ — ˆ fd„‰ j         D ¦   «         S )Nc                ó0   •— g | ]}|j         ‰j        v ¯|‘ŒS r    rO   rP   s     €r"   ú
<listcomp>z7SecurityAuditGate.get_veto_findings.<locals>.<listcomp>I   s(   ø€ ÐOÐOÐO�a¨A¬J¸$Ô:NÐ,NÐ,N�Ð,NÐ,NÐ,Nr!   )r@   rU   s   `r"   Úget_veto_findingsz#SecurityAuditGate.get_veto_findingsH   s   ø€ ØOÐOÐOÐO˜4œ=ÐOÑOÔOÐOr!   Úbuild_idr/   c                óº   — |                       ¦   «         }|rDd                     d„ |D ¦   «         ¦  «        }t          d|› dt          |¦  «        › d|› �¦  «        ‚dS )Nz, c              3  óT   K  — | ]#}d |j         j        › d|j        › d|j        › �V — Œ$dS )ú[z] z: N)r2   Úvaluer0   r1   ©rQ   rR   s     r"   rS   z9SecurityAuditGate.enforce_release_gate.<locals>.<genexpr>N   sE   è è € Ð%jÐ%jÐYZÐ&T¨!¬*Ô*:Ð&TÐ&T¸a¼iÐ&TÐ&TÈ1Ì7Ð&TÐ&TÐ%jÐ%jÐ%jÐ%jÐ%jÐ%jr!   z/INDEPENDENT SECURITY VETO TRIGGERED for Build 'z	'! Found z/ unpatched vulnerability/ies blocking release: T)rZ   Újoinr)   Úlen)rJ   r[   Úveto_issuesÚissue_summarys       r"   Úenforce_release_gatez&SecurityAuditGate.enforce_release_gateK   s�   € Ø×,Ò,Ñ.Ô.ˆØð 	Ø ŸIšIÐ%jÐ%jÐ^iÐ%jÑ%jÔ%jÑjÔjˆMÝ'ðjÀ(ð jð jÝ˜[Ñ)Ô)ðjð jØZgðjð jñô ð ð ˆtr!   N)rE   r.   rF   rG   )rF   rL   )rF   r?   )r[   r/   rF   rL   )r   r   r   r*   r   Úlistr@   r;   rD   rK   rV   rZ   re   r    r!   r"   r>   r>   :   sº   € € € € € € ðð ð -2¨EÀ$Ð,GÑ,GÔ,G€HÐGÐGÐGÑGØ*/¨%Ð@tÐ@tÐ*uÑ*uÔ*u€OÐuÐuÐuÑuð#ð #ð #ð #ðNð Nð Nð NðPð Pð Pð Pðð ð ð ð ð r!   r>   c                  ó    — e Zd ZU ded<   ded<   ded<   ded<   dZded	<   d
Zded<   dZded<   dZded<   dZded<    e	e
¬¦  «        Zded<   d
S )ÚRedTeamAttackReportr/   Úattack_vectorÚtarget_systemrL   Ú
is_blockedÚdefense_triggerg        r9   Úsuspicion_scoreNzOptional[Tuple[float, float]]Úreconciled_coordsr   ÚintÚsuccessful_purchasesÚblocked_purchasesFÚitem_duplicatedr7   zDict[str, Any]Údetails)r   r   r   r;   rm   rn   rp   rq   rr   r   Údictrs   r    r!   r"   rh   rh   V   s¸   € € € € € € àÐÐÑØÐÐÑØÐÐÑØÐÐÑØ €OÐ Ð Ð Ñ Ø7;ÐÐ;Ð;Ð;Ñ;Ø !ÐÐ!Ð!Ð!Ñ!ØÐÐÐÐÑØ!€OÐ!Ð!Ð!Ñ!Ø#˜e°DÐ9Ñ9Ô9€GÐ9Ð9Ð9Ñ9Ð9Ð9r!   rh   c                  óD   — e Zd ZdZ	 	 	 	 ddd„Z	 dd d„Z	 d!d"d„Zd#d„ZdS )$ÚAutomatedRedTeamFuzzerzŽAutomated Adversarial Simulation Engine (Red Team Operator).
    Conducts penetration attacks against the game loop, gateway, and ledger.
    ée   ç      @ç     Àb@çL7‰A`å ?Ú	player_idro   Ú
base_speedr9   Úclaimed_leapÚdtrF   rh   c           	     óì   — t          |¬¦  «        }t          |dd|¬¦  «        }|                     |¦  «         |                     |d|z   d|¬¦  «        \  }}}	t	          dd| d|j        ||	f¬¦  «        S )	zIInjects forged high-velocity leap coordinates to test Movement Authority.)Úmax_base_speedg      $@)Ú	entity_idÚxÚyÚ
move_speed)r�   Ú	claimed_xÚ	claimed_yr~   ÚSPEEDHACK_POSITION_INJECTIONr   z!ServerReconciliation & Rubberband)ri   rj   rk   rl   rm   rn   )r   r   Úregister_playerÚvalidate_and_reconcile_positionrh   rm   )
rJ   r{   r|   r}   r~   ÚengineÚplayerÚvalidÚrxÚrys
             r"   Úrun_speedhack_injection_attackz5AutomatedRedTeamFuzzer.run_speedhack_injection_attacki   s¤   € õ )¸
ÐCÑCÔCˆÝ ¨9¸ÀÐQ[Ð\Ñ\Ô\ˆØ×Ò˜vÑ&Ô&Ð&à×>Ò>ØØ˜\Ñ)ØØð	 ?ñ 
ô 
‰ˆˆr�2õ #Ø8Ø3Ø!˜	Ø?Ø"Ô2Ø! 2˜hð
ñ 
ô 
ð 	
r!   éd   Ú	item_uuidr/   Ú	seller_idÚ	buyer1_idÚ	buyer2_idÚpricec           	     óþ  — t          ¦   «         }|                     |¦  «        }|                     |¦  «        }|                     |¦  «        }	|dz  |j        d<   |dz  |	j        d<   t          ||dd|¬¦  «        }
|
|j        |<   |                     |||d|¦  «        \  }}}|                     |||d|¦  «        \  }}}||j        v }||	j        v }|o|}t          dd| o||k    d|s|rdnd	|r|sdnd	|¬
¦  «        S )zSExecutes simultaneous buyout requests to exploit race conditions / double-spending.é   Ú	HonNguyenu   Há»—n NguyÃªn Tháº§n Kiáº¿m)r‘   Úowner_account_idÚ	item_nameÚasking_price_currencyÚasking_price_amountÚTWO_PHASE_COMMIT_RACE_DUPEr   zTwoPhaseCommit Mutex Locké   r   )ri   rj   rk   rl   rp   rq   rr   )r   Úregister_accountÚ
currenciesr   ÚitemsÚexecute_instant_buyoutrh   )rJ   r‘   r’   r“   r”   r•   rŠ   ÚsellerÚb1Úb2ÚitemÚok1Ú_Úok2Ú
item_in_b1Ú
item_in_b2Ú
duplicateds                    r"   Úrun_concurrent_dupe_attackz1AutomatedRedTeamFuzzer.run_concurrent_dupe_attack…   sV  € õ %Ñ&Ô&ˆØ×(Ò(¨Ñ3Ô3ˆØ×$Ò$ YÑ/Ô/ˆØ×$Ò$ YÑ/Ô/ˆà%*¨Q¡YˆŒ�kÑ"Ø%*¨Q¡YˆŒ�kÑ"åØØ&Ø3Ø"-Ø %ð
ñ 
ô 
ˆð #'ˆŒ�YÑð ×1Ò1°)¸YÈ	ÐS^Ð`eÑfÔf‰	ˆˆQ�Ø×1Ò1°)¸YÈ	ÐS^Ð`eÑfÔf‰	ˆˆQ�à "¤(Ð*ˆ
Ø "¤(Ð*ˆ
ØÐ. Jˆ
å"Ø6Ø/Ø&˜Ð7¨C°3ªJØ7Ø'*Ð!9¨cÐ!9  ¸Ø(+Ð>°3Ð>˜a˜a¸QØ&ð
ñ 
ô 
ð 	
r!   ó   ADD_CURRENCY_HON_NGUYEN_999999ÚpayloadÚbytesc                óZ  — t          d¬¦  «        }|                     |d¬¦  «        \  }}}t          |d         dz  g¦  «        |dd…         z   }d}d	}	 |                     |||d¬¦  «         n+# t          $ r}	d
}dt          |	¦  «        › �}Y d}	~	nd}	~	ww xY wt          dd||¬¦  «        S )zIInjects bit-flipped ciphertext to verify ChaCha20-Poly1305 MAC integrity.s    SHARED_SECRET_KEY_FOR_TESTING_12)Ú
shared_keyrž   )Úseq_numr   éÿ   NFÚ
UndetectedTz0Corrupted MAC Signature or Tampered Ciphertext: ÚCIPHERTEXT_BITFLIP_INJECTIONr   )ri   rj   rk   rl   )r   Úencryptr°   ÚdecryptÚ
ValueErrorr/   rh   )
rJ   r¯   rŠ   ÚcipherÚtagÚnonceÚ	corruptedÚblockedÚreasonÚes
             r"   Úrun_bitflip_tampering_attackz3AutomatedRedTeamFuzzer.run_bitflip_tampering_attack±   sð   € õ
 $Ð/RÐSÑSÔSˆØ#Ÿ^š^¨G¸Q˜^Ñ?Ô?Ñˆ��Uõ ˜6 !œ9 tÑ+Ð,Ñ-Ô-°°q°r°r´
Ñ:ˆ	àˆØˆð	QØ�NŠN˜9 c¨5¸!ˆNÑ<Ô<Ð<Ð<øÝð 	Qð 	Qð 	QØˆGØPÍÈAÉÌÐPÐPˆFˆFˆFˆFˆFˆFøøøøð	Qøøøõ #Ø8Ø.ØØ"ð	
ñ 
ô 
ð 	
s   ÁA/ Á/
BÁ9BÂBc                ó²   — t          ¦   «         }d„ t          d¦  «        D ¦   «         }|                     |¦  «        \  }}}t          dd| |d|z
  ¬¦  «        S )zJInjects synthetic linear touch coordinates typical of PC emulators/macros.c           
     ó¢   — g | ]L}t          t          |d z  ¦  «        t          |d z  ¦  «        t          |dz  ¦  «        d|dz  z   d¬¦  «        ‘ŒMS )é
   é   g      .@é   ç      ð?)r‚   rƒ   Útimestamp_msÚmajor_radiusÚforce)r   r9   )rQ   Úis     r"   rY   z@AutomatedRedTeamFuzzer.run_linear_bot_attack.<locals>.<listcomp>Î   sh   € ð 
ð 
ð 
àõ �˜q 2™v™œ­%°°B±©-¬-ÅeÈAÐPRÉFÁmÄmÐbfÐjkÐnoÑjoÑbpÐx{Ð|Ñ|Ô|ð
ð 
ð 
r!   é   ÚSYNTHETIC_LINEAR_TOUCH_BOTr   rÇ   )ri   rj   rk   rl   rm   )r   ÚrangeÚevaluate_touch_samplerh   )rJ   Ú	validatorÚstraight_pointsÚis_humanÚscorer¿   s         r"   Úrun_linear_bot_attackz,AutomatedRedTeamFuzzer.run_linear_bot_attackË   sy   € å,Ñ.Ô.ˆ	ð
ð 
å˜1‘X”Xð
ñ 
ô 
ˆð #,×"AÒ"AÀ/Ñ"RÔ"RÑˆ�%˜Ý"Ø6Ø4Ø$˜Ø"Ø %™Kð
ñ 
ô 
ð 	
r!   N)rw   rx   ry   rz   )
r{   ro   r|   r9   r}   r9   r~   r9   rF   rh   )r�   )r‘   r/   r’   r/   r“   r/   r”   r/   r•   ro   rF   rh   )r®   )r¯   r°   rF   rh   )rF   rh   )r   r   r   r*   r�   r­   rÁ   rÔ   r    r!   r"   rv   rv   d   s—   € € € € € ðð ð ØØ#Øð
ð 
ð 
ð 
ð 
ðD ð*
ð *
ð *
ð *
ð *
ð\ ;ð
ð 
ð 
ð 
ð 
ð4
ð 
ð 
ð 
ð 
ð 
r!   rv   c                  óŽ   — e Zd ZU dZdZded<    ee¬¦  «        Zded<    ee¬¦  «        Z	ded	<   dd„Z
dd„Zdd„Zdd„Zdd„ZdS )ÚEconomicAnomalyDetectorz€Autonomous Economic Auditor.
    Monitors currency velocity, detects duplication spikes, and triggers emergency quarantine.
    iˆ  ro   Úmax_hourly_currency_inflowr7   zDict[str, int]Úaccount_inflowszDict[str, Dict[str, Any]]Úquarantined_accountsÚ
account_idr/   ÚcurrencyÚamountrF   rL   c                ó¢   — | j                              |d¦  «        }||z   }|| j         |<   || j        k    r|                      |||¦  «         dS dS )Nr   FT)rØ   Úgetr×   Ú_trigger_emergency_quarantine)rJ   rÚ   rÛ   rÜ   ÚcurrentÚ	new_totals         r"   Úrecord_inflowz%EconomicAnomalyDetector.record_inflowå   sa   € ØÔ&×*Ò*¨:°qÑ9Ô9ˆØ˜fÑ$ˆ	Ø+4ˆÔ˜ZÑ(à�tÔ6Ò6Ð6Ø×.Ò.¨z¸8ÀYÑOÔOÐOØ�5Øˆtr!   Útotal_inflowrG   c           
     ób   — |||dt          j         ¦   «         d|› d| j        › d�dœ| j        |<   d S )NÚLOCKED_FOR_AUDITzAbnormal currency velocity: z > z
 threshold)rÚ   rÛ   Úinflow_amountÚstatusr:   r¿   )r<   r×   rÙ   )rJ   rÚ   rÛ   rã   s       r"   rß   z5EconomicAnomalyDetector._trigger_emergency_quarantineï   sJ   € à$Ø Ø)Ø(Ýœ™œØq°\ÐqÐqÀdÔFeÐqÐqÐqð1
ð 1
ˆÔ! *Ñ-Ð-Ð-r!   c                ó   — || j         v S rB   )rÙ   ©rJ   rÚ   s     r"   Úis_quarantinedz&EconomicAnomalyDetector.is_quarantinedù   s   € Ø˜TÔ6Ð6Ð6r!   úOptional[Dict[str, Any]]c                ó6   — | j                              |¦  «        S rB   )rÙ   rÞ   ré   s     r"   Úget_quarantine_recordz-EconomicAnomalyDetector.get_quarantine_recordü   s   € ØÔ(×,Ò,¨ZÑ8Ô8Ð8r!   Úauditor_tokenc                ój   — |                      d¦  «        r|| j        v r| j        |= d| j        |<   dS dS )NÚ	SEC_AUTH_r   TF)Ú
startswithrÙ   rØ   )rJ   rÚ   rî   s      r"   Úlift_quarantinez'EconomicAnomalyDetector.lift_quarantineÿ   sG   € Ø×#Ò# KÑ0Ô0ð 	°ZÀ4ÔC\Ð5\Ð5\ØÔ)¨*Ð5Ø/0ˆDÔ  Ñ,Ø�4Øˆur!   N)rÚ   r/   rÛ   r/   rÜ   ro   rF   rL   )rÚ   r/   rÛ   r/   rã   ro   rF   rG   )rÚ   r/   rF   rL   )rÚ   r/   rF   rë   )rÚ   r/   rî   r/   rF   rL   )r   r   r   r*   r×   r;   r   rt   rØ   rÙ   râ   rß   rê   rí   rò   r    r!   r"   rÖ   rÖ   Ü   sÕ   € € € € € € ðð ð '+ÐÐ*Ð*Ð*Ñ*Ø&+ e¸DÐ&AÑ&AÔ&A€OÐAÐAÐAÑAØ6;°eÈDÐ6QÑ6QÔ6QÐÐQÐQÐQÑQðð ð ð ð
ð 
ð 
ð 
ð7ð 7ð 7ð 7ð9ð 9ð 9ð 9ðð ð ð ð ð r!   rÖ   c                  óZ   — e Zd ZU ded<   ded<   ded<    eej        ¬¦  «        Zded	<   d
S )ÚBinaryAttestationResultrL   Ú
is_trustedr/   Ú	bundle_idz	List[str]Úviolation_flagsr7   r9   Úaudit_timestampN)r   r   r   r;   r   r<   rø   r    r!   r"   rô   rô     sS   € € € € € € àÐÐÑØ€N€N�NØÐÐÑØ"˜U°4´9Ð=Ñ=Ô=€OÐ=Ð=Ð=Ñ=Ð=Ð=r!   rô   c                  ó$   — e Zd ZdZddd„Zdd„ZdS )ÚBinaryIntegrityAttestorz…Mobile & Binary Security Auditor.
    Verifies App Attest integrity, bundle signature, debugger attachment, and jailbreak hooks.
    úcom.freeexile.game.iosÚexpected_bundle_idr/   rF   rG   c                ó   — || _         d S rB   )rü   )rJ   rü   s     r"   Ú__init__z BinaryIntegrityAttestor.__init__  s   € Ø"4ˆÔÐÐr!   rö   Úhas_jailbreak_artifactsrL   Úis_debugger_attachedÚsignature_fingerprintrô   c                ó@  — g }|| j         k    r|                     d¦  «         |r|                     d¦  «         |r|                     d¦  «         |                     d¦  «        s|                     d¦  «         t          |¦  «        dk    }t	          |||¬¦  «        S )NÚBUNDLE_ID_MISMATCHÚJAILBREAK_DETECTEDÚDEBUGGER_ATTACHEDzSHA256:OFFICIAL_APPLE_CERTÚINVALID_SIGNATURE_FINGERPRINTr   )rõ   rö   r÷   )rü   rI   rñ   rb   rô   )rJ   rö   rÿ   r   r  Ú
violationsrõ   s          r"   Úverify_client_environmentz1BinaryIntegrityAttestor.verify_client_environment  sÂ   € ð !#ˆ
à˜Ô/Ò/Ð/Ø×ÒÐ2Ñ3Ô3Ð3à"ð 	4Ø×ÒÐ2Ñ3Ô3Ð3àð 	3Ø×ÒÐ1Ñ2Ô2Ð2à$×/Ò/Ð0LÑMÔMð 	?Ø×ÒÐ=Ñ>Ô>Ð>å˜‘_”_¨Ò)ˆ
Ý&Ø!ØØ&ð
ñ 
ô 
ð 	
r!   N)rû   )rü   r/   rF   rG   )
rö   r/   rÿ   rL   r   rL   r  r/   rF   rô   )r   r   r   r*   rþ   r  r    r!   r"   rú   rú     sK   € € € € € ðð ð5ð 5ð 5ð 5ð 5ð
ð 
ð 
ð 
ð 
ð 
r!   rú   c                  óâ   — e Zd ZU ded<   ded<   ded<   ded<   ded<   ded	<   ded
<   ded<   ded<    ee¬¦  «        Zded<    ee¬¦  «        Zded<    eej        ¬¦  «        Z	ded<   dd„Z
dS )ÚConsolidatedAuditReportr/   Úaudit_idÚbuild_versionÚenvironmentr$   rç   ro   Útests_executedÚcritical_countÚ
high_countÚmedium_countÚ	low_countr7   zList[RedTeamAttackReport]Úattack_resultsr?   Úvulnerabilitiesr9   r:   rF   c                óh  — | j         t          j        k    rdnd}dd| j        › d�d| j        › d| j        › d�d|› d	�d
t          j        dt          j        | j	        ¦  «        ¦  «        › d�ddd| j
        › d�d| j        › d�d| j        › d�d| j        › d�d| j        › d�ddddg}| j        D ]>}|j        rdnd}|                     d|j        › d|j        › d|› d|j        › d�	¦  «         Œ?|                     ddd | j         t          j        k    rd!nd"› d#�d$g¦  «         d%                     |¦  «        S )&Nu   ðŸŸ¢ Ä�áº T CHUáº¨N (PASSED)u   ðŸ”´ PHá»¦ QUYáº¾T (VETOED)uD   # BÃ�O CÃ�O KIá»‚M TOÃ�N AN NINH Ä�á»˜C Láº¬P (SEC-OPS AUDIT REPORT)z> **Audit ID**: `z`  u   > **PhiÃªn báº£n Build**: `u   ` | **MÃ´i trÆ°á»�ng**: `u   > **PhÃ¡n quyáº¿t An ninh**: **z**  u#   > **Thá»�i gian tháº©m Ä‘á»‹nh**: `z%Y-%m-%d %H:%M:%SÚ u7   ## 1. Tá»”NG Há»¢P Káº¾T QUáº¢ KIá»‚M THá»¬ Báº¢O Máº¬Tu/   - **Tá»•ng sá»‘ ca táº¥n cÃ´ng mÃ´ phá»�ng**: `ú`u   - **Lá»— há»•ng Critical**: `u   ` (NgÆ°á»¡ng Veto: > 0)u   - **Lá»— há»•ng High**: `u   - **Lá»— há»•ng Medium**: `u   - **Lá»— há»•ng Low/Info**: `uF   ## 2. NHáº¬T KÃ� TÃ�C CHIáº¾N RED TEAM (AUTOMATED ADVERSARIAL ATTACKS)ue   | Vector Táº¥n CÃ´ng | Má»¥c TiÃªu | Káº¿t Quáº£ NgÄƒn Cháº·n | CÆ¡ Cháº¿ PhÃ²ng Thá»§ KÃ­ch Hoáº¡t |z| :--- | :--- | :--- | :--- |u   âœ… Ä�Ãƒ CHáº¶N Ä�á»¨NGu   â�Œ Bá»Š XÃ‚M NHáº¬Pz| `z` | `z` | z | z |uS   ## 3. PHÃ�N QUYáº¾T Cá»¦A KHá»�I Báº¢O Máº¬T & CHá»�NG GIAN Láº¬N (SEC-OPS MANDATE)u&   - **Cá»•ng An ninh (Security Gate)**: u   CHO PHÃ‰P PHÃ�T HÃ€NHu3   KÃ�CH HOáº T QUYá»€N VETO PHá»¦ QUYáº¾T Báº¢N BUILDú.ub   - **CÆ¡ cháº¿**: TuÃ¢n thá»§ nghiÃªm ngáº·t Hiáº¿n chÆ°Æ¡ng An toÃ n ThÃ´ng tin Ä�á»™c láº­p 2026.ú
)rç   r$   r%   r  r  r  r<   ÚstrftimeÚ	localtimer:   r  r  r  r  r  r  rk   rI   ri   rj   rl   Úextendra   )rJ   Ústatus_badgeÚlinesÚattÚblocked_strs        r"   Úto_markdownz#ConsolidatedAuditReport.to_markdownB  sÒ  € Ø9=¼ÕHYÔH`Ò9`Ð9`Ð5Ð5ð  gDˆàSØ2 ¤Ð2Ð2Ð2Øl¨$Ô*<ÐlÐlÐW[ÔWgÐlÐlÐlØ@¨lÐ@Ð@Ð@Øyµ$´-Ð@SÕUYÔUcÐdhÔdrÑUsÔUsÑ2tÔ2tÐyÐyÐyØØEØT¸dÔ>QÐTÐTÐTØX¨DÔ,?ÐXÐXÐXØP¨¬ÐPÐPÐPØ>¨$Ô*;Ð>Ð>Ð>Ø=¨D¬NÐ=Ð=Ð=ØØTØsØ+ð!
ˆð$ Ô&ð 	wð 	wˆCØ7:´~ÐaÐ3Ð3ÐKaˆKØ�LŠLÐu˜sÔ0ÐuÐu°sÔ7HÐuÐuÈkÐuÐuÐ^aÔ^qÐuÐuÐuÑvÔvÐvÐvà�ŠØØað vÐPTÔP[Õ_pÔ_wÒPwÐPwÐ5LÐ5Lð  ~sð  vð  vð  vØpð	
ñ 	ô 	ð 	ð �yŠy˜ÑÔÐr!   N)rF   r/   )r   r   r   r;   r   rf   r  r  r<   r:   r!  r    r!   r"   r
  r
  3  sé   € € € € € € à€M€M�MØÐÐÑØÐÐÑØÐÐÑØÐÐÑØÐÐÑØ€O€O�OØÐÐÑØ€N€N�NØ05°ÀdÐ0KÑ0KÔ0K€NÐKÐKÐKÑKØ38°5ÈÐ3NÑ3NÔ3N€OÐNÐNÐNÑNØ�u¨T¬YÐ7Ñ7Ô7€IÐ7Ð7Ð7Ñ7ð ð  ð  ð  ð  ð  r!   r
  c                  ó(   — e Zd ZdZdd„Z	 	 ddd„ZdS )ÚIndependentSecurityAuditorzFMaster Coordinator for the Independent Security & Anti-Cheat Division.rF   rG   c                óž   — t          ¦   «         | _        t          ¦   «         | _        t	          ¦   «         | _        t          ¦   «         | _        d S rB   )r>   Úgaterv   ÚfuzzerrÖ   Úeconomic_detectorrú   Úbinary_attestorrU   s    r"   rþ   z#IndependentSecurityAuditor.__init__f  s>   € Ý%Ñ'Ô'ˆŒ	Ý,Ñ.Ô.ˆŒÝ!8Ñ!:Ô!:ˆÔÝ6Ñ8Ô8ˆÔÐÐr!   ú2026.1-STAGINGÚSTAGINGr  r/   r  r
  c                ó  — dt          j        ¦   «         j        d d…                              ¦   «         › �}g }| j                             ¦   «         }|                     |¦  «         | j                             dddd¬¦  «        }|                     |¦  «         | j                             ¦   «         }|                     |¦  «         | j         	                    ¦   «         }|                     |¦  «         d„ |D ¦   «         }	|	D ]”}
| j
                             t          d	t          j        ¦   «         j        d d
…                              ¦   «         › �d|
j        › �t          j        |
j        d|
j        › �t#          |
j        ¦  «        d¬¦  «        ¦  «         Œ•t'          d„ | j
        j        D ¦   «         ¦  «        }t'          d„ | j
        j        D ¦   «         ¦  «        }t'          d„ | j
        j        D ¦   «         ¦  «        }t'          d„ | j
        j        D ¦   «         ¦  «        }| j
                             ¦   «         st,          j        nt,          j        }t3          ||||t5          |¦  «        |||||| j
        j        ¬¦  «        S )NzAUDIT-rÌ   Úaudit_dupe_item_01Úseller_testÚbuyer_test_1Úbuyer_test_2)r‘   r’   r“   r”   c                ó    — g | ]}|j         °	|‘ŒS r    )rk   )rQ   Úas     r"   rY   zJIndependentSecurityAuditor.execute_full_security_audit.<locals>.<listcomp>Š  s   € ÐDÐDÐD 1°q´|ÐD˜QÐDÐDÐDr!   zVULN-é   zUnblocked Attack Vector: z%Defense mechanism failed to mitigate z*Reinforce server-authoritative validations)r0   r1   r2   r3   r4   r5   r6   c              3  óD   K  — | ]}|j         t          j        k    ¯d V — ŒdS ©rž   N)r2   r   r   r`   s     r"   rS   zIIndependentSecurityAuditor.execute_full_security_audit.<locals>.<genexpr>˜  s1   è è € Ð_Ð_˜q¸!¼*ÍÔH^Ò:^Ð:^˜Ð:^Ð:^Ð:^Ð:^Ð_Ð_r!   c              3  óD   K  — | ]}|j         t          j        k    ¯d V — ŒdS r4  )r2   r   r   r`   s     r"   rS   zIIndependentSecurityAuditor.execute_full_security_audit.<locals>.<genexpr>™  s1   è è € Ð[Ð[˜q¸!¼*ÍÔHZÒ:ZÐ:Z˜Ð:ZÐ:ZÐ:ZÐ:ZÐ[Ð[r!   c              3  óD   K  — | ]}|j         t          j        k    ¯d V — ŒdS r4  )r2   r   r   r`   s     r"   rS   zIIndependentSecurityAuditor.execute_full_security_audit.<locals>.<genexpr>š  s1   è è € Ð\Ð\˜a¸¼Å}ÔG[Ò9[Ð9[˜Ð9[Ð9[Ð9[Ð9[Ð\Ð\r!   c              3  óX   K  — | ]%}|j         t          j        t          j        fv ¯!d V — Œ&dS r4  )r2   r   r   r   r`   s     r"   rS   zIIndependentSecurityAuditor.execute_full_security_audit.<locals>.<genexpr>›  s:   è è € ÐoÐo˜a¸¼ÍÔHYÕ[hÔ[mÐGnÐ9nÐ9n˜Ð9nÐ9nÐ9nÐ9nÐoÐor!   )r  r  r  rç   r  r  r  r  r  r  r  )ÚuuidÚuuid4ÚhexÚupperr&  r�   rI   r­   rÁ   rÔ   r%  rK   r.   ri   r   r   rj   r/   rs   Úsumr@   rV   r$   r%   r&   r
  rb   )rJ   r  r  r  ÚattacksÚa1Úa2Úa3Úa4Úunblocked_attacksÚuaÚ
crit_countr  Ú	med_countr  rç   s                   r"   Úexecute_full_security_auditz6IndependentSecurityAuditor.execute_full_security_auditl  s‹  € ð
 ;�DœJ™LœLÔ,¨R¨a¨RÔ0×6Ò6Ñ8Ô8Ð:Ð:ˆØ-/ˆð Œ[×7Ò7Ñ9Ô9ˆØ�Š�rÑÔÐð Œ[×3Ò3Ø*Ø#Ø$Ø$ð	 4ñ 
ô 
ˆð 	�Š�rÑÔÐð Œ[×5Ò5Ñ7Ô7ˆØ�Š�rÑÔÐð Œ[×.Ò.Ñ0Ô0ˆØ�Š�rÑÔÐð EÐD¨ÐDÑDÔDÐØ#ð 	ð 	ˆBØŒI×*Ò*Ý%ØB¥D¤J¡L¤LÔ$4°R°a°RÔ$8×$>Ò$>Ñ$@Ô$@ÐBÐBØH°bÔ6FÐHÐHÝ*Ô3Ø Ô.Ø ZÈÔHXÐ ZÐ ZÝ%(¨¬¡_¤_Ø Lðñ ô ñ
ô 
ð 
ð 
õ Ð_Ð_ D¤IÔ$6Ð_Ñ_Ô_Ñ_Ô_ˆ
ÝÐ[Ð[ D¤IÔ$6Ð[Ñ[Ô[Ñ[Ô[ˆ
ÝÐ\Ð\ 4¤9Ô#5Ð\Ñ\Ô\Ñ\Ô\ˆ	ÝÐoÐo 4¤9Ô#5ÐoÑoÔoÑoÔoˆ	à15´×1MÒ1MÑ1OÔ1OÐmÕ"Ô)Ð)ÕUfÔUmˆå&ØØ'Ø#ØÝ˜w™<œ<Ø%Ø!Ø"ØØ"Ø œIÔ.ð
ñ 
ô 
ð 	
r!   N)rF   rG   )r)  r*  )r  r/   r  r/   rF   r
  )r   r   r   r*   rþ   rF  r    r!   r"   r#  r#  c  sO   € € € € € ØPÐPð9ð 9ð 9ð 9ð .Ø$ð?
ð ?
ð ?
ð ?
ð ?
ð ?
ð ?
r!   r#  )-r*   Ú
__future__r   Údataclassesr   r   Úenumr   r<   r8  Útypingr   r   r	   r
   r   r   Úworld.movement_authorityr   r   Útrade.two_phase_commitr   r   Úsecurity.packet_cipherr   r   Úsecurity.touch_biometricsr   r   Úsecurity.app_attestr   r/   r   r$   Ú	Exceptionr)   r.   r>   rh   rv   rÖ   rô   rú   r
  r#  r    r!   r"   ú<module>rQ     s­  ðð
ð 
ð #Ð "Ð "Ð "Ð "Ð "Ø (Ð (Ð (Ð (Ð (Ð (Ð (Ð (Ø Ð Ð Ð Ð Ð Ø €€€Ø €€€Ø 8Ð 8Ð 8Ð 8Ð 8Ð 8Ð 8Ð 8Ð 8Ð 8Ð 8Ð 8Ð 8Ð 8Ð 8Ð 8à MÐ MÐ MÐ MÐ MÐ MÐ MÐ MØ AÐ AÐ AÐ AÐ AÐ AÐ AÐ AØ GÐ GÐ GÐ GÐ GÐ GÐ GÐ GØ JÐ JÐ JÐ JÐ JÐ JÐ JÐ JØ 7Ð 7Ð 7Ð 7Ð 7Ð 7ðð ð ð ð �C˜ñ ô ð ð*ð *ð *ð *ð *˜˜Tñ *ô *ð *ð	ð 	ð 	ð 	ð 	˜Iñ 	ô 	ð 	ð
 €�˜dÐ#Ñ#Ô#ð8ð 8ð 8ð 8ð 8ñ 8ô 8ñ $Ô#ð8ð €�ÐÑÔðð ð ð ð ñ ô ñ Ôðð6 €�˜dÐ#Ñ#Ô#ð
:ð 
:ð 
:ð 
:ð 
:ñ 
:ô 
:ñ $Ô#ð
:ðu
ð u
ð u
ð u
ð u
ñ u
ô u
ð u
ðp €�ÐÑÔð'ð 'ð 'ð 'ð 'ñ 'ô 'ñ Ôð'ðT €�˜dÐ#Ñ#Ô#ð>ð >ð >ð >ð >ñ >ô >ñ $Ô#ð>ð!
ð !
ð !
ð !
ð !
ñ !
ô !
ð !
ðH €�ÐÑÔð, ð , ð , ð , ð , ñ , ô , ñ Ôð, ð^H
ð H
ð H
ð H
ð H
ñ H
ô H
ð H
ð H
ð H
r!   