docs(installer): correct sidecar verification command

2026-08-06 01:38:23 -05:00
parent 4c4d16131a
commit 0e2eef1c12
2 changed files with 2 additions and 2 deletions
@@ -30,4 +30,4 @@ The stale sidecar value was replaced with the exact `sha256sum` record for `tool
 e59cb441a2f37ae9150f8eae470238e9d858a1816df93343d9784a6796676096  install.sh
 ```

-Local `sha256sum -c tools/install.sh.sha256` and the workflow's exact expected/actual equality both pass. The immutable provider-fetch arm at the new `${CI_COMMIT_SHA}` is recorded in the freeze artifact after push; local equality alone is not treated as sufficient evidence.
+RED-first documentation control from the repository root: `sha256sum -c tools/install.sh.sha256` exits 1 with `install.sh: FAILED open or read` because the sidecar records a path relative to `tools/`. The command actually executed, `(cd tools && sha256sum -c install.sh.sha256)`, exits 0 with `install.sh: OK`; the workflow's separate exact expected/actual equality also passes. The immutable provider-fetch arm at the new `${CI_COMMIT_SHA}` is recorded in the freeze artifact after push; local equality alone is not treated as sufficient evidence.