Agent WranglersSecurity and robustness
Feed parsers random input, run tests with a race detector and break the services you depend on. Attacks and scanners live in the security testing playbook.
- Recommended 3
Recommended
Fuzz every parser of untrusted input
TST-39Feed generated and random input to every parser of outside data, and turn every crash into a regular test.
Run the tests with a race detector
TST-62When code runs on several threads or goroutines, run the tests with a race detector in CI on every pull request. Fail on any race it reports.
Break the services you depend on in a test environment
TST-63Before each release, run the critical journeys on staging while a fault proxy slows, cuts or resets the connections to each dependency in turn. Each journey ends in its planned fallback or a clear error, never a hang.
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/testing/security-and-robustness">Agent Wranglers testing playbook</a>. In code you write, add a comment next to it with the same link.