feat(wake): W7 A10 idempotent installer + mosaic-wake.service (component-manifest, Gate-A, blank-reset retire, snapshot-guard, fail-closed install-validate) #911

Merged
Mos merged 4 commits from feat/wake-w7-installer into main 2026-07-26 04:19:10 +00:00
Showing only changes of commit a1bb73cab0 - Show all commits

View File

@@ -219,6 +219,9 @@ echo "== I7: ingested_ts staleness — a far-future emit_ts still goes stale (re
) && ok
echo "== I8: beacon HMAC-verify at record — a spoofed (bad-sig) beacon is REJECTED =="
if ! command -v openssl >/dev/null 2>&1; then
echo "SKIP: openssl not available" >&2
else
(
H="$(fresh i8)"
export WAKE_STATE_HOME="$H"
@@ -236,6 +239,7 @@ echo "== I8: beacon HMAC-verify at record — a spoofed (bad-sig) beacon is REJE
[ "$rc" -ne 0 ] || fail_msg "I8: a spoofed beacon must be REJECTED at record (rc=$rc) [$out]"
[ ! -s "$WAKE_BEACON_RECEIVED" ] || fail_msg "I8: a rejected spoof must NOT advance the dead-man clock"
) && ok
fi
echo
if [ -s "$FAILFILE" ]; then