The pardon that approved itself

说明与用途

Oroboro Labs 的引用守卫已更新为仅在引用窗口之前存在的旧文件才被批准，从而消除了使用同名文件绕过的风险，同时保持合法的赦免。

问题

The citation guard incorrectly approved a pardon when a file with the same name as the cited instrument was created after the citation, allowing attackers to bypass the guard.

结果

After implementing age-based forgiveness, the guard no longer approves pardons for homonyms created after the citation, eliminating the identified vulnerability while preserving legitimate pardons. Regression sweep confirmed zero new false positives.

工作流

• 1. Identify the cited instrument and its creation or backup time. 2. Compare the instrument’s age to the start of the citing window. 3. If the instrument is older than the window, allow the pardon; otherwise, reject it. 4. Run acceptance tests to confirm no false positives and that legitimate pardons still succeed.
• 5. Perform a regression sweep over all instruments to ensure no new false positives are introduced.

证据

The fix is age. A citation is only forgiven when the cited instrument is older than the window citing it

The regression sweep: 113 instruments checked, the same 4 dirty historical copies still flagged, and zero new false positives