malicious-decl-catalog-enable
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
alice enables the declared-but-off gym-bad-payload through the service-enable catalog entry (the owner made it user-controllable). The incident names alice, the transaction, and planarian/overrides.nix as the path.
| Harness | Scoring | Expects | Latest verdict |
|---|---|---|---|
| fake, vm | must-pass | declaration_origin: file planarian/overrides.nix, path ApplyChange service-enable, unit service:gym-bad-payload, when txn, who user:1000; incident: service:gym-web | fake: PASS; VM: not run in this build |
What it exercises
No invariant by name.