LICENSE
README.md
pyproject.toml
src/delegationbench/__init__.py
src/delegationbench/actions.py
src/delegationbench/agents.py
src/delegationbench/cli.py
src/delegationbench/clock.py
src/delegationbench/corpus.py
src/delegationbench/defense.py
src/delegationbench/envelope.py
src/delegationbench/fuzzer.py
src/delegationbench/oracle.py
src/delegationbench/outputs.py
src/delegationbench/report.py
src/delegationbench/runner.py
src/delegationbench/scenario.py
src/delegationbench/tools.py
src/delegationbench/trace.py
src/delegationbench.egg-info/PKG-INFO
src/delegationbench.egg-info/SOURCES.txt
src/delegationbench.egg-info/dependency_links.txt
src/delegationbench.egg-info/entry_points.txt
src/delegationbench.egg-info/requires.txt
src/delegationbench.egg-info/top_level.txt
src/delegationbench/adapters/__init__.py
src/delegationbench/adapters/langgraph.py
src/delegationbench/adapters/roma.py
src/delegationbench/scenarios/attacks/attack-001-credential-forwarding.yaml
src/delegationbench/scenarios/attacks/attack-002-supervisor-impersonation.yaml
src/delegationbench/scenarios/attacks/attack-003-elevated-authority-request.yaml
src/delegationbench/scenarios/attacks/attack-004-orchestrator-bypass.yaml
src/delegationbench/scenarios/attacks/attack-005-scope-widening-handoff.yaml
src/delegationbench/scenarios/attacks/attack-006-nested-beyond-depth.yaml
src/delegationbench/scenarios/attacks/attack-007-malicious-child-result.yaml
src/delegationbench/scenarios/attacks/attack-008-malicious-document.yaml
src/delegationbench/scenarios/attacks/attack-009-replayed-delegation.yaml
src/delegationbench/scenarios/attacks/attack-010-expired-delegation.yaml
src/delegationbench/scenarios/attacks/attack-011-cross-user-contamination.yaml
src/delegationbench/scenarios/attacks/attack-012-sibling-config-modification.yaml
src/delegationbench/scenarios/attacks/attack-013-read-to-write-escalation.yaml
src/delegationbench/scenarios/attacks/attack-014-draft-to-send-escalation.yaml
src/delegationbench/scenarios/attacks/attack-015-prepare-to-execute-escalation.yaml
src/delegationbench/scenarios/attacks/attack-016-principal-substitution-in-grant.yaml
src/delegationbench/scenarios/attacks/attack-017-document-review-scope-escalation.yaml
src/delegationbench/scenarios/attacks/attack-018-customer-notice-scope-escalation.yaml
src/delegationbench/scenarios/attacks/attack-019-invoice-execution-scope-escalation.yaml
src/delegationbench/scenarios/attacks/attack-020-configuration-change-scope-escalation.yaml
src/delegationbench/scenarios/attacks/attack-021-support-routing-depth-overrun.yaml
src/delegationbench/scenarios/attacks/attack-022-procurement-routing-depth-overrun.yaml
src/delegationbench/scenarios/attacks/attack-023-research-routing-depth-overrun.yaml
src/delegationbench/scenarios/attacks/attack-024-document-check-envelope-replay.yaml
src/delegationbench/scenarios/attacks/attack-025-mailbox-check-envelope-replay.yaml
src/delegationbench/scenarios/attacks/attack-026-document-ttl-expired-handoff.yaml
src/delegationbench/scenarios/attacks/attack-027-mailbox-ttl-expired-handoff.yaml
src/delegationbench/scenarios/attacks/attack-028-archive-attribution-detached-tool-call.yaml
src/delegationbench/scenarios/attacks/attack-029-notification-attribution-detached-tool-call.yaml
src/delegationbench/scenarios/attacks/attack-030-configuration-attribution-detached-tool-call.yaml
src/delegationbench/scenarios/attacks/attack-031-document-result-result-driven-widening.yaml
src/delegationbench/scenarios/attacks/attack-032-email-result-result-driven-widening.yaml
src/delegationbench/scenarios/attacks/attack-033-config-result-result-driven-widening.yaml
src/delegationbench/scenarios/attacks/attack-034-document-owner-principal-substitution.yaml
src/delegationbench/scenarios/attacks/attack-035-message-owner-principal-substitution.yaml
src/delegationbench/scenarios/attacks/attack-036-payment-owner-principal-substitution.yaml
src/delegationbench/scenarios/attacks/attack-037-config-owner-principal-substitution.yaml
src/delegationbench/scenarios/attacks/attack-038-mailbox-owner-principal-substitution.yaml
src/delegationbench/scenarios/benign/benign-001-approved-payment.yaml
src/delegationbench/scenarios/benign/benign-002-read-only-research.yaml
src/delegationbench/scenarios/benign/benign-003-draft-only-email.yaml
src/delegationbench/scenarios/benign/benign-004-approved-send-reviewed-draft.yaml
src/delegationbench/scenarios/benign/benign-005-prepare-without-execute.yaml
src/delegationbench/scenarios/benign/benign-006-multi-hop-within-depth.yaml
src/delegationbench/scenarios/benign/benign-007-config-read-only.yaml
src/delegationbench/scenarios/benign/benign-008-credential-doc-within-scope.yaml
src/delegationbench/scenarios/benign/benign-009-scope-shrinking-delegation.yaml
src/delegationbench/scenarios/benign/benign-010-supervisor-message-in-grant.yaml
src/delegationbench/scenarios/benign/benign-011-expiry-boundary-within-ttl.yaml
src/delegationbench/scenarios/benign/benign-012-renewed-delegation-fresh-envelopes.yaml
src/delegationbench/scenarios/benign/benign-013-deep-chain-full-attribution.yaml
src/delegationbench/scenarios/benign/benign-014-child-result-instruction-in-grant.yaml
src/delegationbench/scenarios/benign/benign-015-two-principal-store-b-resources-only.yaml
src/delegationbench/scenarios/benign/benign-016-document-review-explicit-authority.yaml
src/delegationbench/scenarios/benign/benign-017-customer-notice-explicit-authority.yaml
src/delegationbench/scenarios/benign/benign-018-invoice-execution-explicit-authority.yaml
src/delegationbench/scenarios/benign/benign-019-configuration-change-explicit-authority.yaml
src/delegationbench/scenarios/benign/benign-020-support-routing-depth-boundary.yaml
src/delegationbench/scenarios/benign/benign-021-procurement-routing-depth-boundary.yaml
src/delegationbench/scenarios/benign/benign-022-research-routing-depth-boundary.yaml
src/delegationbench/scenarios/benign/benign-023-document-check-single-use-envelope.yaml
src/delegationbench/scenarios/benign/benign-024-mailbox-check-single-use-envelope.yaml
src/delegationbench/scenarios/benign/benign-025-document-ttl-handoff-within-ttl.yaml
src/delegationbench/scenarios/benign/benign-026-mailbox-ttl-handoff-within-ttl.yaml
src/delegationbench/scenarios/benign/benign-027-archive-attribution-attributed-tool-call.yaml
src/delegationbench/scenarios/benign/benign-028-notification-attribution-attributed-tool-call.yaml
src/delegationbench/scenarios/benign/benign-029-configuration-attribution-attributed-tool-call.yaml
src/delegationbench/scenarios/benign/benign-030-document-result-result-action-in-scope.yaml
src/delegationbench/scenarios/benign/benign-031-email-result-result-action-in-scope.yaml
src/delegationbench/scenarios/benign/benign-032-config-result-result-action-in-scope.yaml
src/delegationbench/scenarios/benign/benign-033-document-owner-principal-continuity.yaml
src/delegationbench/scenarios/benign/benign-034-message-owner-principal-continuity.yaml
src/delegationbench/scenarios/benign/benign-035-payment-owner-principal-continuity.yaml
src/delegationbench/scenarios/benign/benign-036-config-owner-principal-continuity.yaml
src/delegationbench/scenarios/benign/benign-037-mailbox-owner-principal-continuity.yaml
tests/test_cli.py
tests/test_corpus_coverage.py
tests/test_defense.py
tests/test_fuzzer.py
tests/test_integration_langgraph.py
tests/test_langgraph_adapter.py
tests/test_oracle.py
tests/test_outputs.py
tests/test_report.py
tests/test_roma_adapter.py
tests/test_runner.py
tests/test_scenario.py
tests/test_tools.py