Find the missing check
before it approves a loss.

set base = "https://api.hiholo.ai"
set auth_header = "__AUTH__"

set baseline_rows = invoke json_parse with "[]"
set no_pause_rows = invoke json_parse with "[]"
set no_nonce_rows = invoke json_parse with "[]"
set no_proof_rows = invoke json_parse with "[]"
set one_sig_rows = invoke json_parse with "[]"
set guardian_bypass_rows = invoke json_parse with "[]"
set compound_rows = invoke json_parse with "[]"

set no_pause_false_accepts = 0
set no_nonce_false_accepts = 0
set no_proof_false_accepts = 0
set one_sig_false_accepts = 0
set guardian_bypass_false_accepts = 0
set compound_false_accepts = 0
set no_pause_first_witness = -1
set no_nonce_first_witness = -1
set no_proof_first_witness = -1
set one_sig_first_witness = -1
set guardian_bypass_first_witness = -1
set compound_first_witness = -1

set i = 0
while i < 128 do
  set s1 = i % 2
  set s2 = invoke floor with (i / 2)
  s2 = s2 % 2
  set s3 = invoke floor with (i / 4)
  s3 = s3 % 2
  set guardian = invoke floor with (i / 8)
  guardian = guardian % 2
  set paused = invoke floor with (i / 16)
  paused = paused % 2
  set proof_ok = invoke floor with (i / 32)
  proof_ok = proof_ok % 2
  set nonce_fresh = invoke floor with (i / 64)
  nonce_fresh = nonce_fresh % 2

  set sig_sum = s1 + s2 + s3
  set quorum = 0
  if sig_sum >= 2 or guardian == 1 then
    quorum = 1
  end
  set weak_quorum = 0
  if sig_sum >= 1 or guardian == 1 then
    weak_quorum = 1
  end

  set baseline = 0
  if quorum == 1 and paused == 0 and proof_ok == 1 and nonce_fresh == 1 then
    baseline = 1
  end
  set no_pause = 0
  if quorum == 1 and proof_ok == 1 and nonce_fresh == 1 then
    no_pause = 1
  end
  set no_nonce = 0
  if quorum == 1 and paused == 0 and proof_ok == 1 then
    no_nonce = 1
  end
  set no_proof = 0
  if quorum == 1 and paused == 0 and nonce_fresh == 1 then
    no_proof = 1
  end
  set one_sig = 0
  if weak_quorum == 1 and paused == 0 and proof_ok == 1 and nonce_fresh == 1 then
    one_sig = 1
  end
  set guardian_bypass = 0
  if guardian == 1 then
    guardian_bypass = 1
  else
    if sig_sum >= 2 and paused == 0 and proof_ok == 1 and nonce_fresh == 1 then
      guardian_bypass = 1
    end
  end
  set compound = 0
  if quorum == 1 and proof_ok == 1 then
    compound = 1
  end

  if baseline == 0 and no_pause == 1 then
    no_pause_false_accepts = no_pause_false_accepts + 1
    if no_pause_first_witness < 0 then
      no_pause_first_witness = i
    end
  end
  if baseline == 0 and no_nonce == 1 then
    no_nonce_false_accepts = no_nonce_false_accepts + 1
    if no_nonce_first_witness < 0 then
      no_nonce_first_witness = i
    end
  end
  if baseline == 0 and no_proof == 1 then
    no_proof_false_accepts = no_proof_false_accepts + 1
    if no_proof_first_witness < 0 then
      no_proof_first_witness = i
    end
  end
  if baseline == 0 and one_sig == 1 then
    one_sig_false_accepts = one_sig_false_accepts + 1
    if one_sig_first_witness < 0 then
      one_sig_first_witness = i
    end
  end
  if baseline == 0 and guardian_bypass == 1 then
    guardian_bypass_false_accepts = guardian_bypass_false_accepts + 1
    if guardian_bypass_first_witness < 0 then
      guardian_bypass_first_witness = i
    end
  end
  if baseline == 0 and compound == 1 then
    compound_false_accepts = compound_false_accepts + 1
    if compound_first_witness < 0 then
      compound_first_witness = i
    end
  end

  set row0 = invoke json_parse with "{}"
  set row0.s1 = s1
  set row0.s2 = s2
  set row0.s3 = s3
  set row0.guardian = guardian
  set row0.paused = paused
  set row0.proof_ok = proof_ok
  set row0.nonce_fresh = nonce_fresh
  set row0.allow = baseline
  push baseline_rows row0

  set row1 = invoke json_parse with "{}"
  set row1.s1 = s1
  set row1.s2 = s2
  set row1.s3 = s3
  set row1.guardian = guardian
  set row1.paused = paused
  set row1.proof_ok = proof_ok
  set row1.nonce_fresh = nonce_fresh
  set row1.allow = no_pause
  push no_pause_rows row1

  set row2 = invoke json_parse with "{}"
  set row2.s1 = s1
  set row2.s2 = s2
  set row2.s3 = s3
  set row2.guardian = guardian
  set row2.paused = paused
  set row2.proof_ok = proof_ok
  set row2.nonce_fresh = nonce_fresh
  set row2.allow = no_nonce
  push no_nonce_rows row2

  set row3 = invoke json_parse with "{}"
  set row3.s1 = s1
  set row3.s2 = s2
  set row3.s3 = s3
  set row3.guardian = guardian
  set row3.paused = paused
  set row3.proof_ok = proof_ok
  set row3.nonce_fresh = nonce_fresh
  set row3.allow = no_proof
  push no_proof_rows row3

  set row4 = invoke json_parse with "{}"
  set row4.s1 = s1
  set row4.s2 = s2
  set row4.s3 = s3
  set row4.guardian = guardian
  set row4.paused = paused
  set row4.proof_ok = proof_ok
  set row4.nonce_fresh = nonce_fresh
  set row4.allow = one_sig
  push one_sig_rows row4

  set row5 = invoke json_parse with "{}"
  set row5.s1 = s1
  set row5.s2 = s2
  set row5.s3 = s3
  set row5.guardian = guardian
  set row5.paused = paused
  set row5.proof_ok = proof_ok
  set row5.nonce_fresh = nonce_fresh
  set row5.allow = guardian_bypass
  push guardian_bypass_rows row5

  set row6 = invoke json_parse with "{}"
  set row6.s1 = s1
  set row6.s2 = s2
  set row6.s3 = s3
  set row6.guardian = guardian
  set row6.paused = paused
  set row6.proof_ok = proof_ok
  set row6.nonce_fresh = nonce_fresh
  set row6.allow = compound
  push compound_rows row6

  i = i + 1
end

function discover_policy rows
  set req = invoke json_parse with "{\"target_key\":\"allow\",\"domain\":[\"0\",\"1\"]}"
  set req.rows = rows
  set body = invoke json_stringify with req
  set resp = invoke http_post with (base + "/api/discover") and body and auth_header
  if at resp status_code != 200 then
    return "DISCOVER_HTTP_ERROR"
  end
  set parsed = invoke json_parse with (at resp body)
  set law = at parsed law
  return at law formula
end

set baseline_formula = invoke discover_policy with baseline_rows
set no_pause_formula = invoke discover_policy with no_pause_rows
set no_nonce_formula = invoke discover_policy with no_nonce_rows
set no_proof_formula = invoke discover_policy with no_proof_rows
set one_sig_formula = invoke discover_policy with one_sig_rows
set guardian_bypass_formula = invoke discover_policy with guardian_bypass_rows
set compound_formula = invoke discover_policy with compound_rows

set total_false_accepts = no_pause_false_accepts + no_nonce_false_accepts + no_proof_false_accepts + one_sig_false_accepts + guardian_bypass_false_accepts + compound_false_accepts
set mutants_killed = 0
if no_pause_false_accepts > 0 then
  mutants_killed = mutants_killed + 1
end
if no_nonce_false_accepts > 0 then
  mutants_killed = mutants_killed + 1
end
if no_proof_false_accepts > 0 then
  mutants_killed = mutants_killed + 1
end
if one_sig_false_accepts > 0 then
  mutants_killed = mutants_killed + 1
end
if guardian_bypass_false_accepts > 0 then
  mutants_killed = mutants_killed + 1
end
if compound_false_accepts > 0 then
  mutants_killed = mutants_killed + 1
end

set policy_verdict = "PASS"
if mutants_killed != 6 or baseline_formula == "DISCOVER_HTTP_ERROR" then
  policy_verdict = "FAIL"
end

set report = invoke json_parse with "{}"
set report.campaign = "bridge_authorization_exhaustive_mutation"
set report.verdict = policy_verdict
set report.states_per_version = 128
set report.versions = 7
set report.total_policy_evaluations = 896
set report.mutants_killed = mutants_killed
set report.mutation_score_percent = mutants_killed * 100 / 6
set report.total_false_accepts = total_false_accepts
set report.no_pause_false_accepts = no_pause_false_accepts
set report.no_nonce_false_accepts = no_nonce_false_accepts
set report.no_proof_false_accepts = no_proof_false_accepts
set report.one_sig_false_accepts = one_sig_false_accepts
set report.guardian_bypass_false_accepts = guardian_bypass_false_accepts
set report.compound_false_accepts = compound_false_accepts
set report.no_pause_first_witness = no_pause_first_witness
set report.no_nonce_first_witness = no_nonce_first_witness
set report.no_proof_first_witness = no_proof_first_witness
set report.one_sig_first_witness = one_sig_first_witness
set report.guardian_bypass_first_witness = guardian_bypass_first_witness
set report.compound_first_witness = compound_first_witness
set report.baseline_formula = baseline_formula
set report.no_pause_formula = no_pause_formula
set report.no_nonce_formula = no_nonce_formula
set report.no_proof_formula = no_proof_formula
set report.one_sig_formula = one_sig_formula
set report.guardian_bypass_formula = guardian_bypass_formula
set report.compound_formula = compound_formula
set persisted_report = invoke json_stringify with report
print persisted_report