admin/isphere-ai-bridge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: harden send sandbox evidence package v2

Browse Source
This commit is contained in:
zhaoyilun
2026-07-10 20:51:50 +08:00
parent 713917d929
commit 281b9dda2a
8 changed files with 276 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
docs/source-discovery/2026-07-10-send-sandbox-gate.md
View File

@@ -57,6 +57,8 @@ recorder/variants/ISphereLiveProbeRecorder-x86.exe
| --- | --- |
| `README.txt` | Explains local login limitation, online sandbox requirement, and one-send rule. |
| `OPERATOR-STEPS.md` | Step-by-step operator procedure. |
| `RETURN-CHECKLIST-V2.md` | Strict-v2 return checklist with required manual timestamps and before/after evidence flags. |
| `SANDBOX-SEND-INPUTS.schema.json` | Machine-readable schema for the strict-v2 operator input fields. |
| `SANDBOX-SEND-INPUTS.template.json` | Template for sandbox target, content hash, idempotency key, and observed result. |
| `EXPECTED-RETURN-FILES.txt` | Return package acceptance checklist. |
| `RUN-RECORDING-SUITE.bat` | Top-level guided before/manual-send/after/return-zip flow. |
@@ -67,7 +69,8 @@ recorder/variants/ISphereLiveProbeRecorder-x86.exe
| `run-before-recorder.bat` | Runs read-only recorder before the manual sandbox send. |
| `run-after-recorder.bat` | Runs read-only recorder after the manual sandbox send. |
| `compute-content-hash.ps1` | Computes SHA256 for the exact test message body. |
| `make-return-zip.ps1` | Creates the return zip after before/after recordings and input JSON are present. |
| `CREATE-RETURN-ZIP.ps1` | Strict-v2 return zip creator; refuses missing after-recorder output or required v2 fields. |
| `make-return-zip.ps1` | Compatibility wrapper that calls `CREATE-RETURN-ZIP.ps1`. |
## Operator rules
@@ -81,6 +84,13 @@ DO_NOT_SEND_SECOND_TIME
content_sha256
idempotency_key
success_ack_or_sent_record
operator_started_at_local
operator_clicked_send_at_local
operator_observed_success_at_local
before_recorder_present
after_recorder_present
success_ack_or_sent_record_present
duplicate_second_send_attempted
```
Required online procedure:
@@ -92,8 +102,9 @@ Required online procedure:
5. Record `success_ack_or_sent_record`.
6. Do not send a second copy.
7. Continue the guided flow, or run `02-run-after-recorder.bat`.
8. Continue the guided flow, or run `03-make-return-zip.bat`.
9. Return the generated zip.
8. Set the strict-v2 booleans in `SANDBOX-SEND-INPUTS.json`: `before_recorder_present=true`, `after_recorder_present=true`, `success_ack_or_sent_record_present=true`, and `duplicate_second_send_attempted=false`.
9. Continue the guided flow, or run `03-make-return-zip.bat`.
10. Return the generated zip.
## Safety boundary
@@ -118,6 +129,7 @@ R6c can pass only after a returned package proves all of the following:
- observed success/ack or local sent-record evidence;
- confirmation that no second send was made;
- before/after read-only recorder outputs are present.
- strict-v2 fields are complete: `operator_started_at_local`, `operator_clicked_send_at_local`, `operator_observed_success_at_local`, `before_recorder_present`, `after_recorder_present`, `success_ack_or_sent_record_present`, and `duplicate_second_send_attempted=false`.
## Current decision
@@ -126,3 +138,14 @@ R6c local-preparation slice is complete, including the consolidated recording su
Production `isphere_send_message` remains blocked.
Next node: **R6d returned sandbox evidence intake** after the user returns the generated package.
## R6j strict-v2 package hardening
R6j upgrades the recording package so the previously missing R6d evidence cannot be omitted silently:
- `scripts\verify-send-sandbox-gate-package.ps1` now requires `RETURN-CHECKLIST-V2.md`, `SANDBOX-SEND-INPUTS.schema.json`, `CREATE-RETURN-ZIP.ps1`, and all strict-v2 field names.
- `CREATE-RETURN-ZIP.ps1` refuses to create the return zip unless before/after recorder directories contain files and strict-v2 fields are present.
- `scripts\validate-returned-send-sandbox-package.ps1` accepts `-ZipPath` and `-StrictV2`; strict mode exits non-zero when the returned package does not prove the full gate.
- The older partial package `C:\Users\zhaoy\Downloads\1631.zip` remains `partial_use_only` and `strict_v2_pass=false`.
Current decision: production `isphere_send_message` remains blocked. The next returned package must be generated from the R6j strict-v2 package to pass the full gate.