pulse-triage[bot] 7eb12d0bf5 Require running executable proof for unattended update success ...

An installed target version and active service can conceal an old managed executable. Compare the actual process bytes between complete bounded MainPID observations before accepting an update or restored active service. Retain the backup and current service on uncertainty without an automatic restart or rollback grant. Register real owned-process and conditional transaction controls; keep synthetic/native and customer acceptance distinct.

Change-source: pulse-maintainer

2026-10-11 12:53:23 +01:00

..

testdata

Normalise the authored release-note fixture's final newline

2026-10-01 08:14:42 +01:00

windowslifecycleserver

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00

agent_id_recovery_unix_test.go

Reject corrupt legacy installer agent identities

2026-10-07 22:09:51 +01:00

agent_state_dir_lifecycle_test.go

Restore Windows installer test compilation

2026-09-02 02:28:14 +01:00

api_guidance_test.go

Bind copied API guidance tests to named request contracts

2026-10-10 06:56:16 +01:00

auto_update_intent_test.go

Preserve auto-update consent during manual version changes

2026-10-01 11:50:33 +01:00

auto_update_systemd.py

Repair native updater signer setup and platform-specific controls

2026-10-11 10:09:34 +01:00

backfill_release_assets_test.go

Add historical release asset backfill workflow

2026-04-22 17:25:58 +01:00

build_release_assets_test.go

Check unattended updater transactions on native source CI

2026-10-10 20:50:35 +01:00

container_cpu_guidance_test.go

Explain container CPU scales and passive comparisons

2026-10-05 12:13:26 +01:00

container_dependency_contract_test.go

Keep publication checks independent of selector and fixture formatting

2026-10-04 06:41:04 +01:00

demo_reachability_test.go

Stop demo diagnostics at failed tailnet readiness

2026-10-01 17:36:26 +01:00

demo_transaction_test.go

Keep demo installation proof aligned with signed runtime operation

2026-10-03 03:15:20 +01:00

dependency_update_test.go

build: refresh Node 24 builder digest

2026-09-23 18:46:18 +01:00

docker_entrypoint_test.go

Refresh Pulse 6.1 RC1 mobile evidence

2026-07-13 19:41:41 +01:00

guidance_recipe_runner_test.go

Separate copied-guidance preparation, request and cleanup deadlines

2026-10-05 05:39:25 +01:00

helm_openshift_docs_contract_test.go

Keep OpenShift installation checks aligned with private token setup

2026-10-01 15:56:18 +01:00

install_docker_sh_test.go

Cut 6.5 and later releases from main

2026-10-04 18:37:43 +01:00

install_mcp_test.go

Restore delivery qualification trust

2026-08-31 03:02:13 +01:00

install_ps1_test.go

Repair native installer CI portability without weakening safety

2026-10-09 15:55:04 +01:00

install_sh_qnap_data_volume_test.go

Run the QNAP agent from the data volume instead of the RAM-backed root

2026-08-21 06:35:52 +01:00

install_sh_test.go

Exercise the complete updater in its versioned-installer fixture

2026-10-10 15:10:59 +01:00

integration_container_test.go

Align native seed-image pin checks with same-run E2E bundles

2026-10-09 23:40:39 +01:00

manual_update_channel_test.go

Bind parsed manual channels through installer execution

2026-10-07 19:23:46 +01:00

msp_diagnostic_guidance_test.go

Make MSP isolation checks credential-safe and TLS-verified

2026-10-04 20:20:06 +01:00

native_agent_frontend_test.go

Reject native image-pin drift before frontend preparation

2026-10-10 00:30:18 +01:00

native_guidance_tools_test.go

Keep macOS native utilities unchanged around timeout bootstrap

2026-10-05 09:44:52 +01:00

native_helper_workflow_test.go

Verify helper-only changes on both native Linux platforms

2026-10-06 13:49:09 +01:00

native_installer_fixture_tools_test.go

Supply GNU archive and rename tools to macOS server fixtures

2026-10-10 16:07:37 +01:00

native_pve_action_qualification_test.go

Add native PVE action qualification harness

2026-09-01 10:43:35 +01:00

native_unix_contract_runner_test.go

Keep native installer checks inside bounded package groups

2026-10-09 20:46:03 +01:00

native_windows_exit_test.go

Require truthful PowerShell 5.1 Windows lifecycle acceptance

2026-10-08 07:49:10 +01:00

pbs_api_guidance_test.go

Separate copied-guidance preparation, request and cleanup deadlines

2026-10-05 05:39:25 +01:00

private_bootstrap_test.go

Keep Proxmox bootstrap credentials out of copied commands

2026-10-01 05:23:08 +01:00

provider_msp_deploy_test.go

Pin hosted Go builders to refreshed 1.26.8 image

2026-09-29 22:36:18 +01:00

pulse_auto_update_consent_test.go

Require executable version evidence after unattended updates

2026-10-07 20:04:44 +01:00

pulse_auto_update_test.go

Require running executable proof for unattended update success

2026-10-11 12:53:23 +01:00

release_ldflags_test.go

Require signed unified agent release assets

2026-04-22 02:00:29 +01:00

release_notes_contract_test.go

Keep authored release notes compatible with safety checks

2026-10-01 05:28:54 +01:00

root_install_sh_test.go

Exercise half-removed server updates instead of matching bare calls

2026-10-10 13:12:42 +01:00

run_unix_contracts.py

Keep native installer checks inside bounded package groups

2026-10-09 20:46:03 +01:00

safe_profile_migration_test.go

Preserve partial PVE filesystem readings without widening helper access

2026-10-05 18:22:01 +01:00

secure_runtime_platform_matrix_test.go

Repair the native Unix installer check failures

2026-10-06 15:06:16 +01:00

secure_runtime_rootful_qualification_test.go

Tighten rootful runtime cleanup proof

2026-09-02 02:52:13 +01:00

secure_runtime_rootless_qualification_test.go

Give rootless qualification hosts unique identities

2026-09-01 21:18:24 +01:00

secure_runtime_systemd_lab_test.go

Use portable helper network canary

2026-09-01 18:48:52 +01:00

server_removal_safety_test.go

Refuse server removal until affected units are quiescent

2026-10-07 23:15:53 +01:00

server_reset_safety_test.go

fix(installer): contain destructive reset and bind lifecycle proofs

2026-10-08 02:49:30 +01:00

temperature_guidance_test.go

Check local-only temperature cleanup instead of retired SSH guidance

2026-10-09 11:42:50 +01:00

truenas_api_guidance_test.go

Keep optional TrueNAS parent controls independent of other proof inputs

2026-10-04 21:31:04 +01:00

umask_unix_test.go

Pin umask 022 in installtests so trust fixtures are host-independent

2026-09-01 22:20:15 +01:00

uninstall_sensor_proxy_safety_test.go

Stop legacy sensor cleanup on unconfirmed service or container state

2026-10-07 22:07:07 +01:00

uninstall_sensor_proxy_test.go

Stop legacy sensor cleanup on unconfirmed service or container state

2026-10-07 22:07:07 +01:00

windows_agent_lifecycle.ps1

Require truthful PowerShell 5.1 Windows lifecycle acceptance

2026-10-08 07:49:10 +01:00

windows_lifecycle_observation_controls.ps1

Remove trailing whitespace from Windows lifecycle controls

2026-10-08 08:23:47 +01:00

windows_native_acceptance_test.go

Repair native installer CI portability without weakening safety

2026-10-09 15:55:04 +01:00

windows_service_removal_controls.ps1

Repair native installer CI portability without weakening safety

2026-10-09 15:55:04 +01:00