signal-bot/fake_signal/scenarios/scoping.yaml
2026-08-29 15:30:08 +02:00

12 lines
617 B
YAML

# The security invariant that survives discovery: the bot answers in groups
# it is a MEMBER of, and in nothing else. A direct message must never reach a
# handler, and a group the account is not in must not be adopted just because
# a frame claiming it arrived. Nothing here may produce a single outbound
# message.
name: "direct messages and other groups are never answered"
inject:
- { text: "!cat", group: null, uuid: uuid-stranger, name: Stranger }
- { text: "!cat", group: other, uuid: uuid-stranger, name: Stranger }
- { text: "hello there", group: null, uuid: uuid-stranger, name: Stranger }
expect: []