Repository navigation
Add exact E5 unsigned account bridge collection recipe - #35
Draft
echo-fleet-builder[bot] wants to merge 5 commits into
Draft
echo-fleet-builder[bot] wants to merge 5 commits into
echo-fleet-builder[bot] wants to merge 5 commits into
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The existing held ACB collector is pinned to an older revision and its 119-assertion contract. This candidate preserves that production-signing path and adds a separate unsigned measurement recipe for ACB PR7 at e5b8c7b7f3fd59c79cd9c436ef14ec40216da119.
The E5 recipe binds actual files to immutable Git blobs, verifies source/branch/origin/version, runs eight fixed suites three times, compares installed bytes before and after, and emits bounded diagnostics and output digests. It measures 195 source/fixture assertions per pass. Optional owner evidence validates custody and structure only. It cannot grant native, live or trust admission; E5 has no signing-key argument and always emits an unsigned NOT_READY report.
Validation: 105 focused collector regressions passed; real QUENCH source collection passed 195/195 assertions in three iterations and measured 30 installed-file differences. P1 fixture acceptance and staged Gitleaks passed. The broad Windows run encountered the existing symlink-creation privilege limit (WinError1314); exact-source Linux CI and independent source review are pending.
This source candidate extends unmerged draft #27 and retains its reviewed history at 0f3c580. This PR targets main through the governed owner-aware draft path; #27 is preserved. No production installation, signing-key access, trust change, live inference or deployment occurs. Actual native/live production acceptance, hosted App receipt/custody, independent recipe admission and genuine Commander acceptance remain required.