2026-06-29 00:40:52 +09:00
|
|
|
CONSTANTS
|
|
|
|
|
D1 = d1
|
|
|
|
|
S1 = s1
|
|
|
|
|
S2 = s2
|
|
|
|
|
R1 = r1
|
|
|
|
|
R2 = r2
|
|
|
|
|
R3 = r3
|
|
|
|
|
ExactCmd = exactCmd
|
|
|
|
|
PromptCmd = promptCmd
|
|
|
|
|
ShellCmd = shellCmd
|
|
|
|
|
EditedCmd = editedCmd
|
|
|
|
|
Domains <- DomainsFixture
|
|
|
|
|
Sessions <- SessionsFixture
|
|
|
|
|
Requests <- RequestsFixture
|
|
|
|
|
Commands <- CommandsFixture
|
|
|
|
|
NoSession = NoSession
|
|
|
|
|
NoRequest = NoRequest
|
|
|
|
|
NoCommand = NoCommand
|
|
|
|
|
NoApproval = NoApproval
|
|
|
|
|
SessionDomain <- SessionDomainFixture
|
|
|
|
|
SessionFingerprint <- SessionFingerprintFixture
|
|
|
|
|
DomainFingerprint <- DomainFingerprintFixture
|
|
|
|
|
ConfigSafe <- ConfigSafeFixture
|
2026-06-29 01:12:48 +09:00
|
|
|
SandboxIsolationSafe <- SandboxIsolationSafeFixture
|
2026-06-29 00:40:52 +09:00
|
|
|
RequestSession <- RequestSessionFixture
|
|
|
|
|
RequestCommand <- RequestCommandFixture
|
|
|
|
|
CertificateValid <- CertificateValidFixture
|
|
|
|
|
SignatureValid <- SignatureValidFixture
|
|
|
|
|
AutoRuleMatches <- AutoRuleMatchesFixture
|
|
|
|
|
CommandRequiresShell <- CommandRequiresShellFixture
|
|
|
|
|
|
|
|
|
|
SPECIFICATION Spec
|
|
|
|
|
\* Fully closed or failed application states intentionally have no successor.
|
|
|
|
|
CHECK_DEADLOCK FALSE
|
|
|
|
|
|
|
|
|
|
INVARIANTS
|
|
|
|
|
TypeOK
|
|
|
|
|
ConfigurationConfinement
|
2026-06-29 01:12:48 +09:00
|
|
|
SandboxNamespaceIsolation
|
2026-06-29 00:40:52 +09:00
|
|
|
OrderedNetworkStartup
|
|
|
|
|
PublishedDomainsReady
|
|
|
|
|
RegisteredSessionsConnected
|
|
|
|
|
AttachedSessionsValid
|
|
|
|
|
AuthenticatedRequestsOnly
|
|
|
|
|
HostExecutionAuthorized
|
|
|
|
|
AutoApprovalNoShell
|
|
|
|
|
TerminalIsolation
|
|
|
|
|
NoOrphanHostProcess
|
|
|
|
|
StateAnchorOwnership
|
2026-06-29 01:12:48 +09:00
|
|
|
ResultDeliveryStateConsistent
|
2026-06-29 00:40:52 +09:00
|
|
|
|
|
|
|
|
PROPERTIES
|
|
|
|
|
SessionEventuallyResolves
|
|
|
|
|
RequestEventuallyResolves
|
|
|
|
|
PromptEventuallyRestoresTerminal
|
|
|
|
|
EmptyDomainEventuallyStops
|
