718 B
718 B
Retention boundary
This directory retains the original reviewed source, manifests, signed release
metadata and solver/validation receipts. It is not the executable artifact bundle.
The complete verified bundle remains at /tmp/cust73-ubuntu-dependencies-r1,
including rootfs, Packages indexes, dpkg baseline and seven binary archives.
ORIGINAL-SHA256SUMS refers to that complete bundle, not just this Git snapshot.
Do not run the installer from this partial review copy or infer admission from
source checks. Reverify the complete artifact bundle before root-owned staging;
if it has expired or disappeared, reacquire exact pinned bytes and validate their
signed provenance before seeking an execution approval.