This commit is contained in:
@@ -0,0 +1,22 @@
|
||||
# Phase 1.0DQ: bounded FAKE00000 inventory observer
|
||||
|
||||
Status: `OFFLINE_ARTIFACT_BUILT_AUDITED_INACTIVE`
|
||||
|
||||
DQ enumerates only the immediate children of the appinfo-proven directory
|
||||
`/user/app/FAKE00000`. It emits at most 256 fixed 320-byte records containing
|
||||
name, directory type, mode, size, inode and modification time. `lstat` avoids
|
||||
following symlinks. The observer neither recurses nor reads file contents and
|
||||
has a ten-second process alarm.
|
||||
|
||||
The exact ignored ELF is 110,032 bytes with SHA-256
|
||||
`914fce06a490ad048fdd0a85ae117858e8904b47c72054bf12fbfebc213a6db8`.
|
||||
Its W^X load flags and reproducibility are audited offline. Normal SDK CRT
|
||||
temporary effects remain applicable. Directory enumeration may also update
|
||||
access-time metadata depending on the target filesystem, so any future exact
|
||||
permission must acknowledge that possible low-level effect.
|
||||
|
||||
The DR host runner is inactive and pins the artifact, one connection, one
|
||||
transfer, one execution, a 20-second host deadline and at most 82,048 result
|
||||
bytes. It creates an exclusive consumed receipt before socket construction and
|
||||
never permits retry, reconnect, installation, autoload, persistent write or
|
||||
file-content read. No console action is authorized by this phase.
|
||||
Reference in New Issue
Block a user