admin
5a5486104a
gates / gates (push) Successful in 8m49s
Closed R-971, R-954, R-1124, R-1012 (174 -> 175 rows); opened R-1139..R-1143; R-895 READY with the design and hub slice 1; R-972 waits on the vouch. [DESIGN] "The catalog allow-list" in 02; the catalog trust line in 01; FELHOM_THINCHECK and unit-forget in 03. Evidence audits/agent-allowlist-rotation-2026-10-17/. Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
15 lines
1.1 KiB
Plaintext
15 lines
1.1 KiB
Plaintext
== catalog gate red-proof: the allow-list check never refuses
|
|
XX FACT: privileged true rc=0 (expected 1)
|
|
XX FACT: cap_add rc=0 (expected 1)
|
|
XX FACT: the host root bound rc=0 (expected 1)
|
|
XX FACT: a bind through another variable rc=0 (expected 1)
|
|
XX FACT: homepage's socket READ-WRITE rc=0 (expected 1)
|
|
XX FACT: the allowed socket in ANOTHER app rc=0 (expected 1)
|
|
XX FACT: network_mode host rc=0 (expected 1)
|
|
XX FACT: a driver_opts bind volume rc=0 (expected 1)
|
|
XX FACT: a ${VAR} in a privileged key rc=0 (expected 1)
|
|
XX FACT: privileged in a steps/ file rc=0 (expected 1)
|
|
fails: 10
|
|
== restored
|
|
check-privileges: 123 files judged, every class-setting on the allow-list
|