{
  "schema_version": 1,
  "manifest_id": "secure-runtime-linux-v7",
  "target_os": "linux",
  "description": "Production source boundary for the secure collector, typed helper, action runner, rootful Docker summary inventory, signed update trust and build inputs, control-plane admission, and schema-v7 qualification harness.",
  "exact_paths": [
    ".github/workflows/build-release-candidate.yml",
    ".github/workflows/compile-release-payload.yml",
    ".github/workflows/create-release.yml",
    ".github/workflows/qualify-secure-runtime-release.yml",
    "VERSION",
    "go.mod",
    "go.sum",
    "internal/models/converters.go",
    "internal/models/models.go",
    "internal/models/models_frontend.go",
    "internal/monitoring/monitor.go",
    "internal/monitoring/monitor_agents.go",
    "internal/unifiedresources/adapters.go",
    "internal/unifiedresources/types.go",
    "internal/unifiedresources/views.go",
    "pkg/agents/docker/report.go",
    "scripts/install.sh",
    "scripts/install.ps1",
    "scripts/install-container-agent.sh",
    "scripts/install-docker.sh",
    "scripts/install-mcp.sh",
    "scripts/install-mcp.ps1",
    "scripts/installtests/secure_runtime_systemd_lab_test.go",
    "scripts/installtests/testdata/secure_runtime_docker_fixture.go",
    "scripts/backfill-release-assets.sh",
    "scripts/build-release-binaries.sh",
    "scripts/build-release.sh",
    "scripts/build-secure-runtime-qualification.sh",
    "scripts/check-github-release-immutability.sh",
    "scripts/package-helm-chart.sh",
    "scripts/prepare-release-container-context.sh",
    "scripts/pulse-auto-update.sh",
    "scripts/release_asset_common.sh",
    "scripts/release_build_targets.sh",
    "scripts/release_candidate_manifest.py",
    "scripts/release_control/secure_runtime_attestation.py",
    "scripts/release_control/secure_runtime_attestation_v6.py",
    "scripts/release_control/secure_runtime_attestation_v7.py",
    "scripts/release_control/secure_runtime_source_manifest_v7.json",
    "scripts/release_ldflags.sh",
    "scripts/release_update_key.go",
    "scripts/render_installers.go",
    "scripts/require-safe-gh-attestation.sh",
    "scripts/validate-published-release.sh",
    "scripts/validate-release.sh",
    "scripts/verify-github-release-integrity.sh"
  ],
  "recursive_roots": [
    "cmd/pulse-agent",
    "cmd/pulse-agent-helper",
    "cmd/pulse-agent-runner",
    "internal/actionrunner",
    "internal/agentexec",
    "internal/agenthelper",
    "internal/agenttls",
    "internal/agentupdate",
    "internal/api",
    "internal/collectorlifecycle",
    "internal/config",
    "internal/dockeragent",
    "internal/hostagent",
    "internal/operationreceipt",
    "internal/securityutil",
    "internal/updatesignature",
    "pkg/auth",
    "pkg/securityutil",
    "pkg/tlsutil"
  ],
  "include_suffixes": [
    ".go",
    ".tmpl"
  ],
  "exclude_suffixes": [
    "_test.go"
  ]
}