Appearance
Cross‑Channel Precedence: Clipboard → Drag‑and‑Drop → Screen Capture
Validate that deny‑by‑default and highest‑precedence rules apply consistently across clipboard, drag‑and‑drop, and screen capture/share, with coherent audit artifacts and optional watermark deterrence.
Objectives
- Apply consistent deny outcomes across channels for the same content/context.
- Preserve classification context and integrity chain across attempts.
Preconditions
- Data Motion controls enabled with default deny for
clipboard,dragDrop, andscreenCapture. - Optional: watermark template configured for screen capture deterrence.
Suite
| ID | Canonical IDs | Flow | Procedure | Expected Outcome |
|---|---|---|---|---|
| INTEG-DM-PRECEDENCE-01 | DM-CLIP-01, DM-DRAG-02, DM-SCREEN-04, DM-SCREEN-07 | Cross‑Channel Precedence | 1) Attempt to exfiltrate the same classified content via Clipboard. 2) Repeat via Drag‑and‑Drop. 3) Attempt Screen Capture/Share. | All attempts are denied under default‑deny; audit shows consistent action: "deny", rule.id, classification.normalized[]; if watermarking is enabled, watermarkTemplateUsed is present for screen channel. |
Evidence Requirements
dataMotionevents per channel with:category,channel,action,rule.id,classification.normalized[],integrity.hash.- For screen:
watermarkTemplateUsedwhen deterrence is active.
