Skip to content

Cross‑Channel Precedence: Clipboard → Drag‑and‑Drop → Screen Capture

Validate that deny‑by‑default and highest‑precedence rules apply consistently across clipboard, drag‑and‑drop, and screen capture/share, with coherent audit artifacts and optional watermark deterrence.

Objectives

  • Apply consistent deny outcomes across channels for the same content/context.
  • Preserve classification context and integrity chain across attempts.

Preconditions

  • Data Motion controls enabled with default deny for clipboard, dragDrop, and screenCapture.
  • Optional: watermark template configured for screen capture deterrence.

Suite

IDCanonical IDsFlowProcedureExpected Outcome
INTEG-DM-PRECEDENCE-01DM-CLIP-01, DM-DRAG-02, DM-SCREEN-04, DM-SCREEN-07Cross‑Channel Precedence1) Attempt to exfiltrate the same classified content via Clipboard. 2) Repeat via Drag‑and‑Drop. 3) Attempt Screen Capture/Share.All attempts are denied under default‑deny; audit shows consistent action: "deny", rule.id, classification.normalized[]; if watermarking is enabled, watermarkTemplateUsed is present for screen channel.

Evidence Requirements

  • dataMotion events per channel with: category, channel, action, rule.id, classification.normalized[], integrity.hash.
  • For screen: watermarkTemplateUsed when deterrence is active.