19 lines
1.6 KiB
JSON
19 lines
1.6 KiB
JSON
{
|
|
"proposal_id": "FORGE6-TEMPLATE-LIFECYCLE-001",
|
|
"revision": 2,
|
|
"original_revision": 1,
|
|
"original_digest_sha256": "7eddea55359b25c5ad307ed8ccd392dfadfe167d65cbe34b02f1955350bbcb36",
|
|
"kind": "failed-trial-recovery",
|
|
"pod_uid": "f818d3f5-5c3d-4a2a-8e78-50e10b10d2ce",
|
|
"executor_sha256": "1cf0f846fd4967e6a3a8b2a3844a7736a053c34fa3a9c54d16ea7ba3c18765ad",
|
|
"guard_sha256": "75fdd0722a8749d5038f9e575c547fe39f41f599c40344230dbfdfde489c0f1c",
|
|
"diff_ref": "forge-custody-guard.sh: fixed two admitted, regular, owned, hash-pinned files mode 0775 to 0755; check mode has no mutations",
|
|
"authorization_ref": "canon/standards/build-mode-change-authorization_v0.1.md",
|
|
"rollback": "No content or owner change. Exact inverse chmod 0775 only if restoring the failed pre-repair state is required by abort owner; that deliberately re-blocks pushes. Preferred safe recovery is retain hash-verified 0755 and stop on any artifact mismatch. No hook disabling. Durable restart protection follows separately.",
|
|
"abort_owner": "railiance-forge; executor custodian-codex",
|
|
"receipt_path": "docs/evidence/2026-10-13-netkingdom-security/forge-custody-repair.json",
|
|
"expected_result": "Both exact artifacts 0755, then ordinary SSH source push succeeds; restart durability not yet claimed.",
|
|
"cost_estimate_eur": 0,
|
|
"risk_estimate": "Only removes group write from two existing executable files. No rollout, content, account, policy scope, or spend change. Any mismatch aborts before chmod. Concurrent artifact replacement not expected during this single-agent repair.",
|
|
"promotion_evidence": false
|
|
}
|