1.1 Starter report for persisted output verification TRP-001

Relevant test environment and configuration details

  • Planned environment: GNU/Linux workstation or dev container.
  • Execution status: deferred pending controlled test execution.

Test execution results

Test case step 1: Pending execution.

  • 0 = flawless

Defect summary description

This starter report reserves the execution record for TCS-001. Formal execution evidence has not yet been collected in this repository.

Text execution evidence

Pending future execution logs and artifact listings.

Comments

All three steps remain not executed in this initial baseline.

Parent links: TCS-001 Verify persisted output locations for VECTOR-Code artifacts

Attribute Value
test-date 2026-04-11
tester Pending execution
defect-category 0 = flawless
passed-steps 0
failed-steps 0
not-executed-steps 3
release-version 0.1
verification-method T

1.2 Starter report for language detection verification TRP-002

Relevant test environment and configuration details

  • Planned environment: GNU/Linux workstation or dev container with cloc installed.
  • Execution status: deferred pending controlled test execution.

Test execution results

Test case step 1: Pending execution.

  • 0 = flawless

Defect summary description

This starter report reserves the execution record for TCS-002. Formal execution evidence has not yet been collected in this repository.

Text execution evidence

Pending future console output and sample project evidence.

Comments

All three steps remain not executed in this initial baseline.

Parent links: TCS-002 Verify supported language detection

Attribute Value
test-date 2026-04-11
tester Pending execution
defect-category 0 = flawless
passed-steps 0
failed-steps 0
not-executed-steps 3
release-version 0.1
verification-method T

1.3 Starter report for CodeQL database verification TRP-003

Relevant test environment and configuration details

  • Planned environment: GNU/Linux workstation or dev container with CodeQL installed.
  • Execution status: deferred pending controlled test execution.

Test execution results

Test case step 1: Pending execution.

  • 0 = flawless

Defect summary description

This starter report reserves the execution record for TCS-003. Formal execution evidence has not yet been collected in this repository.

Text execution evidence

Pending future database directory listings and console logs.

Comments

All three steps remain not executed in this initial baseline.

Parent links: TCS-003 Verify CodeQL database creation

Attribute Value
test-date 2026-04-11
tester Pending execution
defect-category 0 = flawless
passed-steps 0
failed-steps 0
not-executed-steps 3
release-version 0.1
verification-method T

1.4 Starter report for SARIF generation verification TRP-004

Relevant test environment and configuration details

  • Planned environment: GNU/Linux workstation or dev container with query packs available.
  • Execution status: deferred pending controlled test execution.

Test execution results

Test case step 1: Pending execution.

  • 0 = flawless

Defect summary description

This starter report reserves the execution record for TCS-004. Formal execution evidence has not yet been collected in this repository.

Text execution evidence

Pending future SARIF artifacts and query logs.

Comments

All three steps remain not executed in this initial baseline.

Parent links: TCS-004 Verify SARIF generation from CodeQL queries

Attribute Value
test-date 2026-04-11
tester Pending execution
defect-category 0 = flawless
passed-steps 0
failed-steps 0
not-executed-steps 3
release-version 0.1
verification-method T

1.5 Starter report for SARIF-to-CBOM verification TRP-005

Relevant test environment and configuration details

  • Planned environment: GNU/Linux workstation or dev container with cryptobom installed.
  • Execution status: deferred pending controlled test execution.

Test execution results

Test case step 1: Pending execution.

  • 0 = flawless

Defect summary description

This starter report reserves the execution record for TCS-005. Formal execution evidence has not yet been collected in this repository.

Text execution evidence

Pending future CBOM output files and conversion logs.

Comments

All three steps remain not executed in this initial baseline.

Parent links: TCS-005 Verify SARIF-to-CBOM conversion

Attribute Value
test-date 2026-04-11
tester Pending execution
defect-category 0 = flawless
passed-steps 0
failed-steps 0
not-executed-steps 3
release-version 0.1
verification-method T

1.6 Starter report for raw TLS scan verification TRP-006

Relevant test environment and configuration details

  • Planned environment: GNU/Linux workstation or dev container with reachable TLS endpoint.
  • Execution status: deferred pending controlled test execution.

Test execution results

Test case step 1: Pending execution.

  • 0 = flawless

Defect summary description

This starter report reserves the execution record for TCS-006. Formal execution evidence has not yet been collected in this repository.

Text execution evidence

Pending future raw TLS scan output and console logs.

Comments

All three steps remain not executed in this initial baseline.

Parent links: TCS-006 Verify raw TLS scan output generation

Attribute Value
test-date 2026-04-11
tester Pending execution
defect-category 0 = flawless
passed-steps 0
failed-steps 0
not-executed-steps 3
release-version 0.1
verification-method T

1.7 Starter report for TLS CBOM verification TRP-007

Relevant test environment and configuration details

  • Planned environment: GNU/Linux workstation or dev container with TLS mapping data present.
  • Execution status: deferred pending controlled test execution.

Test execution results

Test case step 1: Pending execution.

  • 0 = flawless

Defect summary description

This starter report reserves the execution record for TCS-007. Formal execution evidence has not yet been collected in this repository.

Text execution evidence

Pending future CBOM output and mapped-component evidence.

Comments

All three steps remain not executed in this initial baseline.

Parent links: TCS-007 Verify TLS CBOM decomposition

Attribute Value
test-date 2026-04-11
tester Pending execution
defect-category 0 = flawless
passed-steps 0
failed-steps 0
not-executed-steps 3
release-version 0.1
verification-method T

1.8 Starter report for raw SSH scan verification TRP-008

Relevant test environment and configuration details

  • Planned environment: GNU/Linux workstation or dev container with reachable SSH endpoint.
  • Execution status: deferred pending controlled test execution.

Test execution results

Test case step 1: Pending execution.

  • 0 = flawless

Defect summary description

This starter report reserves the execution record for TCS-008. Formal execution evidence has not yet been collected in this repository.

Text execution evidence

Pending future raw SSH scan output and console logs.

Comments

All three steps remain not executed in this initial baseline.

Parent links: TCS-008 Verify raw SSH scan output generation

Attribute Value
test-date 2026-04-11
tester Pending execution
defect-category 0 = flawless
passed-steps 0
failed-steps 0
not-executed-steps 3
release-version 0.1
verification-method T

1.9 Starter report for runtime assumption verification TRP-009

Relevant test environment and configuration details

  • Planned environment: valid and invalid Linux runtime layouts.
  • Execution status: deferred pending controlled test execution.

Test execution results

Test case step 1: Pending execution.

  • 0 = flawless

Defect summary description

This starter report reserves the execution record for TCS-009. Formal execution evidence has not yet been collected in this repository.

Text execution evidence

Pending future environment setup records and failure logs.

Comments

All three steps remain not executed in this initial baseline.

Parent links: TCS-009 Verify Linux runtime assumptions and tool-path checks

Attribute Value
test-date 2026-04-11
tester Pending execution
defect-category 0 = flawless
passed-steps 0
failed-steps 0
not-executed-steps 3
release-version 0.1
verification-method T

1.10 Starter report for safe failure verification TRP-010

Relevant test environment and configuration details

  • Planned environment: invalid-input and missing-tool scenarios.
  • Execution status: deferred pending controlled test execution.

Test execution results

Test case step 1: Pending execution.

  • 0 = flawless

Defect summary description

This starter report reserves the execution record for TCS-010. Formal execution evidence has not yet been collected in this repository.

Text execution evidence

Pending future validation-failure logs.

Comments

All three steps remain not executed in this initial baseline.

Parent links: TCS-010 Verify safe failure behavior

Attribute Value
test-date 2026-04-11
tester Pending execution
defect-category 0 = flawless
passed-steps 0
failed-steps 0
not-executed-steps 3
release-version 0.1
verification-method T

1.11 Test report for quantum-vulnerable algorithm classification TRP-011

Relevant test environment and configuration details

  • Environment: tor/VECTOR-Score/ within the dev container (Debian GNU/Linux 11, Python 3.11.0).
  • Test file: tests/test_algorithm_classifier.py
  • Test runner: poetry run pytest tests/ -v
  • Execution date: 2026-05-07

Test execution results

All 33 tests in test_algorithm_classifier.py passed. Tests covering TCS-011 verify that classify() correctly returns quantum-vulnerable for RSA, ECDH, ECDHE, DHE, ECDSA, DSA, EdDSA, X25519, X448, ffdhe2048 and related variants.

Selected evidence:

  • test_rsa_is_quantum_vulnerable → PASS
  • test_ecdhe_is_quantum_vulnerable → PASS
  • test_dh_is_quantum_vulnerable → PASS
  • test_ecdsa_is_quantum_vulnerable → PASS
  • test_dsa_is_quantum_vulnerable → PASS
  • test_x25519_is_quantum_vulnerable → PASS
  • test_ecdh_is_quantum_vulnerable → PASS
  • test_ffdhe2048_is_quantum_vulnerable → PASS

Full test run: 43 passed, 0 failed, 0 errors in 0.08 s.

  • 0 = flawless

Defect summary description

No defects. All classification cases for quantum-vulnerable algorithms pass.

Test execution evidence

Pending future pytest run output confirming quantum-vulnerable classification for RSA, ECDHE, DHE, and ECDSA.

Parent links: TCS-011 Verify classification of quantum-vulnerable algorithms

Attribute Value
test-date 2026-05-07
tester VECTOR-Score automated test suite (pytest 7.4.4 / Python 3.11)
defect-category 0 = flawless
passed-steps 33
failed-steps 0
not-executed-steps 0
release-version 0.1
verification-method T

1.12 Test report for post-quantum algorithm classification TRP-012

Relevant test environment and configuration details

  • Environment: tor/VECTOR-Score/ within the dev container (Debian GNU/Linux 11, Python 3.11.0).
  • Test file: tests/test_algorithm_classifier.py
  • Test runner: poetry run pytest tests/ -v
  • Execution date: 2026-05-07

Test execution results

All 33 tests in test_algorithm_classifier.py passed. Tests covering TCS-012 verify that classify() correctly returns post-quantum for ML-KEM-768, ML-KEM-512, ML-KEM-1024, ML-DSA-65, SLH-DSA, CRYSTALS-Kyber-512, CRYSTALS-Kyber-768, CRYSTALS-Kyber-1024, sntrup761, and related PQC variants.

Selected evidence:

  • test_ml_kem_768_is_post_quantum → PASS
  • test_ml_kem_512_is_post_quantum → PASS
  • test_ml_kem_1024_is_post_quantum → PASS
  • test_ml_dsa_65_is_post_quantum → PASS
  • test_slh_dsa_is_post_quantum → PASS
  • test_crystals_kyber_is_post_quantum → PASS
  • test_sntrup761_is_post_quantum → PASS

Full test run: 43 passed, 0 failed, 0 errors in 0.08 s.

  • 0 = flawless

Defect summary description

No defects. All classification cases for post-quantum algorithms pass.

Test execution evidence

Pending future pytest run output confirming post-quantum classification for ML-KEM-768, ML-KEM-1024, ML-DSA-65, and SLH-DSA.

Parent links: TCS-012 Verify classification of post-quantum algorithms

Attribute Value
test-date 2026-05-07
tester VECTOR-Score automated test suite (pytest 7.4.4 / Python 3.11)
defect-category 0 = flawless
passed-steps 33
failed-steps 0
not-executed-steps 0
release-version 0.1
verification-method T

1.13 Test report for annotated CBOM pqcmat property verification TRP-013

Relevant test environment and configuration details

  • Environment: tor/VECTOR-Score/ within the dev container (Debian GNU/Linux 11, Python 3.11.0).
  • Test file: tests/test_cbom_scorer.py
  • Test runner: poetry run pytest tests/ -v
  • Execution date: 2026-05-07

Test execution results

All 10 tests in test_cbom_scorer.py passed. Tests covering TCS-013 verify that score_cbom() annotates all algorithm components with pqcmat:risk-classification, pqcmat:risk-score, pqcmat:rationale, pqcmat:recommended-migration, pqcmat:reference; that non-algorithm components are not modified; that both cryptographic-asset and crypto-asset type variants are handled; and that the input CBOM is not mutated.

Selected evidence:

  • test_all_algorithm_components_are_annotated → PASS
  • test_metadata_scored_at_property_added → PASS
  • test_non_algorithm_components_not_annotated → PASS
  • test_both_cbom_type_variants_handled → PASS
  • test_input_not_mutated → PASS
  • test_rsa_classified_quantum_vulnerable → PASS
  • test_ml_kem_768_classified_post_quantum → PASS
  • test_aes_256_classified_quantum_safe → PASS

Full test run: 43 passed, 0 failed, 0 errors in 0.08 s.

  • 0 = flawless

Defect summary description

No defects. All annotated CBOM property and non-mutation tests pass.

Test execution evidence

Pending future pytest run output confirming that scored CBOM algorithm components carry pqcmat:risk-classification, pqcmat:risk-score, and pqcmat:recommended-migration properties.

Parent links: TCS-013 Verify annotated CBOM contains pqcmat risk properties

Attribute Value
test-date 2026-05-07
tester VECTOR-Score automated test suite (pytest 7.4.4 / Python 3.11)
defect-category 0 = flawless
passed-steps 10
failed-steps 0
not-executed-steps 0
release-version 0.1
verification-method T