Harden server enrollment and provisioning security #7

Merged

ochenstarik-ui merged 1 commit from hermes/sprint1-server-security into main

2026-07-30 19:32:48 +00:00

ochenstarik-ui commented

2026-07-30 19:29:37 +00:00

(Migrated from github.com)

Summary

keep enrollment tokens out of process argv using an owner-only token file
harden provisioning helper framing, peer credentials, timeouts, concurrency, and cancellation recovery
add regression coverage for token secrecy and privileged helper boundaries

Verification

dotnet test ServerMonitorManager.slnx --configuration Release: 62/62 PASS on Windows
bootstrap contract: PASS
Linux-only enrollment argv test is enforced by Linux CI
independent security review: APPROVE, no BLOCKING/HIGH/MEDIUM/LOW findings

Scope

Server-side Sprint 1 P0-1/P0-5 only. Desktop security is delivered separately.

## Summary - keep enrollment tokens out of process argv using an owner-only token file - harden provisioning helper framing, peer credentials, timeouts, concurrency, and cancellation recovery - add regression coverage for token secrecy and privileged helper boundaries ## Verification - `dotnet test ServerMonitorManager.slnx --configuration Release`: 62/62 PASS on Windows - bootstrap contract: PASS - Linux-only enrollment argv test is enforced by Linux CI - independent security review: APPROVE, no BLOCKING/HIGH/MEDIUM/LOW findings ## Scope Server-side Sprint 1 P0-1/P0-5 only. Desktop security is delivered separately.