aios/.agent/results/openclaw/v2r1c0-b3/raw-weixin-wire-evidence.md

Raw WeChat Wire Evidence

Generated: 2026-07-14

Summary of Negative + Positive Authentication Tests

All tests passed. The identity module correctly enforces:

1. DISABLED mode - standard ingress: accepts valid-format payloads (hex signature)
2. DISABLED mode - bridge ingress: accepts receipt-bearing payloads
3. ENFORCED mode - valid signature: passes HMAC verification
4. ENFORCED mode - bad signature: raises AuthenticationError
5. BridgeIngressClaims - empty receipt: raises ValidationError
6. AuthenticatedPrincipal - external construction: raises TypeError (PROVENANCE gate)
7. IdentityClaims - empty tenant: raises ValidationError
8. RuntimeIdentity - no receipt field: clean separation from external credentials

Code Coverage

• IngressAuthenticator.__init__() - mode assignment
• IngressAuthenticator._signed_payload() - standard field parsing
• IngressAuthenticator._bridge_signed_payload() - bridge field parsing
• IngressAuthenticator._verify() - HMAC verification (not called in DISABLED mode)
• IngressAuthenticator.authenticate() - standard auth dispatch
• IngressAuthenticator.authenticate_bridge() - bridge auth dispatch
• IdentityClaims.__post_init__() - field validation
• BridgeIngressClaims.__post_init__() - field validation + receipt check
• AuthenticatedPrincipal.__init__() - sentinel gate
• AuthenticatedPrincipal._verified() - factory method