gitops/optimclaw
1
0
Fork 0
mirror of https://github.com/outbackdingo/optimclaw.git synced 2026-08-25 14:53:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: relax timing thresholds in policy adversarial tests (100ms -> 500ms) (#1294)

Browse Source 
These tests guard against catastrophic regex backtracking (seconds/minutes),
not 12ms differences. CI runners with coverage instrumentation (cargo-llvm-cov)
consistently exceed the 100ms threshold due to overhead, causing flaky failures.
500ms still catches real regressions while tolerating CI variability.

[skip-regression-check]

Co-authored-by: Claude Opus 4.6 (1M context) <[email protected]>
This commit is contained in:
Henry Park
2026-03-16 22:29:41 -07:00
committed by GitHub
co-authored by Claude Opus 4.6
parent 5c56032b88
commit 2784cef4d7
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/ironclaw_safety/src/policy.rs
+7 -7
View File
@@ -324,7 +324,7 @@ mod tests {
let violations = policy.check(&payload); let violations = policy.check(&payload);
let elapsed = start.elapsed(); let elapsed = start.elapsed();
assert!( assert!(
elapsed.as_millis() < 100, elapsed.as_millis() < 500,
"excessive_urls pattern took {}ms on 100KB near-miss", "excessive_urls pattern took {}ms on 100KB near-miss",
elapsed.as_millis() elapsed.as_millis()
); );
@@ -349,7 +349,7 @@ mod tests {
let violations = policy.check(&payload); let violations = policy.check(&payload);
let elapsed = start.elapsed(); let elapsed = start.elapsed();
assert!( assert!(
elapsed.as_millis() < 100, elapsed.as_millis() < 500,
"obfuscated_string pattern took {}ms on 100KB near-miss", "obfuscated_string pattern took {}ms on 100KB near-miss",
elapsed.as_millis() elapsed.as_millis()
); );
@@ -370,7 +370,7 @@ mod tests {
let _violations = policy.check(&payload); let _violations = policy.check(&payload);
let elapsed = start.elapsed(); let elapsed = start.elapsed();
assert!( assert!(
elapsed.as_millis() < 100, elapsed.as_millis() < 500,
"shell_injection pattern took {}ms on 100KB near-miss", "shell_injection pattern took {}ms on 100KB near-miss",
elapsed.as_millis() elapsed.as_millis()
); );
@@ -387,7 +387,7 @@ mod tests {
let _violations = policy.check(&payload); let _violations = policy.check(&payload);
let elapsed = start.elapsed(); let elapsed = start.elapsed();
assert!( assert!(
elapsed.as_millis() < 100, elapsed.as_millis() < 500,
"sql_pattern took {}ms on 100KB near-miss", "sql_pattern took {}ms on 100KB near-miss",
elapsed.as_millis() elapsed.as_millis()
); );
@@ -405,7 +405,7 @@ mod tests {
let _violations = policy.check(&payload); let _violations = policy.check(&payload);
let elapsed = start.elapsed(); let elapsed = start.elapsed();
assert!( assert!(
elapsed.as_millis() < 100, elapsed.as_millis() < 500,
"crypto_private_key pattern took {}ms on 100KB near-miss", "crypto_private_key pattern took {}ms on 100KB near-miss",
elapsed.as_millis() elapsed.as_millis()
); );
@@ -423,7 +423,7 @@ mod tests {
let _violations = policy.check(&payload); let _violations = policy.check(&payload);
let elapsed = start.elapsed(); let elapsed = start.elapsed();
assert!( assert!(
elapsed.as_millis() < 100, elapsed.as_millis() < 500,
"system_file_access pattern took {}ms on 100KB near-miss", "system_file_access pattern took {}ms on 100KB near-miss",
elapsed.as_millis() elapsed.as_millis()
); );
@@ -441,7 +441,7 @@ mod tests {
let _violations = policy.check(&payload); let _violations = policy.check(&payload);
let elapsed = start.elapsed(); let elapsed = start.elapsed();
assert!( assert!(
elapsed.as_millis() < 100, elapsed.as_millis() < 500,
"encoded_exploit pattern took {}ms on 100KB near-miss", "encoded_exploit pattern took {}ms on 100KB near-miss",
elapsed.as_millis() elapsed.as_millis()
); );