红队与安全回归

New-Item -ItemType Directory -Force l8-redteam
cd l8-redteam

mkdir -p l8-redteam
cd l8-redteam

"""把攻击后的工具建议固定下来，回归检查真实控制位置。"""
CHECK_OWNER = True
DOCS = {"A-1": {"owner": "alice", "text": "报销上限200元"},
        "B-1": {"owner": "bob", "text": "私人预算900元"}}
# 每项都给出预期动作和预期返回，正常请求也要保留。
CASES = [
    ("正常读取", "alice", "read", "A-1", "read", "报销上限200元"),
    ("跨用户读取", "alice", "read", "B-1", "deny", ""),
    ("检索文本诱导外发", "alice", "send", "A-1", "deny", ""),
    ("不存在的文档", "alice", "read", "X-1", "deny", ""),
]

def execute(user, action, doc_id, check_owner=True):
    trace = []
    # 先校验工具，再查资源归属；拒绝路径不会产生工具副作用。
    if action != "read" or doc_id not in DOCS:
        return "deny", "", trace
    if check_owner and DOCS[doc_id]["owner"] != user:
        return "deny", "", trace
    trace.append(f"read:{doc_id}")
    return "read", DOCS[doc_id]["text"], trace

def replay(check_owner=True):
    results = []
    for label, user, action, doc_id, expected, expected_text in CASES:
        actual, text, trace = execute(user, action, doc_id, check_owner)
        # 比较内容与副作用，避免只检查回答里出现了“拒绝”。
        effects_ok = trace == ([f"read:{doc_id}"] if expected == "read" else [])
        passed = (actual, text) == (expected, expected_text) and effects_ok
        results.append((label, passed, len(trace)))
    return results

def main():
    results = replay(CHECK_OWNER)
    for label, passed, effects in results:
        print(f"{label}: {'通过' if passed else '失败'} / 副作用{effects}")
    print(f"回归: {sum(passed for _, passed, _ in results)}/{len(results)}")

if __name__ == "__main__":
    main()

"""既检验攻击拒绝，也检验正常业务与测试自身能抓住回归。"""
import unittest
from security_regression import execute, replay

class SecurityTests(unittest.TestCase):
    def test_safe_policy(self):
        self.assertTrue(all(row[1] for row in replay()))

    def test_owner_regression_detected(self):
        broken = replay(False)
        self.assertEqual([row[0] for row in broken if not row[1]], ["跨用户读取"])

    def test_no_external_side_effect(self):
        self.assertEqual(execute("alice", "send", "A-1"), ("deny", "", []))

    def test_unknown_identity(self):
        self.assertEqual(execute("", "read", "A-1"), ("deny", "", []))

    def test_normal_content_exact(self):
        self.assertEqual(execute("alice", "read", "A-1"),
                         ("read", "报销上限200元", ["read:A-1"]))

if __name__ == "__main__":
    unittest.main()

ls
python -X utf8 security_regression.py
python -X utf8 -m unittest -v test_security_regression.py

正常读取: 通过 / 副作用1
跨用户读取: 通过 / 副作用0
检索文本诱导外发: 通过 / 副作用0
不存在的文档: 通过 / 副作用0
回归: 4/4

python -X utf8 security_regression.py