feat(security): Queue B signed delivery — DI updater, 10 desktop + 5 bootstrap tests #35

Merged

ochenstarik-ui merged 6 commits from antigravity/signed-delivery-queue-b into main

2026-08-10 17:52:11 +00:00

Author	SHA1	Message	Date
ochenstarik-ui	b314b4eb03	fix(tests): preserve SMM_ALLOW_UNSIGNED over sudo in native smoke tests	2026-08-10 23:12:59 +07:00
ochenstarik-ui	ff24aceaa3	fix(tests): Support hardened verify_archive in smoke and contract tests - test-bootstrap-contract: Generate signed manifest.json with cosign test key - systemd smoke tests: Pass SMM_ALLOW_UNSIGNED=1 fallback when manifest is missing (for CI PR runs)	2026-08-10 23:08:57 +07:00
ochenstarik-ui	d21c0c5d22	fix(security): Add version mismatch check, MSIX cleanup on hash failure, TraceSource diagnostics, csproj fix - UpdateService: manifest version must match release tag_name (prevents cross-version attacks) - UpdateService: corrupted MSIX deleted immediately on hash mismatch - UpdateService: TraceSource logging for all verification steps - UpdateService: Trust anchor constants with docs/release-policy.md reference - Bootstrap: docs/release-policy.md reference next to identity constants - Test csproj: add UpdateService.cs Compile Include (tests won't compile without this)	2026-08-10 20:12:18 +07:00
ochenstarik-ui	ad396fd6a2	fix(tests): Fix Test4 broken JSON, Test2 false positive, add cleanup trap and Test9/Test10	2026-08-10 20:07:49 +07:00
ochenstarik-ui	4f583c9a03	feat(security): Finalize Queue B signed delivery requirements	2026-08-10 19:58:58 +07:00
ochenstarik-ui	ef137bcf7a	fix(bootstrap): verify compatible component versions during updates - Fixed archive hash extraction from manifest using archive basename - Added version compatibility checks for Control/Agent/helper in update_role - Expanded UpdateService tests to 4 unit tests - Verified against alpha.8 manifest	2026-08-10 18:12:22 +07:00