courtmanr@gmail.com c9915434d8 Let the RC attester read the lab's root-owned evidence ...

With the host-interface canary in place, v6.4.5-rc.4 passed the
schema-v7 systemd and rootful Docker lab (run 36594651903), but the
attestation step then failed with Permission denied on receipt.json,
which the privileged lab writes as root into the bind-mounted evidence
directory. Hand that directory to the runner user after a passing lab
and before attestation, without touching its content.

2026-09-29 17:12:27 +01:00

..

testdata

Add rootful Docker secure-runtime qualification

2026-08-31 18:13:22 +01:00

windowslifecycleserver

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00

agent_id_recovery_unix_test.go

Restore Windows installer test compilation

2026-09-02 02:28:14 +01:00

agent_state_dir_lifecycle_test.go

Restore Windows installer test compilation

2026-09-02 02:28:14 +01:00

backfill_release_assets_test.go

Add historical release asset backfill workflow

2026-04-22 17:25:58 +01:00

build_release_assets_test.go

Let the RC attester read the lab's root-owned evidence

2026-09-29 17:12:27 +01:00

container_dependency_contract_test.go

Keep release toolchains within support

2026-08-30 06:40:25 +01:00

dependency_update_test.go

build: refresh Node 24 builder digest

2026-09-23 18:46:18 +01:00

docker_entrypoint_test.go

Refresh Pulse 6.1 RC1 mobile evidence

2026-07-13 19:41:41 +01:00

install_docker_sh_test.go

fix(release): support RC-derived stable patch install metadata

2026-09-23 06:32:13 +01:00

install_mcp_test.go

Restore delivery qualification trust

2026-08-31 03:02:13 +01:00

install_ps1_test.go

ci: qualify setup-node v7 consumer contracts

2026-09-09 19:29:17 +01:00

install_sh_qnap_data_volume_test.go

Run the QNAP agent from the data volume instead of the RAM-backed root

2026-08-21 06:35:52 +01:00

install_sh_test.go

Keep the non-procfs agent recovery test off the host's /proc

2026-09-28 09:17:25 +01:00

integration_container_test.go

Advance release builds to Go 1.26.8

2026-09-04 07:20:28 +01:00

native_pve_action_qualification_test.go

Add native PVE action qualification harness

2026-09-01 10:43:35 +01:00

provider_msp_deploy_test.go

Let provider MSP upgrade.sh move an install to a new release

2026-09-24 10:43:01 +01:00

pulse_auto_update_test.go

docs(deploy): record update-path resilience contract and proof

2026-09-20 17:52:50 +01:00

release_ldflags_test.go

Require signed unified agent release assets

2026-04-22 02:00:29 +01:00

root_install_sh_test.go

fix(installer): discard unneeded config backup when staging cannot start

2026-09-20 17:44:43 +01:00

safe_profile_migration_test.go

Harden least-privilege installer lifecycle state

2026-09-01 15:53:02 +01:00

secure_runtime_platform_matrix_test.go

Integrate typed helper container summaries

2026-08-30 21:29:11 +01:00

secure_runtime_rootful_qualification_test.go

Tighten rootful runtime cleanup proof

2026-09-02 02:52:13 +01:00

secure_runtime_rootless_qualification_test.go

Give rootless qualification hosts unique identities

2026-09-01 21:18:24 +01:00

secure_runtime_systemd_lab_test.go

Use portable helper network canary

2026-09-01 18:48:52 +01:00

umask_unix_test.go

Pin umask 022 in installtests so trust fixtures are host-independent

2026-09-01 22:20:15 +01:00

uninstall_sensor_proxy_test.go

fix(security): verify SSH hosts during proxy cleanup

2026-08-08 05:18:55 +01:00

windows_agent_lifecycle.ps1

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00