pulse-triage[bot] aef2f5be9c Keep non-root agent preflight outside saved installer trust ...

Fix the manual-recovery failure reported in Pulse #3331. Compare directory identity without entering the protected saved lifecycle directory, so a freshly authenticated temporary installer can finish preflight as the invoking user. Keep the saved installer's ownership, mode and checksum enforcement, including parent-directory aliases.

Contract-Neutral: Restores the existing non-root preflight and saved-installer integrity contracts; no privilege, credential, update-authorisation or rendered-interface contract changes.
Change-source: pulse-maintainer

2026-10-26 12:37:01 +00:00

..

dev

…

eval

…

installtests

Keep non-root agent preflight outside saved installer trust

2026-10-26 12:37:01 +00:00

intelligence_lab

Restore Patrol's Safe auto-fix and Autopilot modes

2026-10-12 14:13:47 +01:00

lib

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

lint-fixer

…

memory

ci: compare memory with the latest stable release every day

2026-10-21 14:16:15 +01:00

release_control

Scope TrueNAS release notes to the delivered fixes

2026-10-26 11:03:27 +00:00

tests

Separate PMG decoding failures from gateway reachability

2026-10-26 10:21:04 +00:00

.go-version

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

audit-private-boundary.sh

Ratchet private boundary audit debt

2026-07-29 20:09:23 +01:00

backfill-release-assets.sh

…

BENCHMARK_EVIDENCE.md

fix: measure workload chart generation in performance guards

2026-10-18 17:32:34 +01:00

browser_os_packages.py

Cache browser OS packages so slow apt mirrors stop E2E

2026-10-23 18:02:39 +01:00

build-pve-backup-reconciliation.mjs

Retain PVE recovery history across incomplete backup scans

2026-10-23 20:46:39 +01:00

build-release-binaries.sh

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

build-release.sh

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

build-secure-runtime-qualification.sh

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

bundle.manifest

…

bundle.sh

…

capture-release-note-visuals.sh

Improve release highlights and reusable screenshot evidence

2026-10-15 11:42:25 +01:00

check_docs_mirror.py

Keep the docs guard out of the branch-tip link scan

2026-09-01 12:17:00 +01:00

check_notification_runtime.py

Respect deployment telemetry lock in notification CI journey

2026-10-11 05:18:21 +01:00

check_public_docs.py

Align TrueNAS guidance with JSON-RPC runtime

2026-09-01 18:32:39 +01:00

check_telemetry_schema_parity.py

Harden Patrol activation telemetry

2026-08-28 11:35:41 +01:00

check_workflow_trust.py

fix(ci): qualify the Actions patch and minor refresh

2026-10-14 17:38:18 +01:00

check-alert-diagnosis-ordering.mjs

fix(alerts): ignore superseded delivery diagnosis responses

2026-09-06 17:17:36 +01:00

check-alert-dispatch-copy.mjs

fix(alerts): distinguish dispatch from notification receipt

2026-09-06 15:12:07 +01:00

check-backup-app-refresh.mjs

Repair the remaining drawer and storage history browser proofs

2026-10-14 11:27:57 +01:00

check-backup-browser-polling.mjs

Preserve backup coverage row focus across polling snapshots

2026-09-05 01:33:47 +01:00

check-bench-regression.sh

Interpret byte-throughput benchmark changes in the right direction

2026-10-25 11:25:52 +00:00

check-browser-lifecycle-control.mjs

test(web): retain failing browser suspension control diagnostic

2026-09-08 07:00:33 +01:00

check-browser-single-session-control.mjs

test(web): cover production incident refresh after tab suspension

2026-09-08 08:42:45 +01:00

check-delivery-health-ordering.mjs

Merge current main and verify diagnostic workflows

2026-09-06 04:22:09 +01:00

check-delivery-log-ordering.mjs

fix(web): retain current delivery evidence across overlapping reads

2026-09-06 10:19:46 +01:00

check-delivery-server-error-copy.mjs

fix(web): identify notification destination server failures

2026-09-08 12:54:21 +01:00

check-docs-fragment-navigation.cjs

Document maintenance API and repair documentation section links

2026-09-21 07:23:24 +01:00

check-drawer-tab-retention.cjs

Chart history on Overview in Docker host and resource drawers

2026-10-13 23:30:46 +01:00

check-frontend-serialization.mjs

Reject stale Solid serialization overrides before frontend installation

2026-10-14 01:53:13 +01:00

check-github-release-immutability.sh

Gate release publication on immutable setting

2026-08-29 22:41:04 +01:00

check-host-disk-patrol.mjs

fix(patrol): resolve disk alerts through canonical resource owners

2026-10-08 17:22:29 +01:00

check-incident-request-ownership.mjs

fix(alerts): discard pending history reads after clearing

2026-09-10 06:44:37 +01:00

check-navigation-admission-race.mjs

test(web): qualify superseded admission and diagnose narrow table access

2026-09-05 17:57:42 +01:00

check-overview-health-refresh.mjs

Merge current main and verify diagnostic workflows

2026-09-06 04:22:09 +01:00

check-patrol-assistant-journey.mjs

Stop sending the ignored autonomous_mode chat field

2026-10-08 00:17:08 +01:00

check-pbs-host-history-correlation.cjs

Repair the PBS drawer browser fixture and its two proofs

2026-10-14 09:02:31 +01:00

check-pve-backup-reconciliation.cjs

Match the full workload identity in the PVE browser journey

2026-10-23 21:03:01 +01:00

check-recovery-feedback.mjs

test(web): verify recovery preserves real settings-parent edits

2026-09-07 16:39:11 +01:00

check-update-access-copy.mjs

fix(web): avoid prescribing permissions from update access failures

2026-09-08 21:59:40 +01:00

check-webhook-test-save-parity.mjs

fix(web): align webhook test custom fields with saved configuration

2026-09-08 23:29:31 +01:00

check-workflow-dispatch-inputs.py

…

ci_browser_proof_only.py

Avoid runtime CI fan-out for browser-receipt-only tree changes

2026-10-14 04:13:00 +01:00

ci_triage_only.py

Keep isolated issue-triage changes on their dedicated CI path

2026-10-25 09:04:08 +00:00

clean-mock-alerts.sh

…

cleanup.sh

…

cloud-backup.sh

…

collect_e2e_container_logs.py

Retain E2E container diagnostics without flooding Actions logs

2026-10-10 19:00:17 +01:00

com.pulse.hot-dev.plist.template

…

compile-go-tests.sh

Reject incompatible Go test fixtures before backend CI fan-out

2026-10-06 19:54:22 +01:00

conformance-smoke.sh

…

demo_public_browser_smoke.cjs

Prove demo auto sign-in in the public browser smoke

2026-10-24 14:31:21 +01:00

dependency_advisory_watch.py

Audit main without directing dependency repairs to retired lines

2026-10-10 23:43:37 +01:00

dev-check.sh

…

dev-deploy-agent.sh

…

dev-launchd-setup.sh

fix(dev): preserve executable launchd wrapper mode

2026-08-27 17:54:10 +01:00

dev-launchd-wrapper.sh

…

dev-prepush.sh

Fail closed when local pre-push source reads fail

2026-10-25 19:47:30 +00:00

diagnose-root-pair.py

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

diagnose-uuid-layout.py

ci: add fixed UUID layout diagnostic without release gate waiver

2026-09-06 22:11:03 +01:00

docker-build.sh

…

e2e_test_images.py

Build Core E2E test images once per exact workflow run

2026-10-09 22:25:34 +01:00

ensure_test_assets.sh

…

exclusive-lock.mjs

…

generate-pulse-intelligence-docs.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

generate-release-notes.sh

Keep a real change out of the Highlights example

2026-10-24 20:43:52 +01:00

generate-self-hosted-feature-catalog.go

Format generated self-hosted feature catalog with prettier in the generator

2026-07-27 11:58:05 +01:00

generate-types.go

Retire the Assistant chat window; alert Investigate runs Patrol

2026-10-23 00:15:04 +01:00

go-mod-download.sh

Keep a kill backstop on the bounded module download

2026-10-07 15:46:01 +01:00

go-test-compile-required.sh

Reject incompatible Go test fixtures before backend CI fan-out

2026-10-06 19:54:22 +01:00

history-clear-browser-fixture.mjs

fix(alerts): discard pending history reads after clearing

2026-09-10 06:44:37 +01:00

hot-dev-bg.sh

Point dev:verify at the Proxmox backups layout spec

2026-10-08 09:56:53 +01:00

hot-dev.sh

Keep hot-dev build temp on the configured Go temp volume

2026-08-31 22:11:38 +01:00

incident-browser-checks.md

test(alerts): distinguish staged recovery edits from saved intent

2026-09-08 10:32:49 +01:00

incident-browser-fixture.mjs

test(web): verify incident convergence after native tab suspension

2026-09-08 08:23:44 +01:00

incident-convergence-server.mjs

test(web): verify incident convergence after native tab suspension

2026-09-08 08:23:44 +01:00

install-container-agent.sh

Restore Docker agents to Hosts inventory

2026-07-23 22:06:56 +01:00

install-docker.sh

Prepare v6.7.0-beta.1

2026-10-26 11:11:36 +00:00

install-go-toolchain.sh

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

install-mcp.ps1

Fail closed when installing MCP binaries

2026-08-30 05:11:55 +01:00

install-mcp.sh

fix(installer): verify checksums on FreeBSD without coreutils

2026-09-20 02:43:57 +01:00

install.ps1

Refuse Windows agent mutation until service removal is confirmed

2026-10-08 06:09:08 +01:00

install.sh

Keep non-root agent preflight outside saved installer trust

2026-10-26 12:37:01 +00:00

npm_audit_process.py

Own audit subprocess cleanup through completion and cancellation

2026-10-13 05:34:03 +01:00

npm-audit-retry.sh

Preserve literal Bash audit invocation inside the owned group

2026-10-13 05:39:13 +01:00

package-helm-chart.sh

…

patrol_e2e_matrix.sh

…

playwright-apt.conf

Scope browser OS acquisition to the runner's signed Ubuntu sources

2026-10-25 04:00:03 +00:00

prepare-release-container-context.sh

Keep Windows agent update signatures addressable

2026-09-01 16:11:04 +01:00

pulse-auto-update.sh

Refuse incomplete updater manager observations

2026-10-14 11:58:09 +01:00

readme_entrypoints_test.py

Make getting-started installs fail closed and plans current

2026-10-02 02:53:31 +01:00

release_asset_common.sh

Keep Windows agent update signatures addressable

2026-09-01 16:11:04 +01:00

release_browser_packet.py

fix(release): admit real archive sizes and enforce workflow trust

2026-10-04 03:00:30 +01:00

release_browser_tailnet.py

Bind release browser qualification to the narrow CI identity

2026-10-04 04:57:17 +01:00

release_build_targets.sh

Separate agent remediation runtime

2026-08-29 23:48:28 +01:00

release_candidate_manifest.py

Enforce exact release visual assets

2026-08-29 02:59:47 +01:00

release_ldflags.sh

…

release_lifecycle_rehearsal_versions.py

Add shadow release lifecycle rehearsal workflow

2026-10-01 09:11:15 +01:00

release_lifecycle_rehearsal.sh

Stop release browser access at every authenticated refusal

2026-10-04 03:44:51 +01:00

release_update_key.go

Wire secure runtime RC qualification

2026-08-31 01:50:48 +01:00

release-go-test-events.py

fix(release): mark store-history SLO measurement windows

2026-09-09 01:34:22 +01:00

release-preflight-worker.sh

fix(release): give the rehearsal backend an explicit package timeout

2026-09-19 21:24:38 +01:00

release-resource-snapshot.py

chore(release): retain bounded backend resource evidence

2026-09-07 16:47:55 +01:00

remerge-parallel.sh

…

render_installers.go

…

repo-boundary-paid-surface.allowlist

Declare the shared reporting telemetry adapter boundary

2026-10-17 21:24:54 +01:00

repo-boundary-private-implementation.baseline

Ratchet private boundary audit debt

2026-07-29 20:09:23 +01:00

repo-boundary-regression.py

Declare the shared reporting telemetry adapter boundary

2026-10-17 21:24:54 +01:00

require-safe-gh-attestation.sh

Bind release activation to trusted provenance

2026-08-30 01:51:58 +01:00

run_cloud_public_signup_smoke.sh

…

run_demo_public_browser_smoke.sh

…

run_hosted_staging_smoke.sh

…

run-ci-benchmarks.sh

Keep paired PR benchmarks inside their time budget

2026-10-05 22:39:51 +01:00

run-native-pve-action-qualification.sh

Add native PVE action qualification harness

2026-09-01 10:43:35 +01:00

run-release-backend-tests.sh

Warm the pulse-agent build before the pinned release API shards

2026-10-12 16:28:14 +01:00

run-release-preflight.sh

Accelerate release qualification with exact-SHA worker

2026-08-12 17:07:12 +01:00

run-secure-runtime-rootful-qualification.sh

Tighten rootful runtime cleanup proof

2026-09-02 02:52:13 +01:00

run-secure-runtime-rootless-qualification.sh

Give rootless qualification hosts unique identities

2026-09-01 21:18:24 +01:00

scan-ci-secrets.sh

Scan delivered source history instead of an empty merge log

2026-10-14 05:15:15 +01:00

secure-runtime-rootful-runtime.sh

Tighten rootful runtime cleanup proof

2026-09-02 02:52:13 +01:00

security_review_auth_credentials.sh

Make security review baseline fail closed

2026-09-01 01:02:17 +01:00

session-handoff.sh

…

shard_go_tests.py

Harden release backend cold-run qualification

2026-08-28 03:36:33 +01:00

standalone.manifest

Require immutable attested releases

2026-08-29 19:59:04 +01:00

sync_chart_release_metadata.py

…

sync-production-config.sh

…

telemetry_adoption_report.py

Separate reporting generation days from successful repeat periods

2026-10-17 21:51:08 +01:00

test-vm-disk.sh

Bound the complete passive VM preflight read

2026-10-12 00:10:22 +01:00

toggle-mock.sh

Scale large-estate workload and Proxmox demo performance

2026-08-23 15:09:32 +01:00

trigger-release-dry-run.sh

Soak release candidates for 24 hours before stable

2026-09-28 16:42:46 +01:00

trigger-release.sh

Improve release highlights and reusable screenshot evidence

2026-10-15 11:42:25 +01:00

trigger-stable-patch.sh

Bind release dispatches to the admitted commit

2026-09-02 02:28:14 +01:00

uninstall-sensor-proxy.sh

Stop legacy sensor cleanup on unconfirmed service or container state

2026-10-07 22:07:07 +01:00

validate-published-release.sh

Authenticate every published installer

2026-08-31 04:55:15 +01:00

validate-release.sh

Keep Windows agent update signatures addressable

2026-09-01 16:11:04 +01:00

verify-github-release-integrity.sh

fix(release): reject ambiguous activation asset inventories

2026-09-05 15:43:23 +01:00

verify-release-container-images.sh

Stop container continuity reads at explicit access refusals

2026-10-26 06:00:47 +00:00

verify-release-helm-chart.sh

Recover Helm Pages from attested OCI charts

2026-09-04 01:04:30 +01:00

verify-stable-container-aliases.sh

Stop container continuity reads at explicit access refusals

2026-10-26 06:00:47 +00:00

write_github_output.py

Close runner output alias bypasses

2026-09-01 16:54:07 +01:00