tegwick
005709a372
Owner CI run 6 built forgejo.coulomb.social/coulomb/informed-decision @sha256:ca75f0be03af0bd96a66b08d2949bdc2d16365a93ffabcd6593074b565e8f01b fromc228583. Verified read-only: - zlib 1.3.2-r1 (floor check passes) - installed modules equal the source atc228583- 13/13 container checks - Trivy 0 HIGH/CRITICAL; 2 UNKNOWN musl findings, the same as the live image Pinned in admission.candidate.json and re-rendered service.candidate.json. The runtime ConfigMap is unchanged (informed-decision-runtime-b488b96a0953). This commit is the release's RELEASE_SHA. Nothing applied. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5502@bnt-lap001 Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
32 lines
1.5 KiB
JSON
32 lines
1.5 KiB
JSON
{
|
|
"status": "passed",
|
|
"image_id": "sha256:ca75f0be03af0bd96a66b08d2949bdc2d16365a93ffabcd6593074b565e8f01b",
|
|
"repo_digests": [
|
|
"forgejo.coulomb.social/coulomb/informed-decision@sha256:ca75f0be03af0bd96a66b08d2949bdc2d16365a93ffabcd6593074b565e8f01b"
|
|
],
|
|
"checks_passed": 13,
|
|
"checks": [
|
|
"installed container entrypoint serves with projected configuration",
|
|
"non-root read-only runtime has no external network or published port",
|
|
"private config/database modes enforced; package installer absent",
|
|
"configured review refuses anonymous access and reports audit-unready status",
|
|
"private listener refuses anonymous lifecycle access and exposes no browser routes",
|
|
"public listener exposes no private workload route",
|
|
"a second writer cannot acquire the active evidence volume",
|
|
"synthetic uncertain intent and undelivered evidence remain explicit",
|
|
"consistent backup created while serving; overwrite refused",
|
|
"SIGTERM closes the serving writer without forced kill",
|
|
"restart preserves immutable content and unresolved submission without retry",
|
|
"separate restored volume preserves exact content and unresolved state",
|
|
"incomplete owner configuration exits before serving"
|
|
],
|
|
"fixture_only": true,
|
|
"external_network": "none",
|
|
"content_snapshot_sha256": "7c377d9159da33bdc491f81a3444d3d581c1711664dcfbb6df2a6f899b49f425",
|
|
"native_identity_policy_audit_proven": false,
|
|
"published": false,
|
|
"deployed": false,
|
|
"factory_attempts": 0,
|
|
"paid_model_calls": 0,
|
|
"cleanup_complete": true
|
|
}
|