Cryptographic key admission

crypto.key-admission

Ready · No signal has been run.

Results

Full evidence

Signal properties and values
Property	Value
No results yet. No signal has been run.

JSON

Selected signal results for external comparison. Field statuses, controls and exact values are retained.

No run export is available.

Source

Source is not connected yet.

// Test source pending.

Definition

Imports bounded owned keys with valid and invalid usage and format controls.

Find it in the repository

Collector source: core/signals/crypto/key-admission.ts
Export: measurementModule · Signal object
Field definitions: core/definitions/crypto/key-admission.ts
Capture membership: Product capture · common/capture/product.ts
Page registration: app/signals/registry.ts
Field projection: core/results/measurement.ts

Execution contract

Signal: crypto.key-admission
Collector: crypto.key-admission
API / surface: core/signals/crypto/key-admission.ts
Timeout: 1750 ms
Companion signals: None
Fixture inputs: Inline owned corpora (listed below)

core/fixtures/crypto/keys.json · sha256:2e6dc40ccf2b41046a5c4d731df3bd86809e4674716005be10e47e910853eb14

Exact request inputs

[
  {
    "key": "crypto.key-admission.responses",
    "inputs": {
      "aes-raw": {
        "id": "aes-raw",
        "format": "raw",
        "data": "AAAAAAAAAAAAAAAAAAAAAA==",
        "algorithm": "AES-GCM",
        "usages": [
          "encrypt",
          "decrypt"
        ],
        "kind": "aes",
        "extractable": true
      },
      "aes-jwk": {
        "id": "aes-jwk",
        "format": "jwk",
        "data": {
          "kty": "oct",
          "k": "AAAAAAAAAAAAAAAAAAAAAA",
          "alg": "A128GCM",
          "ext": true,
          "key_ops": [
            "encrypt",
            "decrypt"
          ]
        },
        "algorithm": "AES-GCM",
        "usages": [
          "encrypt",
          "decrypt"
        ],
        "kind": "aes",
        "extractable": true
      },
      "p256-raw": {
        "id": "p256-raw",
        "format": "raw",
        "data": "BGsX0fLhLEJH+Lzm5WOkQPJ3A32BLeszoPShOUXYmMKWT+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
        "algorithm": {
          "name": "ECDSA",
          "namedCurve": "P-256"
        },
        "usages": [
          "verify"
        ],
        "kind": "p256",
        "extractable": true
      },
      "p256-spki": {
        "id": "p256-spki",
        "format": "spki",
        "data": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEaxfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpZP40Li/hp/m47n60p8D54WK84zV2sxXs7LtkBoN79R9Q==",
        "algorithm": {
          "name": "ECDSA",
          "namedCurve": "P-256"
        },
        "usages": [
          "verify"
        ],
        "kind": "p256",
        "extractable": true
      },
      "p256-jwk": {
        "id": "p256-jwk",
        "format": "jwk",
        "data": {
          "kty": "EC",
          "crv": "P-256",
          "x": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY",
          "y": "T-NC4v4af5uO5-tKfA-eFivOM1drMV7Oy7ZAaDe_UfU",
          "ext": true,
          "key_ops": [
            "verify"
          ]
        },
        "algorithm": {
          "name": "ECDSA",
          "namedCurve": "P-256"
        },
        "usages": [
          "verify"
        ],
        "kind": "p256",
        "extractable": true
      },
      "ed-raw": {
        "id": "ed-raw",
        "format": "raw",
        "data": "11qYAYKxCrfVS/7TyWQHOg7hcvPapiMlrwIaaPcHURo=",
        "algorithm": "Ed25519",
        "usages": [
          "verify"
        ],
        "kind": "ed",
        "extractable": true
      },
      "ed-spki": {
        "id": "ed-spki",
        "format": "spki",
        "data": "MCowBQYDK2VwAyEA11qYAYKxCrfVS/7TyWQHOg7hcvPapiMlrwIaaPcHURo=",
        "algorithm": "Ed25519",
        "usages": [
          "verify"
        ],
        "kind": "ed",
        "extractable": true
      },
      "ed-jwk": {
        "id": "ed-jwk",
        "format": "jwk",
        "data": {
          "kty": "OKP",
          "crv": "Ed25519",
          "x": "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo",
          "ext": true,
          "key_ops": [
            "verify"
          ]
        },
        "algorithm": "Ed25519",
        "usages": [
          "verify"
        ],
        "kind": "ed",
        "extractable": true
      },
      "aes-short": {
        "id": "aes-short",
        "format": "raw",
        "data": "AA==",
        "algorithm": "AES-GCM",
        "usages": [
          "encrypt"
        ],
        "kind": "aes",
        "invalid": true,
        "extractable": true
      },
      "jwk-ext": {
        "id": "jwk-ext",
        "format": "jwk",
        "data": {
          "kty": "oct",
          "k": "AAAAAAAAAAAAAAAAAAAAAA",
          "alg": "A128GCM",
          "ext": false,
          "key_ops": [
            "encrypt",
            "decrypt"
          ]
        },
        "algorithm": "AES-GCM",
        "usages": [
          "encrypt"
        ],
        "kind": "aes",
        "invalid": true,
        "extractable": true
      },
      "jwk-ops": {
        "id": "jwk-ops",
        "format": "jwk",
        "data": {
          "kty": "oct",
          "k": "AAAAAAAAAAAAAAAAAAAAAA",
          "alg": "A128GCM",
          "ext": true,
          "key_ops": [
            "decrypt"
          ]
        },
        "algorithm": "AES-GCM",
        "usages": [
          "encrypt"
        ],
        "kind": "aes",
        "invalid": true,
        "extractable": true
      },
      "jwk-kty": {
        "id": "jwk-kty",
        "format": "jwk",
        "data": {
          "kty": "EC",
          "k": "AAAAAAAAAAAAAAAAAAAAAA",
          "alg": "A128GCM",
          "ext": true,
          "key_ops": [
            "encrypt",
            "decrypt"
          ]
        },
        "algorithm": "AES-GCM",
        "usages": [
          "encrypt"
        ],
        "kind": "aes",
        "invalid": true,
        "extractable": true
      },
      "p256-usage": {
        "id": "p256-usage",
        "format": "raw",
        "data": "BGsX0fLhLEJH+Lzm5WOkQPJ3A32BLeszoPShOUXYmMKWT+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
        "algorithm": {
          "name": "ECDSA",
          "namedCurve": "P-256"
        },
        "usages": [
          "sign"
        ],
        "kind": "p256",
        "invalid": true,
        "extractable": true
      },
      "ed-usage": {
        "id": "ed-usage",
        "format": "raw",
        "data": "11qYAYKxCrfVS/7TyWQHOg7hcvPapiMlrwIaaPcHURo=",
        "algorithm": "Ed25519",
        "usages": [
          "sign"
        ],
        "kind": "ed",
        "invalid": true,
        "extractable": true
      },
      "p256-point": {
        "id": "p256-point",
        "format": "raw",
        "data": "BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
        "algorithm": {
          "name": "ECDSA",
          "namedCurve": "P-256"
        },
        "usages": [
          "verify"
        ],
        "kind": "p256",
        "invalid": true,
        "extractable": true
      },
      "spki-invalid": {
        "id": "spki-invalid",
        "format": "spki",
        "data": "AQID",
        "algorithm": "Ed25519",
        "usages": [
          "verify"
        ],
        "kind": "ed",
        "invalid": true,
        "extractable": true
      }
    },
    "controls": {}
  }
]

One collector runs per invocation. Results and JSON select this signal’s fields; any companions execute in the same collector.

Generated source manifest lists runtime files, fixture URLs and content digests for this build. The Source tab provides a copyable console sample.

Run and edit locally

From the repository root, start the Astro app, then open /signals/crypto.key-admission. Edit the collector source and reload the page to load its new build.

pnpm run dev:web

In a browser module served by this repository’s Vite graph:

import { createCollector } from "/core/collect"
import { measurementModule } from "/core/signals/crypto/key-admission"

const signal = measurementModule
const collector = createCollector()
const suite = { signals: [signal] }
const result = await collector.collect(suite)

Reuse the collector owner for repeated calls so collection can enforce cleanup. This returns the collector’s raw result; app/signals/projection.ts selects the retained fields shown on this page.

rg -n 'measurementModule' core app tests
pnpm run check
pnpm run test tests/unit/app/focused-projection.test.ts