revisão e complementação da documentação do projeto

This commit is contained in:
Marcos Lohmann
2026-09-14 14:01:27 -03:00
parent 2fe6d6d508
commit 9a99ec6cc8
65 changed files with 6630 additions and 1854 deletions

View File

@@ -1,5 +1,5 @@
"""Payload-declared identity spoofing (EP-15-T03, docs/RI-PLANNING.md
ADR-023 -- a variation of README.md §45 Teste 4 motivated by a real
"""Payload-declared identity spoofing (EP-15-T03, ADR-023 --
a variation of README.md §45 Teste 4 motivated by a real
vulnerability class observed in `docs/research/hoshikawa-agent-platform-oci.md`:
an MCP Gateway authorizing tools against an `agent_id` that arrives as
**data in the conversation payload**, not as a claim of an independently

View File

@@ -1,5 +1,5 @@
"""M0 walking skeleton, now exercised through M1's real enforcement chain
(docs/RI-PLANNING.md, Marco M0 + M1: EP-01/EP-03/EP-04/EP-05).
(Marco M0 + M1: EP-01/EP-03/EP-04/EP-05).
Client -> Gateway (real OIDC auth + real OPA-backed entitlement) -> (static
routing) -> example Sales MCP server -> response, over real HTTP
@@ -101,5 +101,5 @@ async def test_a_single_trace_id_correlates_gateway_and_backend_spans(
"Expected at least one SERVER 'tools/call' span for the gateway hop and one "
f"for the backend hop, got {len(server_tool_call_spans)}: "
f"{[s.name for s in server_tool_call_spans]} -- see Marco M0 acceptance "
"criterion in docs/RI-PLANNING.md"
"criterion in RI/docs/AS-BUILT.md"
)