oatf 0.4.0

Rust SDK for the Open Agent Threat Format (OATF)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

use oatf::parse::parse;

#[test]
fn action_deserialization_picks_correct_variant() {
    // Verify that oatf's Action deserializer picks the correct variant
    // based on the first non-extension key in the YAML map.
    let yaml = r#"
oatf: "0.1"
attack:
  execution:
    mode: mcp_server
    phases:
      - name: phase-1
        state:
          tools: []
        on_enter:
          - log:
              message: "Phase entered"
              level: info
        trigger:
          event: tools/call
      - name: phase-2
        description: "Terminal."
  indicators:
    - surface: tools/list
      target: "tools[*].description"
      pattern:
        contains: "test"
"#;
    let doc = parse(yaml).expect("parse should succeed");
    let actors = doc.attack.execution.phases.unwrap();
    let actions = actors[0].on_enter.as_ref().unwrap();
    assert_eq!(actions.len(), 1);

    let action_json = serde_json::to_value(&actions[0]).unwrap();
    assert!(
        action_json.get("log").is_some(),
        "Expected 'log' action variant, got: {}",
        action_json
    );
}