okhp3-agentic-exploitation-testing

原文涵盖的主题

• okhp3-agentic-exploitation-testing
• Outcome
• Scope
• Inputs
• Procedure
• Validation loop
• Safety and failure boundaries
• Output contract

Built by OverKill Hill P³ · Skillz Produce a bounded finding about whether an agentic workflow can cross a named control boundary in a disposable synthetic environment. The result is evidence for remediation, not an exploit recipe. Work only with the approved evidence, environment, and decision boundary named in the inputs. This package produces analytical or lab evidence; it does not grant authority, expand scope, or prove live-system security. written authorization, target boundary, lab isolation, and stop conditions; synthetic identities, records, tools, and services with no production connectivity; control hypotheses, benign test cases, expected outcomes, and trace access; reviewer-approved evidence and a remediation owner. 1. Confirm authorization, isolation, synthetic data, observability, and rollback. 2. Translate each control hypothesis into a minimal benign probe with a predicted safe outcome. 3. Run one probe at a time, capture the request, decision, tool result, policy response, and side effects. 4. Stop at the first unexpected boundary crossing. Do not chain it into persistence, lateral movement, data exposure, or evasion. 5. Reproduce only as needed to distinguish a co

这里只展示节选，请以完整原文和当前要求为准。