Repository navigation
Harden apt canaries and require verified durable evidence - #81
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The apt canary could prompt during its machine-mode authorization test and report passing mutation checks despite incorrect durable package observations. Add a guarded local-host driver that requires successful authorization before mutation and verifies redacted audit records by correlation ID before accepting the run.
Stage six pinned source trees, including source-built janssonr for Ubuntu releases without a binary suite. Bound authorization probes without interactive pkexec, preserve normal apt indexes during fixture verification, retain exit evidence, and permit explicit guarded continuation/repeat paths without erasing prior attempt markers. The SSH guest driver also stops when its authorization matrix fails.
Validation: 53 local driver/evidence/eligibility/terminal/API controls passed. A real Ubuntu 26.04 host passed 68 mutation assertions, both 23-assertion authorization matrices, all 18 gate evidence records, and both machine-refusal audit checks with pkgops 0.0.1.12. Cleanup passed; the redacted evidence was copied off-host, checksum-verified, and independently revalidated. This changes deployment/test tooling only.