tegwick
9b4bb25d32
All checks were successful
Publish exact zlib-only remediation candidate / publish-candidate (push) Successful in 13s
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
26 lines
2 KiB
JSON
26 lines
2 KiB
JSON
{
|
|
"proposal_id": "INFD-WP-0009-T05/zlib-85091-r1",
|
|
"same_trial": true,
|
|
"original_manifest_sha256": "8d345bb2bde3efce4d0cc99dfc2f883a64f79c42d2cd4abb288229a995e9ad66",
|
|
"original_local_verification_sha256": "c82fa8aab33426fdd6f7730b627d226d3469b9d31c525bca7c28a52ab4847fc1",
|
|
"reason": "Platform source-review guard gaps; original actual candidate/build/scan did not fail",
|
|
"changes": [
|
|
"Explicit optimized Python refusal before any archive/JSON read",
|
|
"Filesystem audit includes final directory mode/UID/GID metadata",
|
|
"Three synthetic tests: optimized malformed artifact refuses before read; unchanged directory passes; mode/UID/GID mutation refuses",
|
|
"Preserve OCI whiteout leading dots and clear root/nested descendants correctly; four semantic fixtures cover removal and opacity",
|
|
"Whiteouts mask lower layers only; merge same-layer additions after masking. Eight root/nested opacity, sibling and replacement tar-order fixtures added"
|
|
],
|
|
"actual_existing_artifact_reaudit": "Passed; no directory metadata differences, same two changed files",
|
|
"candidate_image_unchanged": "sha256:78bfdcc00a62367ae6190f6569a02b18abf9a943f760e4ac8fb946703348af31",
|
|
"four_file_build_context_unchanged": "c554e62a84af340cba15d469a4568f6d0c40923e580b08ed7565e22702b1207d",
|
|
"registry_publication": false,
|
|
"native_changes": false,
|
|
"checker_sha256": "d727f60edd004184c79903c20619643033fac68afbecfb1990cce855cdb924e3",
|
|
"tests_sha256": "12ba4ce8c082450241118d73139c59e06b3a337b152e3364918a5b2850f2dc47",
|
|
"comparison_sha256": "689fa7cbd322cb31b215fd2e86e0be267c1398f9b71e5615446d5f7b82dcce89",
|
|
"verification_sha256": "efbb173dcb9358b58bd703a18e63c6c25805167d5a14856ed095d05be4309709",
|
|
"intermediate_source_manifest_sha256": "64509029b3de6d33e3675587663ccdae027d9ea18aba83750892480766dd03b8",
|
|
"whiteout_refinement_note": "Conservative incorrect effective-rootfs modeling in the intermediate checker, not failure of the actual candidate",
|
|
"layer_order_review_manifest_sha256": "3e41ab391cda26f09a556fecef8a17c2759ef2899e43eb136b25ef4b3fde23a0"
|
|
}
|