the-custodian/docs/changes/CUST-WP-0073/existing-k3s-host-r1/candidate.json
codex 9f1ea088ef
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 10s
Pin existing k3s hardening candidate and runtime review gates
2026-10-19 14:02:59 +02:00

13 lines
670 B
JSON

{
"unit_preimage_sha256": "b5398c385430ce225faadc1f3724597fe4b05dd999a04b8abbca64d4b0d68c0e",
"unit_candidate_sha256": "866ea58bfab00215e5bd3352287ebb0230d4ddb7dd3ed4b1cd853e74c6698d7d",
"changed_argument_count": 1,
"same_length": true,
"bytes_changed": 2,
"env_file_readable_without_sudo": false,
"candidate_written": false,
"raw_unit_emitted": false,
"credential_content_read": false,
"revalidated_observation_sha256": "2858375cf9bae3b867dc00799ad6877f5320e08dc6b0a2e047526e0718c8c4eb",
"binding_note": "Candidate digest was computed read-only from the same pinned unit preimage; fresh host-bound observation confirms that preimage unchanged."
}