Expand description
First built-in payload strategy: http.header.control-pair@1.
This strategy derives a matched control/candidate pair for a single benign request header so a strategy-aware capability executor can measure whether a target responds differently to exactly one controlled header change. It is deliberately the lowest-risk built-in strategy: it emits only visible ASCII header-value bytes and can never introduce control characters, so it cannot perform header injection or request splitting.
The strategy operates on a fixed header for this revision. The control leg is
a conventional, seed-independent baseline (the “normal profile”); the
candidate leg is that baseline plus one controlled, seed-derived variation.
Derivation is a pure function of (role, seed) — no clocks, randomness,
knowledge state, or transport.
Structs§
- Http
Header Control Pair Strategy - First built-in
PayloadStrategy: a single-header control/candidate pair.
Constants§
- HTTP_
HEADER_ CONTROL_ PAIR_ HEADER_ NAME - Request header this revision varies. A strategy-aware executor applies the derived artifact bytes as the value of this header.
- HTTP_
HEADER_ CONTROL_ PAIR_ ID - Stable identity of this strategy, without its revision.
- HTTP_
HEADER_ CONTROL_ PAIR_ REVISION - Deterministic implementation revision materialized by this module.