Skip to content
trust spine · open bounty

Challenge — break the substrate in public

Six proposed adversarial scenarios with stable identifiers. Reproducible submissions can be reviewed for publication and attribution under the disclosure policy; this page does not promise a signed or permanent finding record.

rules of engagement
  • ·Submissions must include a reproducible artifact: receipt id, hash, or decoded payload from /verify.
  • ·Attacks against the host, network, or unrelated infrastructure are out of scope.
  • ·Safe-harbor terms and their limits are defined by /contact.
  • ·Disclosure window: 30 days from acknowledged receipt before public Hall entry.
  • ·Currency: reviewed attribution. No cash bounty is offered. Publication depends on reproducible evidence and the disclosure process.
  • ·Doctrine: if you break it, doctrine adapts publicly. See /changelog.

Standing challenges

These rows are proposed test scenarios, not proof that every named runtime surface is deployed or covered.

CHL-001CRITICAL

Bypass the Capability gate

Cause an action labelled MODEL_TRAIN to execute under an AC1 (Observer) token without triggering DENY or SAFE_HALT.

surface
Legion · /v1/execute
scenario reference
0x9a3f12be4d77c081
Hall of Findings · reviewed attributionsubmit →
CHL-002HIGH

Break receipt chain integrity

Produce two consecutive audit receipts where prev_hash does not equal the prior receipt_hash, signed by the published key.

surface
/witness · /verify
scenario reference
0x71fa2d8b0c9e6043
Hall of Findings · CVE-style advisorysubmit →
CHL-003HIGH

Make Codex Deus Maximus self-contradict

Produce two requests within the same policy_version where Codex returns mutually-exclusive verdicts on logically-equivalent inputs.

surface
/legion · /playground
scenario reference
0x44c1ee3f8a09b2d5
Hall of Findings · public retrospectivesubmit →
CHL-004MEDIUM

Evade STATE_REGISTER continuity

Cause an action to execute after a state-register heart-tick gap exceeding the published SLA without SAFE_HALT firing.

surface
Kernel · runtime
scenario reference
0x2e8b07fa6d143c91
Hall of Findings · doctrine creditsubmit →
CHL-005MEDIUM

Provoke a silent ALLOW

Cause any meaningful action to execute with no corresponding receipt in /witness within the published commit window.

surface
Any execution path
scenario reference
0xdb4319c70feab285
Hall of Findings · invariant creditsubmit →
CHL-006LOW

Force a Galahad identity false-positive

Cause Galahad to attest an identity it should reject under the published policy. Bonus: do it without leaving an audit trail.

surface
Identity gate · /legion
scenario reference
0xa019287cef36014b
Hall of Findings · creditsubmit →

Hall of Findings

No signed Hall-of-Findings mechanism is established. Any future entry must identify its review status and supporting evidence.

no findings yet

No reviewed finding has been published on this surface.