mirror of
https://github.com/mcloh/Enterprise-MCP-Service-Bus.git
synced 2026-11-05 22:14:11 +00:00
revisão e complementação da documentação do projeto
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
"""Payload-declared identity spoofing (EP-15-T03, docs/RI-PLANNING.md
|
||||
ADR-023 -- a variation of README.md §45 Teste 4 motivated by a real
|
||||
"""Payload-declared identity spoofing (EP-15-T03, ADR-023 --
|
||||
a variation of README.md §45 Teste 4 motivated by a real
|
||||
vulnerability class observed in `docs/research/hoshikawa-agent-platform-oci.md`:
|
||||
an MCP Gateway authorizing tools against an `agent_id` that arrives as
|
||||
**data in the conversation payload**, not as a claim of an independently
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
"""M0 walking skeleton, now exercised through M1's real enforcement chain
|
||||
(docs/RI-PLANNING.md, Marco M0 + M1: EP-01/EP-03/EP-04/EP-05).
|
||||
(Marco M0 + M1: EP-01/EP-03/EP-04/EP-05).
|
||||
|
||||
Client -> Gateway (real OIDC auth + real OPA-backed entitlement) -> (static
|
||||
routing) -> example Sales MCP server -> response, over real HTTP
|
||||
@@ -101,5 +101,5 @@ async def test_a_single_trace_id_correlates_gateway_and_backend_spans(
|
||||
"Expected at least one SERVER 'tools/call' span for the gateway hop and one "
|
||||
f"for the backend hop, got {len(server_tool_call_spans)}: "
|
||||
f"{[s.name for s in server_tool_call_spans]} -- see Marco M0 acceptance "
|
||||
"criterion in docs/RI-PLANNING.md"
|
||||
"criterion in RI/docs/AS-BUILT.md"
|
||||
)
|
||||
|
||||
Reference in New Issue
Block a user