{ "schema_version": 1, "manifest_id": "secure-runtime-rootful-v1", "target_os": "linux", "description": "Production and complete repo-local compiled source boundary for rootful Docker and Podman typed-helper summary inventory, loss and recovery, operation bounds, update preservation, installer migration, and the standalone rootful qualification packet.", "exact_paths": [ "VERSION", "go.mod", "go.sum", "pkg/agents/docker/report.go", "pkg/agents/docker/report_limits.go", "scripts/install.sh", "scripts/release_ldflags.sh", "scripts/installtests/agent_id_recovery_unix_test.go", "scripts/installtests/agent_state_dir_lifecycle_test.go", "scripts/installtests/backfill_release_assets_test.go", "scripts/installtests/build_release_assets_test.go", "scripts/installtests/container_dependency_contract_test.go", "scripts/installtests/dependency_update_test.go", "scripts/installtests/docker_entrypoint_test.go", "scripts/installtests/install_docker_sh_test.go", "scripts/installtests/install_mcp_test.go", "scripts/installtests/install_ps1_test.go", "scripts/installtests/install_sh_qnap_data_volume_test.go", "scripts/installtests/install_sh_test.go", "scripts/installtests/integration_container_test.go", "scripts/installtests/native_pve_action_qualification_test.go", "scripts/installtests/provider_msp_deploy_test.go", "scripts/installtests/pulse_auto_update_test.go", "scripts/installtests/release_ldflags_test.go", "scripts/installtests/root_install_sh_test.go", "scripts/installtests/safe_profile_migration_test.go", "scripts/installtests/secure_runtime_platform_matrix_test.go", "scripts/installtests/secure_runtime_rootful_qualification_test.go", "scripts/installtests/secure_runtime_rootless_qualification_test.go", "scripts/installtests/secure_runtime_systemd_lab_test.go", "scripts/installtests/testdata/secure_runtime_docker_fixture.go", "scripts/installtests/umask_unix_test.go", "scripts/installtests/uninstall_sensor_proxy_test.go", "scripts/release_control/secure_runtime_rootful_attestation_v1.py", "scripts/secure-runtime-rootful-runtime.sh", "scripts/release_control/secure_runtime_rootful_source_manifest_v1.json", "scripts/release_control/secure_runtime_rootless_attestation_v1.py", "scripts/run-secure-runtime-rootful-qualification.sh" ], "recursive_roots": [ "cmd/pulse-agent", "cmd/pulse-agent-helper", "internal/actionrunner", "internal/agentcapabilities", "internal/agentexec", "internal/agenthelper", "internal/agenttarget", "internal/agenttls", "internal/agentupdate", "internal/ai/memory", "internal/alerts", "internal/api", "internal/availabilityprobe", "internal/collectorlifecycle", "internal/config", "internal/crypto", "internal/dockeragent", "internal/hostagent", "internal/hostmetrics", "internal/kubernetesagent", "internal/logging", "internal/mock", "internal/mockmode", "internal/mockmodel", "internal/mockruntime", "internal/models", "internal/notifications", "internal/operationaltrust", "internal/operationreceipt", "internal/platformsupport", "internal/proxmoxidentity", "internal/recovery", "internal/relay", "internal/remoteconfig", "internal/securityutil", "internal/sensors", "internal/ssh/knownhosts", "internal/storagehealth", "internal/truenas", "internal/unifiedresources", "internal/unraid", "internal/updatesignature", "internal/utils", "internal/vmware", "pkg/auth", "pkg/agents/docker", "pkg/agents/host", "pkg/agents/kubernetes", "pkg/aicontracts", "pkg/diskinventory", "pkg/fsfilters", "pkg/licensing", "pkg/pbs", "pkg/pmg", "pkg/proxmox", "pkg/securityutil", "pkg/tlsutil" ], "include_suffixes": [ ".go", ".tmpl" ], "exclude_suffixes": [ "_test.go" ] }