Source
This app’s code and revision history are public. Download a copy or explore the files below.
Public
The app’s code and revision history are public.
Run it yourself
Take the whole tree and run it on your own machine. The download needs no account. Cloning needs a sign-in.
Download .zip
bounded clone 6eca480d6447d873e2e5eed9
A copy you download is not bounded. The guarantees this app runs under - declared egress, proven invariants, writes that fail closed - live in the runtime serving this page, not in the files. What you get is auditable source you can read and run, with no runtime guarantees attached.
policy-tests/pastes.json
{
"version": "1",
"name": "only owners read and change a paste; expiry up to a year is enforced; a burn paste opens once",
"actors": {
"Ann": "ann_user",
"Bob": "bob_user",
"Api": "api_principal"
},
"constants": {
"BOUNDED_PUBLIC_PRINCIPAL_API": "api_principal"
},
"steps": [
{ "op": "setTime", "epoch": 1800000000 },
{ "op": "setMany", "writes": [
{ "path": "pastes/pasteAnonAAA", "data": { "content": "hi", "title": "", "language": "text", "ttl": 0, "burn": false, "encrypted": false, "opened": false, "createdBy": "nobody", "createdAt": 1800000000 } },
{ "path": "pastes/pasteAnonAAA/owners/nobody", "data": { "at": 1800000000 } },
{ "path": "pastekeys/pasteAnonAAA", "data": { "key": "aaaaaaaaaaaaaaaaaaaaaaaa" } }
], "shouldFail": true },
{ "op": "as", "who": "Ann" },
{ "op": "setMany", "writes": [
{ "path": "pastes/pasteYearAAA", "data": { "content": "hello", "title": "", "language": "text", "ttl": 31536000, "burn": false, "encrypted": false, "opened": false, "createdBy": "ann_user", "createdAt": 1800000000 } },
{ "path": "pastes/pasteYearAAA/owners/ann_user", "data": { "at": 1800000000 } },
{ "path": "pastekeys/pasteYearAAA", "data": { "key": "yyyyyyyyyyyyyyyyyyyyyyyy" } }
] },
{ "op": "setMany", "writes": [
{ "path": "pastes/pasteLongAAA", "data": { "content": "hello", "title": "", "language": "text", "ttl": 31536001, "burn": false, "encrypted": false, "opened": false, "createdBy": "ann_user", "createdAt": 1800000000 } },
{ "path": "pastes/pasteLongAAA/owners/ann_user", "data": { "at": 1800000000 } },
{ "path": "pastekeys/pasteLongAAA", "data": { "key": "llllllllllllllllllllllll" } }
], "shouldFail": true },
{ "op": "setMany", "writes": [
{ "path": "pastes/pasteTinyAAA", "data": { "content": "hello", "title": "", "language": "text", "ttl": 59, "burn": false, "encrypted": false, "opened": false, "createdBy": "ann_user", "createdAt": 1800000000 } },
{ "path": "pastes/pasteTinyAAA/owners/ann_user", "data": { "at": 1800000000 } },
{ "path": "pastekeys/pasteTinyAAA", "data": { "key": "tttttttttttttttttttttttt" } }
], "shouldFail": true },
{ "op": "setMany", "writes": [
{ "path": "pastes/pasteShortA", "data": { "content": "hello", "title": "", "language": "text", "ttl": 0, "burn": false, "encrypted": false, "opened": false, "createdBy": "ann_user", "createdAt": 1800000000 } },
{ "path": "pastes/pasteShortA/owners/ann_user", "data": { "at": 1800000000 } },
{ "path": "pastekeys/pasteShortA", "data": { "key": "ssssssssssssssssssssssss" } }
], "shouldFail": true },
{ "op": "setMany", "writes": [
{ "path": "pastes/pasteNoKeyAA", "data": { "content": "hello", "title": "", "language": "text", "ttl": 0, "burn": false, "encrypted": false, "opened": false, "createdBy": "ann_user", "createdAt": 1800000000 } },
{ "path": "pastes/pasteNoKeyAA/owners/ann_user", "data": { "at": 1800000000 } }
], "shouldFail": true },
{ "op": "set", "path": "pastes/pasteYearAAA", "data": { "title": "renamed", "content": "hello again" } },
{ "op": "set", "path": "pastes/pasteYearAAA", "data": { "opened": true }, "shouldFail": true },
{ "op": "set", "path": "pastes/pasteYearAAA", "data": { "ttl": 0 }, "shouldFail": true },
{ "op": "read", "path": "pastes/pasteYearAAA" },
{ "op": "read", "path": "pastekeys/pasteYearAAA", "shouldFail": true },
{ "op": "as", "who": "Bob" },
{ "op": "read", "path": "pastes/pasteYearAAA", "shouldFail": true },
{ "op": "read", "path": "pastekeys/pasteYearAAA", "shouldFail": true },
{ "op": "set", "path": "pastes/pasteYearAAA", "data": { "title": "not yours" }, "shouldFail": true },
{ "op": "delete", "path": "pastes/pasteYearAAA", "shouldFail": true },
{ "op": "setMany", "writes": [
{ "path": "pasteclaims/pasteYearAAA/c/bob_user", "data": { "key": "wrongwrongwrongwrongwron" } },
{ "path": "pastes/pasteYearAAA/owners/bob_user", "data": { "at": 1800000000 } }
], "shouldFail": true },
{ "op": "as", "who": "Api" },
{ "op": "read", "path": "pastes/pasteYearAAA" },
{ "op": "read", "path": "pastekeys/pasteYearAAA" },
{ "op": "set", "path": "pastes/pasteYearAAA", "data": { "opened": true }, "shouldFail": true },
{ "op": "delete", "path": "pastes/pasteYearAAA", "shouldFail": true },
{ "op": "as", "who": "Bob" },
{ "op": "setMany", "writes": [
{ "path": "pasteclaims/pasteYearAAA/c/bob_user", "data": { "key": "yyyyyyyyyyyyyyyyyyyyyyyy" } },
{ "path": "pastes/pasteYearAAA/owners/bob_user", "data": { "at": 1800000000 } }
] },
{ "op": "set", "path": "pastes/pasteYearAAA", "data": { "title": "edited with the admin link" } },
{ "op": "expect", "expr": "get(/pastes/pasteYearAAA).title == 'edited with the admin link'" },
{ "op": "as", "who": "Ann" },
{ "op": "setMany", "writes": [
{ "path": "pastes/pasteBurnAAA", "data": { "content": "secret", "title": "", "language": "text", "ttl": 604800, "burn": true, "encrypted": false, "opened": false, "createdBy": "ann_user", "createdAt": 1800000000 } },
{ "path": "pastes/pasteBurnAAA/owners/ann_user", "data": { "at": 1800000000 } },
{ "path": "pastekeys/pasteBurnAAA", "data": { "key": "bbbbbbbbbbbbbbbbbbbbbbbb" } }
] },
{ "op": "as", "who": "Api" },
{ "op": "delete", "path": "pastes/pasteBurnAAA", "shouldFail": true },
{ "op": "set", "path": "pastes/pasteBurnAAA", "data": { "opened": true, "content": "changed" }, "shouldFail": true },
{ "op": "set", "path": "pastes/pasteBurnAAA", "data": { "opened": true } },
{ "op": "set", "path": "pastes/pasteBurnAAA", "data": { "opened": true }, "shouldFail": true },
{ "op": "delete", "path": "pastes/pasteBurnAAA" },
{ "op": "as", "who": "Ann" },
{ "op": "setMany", "writes": [
{ "path": "pastes/pasteHourAAA", "data": { "content": "brief", "title": "", "language": "text", "ttl": 600, "burn": false, "encrypted": false, "opened": false, "createdBy": "ann_user", "createdAt": 1800000000 } },
{ "path": "pastes/pasteHourAAA/owners/ann_user", "data": { "at": 1800000000 } },
{ "path": "pastekeys/pasteHourAAA", "data": { "key": "hhhhhhhhhhhhhhhhhhhhhhhh" } }
] },
{ "op": "read", "path": "pastes/pasteHourAAA" },
{ "op": "advanceTime", "seconds": 601 },
{ "op": "read", "path": "pastes/pasteHourAAA", "shouldFail": true },
{ "op": "set", "path": "pastes/pasteHourAAA", "data": { "title": "too late" }, "shouldFail": true },
{ "op": "as", "who": "Api" },
{ "op": "read", "path": "pastes/pasteHourAAA", "shouldFail": true }
]
}
Change history
Quality pass: password lock, year expiry, line links, text/plain API
Bounded source sync
Bounded source sync
Bounded source sync