mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-07-10 00:14:38 +00:00
0c91799e0f
Checksum and SSHSIG verification prove the downloaded artifact matches what was published, not that it can run on this host or is the version the user approved. The apply pipeline previously swapped the binary and exited, relying on systemd to restart into an unproven executable; a wrong-arch fallback asset or unstamped build would take Pulse down with the backup left unused. ApplyUpdate now locates the extracted binary and probes it with --version before the backup and swap stages, failing the update with zero changes applied when the probe fails or reports a version other than the apply target. Same pattern the agent updater already uses. Pinned in the deployment-installability contract with internal/updates/selftest_test.go as the owned proof surface. |
||
|---|---|---|
| .. | ||
| records | ||
| subsystems | ||
| CANONICAL_DEVELOPMENT_PROTOCOL.md | ||
| COMMERCIAL_CANCELLATION_REACTIVATION_E2E_TEST_PLAN.md | ||
| COMMERCIAL_CANCELLATION_REACTIVATION_RECORD_TEMPLATE.md | ||
| CUSTOMER_ACCOUNT_PORTAL_SPEC.md | ||
| HIGH_RISK_RELEASE_VERIFICATION_MATRIX.md | ||
| IDENTITY_INVARIANTS.md | ||
| LEGACY_HOST_CLASSIFICATION_2026-03-05.md | ||
| PLATFORM_SUPPORT_MANIFEST.json | ||
| PLATFORM_SUPPORT_MODEL.md | ||
| PRE_RELEASE_CHECKLIST.md | ||
| PULSE_ACCOUNT_PORTAL_SPEC.md | ||
| RC_TO_GA_REHEARSAL_TEMPLATE.md | ||
| RELEASE_PROMOTION_POLICY.md | ||
| SOURCE_OF_TRUTH.md | ||
| status.json | ||
| SUBSYSTEM_CONTRACT_TEMPLATE.md | ||
| UNIFIED_AGENT_PLATFORM_SUPPORT.md | ||
| V5_MAINTENANCE_SUPPORT_POLICY.md | ||
| V5_TO_V6_COMMERCIAL_MIGRATION_AUDIT_2026-03-07.md | ||
| V6_BRIDGE_RELEASE_FOUNDATION_SPEC.md | ||
| VMWARE_VCENTER_PHASE1_ALERTS_AND_ASSISTANT_SPEC.md | ||
| VMWARE_VCENTER_PHASE1_API_RUNTIME_SPEC.md | ||
| VMWARE_VCENTER_PHASE1_ONBOARDING_SPEC.md | ||
| VMWARE_VCENTER_PHASE1_PROOF_MATRIX.md | ||
| VMWARE_VCENTER_PHASE1_PROOF_RECORD_TEMPLATE.md | ||
| VMWARE_VCENTER_PHASE1_RESOURCE_PROJECTION_SPEC.md | ||
| VMWARE_VSPHERE_PHASE1_EXECUTION_PLAN.md | ||