Dorian 5af14de526 Harden companion publishing without changing runtime UX ...

Adapt the audited publisher refusal changes, derive metadata from the signed APK, and constrain all regression staging to disposable repositories.

2026-11-13 04:17:15 -05:00

..

fixtures

fix: harden node upgrades and prepare 1.9.0-alpha

2026-10-05 12:43:49 -04:00

access_owner_fixture.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

access_owner_regressions.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

archy-developer-setup-test.sh

feat: add idempotent developer environment bootstrap

2026-10-09 08:00:06 -04:00

archy-session-test.sh

feat: add persistent Archipelago developer sessions

2026-10-09 07:32:15 -04:00

build_os_ota_crypto_fixture.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

build_os_ota_native.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

c01_kiosk_pid1.py

feat: preserve guarded runtime networking for 2.0.2-alpha

2026-11-06 18:10:42 -05:00

c01_network_backend.c

feat: preserve guarded runtime networking for 2.0.2-alpha

2026-11-06 18:10:42 -05:00

c01_network_v4_pid1.py

fix: bind mapped container principals in network admission

2026-11-07 17:37:26 -05:00

c01_nts_disposable.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

gashboard-isolated-entry.mjs

test: qualify Gashboard through fixed backend isolation target

2026-11-09 17:04:12 -05:00

kernel_artifact_vm.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

os_ota_crypto_fixture.rs

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

os_ota_d09_guest.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

os_ota_installed_vm.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

os_update_custody_disposable.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

os_update_debian_chain.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

os_update_disposable.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

os_updater_activation_guest.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

os_updater_baseline_guest.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

os_updater_postboot_guest.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

package_c01_normal_fixture.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

package_c01_nts_fixture.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

package_c01_tmux_fixture.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

package_d09_native_fixture.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

prepare_c01_nts_dependencies.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

public_update_fixture.c

WIP: preserve successor updater development snapshot

2026-11-09 16:18:01 -05:00

public_update_prepare_isolated.py

WIP: preserve successor updater development snapshot

2026-11-09 16:18:01 -05:00

public_update_worker_pid1.py

fix: recover public updates before startup and filter release payloads

2026-11-09 17:08:28 -05:00

qualify_access_owner.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

qualify_os_ota_crypto.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

qualify_os_ota_installed.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

qualify_os_ota_owner_boot.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

qualify_os_updater_activation.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

qualify_os_updater_boot.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

qualify_os_updater_bootstrap.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

qualify_runtime_service.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

qualify_uat_oci.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

radio_handoff_fixture.c

fix: complete protected radio and clean AIUI builds

2026-11-03 23:09:36 -05:00

radio_helper_fixture.c

fix: complete protected radio and clean AIUI builds

2026-11-03 23:09:36 -05:00

run_public_update_pid1.py

WIP: preserve successor updater development snapshot

2026-11-09 16:18:01 -05:00

runtime_read_fixture.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

runtime_service_fixture.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_app_admin_credentials.py

Secure application credentials, protected secret migration and fresh authorization

2026-11-09 15:58:31 -05:00

test_backend_isolated_runner.py

test: qualify Gashboard through fixed backend isolation target

2026-11-09 17:04:12 -05:00

test_build_snapshot.py

Require exact authenticated snapshot indexes during image builds

2026-11-09 19:30:33 -05:00

test_c01_access_regressions.py

fix: preserve appointed administrator recovery during cutover

2026-11-06 19:30:15 -05:00

test_c01_admission_fds.py

test: provision high-descriptor fixture limits

2026-11-07 11:54:20 -05:00

test_c01_admission.py

fix: bind access checks to retained process handles

2026-11-05 02:33:03 -05:00

test_c01_audio_devices.py

fix: preserve kiosk and audio through protected migration

2026-11-05 12:40:25 -05:00

test_c01_characterized_recovery.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_c01_clock_refresh.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_c01_conditional_admission.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_c01_epoch_recovery.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_c01_kiosk_browser.py

fix: preserve kiosk and audio through protected migration

2026-11-05 12:40:25 -05:00

test_c01_kiosk_endpoints.py

feat: preserve guarded runtime networking for 2.0.2-alpha

2026-11-06 18:10:42 -05:00

test_c01_mapped_principal.py

fix: retain management-only network lease compatibility

2026-11-07 20:57:06 -05:00

test_c01_migration_approval.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_c01_migration_layout.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_c01_network_emit.py

feat: preserve guarded runtime networking for 2.0.2-alpha

2026-11-06 18:10:42 -05:00

test_c01_network_owner.py

feat: preserve guarded runtime networking for 2.0.2-alpha

2026-11-06 18:10:42 -05:00

test_c01_network_v4.py

feat: preserve guarded runtime networking for 2.0.2-alpha

2026-11-06 18:10:42 -05:00

test_c01_nts.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

test_c01_oci_job.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_c01_provision_anchor.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_c01_provision_maps.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_c01_recovery.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

test_c01_retained_producer.py

fix: bind retained forwarders by socket and keeper identity

2026-11-07 19:54:13 -05:00

test_c01_retirement_pins.py

fix: bind access checks to retained process handles

2026-11-05 02:33:03 -05:00

test_c01_runtime.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

test_c01_uplink.py

feat: preserve guarded runtime networking for 2.0.2-alpha

2026-11-06 18:10:42 -05:00

test_catalog_capabilities.py

fix: align release catalogs with pinned app images

2026-11-06 10:58:10 -05:00

test_companion_apk_publish_refusal.py

Harden companion publishing without changing runtime UX

2026-11-13 04:17:15 -05:00

test_companion_apk_verification.py

fix: qualify mobile Cloud viewer and companion downloads

2026-10-05 14:41:08 -04:00

test_companion_cargo_adapter.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

test_d09_os_status.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_dashboard_public_guard.py

fix: recover public updates before startup and filter release payloads

2026-11-09 17:08:28 -05:00

test_default_login_migration.py

fix: harden setup, shutdown and network provisioning

2026-11-09 09:02:36 -05:00

test_exec_profile_fixture.py

fix: provision execution policy for isolated backend tests

2026-11-06 14:27:12 -05:00

test_filebrowser_credentials.py

Show verified human File Browser login and use readable fresh-install username

2026-11-10 05:35:05 -05:00

test_fips_wg_owner.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_generate_app_catalog_ports.py

Allow Pine declared HTTPS UI redirect through FIPS

2026-11-12 14:39:58 -05:00

test_git_mirrors.py

fix(companion): qualify authenticated handover and preserve release lineage

2026-11-12 16:17:53 +00:00

test_image_inputs.py

Bind image inputs and provision enforced host and application policy

2026-11-09 19:29:02 -05:00

test_image_login_policy.py

Enforce declared container confinement and harden image login defaults

2026-11-09 15:58:31 -05:00

test_indeehub_prefix_hook.py

Preserve IndeeHub app proxy prefix during native updates

2026-10-08 13:46:29 -04:00

test_iso_qemu_runner.py

fix: harden node upgrades and prepare 1.9.0-alpha

2026-10-05 12:43:49 -04:00

test_kernel_security.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_network_settings_executor.py

fix: harden setup, shutdown and network provisioning

2026-11-09 09:02:36 -05:00

test_npm_public_bridge.py

fix: isolate NPM upstream TLS sessions across public domains

2026-10-05 15:26:28 -04:00

test_npm_tunnel_effective_state.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

test_os_ota_installed_vm.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_os_owner_client_roundtrip.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_os_update_manager.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_os_update_owner.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_os_update_package_custody.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_os_update.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_os_updater_activate.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_os_updater_bootstrap.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_platform_timing_nts_interval.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_platform_timing_summary.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_production_dashboard_boundary.py

Bind production dashboard build to non-demo profile

2026-11-12 14:27:04 -05:00

test_public_app_policy.py

fix: exclude private test apps from public release payloads

2026-11-08 08:50:11 -05:00

test_public_ota_immutable_compat.py

WIP: preserve successor updater development snapshot

2026-11-09 16:18:01 -05:00

test_public_update_adopt.py

Accept unchanged signed routing templates during legacy adoption

2026-11-09 18:44:13 -05:00

test_public_update_maintenance.py

Drain maintenance jobs before signed OTA runtime replacement for beta.2

2026-11-10 02:51:05 -05:00

test_public_update_prepare.py

WIP: preserve successor updater development snapshot

2026-11-09 16:18:01 -05:00

test_public_update_runtime.py

fix: preserve restored runtime during historical backend startup

2026-11-09 17:55:44 -05:00

test_public_update_schedule.py

Fix signed OTA startup handoff across systemd reloads for beta.1

2026-11-10 01:41:38 -05:00

test_radio_uf2.py

fix: harden setup, shutdown and network provisioning

2026-11-09 09:02:36 -05:00

test_release_os_binding.py

feat: stage target-specific signed release manifests

2026-11-07 08:25:40 -05:00

test_release_payload.py

Integrate accepted 2.0.4 updater and UX into 2.1 review source

2026-11-09 20:18:42 -05:00

test_release_source_binding.py

Require authenticated OTA catalogs and immutable signed TLS image pulls

2026-11-09 15:58:30 -05:00

test_release_verifier.py

Integrate required Cloud and mobile UX with audited Beta fixes

2026-11-09 22:03:21 -05:00

test_repair_npm_tunnel.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

test_runtime_owner.py

chore: preserve qualified completion source for combined UAT

2026-10-31 09:17:18 -04:00

test_secure_boot.py

Preserve authenticated Debian Secure Boot chain in installer and target

2026-11-09 19:07:02 -05:00

test_security_dependency_inventory.py

security: resolve Python graph and trace dependency license evidence

2026-11-09 17:43:26 -05:00

test_sync_whats_new.py

fix: harden node upgrades and prepare 1.9.0-alpha

2026-10-05 12:43:49 -04:00

test_tailscale_security.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_uat_kernel.py

Bind image inputs and provision enforced host and application policy

2026-11-09 19:29:02 -05:00

test_uat_oci.py

feat: prepare protected 2.0.1-alpha UAT candidate

2026-11-03 19:06:06 -05:00

test_unsigned_uat_iso.py

fix: bind unsigned UAT ISO to qualified kernel

2026-11-04 05:40:24 -05:00

test_verified_image_pull.py

Require authenticated OTA catalogs and immutable signed TLS image pulls

2026-11-09 15:58:30 -05:00

test_watch_upstream_releases.py

Fail closed when upstream discovery has no eligible feeds

2026-11-11 20:49:13 -05:00

with_exec_profile.py

fix: provision execution policy for isolated backend tests

2026-11-06 14:27:12 -05:00