dc73e9cbf6
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
96 lines
5.8 KiB
Text
96 lines
5.8 KiB
Text
{
|
|
"proposal_id": "INFD-WP-0009-T05/zlib-85091-r1",
|
|
"task_id": "INFD-WP-0009-T05",
|
|
"risk_record": "INFD-RISK-20261011-ZLIB-85091",
|
|
"state": "actual-owner-CI-published-independent-verification-passed-native-unapproved",
|
|
"verified_utc": "2026-10-11T09:40:24.469646+00:00",
|
|
"source_revision": "9b4bb25d325698ae543e7e8a8a3c3592db1f58fc",
|
|
"ci_task": 11534,
|
|
"ci_run": 4,
|
|
"ci_status": "success",
|
|
"reviewed_source_manifest_sha256": "724aa4777eb1c8976d868e5f504473f4b6d58f13d750d87aefa5c8d5ca0747ec",
|
|
"all74_source_hashes_match_actual_commit": true,
|
|
"published_image_digest": "sha256:f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23",
|
|
"base_image_digest": "sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
|
"registry_config_digest": "sha256:622becc3ebd97cb66b6e7c36f35bf931a7decd9464b65851123c1cc8c998d75b",
|
|
"executed_local_daemon_image_id": "sha256:f2e07e3dd839b55afd5d517243a765a26965325e4e6750f508771ad556bd6d01",
|
|
"serialization_caveat": "Daemon load reserializes config; all diffIDs/platform/effective config+labels independently equal to registry; neither config nor daemon ID substitutes for registry image digest",
|
|
"actual_registry_descriptors_and_layers_verified": true,
|
|
"base9layers_unchanged": true,
|
|
"overlay_layers": 2,
|
|
"fullscan_baseline": {
|
|
"MEDIUM": 1,
|
|
"id": "CVE-2026-85091"
|
|
},
|
|
"fullscan_candidate_allseverity_findings": 0,
|
|
"fullscan_no_suppressions": true,
|
|
"same_fresh_DB_both_images": true,
|
|
"scanner_db_sha256": "03cacb40452ceb74afdfca072cb82f79ee884dfac006ef24a4dfdad133b0f917",
|
|
"scanner_db_metadata": {
|
|
"Version": 2,
|
|
"NextUpdate": "2026-10-11T18:59:50.889010572Z",
|
|
"UpdatedAt": "2026-10-10T18:59:50.889010923Z",
|
|
"DownloadedAt": "2026-10-10T23:32:32.380033131Z"
|
|
},
|
|
"scanner_caveat": "Alpine3.24 absent EOL list warning; actual38OS+6Python detectors ran. Zero means this verified DB snapshot, not unknown-future assurance or estate risk grade.",
|
|
"sbom_count": 44,
|
|
"sbom_only_delta": {
|
|
"zlib": [
|
|
"1.3.2-r0",
|
|
"1.3.2-r1"
|
|
]
|
|
},
|
|
"final_changed_files": [
|
|
"lib/apk/db/installed",
|
|
"usr/lib/libz.so.1.3.2"
|
|
],
|
|
"directory_count": 313,
|
|
"directory_metadata_delta": {},
|
|
"app_files_identical": 36,
|
|
"installed_UID": 10001,
|
|
"installed_GID": 10001,
|
|
"policy_sha256": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62",
|
|
"policy_mode": "0o644",
|
|
"policy_UID": 0,
|
|
"candidate_image_executed": true,
|
|
"public_registry_layer_readback": true,
|
|
"native_provider_test": false,
|
|
"installed_purpose_variants": 10,
|
|
"purpose_forms_allow": 2,
|
|
"purpose_forms_refuse": 8,
|
|
"runtime_readonly_networknone": true,
|
|
"native_workload_or_database_or_snapshot_or_credentials_accessed": false,
|
|
"native_rollout": false,
|
|
"founder_release_approval": false,
|
|
"risk_followthrough": "T05 remains active; manual review due2026-10-18, no controller or estate risk grade. Actual native installation/fresh scoped founder decision still required before closure.",
|
|
"verification_refinement": "First run used registry config as daemon handle and refused before candidate execution125. Corrected by independently proving loaded daemon ID semantics+diffIDs exact, then executed. Not actual image failure.",
|
|
"evidence_sha256": {
|
|
"artifact-comparison.json": "a1c5d9e249dc00600449998360faf6e8da0206b568c76d155602c4645fa5fce4",
|
|
"base-image-config.json": "4ad7249c75fd9fc039ceb186772419e1cba5fd9759c404556459c80a2d285d10",
|
|
"base-image-manifest.json": "978c575d3c7bf0de39dbe4e9567c39cd36f70b7e55bc17357bdb03fb3b96b0fb",
|
|
"base-runtime.json": "20aabb9f4846ab4fa6e28e0763d153188da151ee32293366a51b0fdf872a4d24",
|
|
"base-sbom.cdx.json": "dd7d64c9571391acd4d1f86c6026a1b094abab4ee56e5a9f799ec2fd3c7d915a",
|
|
"base-sbom.cdx.json.log": "8ab4473a5f74b36e82a4095e9c8d6e66d80aec64bd1cebd6c9f6734531869fca",
|
|
"base-trivy-full.json": "3e91a3001adb008cec37d9ae3c08342f5d43c8ba0111eee75c63a6a7918808a9",
|
|
"base-trivy-full.json.log": "96a48dc39f7d674b4954d5fa98a76645528ec0fe705782fe114e3b4b9d776862",
|
|
"candidate-runtime.json": "d58e60bdc69458fe42af8248e02acd924b3b605c828877352a7d9a3953e90124",
|
|
"ci-publication-observation.json": "ffe6f2508bc9bebbdc85ac63eae5765562efbb8e920cc85b8da30a12ee1e4b17",
|
|
"image-config.json": "253ab359013aeb3457d2abe0852bacd33697f973dd32c1b5738800e5dc633f43",
|
|
"image-manifest.json": "9ca2abec6a26d9a9f802dfe75efa8bffdc28485e6bcaf525cc9b075df3700194",
|
|
"installed-purpose.json": "312312c6f0bd2751401b3bc5bcd30ee6af01ed7cb380f85b863d03b0c7e9d1ad",
|
|
"loaded-daemon-image-proof.json": "2e5c043a101d75e4c569adb6bc2f09020679b28ed2ad836c954f7d27101ce719",
|
|
"publication-digest.json": "ca2a1dec38db8c5fbbc00ef4f27aa865edbbd4a7ca9dc21b2ba023664c507f38",
|
|
"read_public_artifact.py": "eaa31da1ebb2095ea5e1bc7c570311cc4747f0d7f718034dad934351d1920daf",
|
|
"registry-proof.json": "3ef52d9e4800fc9bd238072241dc15f13a0260ee3df1e82e6f63e72902749d92",
|
|
"run_published_runtime.py": "d9bd33fecd2a98c2381b4ba2dce12b5c3d9a69faa5e350291924fc885f5e775f",
|
|
"run_published_scan.py": "2583ab96350412fb3f20b5b05ded0949eb3ee8e5c0e8923a9c2c42d419d36639",
|
|
"runtime-comparison.json": "993b80b9285e227a0bdfde4927cd2f053bcc4a58dd9bd1b633ac7a4637d6713c",
|
|
"runtime-receipt.json": "6442676dcfd941f0a05a4cb79a02dea839fcd332d82b2154c15cf6db68de5889",
|
|
"sbom.cdx.json": "4202263059780eae0448328044c1cf68b59758f329ae6bc981d916610527eae3",
|
|
"sbom.cdx.json.log": "51873b37a0846ee1a618ea7591d79809dc0f8624f77a03fae7af953bcbd7282f",
|
|
"scan-receipt.json": "aaaa91061bb036e6d228b1c1bd4333578dc948cb2bb5ac8ba269429121e7321a",
|
|
"source-commit-proof.json": "b0811da2d3bd5938733f0078e5fec8e19a6d9752c4277b80bfe9837ed72c6a3b",
|
|
"trivy-full.json": "2ff68e765b9c65292611d5a969202a7654637168edefcedac5d2c7634009edae",
|
|
"trivy-full.json.log": "b3419af860d264449f61986f562491edaead27dfd3638ceabe94b4fe177f4bf1"
|
|
}
|
|
}
|