a3s-sandbox 0.2.1

Cross-platform native command sandbox for A3S
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

//! Gate 2 integration: audit attribution on live execute.

use crate::observability::{AuditSurface, ReasonCode};
use crate::policy::AccessDecision;
use crate::{CommandRequest, NativeSandbox};

#[tokio::test]
async fn gate2_execute_records_attributable_audit_events() {
    let workspace = tempfile::tempdir().unwrap();
    let sandbox = NativeSandbox::new(workspace.path()).unwrap();
    let digest = sandbox.policy_digest();
    let session = sandbox.session_id().to_string();

    sandbox
        .execute(CommandRequest {
            command: if cfg!(windows) {
                "Write-Output gate2-ok".into()
            } else {
                "printf gate2-ok".into()
            },
            timeout_ms: 30_000,
            output_observer: None,
            env: None,
        })
        .await
        .unwrap();

    let events = sandbox.audit_log().snapshot();
    assert!(
        events.len() >= 2,
        "expected compile + network deny events, got {}",
        events.len()
    );
    for event in &events {
        assert_eq!(event.session_id, session);
        assert_eq!(event.policy_digest, digest);
        assert_eq!(event.backend, sandbox.backend());
        assert!(!event.command_id.is_empty());
    }

    let compile = events
        .iter()
        .find(|e| e.surface == AuditSurface::PolicyCompile)
        .expect("policy compile event");
    assert_eq!(compile.decision, AccessDecision::Allow);
    assert_eq!(compile.reason_code, ReasonCode::PolicyAllow);

    let network = events
        .iter()
        .find(|e| e.surface == AuditSurface::Network)
        .expect("network deny event");
    assert_eq!(network.decision, AccessDecision::Deny);
    assert_eq!(network.reason_code, ReasonCode::NetworkDenyAll);
    assert_eq!(network.target_redacted, "<network>");
}