Test proof
Warden test proof, by platform.
Each result below comes from a recorded run. Platforms without a recorded run are marked as not yet run.
Linux
VerifiedBubbleWrap (bwrap)
Proof harness and Go suite run on 2026-10-16.
sudo apt install bubblewrap stracego build -o warden ./cmd/wardenbash testdata/proof/run-proof.sh ./wardenDocker
Partially verifiedContainer (all platforms)
Docker backend test passes in the Go suite on the Linux host. Not run on macOS or Windows.
Install Docker Desktop or Docker Enginedocker pull alpine:3.20go test ./internal/sandbox/docker/ -count=1macOS
Not yet runSeatbelt (sandbox-exec)
No proof run has been recorded on macOS.
No installation needed (built into macOS)GOOS=darwin go build -o warden-darwin ./cmd/wardenbash testdata/proof/run-proof.sh ./warden-darwinWindows
Not yet runAppContainer + WFP
No proof run has been recorded on Windows. Requires Windows 10/11 Pro or Enterprise.
GOOS=windows go build -o warden.exe ./cmd/wardenbash testdata/proof/run-proof.sh ./warden.exeLinux proof harness
8/8 steps passRun 20261016-203044 on Linux x86_64 (BubbleWrap (bwrap)). The positive control (the target process starts) is PASS, and the run exited with code 0. Each step's observed result is compared with its expected result.
| Step | What it checks | Expected | Observed | Result |
|---|---|---|---|---|
| read_allowed | Read a file the policy allows | SUCCESS | SUCCESS | ✓ PASS |
| write_allowed | Write a file the policy allows | SUCCESS | SUCCESS | ✓ PASS |
| read_secret | Read a secret file outside the policy | BLOCKED | BLOCKED | ✓ PASS |
| read_unlisted | Read an unlisted file | BLOCKED | BLOCKED | ✓ PASS |
| net_allowed | HTTP to an allowlisted host | SUCCESS | SUCCESS | ✓ PASS |
| net_blocked | HTTP to an unlisted host (egress proxy 403) | BLOCKED | BLOCKED | ✓ PASS |
| env_allowed | Allowlisted env var is visible | VISIBLE | VISIBLE | ✓ PASS |
| env_denied | Unlisted env var is absent | BLOCKED | BLOCKED | ✓ PASS |
Go build, vet and test
265 test functionsProject checks from AGENTS.md, run on 2026-10-16 on Linux. The suite runs serially (-p 1); parallel runs can exhaust the process limit and fail for reasons unrelated to Warden.
| Check | Exit | Result |
|---|---|---|
| go build ./... | 0 PASS | Builds cleanly |
| go vet ./... | 0 PASS | No issues |
| go test ./... -count=1 -p 1 | 0 PASS | 23 packages pass · 3 with no test files · 0 failures |
Audit log from the proof run
The run wrote 535 audit entries. Every blocked access is logged, not silently dropped.
Allowed
328
Blocked
207
File / network
File 315 allowed · 201 blocked
Network 13 allowed · 6 blocked