Kaoru0822andClaude Opus 5.5 7857d2d329 fix(artifacts): apply the integrity policy to xar checksums and bound symlinks ...

- Inventory scans now verify xar extracted checksums themselves, under the
  caller's integrity policy. Under "fail" a mismatch still fails, now as
  artifact_integrity_mismatch with the logical path. Under
  "record-and-continue" the member stays in the graph as mismatched, with
  the declared and observed values, and is not expanded. A declared SHA-256
  becomes an integrity contradiction. Extraction keeps verifying in the reader.
- Read cpio symlink targets only up to 4096 bytes; longer declared targets
  are streamed past and recorded with a limitation instead of buffered.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-07 12:50:52 +00:00

..

managed-conformance-ledger.json

refactor!: simplify runtime tools and remove replay engines (#572)

2026-10-05 21:15:04 +08:00

managed-conformance-manifest.json

fix(artifacts): apply the integrity policy to xar checksums and bound symlinks

2026-10-07 12:50:52 +00:00