Skip to content

Commit 2784cef

Browse files
henrypark133claude
andauthored
fix: relax timing thresholds in policy adversarial tests (100ms -> 500ms) (nearai#1294)
These tests guard against catastrophic regex backtracking (seconds/minutes), not 12ms differences. CI runners with coverage instrumentation (cargo-llvm-cov) consistently exceed the 100ms threshold due to overhead, causing flaky failures. 500ms still catches real regressions while tolerating CI variability. [skip-regression-check] Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent 5c56032 commit 2784cef

1 file changed

Lines changed: 7 additions & 7 deletions

File tree

‎crates/ironclaw_safety/src/policy.rs‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -324,7 +324,7 @@ mod tests {
324324
let violations = policy.check(&payload);
325325
let elapsed = start.elapsed();
326326
assert!(
327-
elapsed.as_millis() < 100,
327+
elapsed.as_millis() < 500,
328328
"excessive_urls pattern took {}ms on 100KB near-miss",
329329
elapsed.as_millis()
330330
);
@@ -349,7 +349,7 @@ mod tests {
349349
let violations = policy.check(&payload);
350350
let elapsed = start.elapsed();
351351
assert!(
352-
elapsed.as_millis() < 100,
352+
elapsed.as_millis() < 500,
353353
"obfuscated_string pattern took {}ms on 100KB near-miss",
354354
elapsed.as_millis()
355355
);
@@ -370,7 +370,7 @@ mod tests {
370370
let _violations = policy.check(&payload);
371371
let elapsed = start.elapsed();
372372
assert!(
373-
elapsed.as_millis() < 100,
373+
elapsed.as_millis() < 500,
374374
"shell_injection pattern took {}ms on 100KB near-miss",
375375
elapsed.as_millis()
376376
);
@@ -387,7 +387,7 @@ mod tests {
387387
let _violations = policy.check(&payload);
388388
let elapsed = start.elapsed();
389389
assert!(
390-
elapsed.as_millis() < 100,
390+
elapsed.as_millis() < 500,
391391
"sql_pattern took {}ms on 100KB near-miss",
392392
elapsed.as_millis()
393393
);
@@ -405,7 +405,7 @@ mod tests {
405405
let _violations = policy.check(&payload);
406406
let elapsed = start.elapsed();
407407
assert!(
408-
elapsed.as_millis() < 100,
408+
elapsed.as_millis() < 500,
409409
"crypto_private_key pattern took {}ms on 100KB near-miss",
410410
elapsed.as_millis()
411411
);
@@ -423,7 +423,7 @@ mod tests {
423423
let _violations = policy.check(&payload);
424424
let elapsed = start.elapsed();
425425
assert!(
426-
elapsed.as_millis() < 100,
426+
elapsed.as_millis() < 500,
427427
"system_file_access pattern took {}ms on 100KB near-miss",
428428
elapsed.as_millis()
429429
);
@@ -441,7 +441,7 @@ mod tests {
441441
let _violations = policy.check(&payload);
442442
let elapsed = start.elapsed();
443443
assert!(
444-
elapsed.as_millis() < 100,
444+
elapsed.as_millis() < 500,
445445
"encoded_exploit pattern took {}ms on 100KB near-miss",
446446
elapsed.as_millis()
447447
);

0 commit comments

Comments
 (0)