24 lines
1.2 KiB
Markdown
24 lines
1.2 KiB
Markdown
# Phase 1.0DL: official shsrv artifact audit
|
|
|
|
Status: `OFFICIAL_ARTIFACT_BOUND_EXECUTION_BLOCKED_UNBOUNDED_AND_RWE`
|
|
|
|
The official v0.19 release artifact was downloaded only to ignored `work/`
|
|
storage and bound to source commit `6f320637d56d344a0e7797753099e33238bbf146`.
|
|
It is 981,872 bytes with SHA-256
|
|
`797827b50a93dbf327abdca45063d76ea24b17e561d927f397a0b73cadb2e2bd`.
|
|
It was inspected as bytes and was neither executed on the host nor sent to the
|
|
console.
|
|
|
|
The ELF has an `RWE` load segment. Source inspection also proves an unbounded
|
|
accept loop, unbounded process lifetime, per-connection threads, `/dev/console`
|
|
opened read/write and a startup notification. It has no automatic termination
|
|
deadline. Those properties violate Chimera's bounded-effect requirements even
|
|
though startup does not require a persistent filesystem write.
|
|
|
|
The official binary is therefore transfer- and execution-ineligible. Exact
|
|
provenance does not make its runtime safe. The safer route is a new offline
|
|
design for a single-purpose raw-elfldr payload: fixed read-only database path,
|
|
strict byte ceiling, inherited result descriptor only, no listener, one result
|
|
stream and terminal return. That design itself grants no build or device
|
|
authority.
|