pulse-triage[bot] aef2f5be9c Keep non-root agent preflight outside saved installer trust ...

Fix the manual-recovery failure reported in Pulse #3331. Compare directory identity without entering the protected saved lifecycle directory, so a freshly authenticated temporary installer can finish preflight as the invoking user. Keep the saved installer's ownership, mode and checksum enforcement, including parent-directory aliases.

Contract-Neutral: Restores the existing non-root preflight and saved-installer integrity contracts; no privilege, credential, update-authorisation or rendered-interface contract changes.
Change-source: pulse-maintainer

2026-10-26 12:37:01 +00:00

..

nasfixturecollector

Use a native-built inert collector in NAS watchdog controls

2026-10-13 15:20:17 +01:00

testdata

Normalise the authored release-note fixture's final newline

2026-10-01 08:14:42 +01:00

windowslifecycleserver

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00

agent_id_recovery_unix_test.go

Reject corrupt legacy installer agent identities

2026-10-07 22:09:51 +01:00

agent_legacy_teardown.py

Retain SCALE agent recovery until every boot task is retired

2026-10-12 18:02:24 +01:00

agent_nas_teardown.py

Refuse Unraid uninstall while the rc.local go shell is live

2026-10-24 10:26:45 +01:00

agent_openrc_teardown.py

Retain SCALE agent recovery until every boot task is retired

2026-10-12 18:02:24 +01:00

agent_removal_systemd.py

Check agent removal against native hosted systemd

2026-10-12 06:08:07 +01:00

agent_state_dir_lifecycle_test.go

Restore Windows installer test compilation

2026-09-02 02:28:14 +01:00

agent_systemd_teardown.py

Keep integration safety fixtures aligned with reviewed source

2026-10-12 08:51:49 +01:00

agent_truenas_teardown.py

Merge pending maintenance repairs with current main

2026-10-18 15:11:28 +01:00

agent_uninstall_state.py

Retain SCALE agent recovery until every boot task is retired

2026-10-12 18:02:24 +01:00

agent_upstart_teardown.py

Merge pending maintenance repairs with current main

2026-10-18 15:11:28 +01:00

api_guidance_test.go

Bind copied API guidance tests to named request contracts

2026-10-10 06:56:16 +01:00

auto_update_intent_test.go

Preserve auto-update consent during manual version changes

2026-10-01 11:50:33 +01:00

auto_update_systemd.py

Keep signed manual update bootstraps on HTTPS

2026-10-25 15:47:43 +00:00

backfill_release_assets_test.go

Add historical release asset backfill workflow

2026-04-22 17:25:58 +01:00

build_release_assets_test.go

Stop container continuity reads at explicit access refusals

2026-10-26 06:00:47 +00:00

container_cpu_guidance_test.go

Explain container CPU scales and passive comparisons

2026-10-05 12:13:26 +01:00

container_dependency_contract_test.go

Keep publication checks independent of selector and fixture formatting

2026-10-04 06:41:04 +01:00

demo_reachability_test.go

Stop demo diagnostics at failed tailnet readiness

2026-10-01 17:36:26 +01:00

demo_transaction_test.go

Keep demo installation proof aligned with signed runtime operation

2026-10-03 03:15:20 +01:00

dependency_update_test.go

build: refresh Node 24 builder digest

2026-09-23 18:46:18 +01:00

docker_entrypoint_test.go

Refresh Pulse 6.1 RC1 mobile evidence

2026-07-13 19:41:41 +01:00

guidance_recipe_runner_test.go

Separate copied-guidance preparation, request and cleanup deadlines

2026-10-05 05:39:25 +01:00

helm_openshift_docs_contract_test.go

Keep integration safety fixtures aligned with reviewed source

2026-10-12 08:51:49 +01:00

install_docker_sh_test.go

Preserve existing Docker deployments during setup

2026-10-26 09:44:50 +00:00

install_mcp_test.go

Restore delivery qualification trust

2026-08-31 03:02:13 +01:00

install_ps1_test.go

fix(ci): qualify the Actions patch and minor refresh

2026-10-14 17:38:18 +01:00

install_sh_qnap_data_volume_test.go

Run the QNAP agent from the data volume instead of the RAM-backed root

2026-08-21 06:35:52 +01:00

install_sh_test.go

Keep non-root agent preflight outside saved installer trust

2026-10-26 12:37:01 +00:00

integration_container_test.go

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

manual_update_channel_test.go

Keep manual channel proof on the HTTPS transport envelope

2026-10-25 16:56:36 +00:00

msp_diagnostic_guidance_test.go

Make MSP isolation checks credential-safe and TLS-verified

2026-10-04 20:20:06 +01:00

native_agent_frontend_test.go

fix(ci): qualify the Actions patch and minor refresh

2026-10-14 17:38:18 +01:00

native_agent_removal_test.go

Check agent removal against native hosted systemd

2026-10-12 06:08:07 +01:00

native_guidance_tools_test.go

Observe NAS removal controls before native frontend preparation

2026-10-13 11:14:52 +01:00

native_helper_workflow_test.go

Keep integration safety fixtures aligned with reviewed source

2026-10-12 08:51:49 +01:00

native_installer_fixture_tools_test.go

Merge pending maintenance repairs with current main

2026-10-18 15:11:28 +01:00

native_installer_triggers_test.go

Admit server upgrade changes to the existing native checks

2026-10-11 19:28:37 +01:00

native_pve_action_qualification_test.go

Add native PVE action qualification harness

2026-09-01 10:43:35 +01:00

native_unix_contract_runner_test.go

Share native installer execution controls with script smoke tests

2026-10-18 17:55:06 +01:00

native_windows_exit_test.go

Require truthful PowerShell 5.1 Windows lifecycle acceptance

2026-10-08 07:49:10 +01:00

pbs_api_guidance_test.go

Separate copied-guidance preparation, request and cleanup deadlines

2026-10-05 05:39:25 +01:00

private_bootstrap_test.go

Keep Proxmox bootstrap credentials out of copied commands

2026-10-01 05:23:08 +01:00

provider_msp_deploy_test.go

Point the MSP guide at v6.6.0 and self-serve buying

2026-10-25 12:59:11 +00:00

provider_msp_startup_command_test.go

Restore native installer compilation and frontend style gates

2026-10-11 20:51:38 +01:00

provider_msp_startup_test.go

Integrate reviewed startup readback and native compilation controls

2026-10-11 21:58:36 +01:00

pulse_auto_update_consent_test.go

Require executable version evidence after unattended updates

2026-10-07 20:04:44 +01:00

pulse_auto_update_download_test.go

Bound unattended installer downloads before signed execution

2026-10-13 22:15:02 +01:00

pulse_auto_update_test.go

Keep native recovery proof aligned with bounded manual downloads

2026-10-25 06:38:18 +00:00

python_fixture_controls_test.go

Keep real NAS process-inventory controls serial

2026-10-25 01:15:42 +00:00

release_ldflags_test.go

Require signed unified agent release assets

2026-04-22 02:00:29 +01:00

release_notes_contract_test.go

Keep authored release notes compatible with safety checks

2026-10-01 05:28:54 +01:00

root_auto_update_repo_test.go

Preserve updater assets when repository configuration fails

2026-10-25 21:47:30 +00:00

root_install_sh_test.go

Keep signed manual update bootstraps on HTTPS

2026-10-25 15:47:43 +00:00

run_unix_contracts.py

Give every native installer check its own process budget

2026-10-18 17:17:52 +01:00

safe_profile_migration_test.go

Preserve partial PVE filesystem readings without widening helper access

2026-10-05 18:22:01 +01:00

secure_runtime_platform_matrix_test.go

Reconcile validation with accepted helper guidance and Helm recovery

2026-10-14 18:22:04 +01:00

secure_runtime_rootful_qualification_test.go

Tighten rootful runtime cleanup proof

2026-09-02 02:52:13 +01:00

secure_runtime_rootless_qualification_test.go

Give rootless qualification hosts unique identities

2026-09-01 21:18:24 +01:00

secure_runtime_systemd_lab_test.go

Use portable helper network canary

2026-09-01 18:48:52 +01:00

server_removal_safety_test.go

Refuse server removal until affected units are quiescent

2026-10-07 23:15:53 +01:00

server_reset_safety_test.go

fix(installer): contain destructive reset and bind lifecycle proofs

2026-10-08 02:49:30 +01:00

temperature_guidance_test.go

Check local-only temperature cleanup instead of retired SSH guidance

2026-10-09 11:42:50 +01:00

truenas_api_guidance_test.go

Keep optional TrueNAS parent controls independent of other proof inputs

2026-10-04 21:31:04 +01:00

umask_unix_test.go

Pin umask 022 in installtests so trust fixtures are host-independent

2026-09-01 22:20:15 +01:00

uninstall_sensor_proxy_safety_test.go

Stop legacy sensor cleanup on unconfirmed service or container state

2026-10-07 22:07:07 +01:00

uninstall_sensor_proxy_test.go

Stop legacy sensor cleanup on unconfirmed service or container state

2026-10-07 22:07:07 +01:00

windows_agent_lifecycle.ps1

Require truthful PowerShell 5.1 Windows lifecycle acceptance

2026-10-08 07:49:10 +01:00

windows_lifecycle_observation_controls.ps1

Remove trailing whitespace from Windows lifecycle controls

2026-10-08 08:23:47 +01:00

windows_native_acceptance_test.go

Repair native installer CI portability without weakening safety

2026-10-09 15:55:04 +01:00

windows_service_removal_controls.ps1

Repair native installer CI portability without weakening safety

2026-10-09 15:55:04 +01:00