Consent bomb test: pin the inflate output cap, not a wall-clock bound #13

Merged

heimdall merged 1 commit from heimdall/consent-bomb-deterministic into main

2026-11-13 07:15:10 +00:00

2026-11-13

Heimdall

Consent bomb test: pin the inflate output cap, not a wall-clock bound

The 1500 ms bound measured 3330 ms under parallel load. What the test proves is that
a decompression bomb is read under the 16 KB cap; record the inflate options and assert
maxOutputLength directly. Mutant (drop the cap) fails the test.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

4aa9d03c4f

2026-11-13 07:03:30 +00:00