DataOps-platform/docs/validation/P3_WP08_FAILURE_INJECTION.json

{
  "work_package": "P3-WP08",
  "engineering_status": "ENGINEERING_COMPLETE_ENTERPRISE_THIRD_DOMAIN_UAT_BLOCKED",
  "cases": [
    {"id": "WP08-FI-01", "failure": "阶段顺序错误", "injection": "将 execute 放在 dry_run 前", "expected": "验证失败关闭，不生成 passed 报告", "scope": "local_contract"},
    {"id": "WP08-FI-02", "failure": "dry-run 写入", "injection": "dry_run.write_count=1", "expected": "验证失败关闭并保留审计摘要", "scope": "local_contract"},
    {"id": "WP08-FI-03", "failure": "恢复证据缺失", "injection": "将 diff|rollback 改为未知动作", "expected": "验证失败关闭", "scope": "local_contract"},
    {"id": "WP08-FI-04", "failure": "增量重放冲突", "injection": "游标回退或重复", "expected": "增量收集拒绝，最终状态不变化", "scope": "local_contract"},
    {"id": "WP08-FI-05", "failure": "敏感材料", "injection": "execution evidence 加入 URL、credential 或 raw rows", "expected": "验证失败关闭，不序列化敏感值", "scope": "local_contract"},
    {"id": "WP08-FI-06", "failure": "跨域隔离", "injection": "执行收据引用其他 domain", "expected": "验证失败关闭", "scope": "local_contract"},
    {"id": "WP08-FI-07", "failure": "模板不兼容", "injection": "模板代码与 manifest domain 不同", "expected": "验证失败关闭", "scope": "local_contract"},
    {"id": "WP08-FI-08", "failure": "企业输入未绑定", "injection": "保持 owner/source/UAT 用户 unbound", "expected": "报告 enterprise_uat=blocked_external", "scope": "TBD_EXTERNAL"},
    {"id": "WP08-FI-09", "failure": "包文件身份/TOCTOU", "injection": "输入为 hardlink、symlink、非普通文件或 open 前替换", "expected": "root FD/O_NOFOLLOW/fstat 失败关闭；不重读路径", "scope": "local_contract"},
    {"id": "WP08-FI-10", "failure": "闭合 schema/Unicode 绕过", "injection": "注入未知字段、raw_rows/records、URL、SQL、Cyrillic 同形 token 或超深/超大 JSON", "expected": "NFKC/同形扫描或 schema 限制失败关闭", "scope": "local_contract"},
    {"id": "WP08-FI-11", "failure": "连接器/边缘合同伪造", "injection": "伪造 run、未知 operation、跨合同、版本/schema digest 不匹配或篡改/过期 registry", "expected": "仅代码侧 ENGINEERING_EVIDENCE_ONLY registry 的已登记 P3-WP03/04 投影可通过；包内文件不能建信任", "scope": "local_contract"},
    {"id": "WP08-FI-12", "failure": "rollback 重放冲突", "injection": "late/伪高 fence、改变 execute identity/request/from/to/result digest 或独立 replay receipt", "expected": "rollback 必须等同同一 execute 的状态转换；只允许独立 exact_replay，冲突失败关闭", "scope": "local_contract"}
  ],
  "external_gates": ["third_business_domain", "enterprise_source_1", "network", "security_legal"]
}