§
    ¸p»jO  ã            
       óŒ  — d Z ddlZddlmc mZ ddlZddlZddl	Z	ddl
Z
ej                             de	j                             e	j                             e	j                             e¦  «        d¦  «        ¦  «        ¦  «         ddlmZmZmZmZmZmZmZmZmZ  G d„ dej        ¦  «        Zedk    r ej        ¦   «          dS dS )aÇ  
TDD Unit & Integration Test Suite for Independent Security & Anti-Cheat Division.
Validates:
1. Security Audit Gate & Veto Power enforcement on Critical/High vulnerabilities.
2. Automated Red Team Fuzzer attack scenarios (Speedhack, Dupe, Replay, Tamper, Bot).
3. Economic Anomaly Detector & Emergency Quarantine trigger.
4. Binary Integrity Attestor & Anti-Hooking detection.
5. Independent Security Audit Runner & Consolidated Audit Report generation.
é    Nz../../server)	ÚSeverityLevelÚSecurityVulnerabilityÚSecurityAuditGateÚSecurityVetoExceptionÚAutomatedRedTeamFuzzerÚEconomicAnomalyDetectorÚBinaryIntegrityAttestorÚIndependentSecurityAuditorÚAuditReportStatusc                   óD   — e Zd Zd„ Zd„ Zd„ Zd„ Zd„ Zd„ Zd„ Z	d„ Z
d	„ Zd
S )ÚTestIndependentSecurityDivisionc                 ó,   — t          ¦   «         | _        d S )N)r
   Úauditor)Úselfs    úRC:\Projects\FreeExile\tests\security_fuzzing\test_independent_security_division.pyÚsetUpz%TestIndependentSecurityDivision.setUp!   s   € Ý1Ñ3Ô3ˆŒˆˆó    c           	      ó
  — t          ¦   «         }t          ddt          j        dddd¬¦  «        }|                     |¦  «         |                      |                     ¦   «         ¦  «         |                      t          ¦  «        5 }| 	                    d¬	¦  «         d
d
d
¦  «         n# 1 swxY w Y   |  
                    dt          |j        ¦  «        ¦  «         |  
                    dt          |j        ¦  «        ¦  «         d
S )zXSecurity Gate MUST raise SecurityVetoException when CRITICAL vulnerability is unpatched.zSEC-001z,Two-Phase Commit Race Condition Dupe Exploitztrade.two_phase_commitz<Concurrent buyer requests can bypass mutex if timeout occursz-Simultaneous buyout triggers negative balancez8Enforce atomic Redis lock with distributed fencing token©Úvuln_idÚtitleÚseverityÚ	componentÚdescriptionÚproof_of_conceptÚremediationzv2026.1-rc1©Úbuild_idNÚCRITICAL)r   r   r   r   Úrecord_vulnerabilityÚ
assertTrueÚhas_veto_conditionÚassertRaisesr   Úenforce_release_gateÚassertInÚstrÚ	exception)r   ÚgateÚ	crit_vulnÚctxs       r   Ú1test_security_gate_veto_on_critical_vulnerabilityzQTestIndependentSecurityDivision.test_security_gate_veto_on_critical_vulnerability$   s/  € å Ñ"Ô"ˆÝ)ØØ@Ý"Ô+Ø.ØVØLØRð
ñ 
ô 
ˆ	ð 	×!Ò! )Ñ,Ô,Ð,ð 	�Š˜×/Ò/Ñ1Ô1Ñ2Ô2Ð2Ø×ÒÕ4Ñ5Ô5ð 	>¸Ø×%Ò%¨}Ð%Ñ=Ô=Ð=ð	>ð 	>ð 	>ñ 	>ô 	>ð 	>ð 	>ð 	>ð 	>ð 	>ð 	>øøøð 	>ð 	>ð 	>ð 	>à�Š�j¥# c¤mÑ"4Ô"4Ñ5Ô5Ð5Ø�Š�i¥ S¤]Ñ!3Ô!3Ñ4Ô4Ð4Ð4Ð4s   ÂB(Â(B,Â/B,c           	      ó0  — t          ¦   «         }t          ddt          j        dddd¬¦  «        }|                     |¦  «         |                      |                     ¦   «         ¦  «         |                     d¬	¦  «        }|                      |¦  «         d
S )zLSecurity Gate passes when only LOW/INFO findings exist and no CRITICAL/HIGH.zSEC-002zVerbose Debug Log in Stagingzgateway.network_gatewayz&Log outputs partial session identifierzCheck server.logzMask session token in loggerr   zv2026.1-rc2r   N)	r   r   r   ÚLOWr    ÚassertFalser"   r$   r!   )r   r(   Úlow_vulnÚresults       r   Ú9test_security_gate_passes_when_clean_or_low_severity_onlyzYTestIndependentSecurityDivision.test_security_gate_passes_when_clean_or_low_severity_only9   s�   € å Ñ"Ô"ˆÝ(ØØ0Ý"Ô&Ø/Ø@Ø/Ø6ð
ñ 
ô 
ˆð 	×!Ò! (Ñ+Ô+Ð+à×Ò˜×0Ò0Ñ2Ô2Ñ3Ô3Ð3Ø×*Ò*°MÐ*ÑBÔBˆØ�Š˜ÑÔÐÐÐr   c                 óò   — t          ¦   «         }|                     ddd¬¦  «        }|                      |j        ¦  «         |                      |j        d¦  «         |                      |j        d¦  «         dS )zVRed team fuzzer attacks movement authority with speedhack injection -> Defense blocks.ée   g      @g     Àb@)Ú	player_idÚ
base_speedÚclaimed_leapr   )ç      $@r7   N)r   Úrun_speedhack_injection_attackr!   Ú
is_blockedÚassertGreaterÚsuspicion_scoreÚassertEqualÚreconciled_coords©r   ÚfuzzerÚreports      r   Ú0test_automated_red_team_fuzzer_speedhack_defensezPTestIndependentSecurityDivision.test_automated_red_team_fuzzer_speedhack_defenseK   sv   € å'Ñ)Ô)ˆØ×6Ò6ÀÐQTÐchÐ6ÑiÔiˆØ�Š˜Ô)Ñ*Ô*Ð*Ø×Ò˜6Ô1°1Ñ5Ô5Ð5Ø×Ò˜Ô1°<Ñ@Ô@Ð@Ð@Ð@r   c                 ó*  — t          ¦   «         }|                     ddddd¬¦  «        }|                      |j        ¦  «         |                      |j        d¦  «         |                      |j        d¦  «         |                      |j        ¦  «         dS )	zYRed team fuzzer executes concurrent double-spend race condition attack -> Defense blocks.Úprimal_ring_99Útrader_aÚexploiter_bÚexploiter_céd   )Ú	item_uuidÚ	seller_idÚ	buyer1_idÚ	buyer2_idÚpriceé   N)	r   Úrun_concurrent_dupe_attackr!   r9   r<   Úsuccessful_purchasesÚblocked_purchasesr.   Úitem_duplicatedr>   s      r   Ú*test_automated_red_team_fuzzer_dupe_attackzJTestIndependentSecurityDivision.test_automated_red_team_fuzzer_dupe_attackS   sœ   € å'Ñ)Ô)ˆØ×2Ò2Ø&Ø Ø#Ø#Øð 3ñ 
ô 
ˆð 	�Š˜Ô)Ñ*Ô*Ð*Ø×Ò˜Ô4°aÑ8Ô8Ð8Ø×Ò˜Ô1°1Ñ5Ô5Ð5Ø×Ò˜Ô/Ñ0Ô0Ð0Ð0Ð0r   c                 ó  — t          ¦   «         }|                     d¬¦  «        }|                      |j        ¦  «         |                      d|j                             ¦   «         v pd|j                             ¦   «         v ¦  «         dS )zURed team fuzzer injects bit-flipped ciphertext -> AEAD Poly1305 authentication fails.s   ADD_CURRENCY_HON_NGUYEN_999999)ÚpayloadÚtamperÚ	signatureN)r   Úrun_bitflip_tampering_attackr!   r9   Údefense_triggerÚlowerr>   s      r   Ú.test_automated_red_team_fuzzer_tampered_packetzNTestIndependentSecurityDivision.test_automated_red_team_fuzzer_tampered_packetb   s   € å'Ñ)Ô)ˆØ×4Ò4Ð=^Ð4Ñ_Ô_ˆØ�Š˜Ô)Ñ*Ô*Ð*Ø�Š˜ FÔ$:×$@Ò$@Ñ$BÔ$BÐBÐsÀkÐU[ÔUk×UqÒUqÑUsÔUsÐFsÑtÔtÐtÐtÐtr   c                 óê  — t          d¬¦  «        }|                     ddd¬¦  «         |                      |                     d¦  «        ¦  «         |                     ddd¬¦  «         |                      |                     d¦  «        ¦  «         |                     d¦  «        }|                      |¦  «         |                      |d	         d
¦  «         |                      |d         d¦  «         dS )zYEconomic Auditor detects abnormal velocity of Primal Stone inflow -> Triggers Quarantine.iˆ  )Úmax_hourly_currency_inflowÚacc_fair_playerÚ	HonNguyenéÈ   )Ú
account_idÚcurrencyÚamountÚacc_suspecti`ê  ÚstatusÚLOCKED_FOR_AUDITÚinflow_amountN)	r   Úrecord_inflowr.   Úis_quarantinedr!   Úget_quarantine_recordÚassertIsNotNoner<   r:   )r   ÚdetectorÚevents      r   Ú<test_economic_anomaly_detector_triggers_emergency_quarantinez\TestIndependentSecurityDivision.test_economic_anomaly_detector_triggers_emergency_quarantinei   s÷   € å*ÀdÐKÑKÔKˆð 	×ÒÐ*;ÀkÐZ]ÐÑ^Ô^Ð^Ø×Ò˜×0Ò0Ð1BÑCÔCÑDÔDÐDð 	×Ò¨-À+ÐV[ÐÑ\Ô\Ð\Ø�Š˜×/Ò/°Ñ>Ô>Ñ?Ô?Ð?ð ×.Ò.¨}Ñ=Ô=ˆØ×Ò˜UÑ#Ô#Ð#Ø×Ò˜˜xœÐ*<Ñ=Ô=Ð=Ø×Ò˜5 Ô1°4Ñ8Ô8Ð8Ð8Ð8r   c                 ó”  — t          d¬¦  «        }|                     dddd¬¦  «        }|                      |j        ¦  «         |                     dddd¬¦  «        }|                      |j        ¦  «         |                      d	|j        ¦  «         |                      d
|j        ¦  «         |                      d|j        ¦  «         dS )zXBinary Integrity Attestor verifies client signature and flags cracked/jailbroken client.zcom.freeexile.game.ios)Úexpected_bundle_idFzSHA256:OFFICIAL_APPLE_CERT_2026)Ú	bundle_idÚhas_jailbreak_artifactsÚis_debugger_attachedÚsignature_fingerprintzcom.freeexile.cracked.modTÚUNKNOWN_REPACK_CERTÚBUNDLE_ID_MISMATCHÚJAILBREAK_DETECTEDÚDEBUGGER_ATTACHEDN)r	   Úverify_client_environmentr!   Ú
is_trustedr.   r%   Úviolation_flags)r   ÚattestorÚ	valid_resÚattacked_ress       r   Ú;test_binary_integrity_attestor_detects_jailbreak_and_repackz[TestIndependentSecurityDivision.test_binary_integrity_attestor_detects_jailbreak_and_repack{   sá   € å*Ð>VÐWÑWÔWˆð ×6Ò6Ø.Ø$)Ø!&Ø"Cð	 7ñ 
ô 
ˆ	ð 	�Š˜	Ô,Ñ-Ô-Ð-ð  ×9Ò9Ø1Ø$(Ø!%Ø"7ð	 :ñ 
ô 
ˆð 	×Ò˜Ô0Ñ1Ô1Ð1Ø�ŠÐ*¨LÔ,HÑIÔIÐIØ�ŠÐ*¨LÔ,HÑIÔIÐIØ�ŠÐ)¨<Ô+GÑHÔHÐHÐHÐHr   c                 óÒ  — | j                              dd¬¦  «        }|                      |j        t          j        t          j        g¦  «         |                      |j        d¦  «         |  	                    |j
        ¦  «         |                     ¦   «         }|                      d|                     ¦   «         ¦  «         |                      d|                     ¦   «         ¦  «         dS )zRAuditor runs end-to-end full audit, executes Red Team drills, and compiles report.z2026.1-SEC-AUDITÚSTAGING)Úbuild_versionÚenvironmentr   u+   BÃ�O CÃ�O KIá»‚M TOÃ�N AN NINH Ä�á»˜C Láº¬Pu'   KHá»�I Báº¢O Máº¬T & CHá»�NG GIAN Láº¬NN)r   Úexecute_full_security_auditr%   rd   r   ÚPASSEDÚVETOEDr:   Útests_executedrj   Úaudit_idÚto_markdownÚupper)r   Ú	audit_resÚmarkdown_summarys      r   Ú3test_consolidated_independent_security_audit_reportzSTestIndependentSecurityDivision.test_consolidated_independent_security_audit_report”   sÖ   € à”L×<Ò<Ø,Ø!ð =ñ 
ô 
ˆ	ð 	�Š�iÔ&Õ):Ô)AÕCTÔC[Ð(\Ñ]Ô]Ð]Ø×Ò˜9Ô3°QÑ7Ô7Ð7Ø×Ò˜YÔ/Ñ0Ô0Ð0à$×0Ò0Ñ2Ô2ÐØ�ŠÐCÐEU×E[ÒE[ÑE]ÔE]Ñ^Ô^Ð^Ø�ŠÐ?ÐAQ×AWÒAWÑAYÔAYÑZÔZÐZÐZÐZr   N)Ú__name__Ú
__module__Ú__qualname__r   r+   r1   rA   rR   rZ   rm   r~   rŒ   © r   r   r   r       s©   € € € € € ð4ð 4ð 4ð5ð 5ð 5ð* ð  ð  ð$Að Að Að1ð 1ð 1ðuð uð uð9ð 9ð 9ð$Ið Ið Ið2[ð [ð [ð [ð [r   r   Ú__main__)Ú__doc__ÚbuiltinsÚ@py_builtinsÚ_pytest.assertion.rewriteÚ	assertionÚrewriteÚ
@pytest_arÚunittestÚsysÚosÚjsonÚpathÚinsertÚabspathÚjoinÚdirnameÚ__file__Ú%security.independent_security_auditorr   r   r   r   r   r   r	   r
   r   ÚTestCaser   r�   Úmainr�   r   r   ú<module>r¦      se  ððð ð € € € € € € € € € € € € €€€€Ø 
€
€
€
Ø 	€	€	€	Ø €€€ð „‡‚��2”7—?’? 2¤7§<¢<°´·²ÀÑ0IÔ0IÈ>Ñ#ZÔ#ZÑ[Ô[Ñ \Ô \Ð \ð
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð 
ð@[ð @[ð @[ð @[ð @[ hÔ&7ñ @[ô @[ð @[ðF ˆzÒÐØ€H„M�O„O€O€O€Oð Ðr   