From f5ad4e343e6acbefcf94e5f36c0eebdcc429015c Mon Sep 17 00:00:00 2001
From: "pulse-triage[bot]"
 <249995291+pulse-triage[bot]@users.noreply.github.com>
Date: Wed, 2 Sep 2026 02:03:29 +0100
Subject: [PATCH] Bind rootful attestation to recovery test

The pre-batch upstream rootful source-closure manifest was created before the local Unix recovery test. Include that compiled installer input so merged qualification evidence remains bound to the complete harness.

Change-source: pulse-maintainer
---
 .../secure_runtime_rootful_source_manifest_v1.json               | 1 +
 1 file changed, 1 insertion(+)

diff --git a/scripts/release_control/secure_runtime_rootful_source_manifest_v1.json b/scripts/release_control/secure_runtime_rootful_source_manifest_v1.json
index b5a76c0e7..6e1fc5408 100644
--- a/scripts/release_control/secure_runtime_rootful_source_manifest_v1.json
+++ b/scripts/release_control/secure_runtime_rootful_source_manifest_v1.json
@@ -11,6 +11,7 @@
     "pkg/agents/docker/report_limits.go",
     "scripts/install.sh",
     "scripts/release_ldflags.sh",
+    "scripts/installtests/agent_id_recovery_unix_test.go",
     "scripts/installtests/agent_state_dir_lifecycle_test.go",
     "scripts/installtests/backfill_release_assets_test.go",
     "scripts/installtests/build_release_assets_test.go",