Cleanroom Isolation certificate

This page replays runs recorded from real Docker containers. To run them yourself, see the README.

real Docker containers Run B - Cleanroom

The room was clean. Every finding holds.

The rooms

floor plan

Leaks found
0
of 0 channels checked
Findings still valid
0
of 0 findings
Mole moves landed
0
of 0 escape moves
Bits per second
0
shared files channel

Findings and taint tracker

a leak at finding k taints k and everything after it

Leak meter

mutual information, log scale

How many bits per second a cheating red team could push to blue through each channel. Uses per second are assumptions.

The Mole

scripted attacker

Channels checked

every room was searched for the other team's tripwire word

Sealed diary

Every event is stored with a fingerprint of the previous one. Change anything and the chain breaks. This page recomputes the hash chain in your browser; the signatures are checked with python -m core.audit. Scroll the table sideways to see every column.

Real vs simulated

nothing here claims more than the run measured