Challenge — break the substrate in public
Six proposed adversarial scenarios with stable identifiers. Reproducible submissions can be reviewed for publication and attribution under the disclosure policy; this page does not promise a signed or permanent finding record.
- ·Submissions must include a reproducible artifact: receipt id, hash, or decoded payload from /verify.
- ·Attacks against the host, network, or unrelated infrastructure are out of scope.
- ·Safe-harbor terms and their limits are defined by /contact.
- ·Disclosure window: 30 days from acknowledged receipt before public Hall entry.
- ·Currency: reviewed attribution. No cash bounty is offered. Publication depends on reproducible evidence and the disclosure process.
- ·Doctrine: if you break it, doctrine adapts publicly. See /changelog.
Standing challenges
These rows are proposed test scenarios, not proof that every named runtime surface is deployed or covered.
Bypass the Capability gate
Cause an action labelled MODEL_TRAIN to execute under an AC1 (Observer) token without triggering DENY or SAFE_HALT.
- surface
- Legion · /v1/execute
- scenario reference
- 0x9a3f12be4d77c081
Break receipt chain integrity
Produce two consecutive audit receipts where prev_hash does not equal the prior receipt_hash, signed by the published key.
- surface
- /witness · /verify
- scenario reference
- 0x71fa2d8b0c9e6043
Make Codex Deus Maximus self-contradict
Produce two requests within the same policy_version where Codex returns mutually-exclusive verdicts on logically-equivalent inputs.
- surface
- /legion · /playground
- scenario reference
- 0x44c1ee3f8a09b2d5
Evade STATE_REGISTER continuity
Cause an action to execute after a state-register heart-tick gap exceeding the published SLA without SAFE_HALT firing.
- surface
- Kernel · runtime
- scenario reference
- 0x2e8b07fa6d143c91
Provoke a silent ALLOW
Cause any meaningful action to execute with no corresponding receipt in /witness within the published commit window.
- surface
- Any execution path
- scenario reference
- 0xdb4319c70feab285
Force a Galahad identity false-positive
Cause Galahad to attest an identity it should reject under the published policy. Bonus: do it without leaving an audit trail.
- surface
- Identity gate · /legion
- scenario reference
- 0xa019287cef36014b
Hall of Findings
No signed Hall-of-Findings mechanism is established. Any future entry must identify its review status and supporting evidence.
no findings yet
No reviewed finding has been published on this surface.