[INFO] cloning repository https://github.com/A3S-Lab/Sentry [INFO] running `Command { std: "git" "-c" "credential.helper=" "-c" "credential.helper=/workspace/cargo-home/bin/git-credential-null" "clone" "--bare" "https://github.com/A3S-Lab/Sentry" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2FA3S-Lab%2FSentry", kill_on_drop: false }` [INFO] [stderr] Cloning into bare repository '/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2FA3S-Lab%2FSentry'... [INFO] running `Command { std: "git" "rev-parse" "HEAD", kill_on_drop: false }` [INFO] [stdout] efcb8ecd2549fdff0ba461246c30e3edfd468e7f [INFO] testing A3S-Lab/Sentry against 1.100.0-beta.1 for beta-1.100-2 [INFO] running `Command { std: "git" "clone" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2FA3S-Lab%2FSentry" "/workspace/builds/worker-5-tc2/source", kill_on_drop: false }` [INFO] [stderr] Cloning into '/workspace/builds/worker-5-tc2/source'... [INFO] [stderr] done. [INFO] started tweaking git repo https://github.com/A3S-Lab/Sentry [INFO] finished tweaking git repo https://github.com/A3S-Lab/Sentry [INFO] tweaked toml for git repo https://github.com/A3S-Lab/Sentry written to /workspace/builds/worker-5-tc2/source/Cargo.toml [INFO] validating manifest of git repo https://github.com/A3S-Lab/Sentry on toolchain 1.100.0-beta.1 [INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+1.100.0-beta.1" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }` [INFO] crate git repo https://github.com/A3S-Lab/Sentry already has a lockfile, it will not be regenerated [INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+1.100.0-beta.1" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }` [INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-5-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-5-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-m" "1610612736" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:3111399a4047eeb3a02b7a90e478d715f38a8c6669b5c4b49d30a17385265909" "sleep" "infinity", kill_on_drop: false }` [INFO] [stdout] a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1 [INFO] running `Command { std: "docker" "start" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1", kill_on_drop: false }` [INFO] running `Command { std: "docker" "inspect" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-w" "/opt/rustwide/workdir" "--user" "0:0" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1" "/opt/rustwide/cargo-home/bin/cargo" "+1.100.0-beta.1" "metadata" "--no-deps" "--format-version=1", kill_on_drop: false }` [INFO] running `Command { std: "docker" "inspect" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1" "/opt/rustwide/cargo-home/bin/cargo" "+1.100.0-beta.1" "build" "--frozen" "--message-format=json", kill_on_drop: false }` [INFO] [stderr] Compiling proc-macro2 v1.0.106 [INFO] [stderr] Compiling unicode-ident v1.0.24 [INFO] [stderr] Compiling quote v1.0.46 [INFO] [stderr] Compiling stable_deref_trait v1.2.1 [INFO] [stderr] Compiling serde_core v1.0.228 [INFO] [stderr] Compiling cfg-if v1.0.4 [INFO] [stderr] Compiling litemap v0.8.2 [INFO] [stderr] Compiling find-msvc-tools v0.1.9 [INFO] [stderr] Compiling writeable v0.6.3 [INFO] [stderr] Compiling shlex v2.0.1 [INFO] [stderr] Compiling version_check v0.9.5 [INFO] [stderr] Compiling serde v1.0.228 [INFO] [stderr] Compiling libc v0.2.186 [INFO] [stderr] Compiling icu_properties_data v2.2.0 [INFO] [stderr] Compiling icu_normalizer_data v2.2.0 [INFO] [stderr] Compiling utf8_iter v1.0.4 [INFO] [stderr] Compiling zeroize v1.9.0 [INFO] [stderr] Compiling typenum v1.20.1 [INFO] [stderr] Compiling itoa v1.0.18 [INFO] [stderr] Compiling smallvec v1.15.2 [INFO] [stderr] Compiling cc v1.2.65 [INFO] [stderr] Compiling memchr v2.8.2 [INFO] [stderr] Compiling crc32fast v1.5.0 [INFO] [stderr] Compiling rustls-pki-types v1.14.1 [INFO] [stderr] Compiling zmij v1.0.21 [INFO] [stderr] Compiling untrusted v0.9.0 [INFO] [stderr] Compiling percent-encoding v2.3.2 [INFO] [stderr] Compiling rustls v0.23.41 [INFO] [stderr] Compiling serde_json v1.0.150 [INFO] [stderr] Compiling simd-adler32 v0.3.9 [INFO] [stderr] Compiling adler2 v2.0.1 [INFO] [stderr] Compiling generic-array v0.14.7 [INFO] [stderr] Compiling ryu v1.0.23 [INFO] [stderr] Compiling hashbrown v0.17.1 [INFO] [stderr] Compiling regex-syntax v0.8.11 [INFO] [stderr] Compiling form_urlencoded v1.2.2 [INFO] [stderr] Compiling anyhow v1.0.102 [INFO] [stderr] Compiling fnv v1.0.7 [INFO] [stderr] Compiling once_cell v1.21.4 [INFO] [stderr] Compiling miniz_oxide v0.8.9 [INFO] [stderr] Compiling subtle v2.6.1 [INFO] [stderr] Compiling log v0.4.33 [INFO] [stderr] Compiling equivalent v1.0.2 [INFO] [stderr] Compiling cpufeatures v0.2.17 [INFO] [stderr] Compiling winnow v0.7.15 [INFO] [stderr] Compiling ryu-js v1.0.3 [INFO] [stderr] Compiling base64 v0.22.1 [INFO] [stderr] Compiling webpki-roots v1.0.8 [INFO] [stderr] Compiling webpki-roots v0.26.11 [INFO] [stderr] Compiling aho-corasick v1.1.4 [INFO] [stderr] Compiling flate2 v1.1.9 [INFO] [stderr] Compiling syn v2.0.118 [INFO] [stderr] Compiling ring v0.17.14 [INFO] [stderr] Compiling getrandom v0.2.17 [INFO] [stderr] Compiling crypto-common v0.1.7 [INFO] [stderr] Compiling block-buffer v0.10.4 [INFO] [stderr] Compiling digest v0.10.7 [INFO] [stderr] Compiling sha2 v0.10.9 [INFO] [stderr] Compiling a3s-acl v0.3.0 [INFO] [stderr] Compiling regex-automata v0.4.14 [INFO] [stderr] Compiling indexmap v2.14.0 [INFO] [stderr] Compiling synstructure v0.13.2 [INFO] [stderr] Compiling zerovec-derive v0.11.3 [INFO] [stderr] Compiling displaydoc v0.2.6 [INFO] [stderr] Compiling serde_derive v1.0.228 [INFO] [stderr] Compiling zerofrom-derive v0.1.7 [INFO] [stderr] Compiling yoke-derive v0.8.2 [INFO] [stderr] Compiling zerofrom v0.1.8 [INFO] [stderr] Compiling yoke v0.8.3 [INFO] [stderr] Compiling regex v1.12.4 [INFO] [stderr] Compiling zerovec v0.11.6 [INFO] [stderr] Compiling zerotrie v0.2.4 [INFO] [stderr] Compiling rustls-webpki v0.103.13 [INFO] [stderr] Compiling tinystr v0.8.3 [INFO] [stderr] Compiling potential_utf v0.1.5 [INFO] [stderr] Compiling icu_collections v2.2.0 [INFO] [stderr] Compiling icu_locale_core v2.2.0 [INFO] [stderr] Compiling icu_provider v2.2.0 [INFO] [stderr] Compiling icu_properties v2.2.0 [INFO] [stderr] Compiling icu_normalizer v2.2.0 [INFO] [stderr] Compiling vecmap-rs v0.2.4 [INFO] [stderr] Compiling hcl-primitives v0.1.11 [INFO] [stderr] Compiling hcl-edit v0.8.8 [INFO] [stderr] Compiling idna_adapter v1.2.2 [INFO] [stderr] Compiling idna v1.1.0 [INFO] [stderr] Compiling url v2.5.8 [INFO] [stderr] Compiling hcl-rs v0.18.7 [INFO] [stderr] Compiling ureq v2.12.1 [INFO] [stderr] Compiling a3s-sentry v0.8.0 (/opt/rustwide/workdir) [INFO] [stderr] Finished `dev` profile [unoptimized + debuginfo] target(s) in 51.34s [INFO] running `Command { std: "docker" "inspect" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1" "/opt/rustwide/cargo-home/bin/cargo" "+1.100.0-beta.1" "test" "--frozen" "--no-run" "--message-format=json", kill_on_drop: false }` [INFO] [stderr] Compiling a3s-sentry v0.8.0 (/opt/rustwide/workdir) [INFO] [stderr] Finished `test` profile [unoptimized + debuginfo] target(s) in 5.67s [INFO] running `Command { std: "docker" "inspect" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1" "/opt/rustwide/cargo-home/bin/cargo" "+1.100.0-beta.1" "test" "--frozen", kill_on_drop: false }` [INFO] [stderr] Finished `test` profile [unoptimized + debuginfo] target(s) in 0.19s [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/build/a3s-sentry/e754947eb0f81b0b/out/a3s_sentry-e754947eb0f81b0b) [INFO] [stdout] [INFO] [stdout] running 75 tests [INFO] [stdout] test agent::tests::args_substitute_skills_dir_or_drop_it ... ok [INFO] [stdout] test event::tests::egress_builds_deny_target ... ok [INFO] [stdout] test enforce::tests::dry_run_writes_nothing ... ok [INFO] [stdout] test enforce::tests::seeds_dedup_from_existing_deny_file_across_restart ... ok [INFO] [stdout] test event::tests::collector_heartbeat_is_control_plane_not_judged ... ok [INFO] [stdout] test agent::tests::prompt_includes_event_and_raw ... ok [INFO] [stdout] test enforce::tests::drops_unenforceable_ipv6_egress_literal ... ok [INFO] [stdout] test event::tests::parses_security_action_and_builds_no_target_for_wrong_action ... ok [INFO] [stdout] test enforce::tests::failed_write_is_retried_not_deduped ... ok [INFO] [stdout] test enforce::tests::appends_and_dedups ... ok [INFO] [stdout] test agent::tests::missing_binary_fails_closed_when_configured ... ok [INFO] [stdout] test event::tests::rejects_non_json_and_blank ... ok [INFO] [stdout] test agent::tests::missing_binary_fails_open_by_default ... ok [INFO] [stdout] test enforce::tests::rejects_injection_and_bare_exec_keeps_absolute ... ok [INFO] [stdout] test event::tests::unmodeled_variant_is_skipped_not_panicking ... ok [INFO] [stdout] test llm::tests::builds_messages_with_event_detail ... ok [INFO] [stdout] test llm::tests::block_verdict_attaches_natural_deny ... ok [INFO] [stdout] test llm::tests::parses_clean_and_fenced_verdicts ... ok [INFO] [stdout] test event::tests::parses_observer_toolexec_line ... ok [INFO] [stdout] test pipeline::tests::below_threshold_stays_sequential_and_l2_allow_short_circuits ... ok [INFO] [stdout] test pipeline::tests::escalates_l1_to_l2_to_l3 ... ok [INFO] [stdout] test metrics::tests::prometheus_has_all_counters_and_values ... ok [INFO] [stdout] test pipeline::tests::spec_cap_zero_disables_speculation_falls_back_to_sequential ... ok [INFO] [stdout] test pipeline::tests::model_activations_route_to_sae_tier ... ok [INFO] [stdout] test pipeline::tests::l1_block_is_final_no_l2_call ... ok [INFO] [stdout] test pipeline::tests::speculative_runs_l3_even_when_l2_allows_for_high_risk ... ok [INFO] [stdout] test llm::tests::rejects_unparseable ... ok [INFO] [stdout] test metrics::tests::serves_metrics_and_healthz_over_tcp ... ok [INFO] [stdout] test pipeline::tests::through_l2_preserves_escalation_and_never_calls_l3 ... ok [INFO] [stdout] test pipeline::tests::through_l2_returns_l1_final_without_calling_l2 ... ok [INFO] [stdout] test pipeline::tests::through_l2_returns_l2_allow_as_final_decision ... ok [INFO] [stdout] test pipeline::tests::through_l2_returns_l2_block_as_final_decision ... ok [INFO] [stdout] test pipeline::tests::unresolved_escalation_fail_open_allows_fail_closed_blocks ... ok [INFO] [stdout] test pipeline::tests::through_l1_never_calls_deeper_judges ... ok [INFO] [stdout] test policy::tests::reserved_header_cannot_be_hidden_in_policy_payload ... ok [INFO] [stdout] test pipeline::tests::l1_escalate_goes_straight_to_l3_when_no_l2 ... ok [INFO] [stdout] test pipeline::tests::through_l2_preserves_l1_escalation_when_l2_is_absent ... ok [INFO] [stdout] test policy_binding::tests::expectation_rejects_noncanonical_metadata ... ok [INFO] [stdout] test policy_binding::tests::binding_rejects_empty_long_and_whitespace_components ... ok [INFO] [stdout] test policy::tests::policy_payload_rejects_root_attributes ... ok [INFO] [stdout] test rules::tests::bad_regex_is_a_load_error ... ok [INFO] [stdout] test config::tests::sae_block_wires_the_tier_and_judges_activations ... ok [INFO] [stdout] test rules::tests::allows_benign ... ok [INFO] [stdout] test pipeline::tests::incomplete_exec_evidence_stops_at_l1_and_never_calls_models ... ok [INFO] [stdout] test rules::tests::blocks_metadata_ssrf ... ok [INFO] [stdout] test rules::tests::blocks_pipe_to_shell_and_names_exec_target ... ok [INFO] [stdout] test rules::tests::blocks_out_of_band_exfil_dns ... ok [INFO] [stdout] test inline::tests::prompt_injection_is_caught_and_blocked_fail_closed ... ok [INFO] [stdout] test inline::tests::private_key_block_is_masked_whole ... ok [INFO] [stdout] test inline::tests::two_distinct_secrets_both_masked_not_merged ... ok [INFO] [stdout] test inline::tests::masks_openai_key_and_restores ... ok [INFO] [stdout] test inline::tests::masks_only_the_value_of_a_labelled_secret ... ok [INFO] [stdout] test sae::tests::benign_output_allows ... ok [INFO] [stdout] test sae::tests::harmful_output_blocks_with_named_drivers ... ok [INFO] [stdout] test sae::tests::moderate_output_escalates ... ok [INFO] [stdout] test sae::tests::worst_category_not_diluted_by_benign ... ok [INFO] [stdout] test rules::tests::blocks_reverse_shell_critical ... ok [INFO] [stdout] test pipeline::tests::through_l1_marks_incomplete_evidence_ineligible ... ok [INFO] [stdout] test inline::tests::benign_content_allowed_with_no_redactions ... ok [INFO] [stdout] test rules::tests::escalates_base64_pipe_via_rce_primitive_catchall ... ok [INFO] [stdout] test rules::tests::blocks_setuid_root ... ok [INFO] [stdout] test inline::tests::overlapping_detectors_yield_one_span ... ok [INFO] [stdout] test inline::tests::masks_stripe_and_google_api_keys ... ok [INFO] [stdout] test rules::tests::escalates_k8s_serviceaccount_token_read ... ok [INFO] [stdout] test rules::tests::loads_hcl_policy ... ok [INFO] [stdout] test rules::tests::escalates_possible_secret_not_block ... ok [INFO] [stdout] test sdk::tests::evaluate_and_enforce_writes_deny_file ... ok [INFO] [stdout] test sdk::tests::builds_from_acl_and_judges_builtins ... ok [INFO] [stdout] test rules::tests::incomplete_command_still_blocks_when_captured_prefix_is_dangerous ... ok [INFO] [stdout] test rules::tests::blocks_rm_rf_bare_root_but_not_subpaths ... ok [INFO] [stdout] test rules::tests::live_rules_reload_picks_up_new_policy ... ok [INFO] [stdout] test rules::tests::incomplete_benign_prefix_escalates_instead_of_allowing ... ok [INFO] [stdout] test sdk::tests::evaluate_through_l2_preserves_unresolved_escalation ... ok [INFO] [stdout] test sdk::tests::evaluate_l1_preserves_escalation_without_fail_mode_resolution ... ok [INFO] [stdout] test policy::tests::producer_rejects_envelopes_over_the_wire_budget ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 75 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.15s [INFO] [stdout] [INFO] [stderr] Running unittests src/bin/sentry.rs (/opt/rustwide/target/debug/build/a3s-sentry/11163c28afd7a7e4/out/sentry-11163c28afd7a7e4) [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stderr] Running tests/integration.rs (/opt/rustwide/target/debug/build/a3s-sentry/497d212eea8807bc/out/integration-497d212eea8807bc) [INFO] [stdout] [INFO] [stdout] running 13 tests [INFO] [stdout] test version_flag_prints_version ... ok [INFO] [stdout] test blocks_metadata_ssrf_and_writes_egress_deny ... ok [INFO] [stdout] test deny_files_are_consumable_by_observer_guards ... ok [INFO] [stdout] test metrics_endpoint_serves_live_counters ... ok [INFO] [stdout] test skips_malformed_input_without_crashing ... ok [INFO] [stdout] test l2_llm_round_trip_via_mock_endpoint ... ok [INFO] [stdout] test l3_agent_block_is_enforced ... ok [INFO] [stdout] test allows_benign_silently ... ok [INFO] [stdout] test dry_run_blocks_but_writes_no_deny_file ... ok [INFO] [stdout] test fail_closed_blocks_but_fail_open_allows_same_escalation ... ok [INFO] [stdout] test overload_never_converts_incomplete_exec_evidence_to_allow ... ok [INFO] [stdout] test overload_degrades_under_slow_l3_and_tiny_queue ... ok [INFO] [stdout] test hot_reload_applies_new_policy_live ... ok [INFO] [stderr] Running tests/policy_envelope.rs (/opt/rustwide/target/debug/build/a3s-sentry/cc97b686405ce5f4/out/policy_envelope-cc97b686405ce5f4) [INFO] [stdout] [INFO] [stdout] test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.32s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 7 tests [INFO] [stderr] Doc-tests a3s_sentry [INFO] [stdout] test tampered_policy_or_declared_digest_is_rejected ... ok [INFO] [stdout] test policy_digest_ignores_formatting_but_preserves_policy_semantics ... ok [INFO] [stdout] test stale_future_and_digest_mismatched_expectations_fail_closed ... ok [INFO] [stdout] test every_workload_identity_dimension_must_match ... ok [INFO] [stdout] test public_contract_types_are_send_and_sync ... ok [INFO] [stdout] test canonical_envelope_round_trips_and_verifies_exact_expectation ... ok [INFO] [stdout] test bounded_admission_rejects_empty_misordered_and_unknown_envelopes_without_leaks ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] running `Command { std: "docker" "inspect" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1", kill_on_drop: false }` [INFO] running `Command { std: "docker" "rm" "-f" "a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1", kill_on_drop: false }` [INFO] [stdout] a5e72d4c7c8889d1a45e177a55c351558b2d40e9342c3183108a5637b8682ba1