coverage.md

Coverage map

Every row of conformance-matrix.md, and what covers it, at Nowhere v3.1.0. Ninety-one rows, in the matrix's own order.

A row is in one of two states, and there is no third:

• covered — a named test or script. Run it and it either passes or it does not.
• manual — no automated test, with the reason it cannot have one and what to do instead. A reason, never "todo".

Test names are Class.method. Unless noted they are JVM unit tests run by ./gradlew testDebugUnitTest. (Portal) marks a JVM test that needs a live Portal (eval "$(conformance/scripts/portal-for-tests.sh)") and skips without one; (device) marks instrumentation, run with the arguments in conformance/README.md; scripts are in conformance/scripts/.

The v1.8.2 map — 111 rows, including the TLS Mux and split-carrier sections v3 deleted, and the findings writing it produced — is cases/l1-coverage.md in git history up to 8f16af2.

---

1. Authentication

#	Case	State	Covered by
1	Salt, root and both role keys match upstream's vectors	covered	AuthVectorTest.everyPositiveVectorIsReproduced, VectorFixtureTest.theAnchorVectorIsIntact; recomputed by verify-vectors.py
2	Vector AuthFrame over TLS matches	covered	AuthVectorTest.everyPositiveVectorIsReproduced, .thisClientSendsTheVectorFrame
3	Vector AuthFrame over QUIC matches	covered	as row 2; .theTransportByteChangesTheTag
4	The AuthFrame is exactly the 16-byte tag	covered	AuthVectorTest.theFrameIsExactlySixteenBytes, DedicatedTlsLaneTest.theOpeningIsOneWriteAndThePayloadWaitsForReady, QuicCarrierTest.streamZeroCarriesTheAuthFrameAndTheNextCarriesNone
5	Exporter is 32 bytes, nw3 label, empty context	covered	ExporterAgainstPortalTest.conscryptExportsAnExporterAndThePortalAcceptsTheResultingAuthFrame, .theLabelChangesTheExportedBytes, .anEmptyContextDiffersFromNoContext (Portal); QuicHandshakeTest.keyingMaterialComesOutAndDependsOnItsLabel (device); quic-probe.sh
6	An Egress tag verifies over QUIC only	covered	AuthVectorTest.anEgressTagVerifiesOverQuicOnly
7	Share-link keys are 32 lowercase hex, text bytes	covered	NowhereUrlTest.theKeyMustBeThirtyTwoLowercaseHexCharacters, AuthVectorTest.hexLookingTextIsNotHexDecoded, .everyRejectionVectorIsRefused
8	Password component rejected	covered	NowhereUrlTest.aPasswordComponentMakesTheUrlInvalid
9	Malformed percent escapes rejected	covered	AuthVectorTest.rejectionsAreDistinguishable, NowhereUrlTest.malformedInputIsRejectedRatherThanCrashing
10	Literal + is not a space	covered	AuthVectorTest.plusIsALiteralPlusAndNotASpace, ImportLinkTest.a shared key's literal plus is not turned into a space
11	Tag comparison is constant time	covered	ConstantTimeComparisonTest.theAuthenticationTagIsNeverComparedWithAByteWiseEquality, .theTagComparisonUsesAConstantTimeCall — a source rule, because a timing-unsafe comparison passes every functional test
12	A wrong key is never answered	covered	oracle-diff.sh cases wrong_key (Morph on: the handshake fails, both sides) and nomorph_wrong_key (Morph off: the Portal closes, both sides), over both carriers; SessionAgainstPortalTest.aWrongKeyFailsBeforeAnythingIsAuthenticated (Portal); QuicAuthenticationTest.aWrongSharedKeyIsNotAnswered (device)

2. FlowStart

#	Case	State	Covered by
13	TCP 00, UDP 01	covered	FlowStartVectorTest.everyVectorIsReproduced, .senderSetsTheReservedBitsToZero; verify-vectors.py
14	00 01 7f000001 01bb	covered	FlowStartVectorTest.everyVectorIsReproduced
15	Reserved bits sent as zero, ignored on receipt	covered	FlowStartVectorTest.everyByteDecodesAndOnlyBitZeroMatters

3. Target

#	Case	State	Covered by
16	IPv4 vector	covered	TargetVectorTest.theIpv4VectorCarriesTheExpectedAddressAndPort
17	IPv6 vector	covered	TargetVectorTest.theIpv6VectorCarriesTheExpectedAddressAndPort
18	IDNA domain vector	covered	TargetVectorTest.theIdnaDomainVectorSurvivesUnchanged
19	Port 0 rejected before dialling	covered	TargetVectorTest.everyRejectionVectorIsRefused, FakeIpResolverTest.port zero is refused on both paths and leaves nothing held
20	Bad domains rejected	covered	TargetVectorTest.everyRejectionVectorIsRefused, .labelRulesAreEnforced
21	Unknown ATYP, truncation rejected	covered	TargetVectorTest.atypTwoDoesNotExist, .everyTruncationPointIsRejectedRatherThanCrashing

4. SetupResult

#	Case	State	Covered by
22	Five values, v3 bytes	covered	SetupResultVectorTest.everyPositiveVectorDecodesToItsNamedResult, .theFixtureNamesMatchTheEnumOneForOne
23	Values above 4 are errors	covered	SetupResultVectorTest.everyValueOutsideTheRangeIsAProtocolError, .everyRejectionVectorIsRefused
24	v1's numbering is gone	covered	SetupResultVectorTest.theV1NumberingIsGone
25	Four rejections, four messages	covered	SetupResultVectorTest.allFourRejectionReasonsAreDistinct, SetupResultTextTest.theFourRejectionsReachFourDifferentExplanations, StringResourceTest.theFourRejectionsAllHaveAnExplanation, DesignRuleUiTest.everyRejectionRendersAsItsOwnIdentifier (device)
26	DIAL_FAILED, both carriers	covered	oracle-diff.sh cases dial_failed, quic_dial_failed, nomorph_*; SessionAgainstPortalTest.anUnreachableTargetIsReportedAsDialFailedNotAsSuccess (Portal)
27	Missing flow request → INVALID_REQUEST at the deadline	covered	PortalLifecycleTest.aConnectionThatAuthenticatesAndThenSaysNothingIsReclaimed (portal-lifecycle.sh) — measured at 5.0 s

5. The TLS carrier

#	Case	State	Covered by
28	One opening write	covered	DedicatedTlsLaneTest.theOpeningIsOneWriteAndThePayloadWaitsForReady
29	Target payload waits for READY	covered	DedicatedTlsLaneTest.theOpeningIsOneWriteAndThePayloadWaitsForReady, .aRejectedFlowNeverSendsItsPayload, NowhereSessionTest.theFirstPayloadIsSentOnceThePortalAnswers; SessionAgainstPortalTest.theFirstPayloadReachesTheTarget (Portal) — the case that found it
30	One connection per flow	covered	DedicatedTlsLaneTest.aLaneCarriesExactlyOneFlow, NowhereSessionTest.eachFlowGetsItsOwnConnectionAndItsOwnId; oracle-diff.sh tls_connections (exactly 16 for 16 held flows, both implementations); e2e-fakeip.sh on a device
31	Raw bytes after READY; deadline lifted	covered	DedicatedTlsLaneTest.theFlowReadsAndWritesThroughTheTransport, .theSetupDeadlineIsLiftedOnceTheFlowIsOpen, .aRejectedOpenLeavesTheDeadlineInPlace
32	Large transfer is lossless	covered	oracle-diff.sh tcp_ip_payload (1 MiB digest); e2e-fakeip.sh (20 MiB, IPv4 and IPv6, on a device)

6. UDP over TLS

#	Case	State	Covered by
33	Empty packet	covered	UdpOverTcpVectorTest.anEmptyPacketIsDataAndNotATerminator
34	abc	covered	UdpOverTcpVectorTest.everyPositiveVectorIsReproduced
35	Back to back	covered	UdpOverTcpVectorTest.consecutivePacketsSitBackToBack
36	EOF rules	covered	UdpOverTcpVectorTest.truncatedLengthAndTruncatedPayloadAreDifferentFailures, .aCleanEndIsNotAnError, .everyTruncationPointOfAStreamIsRejectedRatherThanCrashing
37	Real round trip	covered	oracle-diff.sh udp_round_trip, nomorph_udp_round_trip

7. The QUIC carrier and DATAGRAMs

#	Case	State	Covered by
38	AuthFrame on Stream 0 only	covered	QuicCarrierTest.streamZeroCarriesTheAuthFrameAndTheNextCarriesNone, .aRejectedFirstFlowDoesNotCauseASecondAuthFrame; QuicAuthenticationTest.aSecondFlowOpensWithoutASecondAuthFrame (device)
39	A rebuilt connection authenticates again	covered	QuicCarrierTest.aRebuiltConnectionAuthenticatesAgain
40	No unidirectional streams	covered	checkNativeBridge, a source rule over the bridge
41	One stream credited before auth	covered	QuicHandshakeTest.manyThreadsShareOneConnectionWithoutReachingTheNativeSide, QuicPayloadTest.sixteenConcurrentFlowsShareOneConnection (device)
42	Stream-derived flow id	covered	QuicFlowIdVectorTest.*, QuicCarrierTest.eachFlowIsNamedByItsStream; verify-vectors.py
43	Base word layout	covered	DatagramVectorTest.theTypeIsTheTopTwoBitsAndTheIdTheRest, .aFlowIdBeyondThirtyBitsCannotBeEncoded, QuicDatagramVectorTest.everyPositiveVectorEncodesToItsExpectedBytes
44	4- and 12-byte headers	covered	DatagramVectorTest.everyPositiveVectorIsReproduced, QuicDatagramVectorTest.bothCodecsProduceTheSameBytes
45	Invalid datagrams rejected	covered	DatagramVectorTest.everyRejectionVectorIsRefused, QuicDatagramVectorTest.everyDecoderRejectionIsRefused
46	No DATA before READY; nothing on the control stream	covered	DatagramVectorTest.everyRejectionVectorIsRefused (not-READY case), QuicCarrierTest.aUdpFlowsOpeningWriteCarriesNoPayload
47	Fragment planning	covered	DatagramVectorTest.fragmentPayloadMaxIsDatagramSizeMinusTwelve, .aPayloadNeedingMoreThan255FragmentsIsRejected, QuicCarrierTest.aPacketTooLargeForOneDatagramIsFragmentedWithOnePacketId
48	A fragment leaves a byte for each other	covered	DatagramVectorTest.everyRejectionVectorIsRefused
49	Reassembly keyed, conflicts discard, bounded	covered	FragmentReassemblyTest.*, DatagramVectorTest.slotCountIsBounded, .slotsExpireSoAnAbandonedPacketCannotHoldMemory, QuicCarrierTest.aFragmentedPacketIsReassembledBeforeDelivery
50	Both carriers, both kinds, against the oracle	covered	oracle-diff.sh — every case over TLS and QUIC, Morph on and off; QuicPayloadTest.theSameBlobOverTlsAndOverQuicProducesTheSameDigest, QuicDatagramTest.* (device)
51	Keep-alive outlives the idle timeout	covered	QuicKeepAliveTest.anIdleAuthenticatedConnectionOutlivesTheIdleTimeoutAndStillOpensAFlow (device), KeepAliveTest.*
52	A stream beyond the id space is refused	covered	QuicCarrierTest.aStreamBeyondTheIdSpaceIsRefusedWithoutAWrite

8. Morph

#	Case	State	Covered by
53	Directional keys	covered	MorphVectorTest.theDirectionalKeysAreUpstreams; verify-vectors.py
54	ChaCha20	covered	MorphVectorTest.chaCha20MatchesRfc8439, .chaCha20StartsAtBlockZero; verify-vectors.py checks its own ChaCha20 against the RFC first
55	TCP wire image	covered	MorphVectorTest.theTcpWireIsUpstreamsLayout, MorphSocketTest.bothDirectionsRoundTripThroughAHandWrittenPortal
56	Keystream continuity	covered	MorphVectorTest.theKeystreamContinuesAcrossCalls, MorphSocketTest.aSingleByteWriteAndReadKeepTheKeystreamInStep, .theCallersArrayIsNotMaskedInPlace
57	fade prelude	covered	MorphPreludeTest.fadeSamplesTheBoundariesAsUpstreamDoes, .rejectionSamplingRedrawsTheBiasedTail, .fadeHasThreeBandsWithBoundariesInRange
58	UDP wire image	covered	MorphVectorTest.theUdpWireIsUpstreamsLayout, .aDatagramNoLongerThanTheNonceIsDiscarded, .everyDatagramGetsItsOwnNonce
59	QUIC payload reduced by the nonce	manual	Set in the bridge (max_udp_payload) and in QuicConnection.open; observable only as the absence of loss on a 1500-byte path. The device and oracle runs carry 20 MiB with Morph on, which is where an oversized packet would show as a stall
60	Both modes interoperate; a mismatch fails (since 3.1: silently, then a reset)	covered	oracle-diff.sh (all cases with Morph on and off); NowhereDialerAgainstPortalTest.aMorphMismatchFailsTheHandshake (Portal)
61	Authenticated Prelude: upstream's vectors	covered	AuthenticatedPreludeTest.theFixedVectorEncodesToUpstreamsTail, .theExtremeFieldVectorsMatch, .anyChangedBitFailsTheTag, .encodingKeepsThePolicysPrefixAndEveryHighBit, MorphVectorTest.theAuthenticatedPreludeChangesOnlyTheTailsLowBits; verify-vectors.py recomputes the four vectors bit by bit
62	A 3.1 Portal verifies the Tag	covered	AuthenticatedPreludeAgainstPortalTest.aReplayedCounterIsRefusedAndAFreshOneIsNot (Portal) — a refused replay is what only a verified Tag produces; .countersStartAtOneAndConcurrentCallersNeverShareOne, .exhaustionIsPermanentAndNeverWraps, .eachPortalsKeyHasItsOwnIdentity

9. Configuration and certificates

#	Case	State	Covered by
63	Parse a share link	covered	NowhereUrlTest.theClientSchemeIsNowhere and thirty-five further cases
64	Defaults	covered	NowhereUrlTest.defaultsMatchTheSpecification
65	First duplicate wins	covered	NowhereUrlTest.theFirstDuplicateWins
66	Unknown and retired parameters ignored	covered	NowhereUrlTest.unknownParametersAreIgnoredRatherThanRejected, .legacyParametersAreIgnoredRatherThanRejected
67	A 2.x dashboard's up/down	covered	NowhereUrlTest.agreeingLegacyCarriersAreTakenAsNet, .aLegacySplitFallsBackToTheDefault, .netWinsOverLegacyCarriers, .aLegacyLinkIsRewrittenInV3Form
68	Carrier paths refused	covered	NowhereUrlTest.aCarrierPathIsRefusedWithItsName
69	Round trip	covered (this client) / manual (the dashboard)	NowhereUrlTest.generatedUrlsParseBackToTheSameNode, NowhereUrlRoundTripFuzzTest.*. The dashboard half needs a running NowhereDash; NowhereDash at c753043 targets Nowhere 2.1.1 and does not yet emit v3 links
70	pin over sni; validation	covered	NowhereUrlTest.pinTakesPriorityOverSni, .aPinIsNormalisedToLowerCase, .aMalformedPinIsRejected, .sniMustBeAnAsciiDnsName
71	No unverified mode	covered	PeerVerificationTest.*; QuicPinTest.neitherAPinNorAChainCheckIsRefused (device); NowhereDialerAgainstPortalTest.aGeneratedCertificateIsNotTrustedByName (Portal)
72	Hostname matching	covered	PeerVerificationTest.anExactNameMatchesCaseInsensitively, .aWildcardStandsForExactlyOneLeftmostLabel, .anIpLiteralMatchesAnIpEntryByItsBytes, .theCommonNameIsNeverConsulted
73	A wrong pin fails, named	covered	NowhereDialerAgainstPortalTest.aWrongPinIsRefusedAndNamesWhatWasPresented (Portal); QuicPinTest.oneWrongNibbleStopsTheHandshake (device) — the pin is the one the Portal logged, so a pass cannot be the client agreeing with itself
74	Refused by name on a device	covered	ChainVerificationOnDeviceTest.* (device). The acceptance half — a chain this device trusts — is manual: it needs a CA key a test can sign with, and committing one would make every debug build trust its reader. PortalLifecycleTest accepts a chain by name against a live Portal on the JVM
75	ALPN nw3	covered	oracle-diff.sh (every case negotiates it); DialReason.AlpnRejected is the observable mismatch — a Portal that refuses aborts the handshake instead, see CLAUDE.md fact 11

10. Dashboard integration

#	Case	State	Covered by
76	Fetch and parse	covered	SubscriptionFetcherTest.nodesAreFetchedAndParsed, against a real local HttpServer
77	http warned about	covered	SubscriptionEndpointTest.httpIsFlaggedAsPlaintext, SubscriptionFetcherTest.plaintextTransportIsReportedToTheCaller
78	Token never logged	covered	SubscriptionEndpointTest.redactsTheToken and six further cases, SubscriptionFetcherTest.noFailureReasonEverContainsTheToken, FailureMessageTest.noReasonCarriesKeyMaterialMarkers
79	subscription-userinfo	covered	SubscriptionFetcherTest.usageHeaderIsParsed
80	total=-1	covered	SubscriptionFetcherTest.unlimitedIsRepresentedAsUnlimitedNotAsMinusOne, DesignRuleUiTest.quotaSaysCountedRatherThanUsed (device)
81	No upload figure	covered	SubscriptionFetcherTest.thereIsNoWayToReadAnUploadFigure, DesignRuleUiTest.nothingOnTheNodeListPresentsUploadAsAMeasurement (device)
82	profile-title	covered	SubscriptionFetcherTest.aBase64TitleIsDecoded, .aMalformedTitleIsDroppedRatherThanFailingTheFetch
83	add-proxy deep link	covered	ImportLinkTest.*
84	Empty feed read as expiry	covered	SubscriptionFetcherTest.anEmptyFeedIsReportedAsQuotaExhaustionNotAsAnError, SubscriptionRefreshTest.anEmptyFeedMarksEveryNodeRatherThanReportingANetworkError, .aNodeTheFeedDropsIsKeptAndMarkedRatherThanDeleted
85	type / ver / caps	covered	SubscriptionEndpointTest.appendsTypeVersionAndCapabilities, SubscriptionFetcherTest.capabilityParametersAreActuallySent — caps is now nw3,quic

11. Cross-cutting

#	Case	State	Covered by
86	Decoders survive arbitrary bytes	covered	DecoderFuzzTest.* over eleven decoders including MorphDatagram.open; DnsInterceptorTest.arbitrary bytes neither crash nor allocate without bound; NowhereUrlRoundTripFuzzTest.*; ImportLinkTest.arbitrary text neither throws nor produces something longer than it was given
87	Headers before variable data	covered	DecoderFuzzTest.aHostileLengthFieldNeverDrivesAnUnboundedAllocation, TargetVectorTest.aHostileLengthByteCannotDriveAnUnboundedRead, UdpOverTcpVectorTest.aDeclaredLengthCannotDriveAnUnboundedRead, DnsMessageTest.a label length past the end of the message does not read past it
88	Recovery after a Portal restart	covered	PortalLifecycleTest.aNewFlowSucceedsAfterThePortalHasRestarted (portal-lifecycle.sh)
89	Kotlin and Rust identical	covered	oracle-diff.sh — 22 cases and 2 connection counts, every case over four carrier and Morph combinations. Found two defects on its first v3 runs; see below
90	Remote resolution on a device	covered	e2e-fakeip.sh — the origin is reachable only by a name that resolves on the Portal's docker network, and it hears only from the Portal
91	Coverage ≥ 90%	covered	koverVerifyDebug — 92.0% at this baseline

---

Summary

90 of 91 rows covered by an automated test or script, one manual with its reason (row 59), and none blocked. Two of the 90 are covered with a stated gap: row 69's dashboard half, because NowhereDash does not yet emit v3 links, and row 74's acceptance half, for the reason given there.

What the first v3 runs found

Each of these was invisible to the vectors, which agreed with the client the whole time, and each looked like something other than what it was.

• The first payload was riding the opening write. v1 allowed it and this client did it on purpose, to save a round trip. A v3 Portal watches the stream while it dials and ends the flow on an early byte ("target payload arrived before READY"). Every TCP flow that had its first bytes in hand when it opened — most of them — would have been torn down. Found by SessionAgainstPortalTest.theFirstPayloadReachesTheTarget.
• A refused AuthFrame over QUIC surfaced as a transport failure. v3 closes the connection on a bad tag. Over TLS that reached the client as an end of stream, "no setup byte"; over QUIC the native connection error escaped the stream's read, and oracle-diff.sh showed the oracle reading the same event as "no setup result". The stream transport now presents a dead connection as the I/O failure its contract promises.
• The harness's pin came from a Portal that was not answering. A Portal started inside $(…) recorded its PID in a subshell, outlived the run, and held the port; the next run's Portal failed to bind after logging a fingerprint of its own. Both implementations then agreed on every case — that the certificate was wrong. Agreement on a failure is still agreement, which is why the script now refuses to start on an occupied port.
• Sixteen held flows counted as three connections. The burst's overlap lasted only as long as the last arrival took to be answered, which was shorter than the socket-table sampler's interval. The origin now holds its answers for two seconds after the barrier.