mirror of
https://github.com/garrytan/gstack.git
synced 2026-05-06 05:35:46 +02:00
6d6aa3be3c
Adds MOCK_CLAUDE_SCENARIO=tool_result_injection. Emits a Bash tool_use followed by a user-role tool_result whose content is a classic DAN-style prompt-injection string. The warm TestSavantAI classifier trips at 0.9999 on this text, reliably firing the tool-output BLOCK + review flow for the full-stack E2E. Stays alive up to 120s so a test has time to propagate the user's review decision via /security-decision + the on-disk decision file. SIGTERM exits 143 on user-confirmed block. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>