opc/soft_quay
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
66 Commits 7 Branches 0 Tags
5db6031e4b54e151f26dff51faa1e67c04ca81d8
Commit Graph
3 Commits
Author SHA1 Message Date
ila 24e9862192 Harden self-update recovery (T-617) 2026-07-20 00:05:41 +08:00
ila ea1d6c8ee4 Define self-update recovery remediation (T-617) 2026-07-19 23:53:27 +08:00
ilaandClaude Fable 5 a2cda73deb Add Phase 4 launch/update/self-update review with cross-check ruling
Phase 0 build gate / verify (push) Has been cancelled
Details
Harness governance / validate (push) Has been cancelled
Details 
Code-level audit of T-401~T-403: launch has no command-injection surface
(AppID-only request, entrypoint must be in recorded installed files,
safepath+JoinUnder+Lstat, no-arg exec.Command and parameterless
ShellExecuteExW), update never force-kills (confirm + natural-exit wait
only), and self-update is journaled, rollback-capable and health-gated
before backup deletion. Confirms Phase 3 O1 is closed by T-401's
preSwitchCheck.

Ruling accepts Codex's follow-up: O4 (self-flagged T-403 fault-injection
and mid-phase Recover test gaps - all four claims verified) and O5
(split assembly prerequisites instead of lumping them under T-502).
Adds a low-cost path to close O4 mostly via the existing DirectorySyncer
seam and filesystem permission tricks, without new production seams.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-19 23:44:01 +08:00