coulomb/risk-nexus
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record actual temporary human runtime risk disposition

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
tegwick 2026-10-11 03:01:29 +02:00
parent d0a19d6066
commit b877231d66
1 changed files with 18 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

18
findings/RISK-F-0016-user-engine-os-runtime-findings.md
View file

@ -19,3 +19,21 @@ Exposure is not established as exploitable or impossible. mount/setuid, nsenter,
Full eight-CVE package mapping, primary Debian links, caveats and prepared image/baseline receipts: rapp-user-engine/docs/evidence/2026-10-11-published-readback-proposal/risk-assessment.md. Custodian independently retained actual published image verification and exact scan in docs/evidence/2026-10-10-security-consolidation/published-user-runtime. Local failed scan/image candidates remain historical.
Suggested direction: exact short build-mode trial only if the supervisor explicitly accepts bounded residual risk; otherwise defer, or prepare supported-base/package-pruning changes with complete tests/provenance/scan. NetKingdom is the package binding residual risk owner; RiskNexus grades/routes this finding. Filing and source preparation are not acceptance. Proposed review by October18 is the trial condition, not a reporter-assigned RiskNexus cadence. No live rollout has occurred under this proposal.
## Actual conditional disposition and rollout — 2026-10-11
Human informed decision infd-20261011-user-engine-readback-r2@1 confirmed ACCEPT
at2026-10-11T00:48:11Z; approval0dd18a5a-5555-461e-8470-931d530435cf,
dispositiondisp-9ab2caba-6d3d-4fac-bc64-618f9c82aa9a. Exacttwoobjectrollout
completed00:52:49Z, Ready1/observedgen73, readyz200; admittedreadbackprobes pass.
This is a temporary human risk disposition for the exactf239 image and scope,
not a RiskNexus grade or permanent acceptance. Reviewby2026-10-18T23:59:59Z;
renewed disposition or the exact approved rollback is required, with no automatic
expirycontroller claimed. Scan findings remain unresolved. Actualnativecatalogue
is empty and three-way binding remains USER-WP-0026/0028 work. Cross-provider
token substitution remains untested; separate projections share the same
ServiceAccount/audience and do not establish credential isolation.
Original preparation statement above remains historical. Execution/review
receipts: rapp-user-engine/docs/evidence/2026-10-11-native-readback and
NetKingdom docs/evidence/2026-10-11-user-readback-integration-review.