From 09e15fd5691f6981316e2ceee4b2a002c17f9087 Mon Sep 17 00:00:00 2001 From: boburning Date: Mon, 31 Aug 2026 03:47:17 -0400 Subject: [PATCH] docs(program): record NET-10 hotspot cleanup --- docs/program/BloomOS_Work_Program_v3.json | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/docs/program/BloomOS_Work_Program_v3.json b/docs/program/BloomOS_Work_Program_v3.json index 60ffdc99..004aa661 100644 --- a/docs/program/BloomOS_Work_Program_v3.json +++ b/docs/program/BloomOS_Work_Program_v3.json @@ -1167,12 +1167,13 @@ 621, 624, 627, - 630 + 630, + 636 ], "risk_tier": 3, "deployment_tier": "full", "device_gate_required": true, - "last_audited_main": "840d78a2e3f783e5d5d41e4020b2767e28ba9780", + "last_audited_main": "90baf9daf24383b8a17b2ea67f31ad7486ac075f", "evidence": [ "GitHub PR #621 removes the dormant whole-card FileBrowser HTTP executable, database, web theme, icon, first-run marker, boot initializer, and start/authentication code from newly assembled stable payloads while retaining fail-closed legacy entrypoints, listener detection, and process cleanup for rollback-compatible remnants on older cards; it removes 15 tracked files and 14910652 bytes", "the corrected stable inventory contains 333 components, 1975 files, and 261293981 bytes with 232 source-build and 101 unresolved components; 74 affected Shell tests, three RetroArch identity tests, CI ARM orchestration and risk-scope tests, Python compilation, POSIX syntax, manifest, provenance, transfer policy, dependency inventory, and diff checks passed", @@ -1188,7 +1189,11 @@ "GitHub PR #630 removes inherited bftpd and bftpdutmp executables, anonymous and authenticated FTP configurations, dormant start and authentication logic, the visible Tweaks FTP controls and default-credential copy, and current enablement instructions while retaining stale ftpState and authftpState cleanup, exact bftpd termination, fail-closed legacy entrypoints, and the reviewed key-only SFTP replacement; the stable inventory falls to 331 components, 1972 files, and 260959742 bytes with 232 source-build and 99 unresolved components", "the pinned Miyoo toolchain compiled the affected Tweaks consumer as a stripped 32-bit ARM EABI5 binary with SHA-256 160a38cb2d663ea95c6fd635f20ecf7afd9eec9622b9e20b1f8707aeead4eb53; focused security and provenance gates passed 40 of 40 plus 11 of 11 tests, scoped cppcheck passed in 1.45 seconds, native and AddressSanitizer each passed 595 of 595 tests in 56.45 and 71.88 seconds, and the corrected exhaustive local Shell gate passed 813 of 813 tests across eight shards in 157.24 seconds", "after one focused corrective commit restored a missing MDX details opener exposed by the first Docusaurus run, final GitHub checks passed with static analysis in 19 seconds, formatting in 24 seconds, native tests in 1 minute 17 seconds, AddressSanitizer in 1 minute 43 seconds, hosted Shell in 2 minutes 7 seconds, Docusaurus in 2 minutes 10 seconds, and exhaustive ARM packaging in 4 minutes 46 seconds; PR #630 merged by squash as 840d78a2e3f783e5d5d41e4020b2767e28ba9780", - "no deployment, update, reboot, Wi-Fi, listener, ROM, Save, input, overlay, or recovery-state mutation occurred for PR #630; older installed or rollback payloads may retain inherited bftpd bytes but current reconciliation remains fail-closed, and NET-10 still requires the coherent signed Full installation and rollback checkpoint before device completion can be claimed" + "no deployment, update, reboot, Wi-Fi, listener, ROM, Save, input, overlay, or recovery-state mutation occurred for PR #630; older installed or rollback payloads may retain inherited bftpd bytes but current reconciliation remains fail-closed, and NET-10 still requires the coherent signed Full installation and rollback checkpoint before device completion can be claimed", + "GitHub PR #636 removes the misleading stable Tweaks WPS and inherited-hotspot controls, unreachable inherited hotspot mutation functions, three unused WPS progress images, and current enablement copy while retaining fail-closed WPS and hotspot compatibility entrypoints, migration-only hotspotState cleanup, exact hostapd and dnsmasq termination, and hostapd, dnsmasq, netplay, and candidate assets for the independent NET-08 audit; the stable inventory falls to 328 components, 1969 files, and 260922113 bytes with 232 source-build and 96 unresolved components", + "the pinned Miyoo toolchain compiled the affected Tweaks consumer as a stripped 32-bit ARM EABI5 binary with SHA-256 fa4b1aabf6bfce855aa4fbedcab106420f7e9bc67f5ad4d0bed995ac94037c2d; the final focused security and provenance set passed 45 of 45 tests, scoped cppcheck passed in 1.25 seconds, native and AddressSanitizer each passed 595 of 595 tests in 18.74 and 31.35 seconds, and the exhaustive local Shell gate passed 816 of 816 tests across eight shards without retry after focused manifest assertions were reconciled", + "GitHub checks passed with formatting in 16 seconds, static analysis in 28 seconds, native tests in 1 minute 28 seconds, AddressSanitizer in 1 minute 53 seconds, Docusaurus in 2 minutes 21 seconds, hosted Shell in 2 minutes 26 seconds, and exhaustive ARM packaging in 4 minutes 19 seconds; PR #636 merged by squash as 90baf9daf24383b8a17b2ea67f31ad7486ac075f", + "no deployment, update, reboot, Wi-Fi, profile, listener, ROM, Save, input, overlay, or recovery-state mutation occurred for PR #636; VNC remains separately unaudited, NET-08 still owns the transactional hotspot replacement, and NET-10 remains in progress until those boundaries and the coherent signed Full installation and rollback checkpoint are resolved" ] }, {