chore: add send file sandbox evidence package

This commit is contained in:
zhaoyilun
2026-07-11 00:08:56 +08:00
parent fab0f0f5c0
commit 7db022469c
6 changed files with 843 additions and 6 deletions

View File

@@ -651,7 +651,7 @@ git push gitea main
- WinHelper recorder executable and dependencies
- Capability smoke executable if already built
- [ ] **Step 1: Build verifier first**
- [x] **Step 1: Build verifier first**
```powershell
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-send-file-sandbox-gate-package.ps1
@@ -659,15 +659,15 @@ powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-send-file-san
Expected before implementation: FAIL because package builder does not exist.
- [ ] **Step 2: Implement package builder**
- [x] **Step 2: Implement package builder**
The builder outputs `runs/send-file-sandbox-gate-package.zip` and includes only executables/scripts/docs needed by an online operator.
- [ ] **Step 3: Implement returned-package validator**
- [x] **Step 3: Implement returned-package validator**
Validator requires file send attempt timestamps, before/after recorder output, file SHA256, observed upload/sent status, and duplicate-send confirmation.
- [ ] **Step 4: Verify and commit**
- [x] **Step 4: Verify and commit**
```powershell
git diff --check
@@ -682,6 +682,16 @@ git push gitea main
**Acceptance gate:** 用户可以把一个包带到可登录环境采集发文件证据。
**R9 Result:**
- Added `scripts/package-send-file-sandbox-gate.ps1`, which builds `runs/send-file-sandbox-gate-package.zip`.
- Added `scripts/verify-send-file-sandbox-gate-package.ps1`; the first run failed before the builder existed, then passed after implementation.
- Added `scripts/validate-returned-send-file-sandbox-package.ps1` for future returned online/internal sandbox packages.
- Added `docs/source-discovery/2026-07-10-send-file-sandbox-gate.md`.
- The package includes recorder binaries, capability smoke executable, `FILE-SEND-INPUTS.template.json`, operator instructions, `CREATE-FILE-RETURN-ZIP.ps1`, and `RUN-FILE-RECORDING-SUITE.bat`.
- Local verifier generated and validated the package; production `isphere_send_file` remains blocked.
- Returned-package validator was checked with a temporary strict-pass fixture.
---
### R10: Receive-file download resolver v2 diagnostic