mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-10-24 12:42:38 +00:00
Oliver Kieselbach
283c094986
- build-agent.yml: input channel (release | dev; dev writes the lab blobs only and refuses stable/release). Every third-party PE needs its vendor's embedded Authenticode signature (signtool verify /pa, read-only). AutopilotMonitor.Agent.cat, a signed SHA-256 catalog over every payload file, is created after Authenticode and before the ZIP; the device check runs under Windows PowerShell 5.1 on the final ZIP. - Agent: SelfUpdater step 5b verifies the staged payload against the catalog before any file is swapped (PayloadCatalogVerifier, Test-FileCatalog in-process; a rejection means no update, skip reason catalog_rejected). agent_started reports which bootstrap installed the agent, read from the bootstrap logs (BootstrapProvenanceReader). - Payload: System.Management.Automation.dll (never loaded, the GAC copy binds first) and AutopilotMonitor.Shared.xml no longer ship; PDBs stay. - Shared: CodeSigningPublisherPattern, AgentPayloadCatalogFileName; CodeSigningParityTests pins them against installer, loader and workflow. - Submodules: infra (build.ps1 local only), internal (D-354, plan, docs), commands. Installer v2.6 and the OOBE script follow once a catalog ZIP is on stable: a merged installer change is live on the next loader run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>