25 lines
909 B
TOML
25 lines
909 B
TOML
|
schema_version = 8
|
||
|
|
|
||
|
|
[[tasks]]
|
||
|
|
agent = "security_lead"
|
||
|
|
task_kind = "analysis"
|
||
|
|
task = "Inspect the runtime security boundaries read-only and explain how candidate findings become empirically accepted or rejected."
|
||
|
|
mode = "read-only"
|
||
|
|
wall_timeout_seconds = 600
|
||
|
|
|
||
|
|
[[tasks]]
|
||
|
|
agent = "vulnerability_hunter"
|
||
|
|
task_kind = "security_review"
|
||
|
|
task = "Audit one narrow input-validation boundary in libexec read-only. Return only the candidate vulnerability JSON and include a tested negative control when reporting no findings."
|
||
|
|
backend = "mcp"
|
||
|
|
mode = "read-only"
|
||
|
|
wall_timeout_seconds = 900
|
||
|
|
|
||
|
|
[[tasks]]
|
||
|
|
agent = "finding_verifier"
|
||
|
|
task_kind = "security_verification"
|
||
|
|
task = "Empirically test whether profile schema v1 is rejected by the current compiler without editing files or using the network. Return only the validation JSON with captured command evidence."
|
||
|
|
backend = "mcp"
|
||
|
|
mode = "read-only"
|
||
|
|
wall_timeout_seconds = 900
|