pulse-triage[bot] cb1f5630f7 Repair native updater signer setup and platform-specific controls ...

The source-bound hosted receipt stops before any native phase because its new ephemeral signer is mode 0644. Establish owned regular-file and verified 0600 mode before signing, without adopting existing keys or relaxing OpenSSH. Keep Linux ELF execution in both native Linux jobs; macOS still runs the portable signer/admission/recovery controls, and the bridge requires the exact platform verdict instead of staging Mach-O as Linux.

Change-source: pulse-maintainer

2026-10-11 10:09:34 +01:00

..

testdata

Normalise the authored release-note fixture's final newline

2026-10-01 08:14:42 +01:00

windowslifecycleserver

Extract the transport-independent action lifecycle service

2026-07-10 11:06:55 +01:00

agent_id_recovery_unix_test.go

Reject corrupt legacy installer agent identities

2026-10-07 22:09:51 +01:00

agent_state_dir_lifecycle_test.go

Restore Windows installer test compilation

2026-09-02 02:28:14 +01:00

api_guidance_test.go

Bind copied API guidance tests to named request contracts

2026-10-10 06:56:16 +01:00

auto_update_intent_test.go

Preserve auto-update consent during manual version changes

2026-10-01 11:50:33 +01:00

auto_update_systemd.py

Repair native updater signer setup and platform-specific controls

2026-10-11 10:09:34 +01:00

backfill_release_assets_test.go

Add historical release asset backfill workflow

2026-04-22 17:25:58 +01:00

build_release_assets_test.go

Check unattended updater transactions on native source CI

2026-10-10 20:50:35 +01:00

container_cpu_guidance_test.go

Explain container CPU scales and passive comparisons

2026-10-05 12:13:26 +01:00

container_dependency_contract_test.go

Keep publication checks independent of selector and fixture formatting

2026-10-04 06:41:04 +01:00

demo_reachability_test.go

Stop demo diagnostics at failed tailnet readiness

2026-10-01 17:36:26 +01:00

demo_transaction_test.go

Keep demo installation proof aligned with signed runtime operation

2026-10-03 03:15:20 +01:00

dependency_update_test.go

build: refresh Node 24 builder digest

2026-09-23 18:46:18 +01:00

docker_entrypoint_test.go

Refresh Pulse 6.1 RC1 mobile evidence

2026-07-13 19:41:41 +01:00

guidance_recipe_runner_test.go

Separate copied-guidance preparation, request and cleanup deadlines

2026-10-05 05:39:25 +01:00

helm_openshift_docs_contract_test.go

Keep OpenShift installation checks aligned with private token setup

2026-10-01 15:56:18 +01:00

install_docker_sh_test.go

Cut 6.5 and later releases from main

2026-10-04 18:37:43 +01:00

install_mcp_test.go

Restore delivery qualification trust

2026-08-31 03:02:13 +01:00

install_ps1_test.go

Repair native installer CI portability without weakening safety

2026-10-09 15:55:04 +01:00

install_sh_qnap_data_volume_test.go

Run the QNAP agent from the data volume instead of the RAM-backed root

2026-08-21 06:35:52 +01:00

install_sh_test.go

Exercise the complete updater in its versioned-installer fixture

2026-10-10 15:10:59 +01:00

integration_container_test.go

Align native seed-image pin checks with same-run E2E bundles

2026-10-09 23:40:39 +01:00

manual_update_channel_test.go

Bind parsed manual channels through installer execution

2026-10-07 19:23:46 +01:00

msp_diagnostic_guidance_test.go

Make MSP isolation checks credential-safe and TLS-verified

2026-10-04 20:20:06 +01:00

native_agent_frontend_test.go

Reject native image-pin drift before frontend preparation

2026-10-10 00:30:18 +01:00

native_guidance_tools_test.go

Keep macOS native utilities unchanged around timeout bootstrap

2026-10-05 09:44:52 +01:00

native_helper_workflow_test.go

Verify helper-only changes on both native Linux platforms

2026-10-06 13:49:09 +01:00

native_installer_fixture_tools_test.go

Supply GNU archive and rename tools to macOS server fixtures

2026-10-10 16:07:37 +01:00

native_pve_action_qualification_test.go

Add native PVE action qualification harness

2026-09-01 10:43:35 +01:00

native_unix_contract_runner_test.go

Keep native installer checks inside bounded package groups

2026-10-09 20:46:03 +01:00

native_windows_exit_test.go

Require truthful PowerShell 5.1 Windows lifecycle acceptance

2026-10-08 07:49:10 +01:00

pbs_api_guidance_test.go

Separate copied-guidance preparation, request and cleanup deadlines

2026-10-05 05:39:25 +01:00

private_bootstrap_test.go

Keep Proxmox bootstrap credentials out of copied commands

2026-10-01 05:23:08 +01:00

provider_msp_deploy_test.go

Pin hosted Go builders to refreshed 1.26.8 image

2026-09-29 22:36:18 +01:00

pulse_auto_update_consent_test.go

Require executable version evidence after unattended updates

2026-10-07 20:04:44 +01:00

pulse_auto_update_test.go

Repair native updater signer setup and platform-specific controls

2026-10-11 10:09:34 +01:00

release_ldflags_test.go

Require signed unified agent release assets

2026-04-22 02:00:29 +01:00

release_notes_contract_test.go

Keep authored release notes compatible with safety checks

2026-10-01 05:28:54 +01:00

root_install_sh_test.go

Exercise half-removed server updates instead of matching bare calls

2026-10-10 13:12:42 +01:00

run_unix_contracts.py

Keep native installer checks inside bounded package groups

2026-10-09 20:46:03 +01:00

safe_profile_migration_test.go

Preserve partial PVE filesystem readings without widening helper access

2026-10-05 18:22:01 +01:00

secure_runtime_platform_matrix_test.go

Repair the native Unix installer check failures

2026-10-06 15:06:16 +01:00

secure_runtime_rootful_qualification_test.go

Tighten rootful runtime cleanup proof

2026-09-02 02:52:13 +01:00

secure_runtime_rootless_qualification_test.go

Give rootless qualification hosts unique identities

2026-09-01 21:18:24 +01:00

secure_runtime_systemd_lab_test.go

Use portable helper network canary

2026-09-01 18:48:52 +01:00

server_removal_safety_test.go

Refuse server removal until affected units are quiescent

2026-10-07 23:15:53 +01:00

server_reset_safety_test.go

fix(installer): contain destructive reset and bind lifecycle proofs

2026-10-08 02:49:30 +01:00

temperature_guidance_test.go

Check local-only temperature cleanup instead of retired SSH guidance

2026-10-09 11:42:50 +01:00

truenas_api_guidance_test.go

Keep optional TrueNAS parent controls independent of other proof inputs

2026-10-04 21:31:04 +01:00

umask_unix_test.go

Pin umask 022 in installtests so trust fixtures are host-independent

2026-09-01 22:20:15 +01:00

uninstall_sensor_proxy_safety_test.go

Stop legacy sensor cleanup on unconfirmed service or container state

2026-10-07 22:07:07 +01:00

uninstall_sensor_proxy_test.go

Stop legacy sensor cleanup on unconfirmed service or container state

2026-10-07 22:07:07 +01:00

windows_agent_lifecycle.ps1

Require truthful PowerShell 5.1 Windows lifecycle acceptance

2026-10-08 07:49:10 +01:00

windows_lifecycle_observation_controls.ps1

Remove trailing whitespace from Windows lifecycle controls

2026-10-08 08:23:47 +01:00

windows_native_acceptance_test.go

Repair native installer CI portability without weakening safety

2026-10-09 15:55:04 +01:00

windows_service_removal_controls.ps1

Repair native installer CI portability without weakening safety

2026-10-09 15:55:04 +01:00