adversarial zero-budget semantic-index
Adversarial inputs and pressure
Prove that CareerVector's invariants hold under hostile or degenerate inputs: oversized pastes, raw HTML/unicode in descriptions, prompt injection aimed at FIXED-tier nodes, unknown op kinds, stale catalog versions from old clients, opId retry storms, nonexistent workspaces, intentionally corrupted sub-docs, concurrent deterministic request_ids, Cloudflare 1027 quota exhaustion, hostile collaborator wipes, corrupted PDF uploads, and bulk-job flooding. The suite is the operational expression of P4-P5 + the §22 quota policy.
Behaviours 0 Tests 14 Graph 51 nodes · 78 edges Runner - CircleCI browser_adversarial Source qa/suites/adversarial.yaml
Test witnesses
These tests belong to the suite. Missing implementation links stay visible until a code-backed graph claim records them.
| Test | Status | Implementation | Open |
|---|---|---|---|
[automated agent] add many jobs in a short window without breaking the dashboard @cv/ui · playwright · stories/adversarial/bulk-jobs-flood.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv ui dashboard table graph-proven · graph-checks-edge dashboard row virtualization graph-proven · graph-checks-edge workspace jobs create endpoint graph-proven · graph-checks-edge | Test |
[solo applicant] see a graceful "service temporarily unavailable" surface when CF quota is exhausted @cv/ui · playwright · stories/adversarial/cloudflare-quota-1027.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv ui dashboard graph-proven · graph-checks-edge dashboard quota degradation graph-proven · graph-checks-edge workspace read endpoint graph-proven · graph-checks-edge | Test |
[automated agent] safely enqueue the same workflow request from two clients without duplication @cv/ui · playwright · stories/adversarial/concurrent-request-id.spec.ts | catalog | create process request if absent graph-proven · graph-checks-edge cv api workspace router graph-proven · graph-checks-edge cv server process requests graph-proven · graph-checks-edge process requests create endpoint graph-proven · graph-checks-edge | Test |
[solo applicant] attach a reference PDF to a job without the server parsing its contents @cv/ui · playwright · stories/adversarial/corrupt-pdf-upload.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv typst rendering graph-proven · graph-checks-edge pdf magic byte check graph-proven · graph-checks-edge workspace files endpoint graph-proven · graph-checks-edge | Test |
[solo applicant] open my workspace cleanly even if one sub-doc was corrupted on disk @cv/ui · playwright · stories/adversarial/corrupted-sub-doc.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv ui dashboard graph-proven · graph-checks-edge dashboard workspace load error banner graph-proven · graph-checks-edge workspace read endpoint graph-proven · graph-checks-edge workspace sub doc loader graph-proven · graph-checks-edge | Test |
[family collaborator] demonstrate that link sharing is a trust gesture — anyone with the link can wipe the quarry @cv/ui · playwright · stories/adversarial/hostile-collaborator-wipe.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv op catalog applier graph-proven · graph-checks-edge cv profile replace op graph-proven · graph-checks-edge cv server workspace storage graph-proven · graph-checks-edge workspace ops endpoint graph-proven · graph-checks-edge workspace sub doc ops log graph-proven · graph-checks-edge | Test |
[solo applicant] paste a job description containing script tags without exposing my browser to XSS @cv/ui · playwright · stories/adversarial/html-in-description.spec.ts | catalog | cv ui dashboard job detail graph-proven · graph-checks-edge description tab markdown renderer graph-proven · graph-checks-edge dompurify sanitizer graph-proven · graph-checks-edge | Test |
[solo applicant] paste a megabyte of text into one bullet without corrupting my workspace @cv/ui · playwright · stories/adversarial/large-bullet-paste.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv op catalog applier graph-proven · graph-checks-edge cv profile sub doc graph-proven · graph-checks-edge cv server workspace storage graph-proven · graph-checks-edge node update op graph-proven · graph-checks-edge workspace ops endpoint graph-proven · graph-checks-edge | Test |
[solo applicant] see a friendly error when I open a workspace URL that does not exist @cv/ui · playwright · stories/adversarial/nonexistent-workspace.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv ui dashboard graph-proven · graph-checks-edge dashboard not found surface graph-proven · graph-checks-edge workspace read endpoint graph-proven · graph-checks-edge | Test |
[solo applicant] know that LLM prompt injection cannot rewrite my real name on my tailored CV @cv/ui · playwright · stories/adversarial/prompt-injection-fixed-tier.spec.ts | catalog | cv op catalog applier graph-proven · graph-checks-edge cv profile replace op graph-proven · graph-checks-edge cv tailor pipeline graph-proven · graph-checks-edge restore fixed sections graph-proven · graph-checks-edge tailor fixed tier pipeline graph-proven · graph-checks-edge | Test |
[automated agent] safely retry the same op many times without duplicating writes @cv/ui · playwright · stories/adversarial/retry-storm-same-opid.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv server workspace storage graph-proven · graph-checks-edge workspace ops endpoint graph-proven · graph-checks-edge workspace sub doc op dedup graph-proven · graph-checks-edge | Test |
[automated agent] be told to refresh when my op catalog version is stale @cv/ui · playwright · stories/adversarial/stale-op-catalog-version.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv op catalog applier graph-proven · graph-checks-edge op catalog version guard graph-proven · graph-checks-edge workspace ops endpoint graph-proven · graph-checks-edge | Test |
[automated agent] fail safely when I post an op that the server does not recognise @cv/ui · playwright · stories/adversarial/unknown-op-kind.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv op catalog applier graph-proven · graph-checks-edge cv workspace client sdk graph-proven · graph-checks-edge op catalog apply graph-proven · graph-checks-edge workspace client route op graph-proven · graph-checks-edge workspace ops endpoint graph-proven · graph-checks-edge | Test |
[solo applicant] paste a job URL with unusual unicode without breaking the workspace @cv/ui · playwright · stories/adversarial/weird-unicode-url.spec.ts | catalog | cv api workspace router graph-proven · graph-checks-edge cv workspace client sdk graph-proven · graph-checks-edge job exists endpoint graph-proven · graph-checks-edge normalize job url graph-proven · graph-checks-edge workspace jobs create endpoint graph-proven · graph-checks-edge | Test |