Files
felhom.eu/documentation/audits/agent-allowlist-rotation-2026-10-17/P2/redproof-live-root-resolve.txt
T
admin 5a5486104a
gates / gates (push) Successful in 8m49s
Agent 0.159.1, the catalog allow-list (controller 0.328.0), break-glass rotation: report, register, design
Closed R-971, R-954, R-1124, R-1012 (174 -> 175 rows); opened R-1139..R-1143; R-895 READY with the design
and hub slice 1; R-972 waits on the vouch. [DESIGN] "The catalog allow-list" in 02; the catalog trust line in
01; FELHOM_THINCHECK and unit-forget in 03. Evidence audits/agent-allowlist-rotation-2026-10-17/.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-17 18:00:05 +02:00

9 lines
597 B
Plaintext

== live finding (9201, rc.4) red-proof: roots resolved only when they exist
privpolicy_test.go:438: binds under roots that do not exist yet were refused: the catalog definition of app asks for container rights the box does not allow: app: bind /mnt/felhom-drives/check/felhom-data/appdata/app -> /c rw; app: bind /mnt/felhom-drives/check/felhom-data/userdata/media -> /m rw
--- FAIL: TestAdmit_RootsThatDoNotExistYet (0.00s)
FAIL
FAIL gitea.dooplex.hu/admin/felhom-controller/internal/privpolicy 0.006s
FAIL
== restored
ok gitea.dooplex.hu/admin/felhom-controller/internal/privpolicy 0.147s