From b877231d66e1289dc32fda07ed2c61dcb3e970dc Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 11 Oct 2026 03:01:29 +0200 Subject: [PATCH] Record actual temporary human runtime risk disposition Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade --- ...K-F-0016-user-engine-os-runtime-findings.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/findings/RISK-F-0016-user-engine-os-runtime-findings.md b/findings/RISK-F-0016-user-engine-os-runtime-findings.md index 1bc2111..5a754d4 100644 --- a/findings/RISK-F-0016-user-engine-os-runtime-findings.md +++ b/findings/RISK-F-0016-user-engine-os-runtime-findings.md @@ -19,3 +19,21 @@ Exposure is not established as exploitable or impossible. mount/setuid, nsenter, Full eight-CVE package mapping, primary Debian links, caveats and prepared image/baseline receipts: rapp-user-engine/docs/evidence/2026-10-11-published-readback-proposal/risk-assessment.md. Custodian independently retained actual published image verification and exact scan in docs/evidence/2026-10-10-security-consolidation/published-user-runtime. Local failed scan/image candidates remain historical. Suggested direction: exact short build-mode trial only if the supervisor explicitly accepts bounded residual risk; otherwise defer, or prepare supported-base/package-pruning changes with complete tests/provenance/scan. NetKingdom is the package binding residual risk owner; RiskNexus grades/routes this finding. Filing and source preparation are not acceptance. Proposed review by October18 is the trial condition, not a reporter-assigned RiskNexus cadence. No live rollout has occurred under this proposal. + +## Actual conditional disposition and rollout — 2026-10-11 + +Human informed decision infd-20261011-user-engine-readback-r2@1 confirmed ACCEPT +at2026-10-11T00:48:11Z; approval0dd18a5a-5555-461e-8470-931d530435cf, +dispositiondisp-9ab2caba-6d3d-4fac-bc64-618f9c82aa9a. Exacttwoobjectrollout +completed00:52:49Z, Ready1/observedgen73, readyz200; admittedreadbackprobes pass. +This is a temporary human risk disposition for the exactf239 image and scope, +not a RiskNexus grade or permanent acceptance. Reviewby2026-10-18T23:59:59Z; +renewed disposition or the exact approved rollback is required, with no automatic +expirycontroller claimed. Scan findings remain unresolved. Actualnativecatalogue +is empty and three-way binding remains USER-WP-0026/0028 work. Cross-provider +token substitution remains untested; separate projections share the same +ServiceAccount/audience and do not establish credential isolation. + +Original preparation statement above remains historical. Execution/review +receipts: rapp-user-engine/docs/evidence/2026-10-11-native-readback and +NetKingdom docs/evidence/2026-10-11-user-readback-integration-review.