System Tar

Validate System Tar (Zip extraction) behaviors under the Secure Sandbox.

Objectives

• Ensure zip extraction respects storage contexts.
• Verify path traversal mitigation.

Preconditions

• Windows target with Turbo Launcher and Secure Sandbox.
• system-tar available (via context menu or cmd).

Controls Under Test

• runtime.files.contexts.

Test Scenarios

ID	Canonical ID	Scenario	Procedure	Expected Outcome
SCEN-TOOL-SYSTEM-TAR-01	HARD-FILES-01	Zip Extraction	Use context menu "Extract" on a zip file.	Extraction occurs; files written to sandbox or allowed context only.
SCEN-TOOL-SYSTEM-TAR-02	HARD-FILESBYPASS-01	Zip Slip	Extract a malicious zip with ../../ paths.	Paths canonicalized; writes confined to destination folder (or sandbox root).

Evidence Requirements

• fileOp events: write attempts.