feat(wake): W7 A10 idempotent installer + mosaic-wake.service (component-manifest, Gate-A, blank-reset retire, snapshot-guard, fail-closed install-validate) #911
@@ -296,6 +296,9 @@ echo "== B11: staleness from monitor ingested_ts -> a far-future emit_ts STILL g
|
||||
) && ok
|
||||
|
||||
echo "== B12: HMAC-verify at record -> a spoofed (bad-sig) beacon is REJECTED =="
|
||||
if ! command -v openssl >/dev/null 2>&1; then
|
||||
echo "SKIP: openssl not available" >&2
|
||||
else
|
||||
(
|
||||
H="$(fresh_home b12)"
|
||||
export WAKE_STATE_HOME="$H"
|
||||
@@ -330,6 +333,7 @@ echo "== B12: HMAC-verify at record -> a spoofed (bad-sig) beacon is REJECTED ==
|
||||
grep -qF "test-beacon-hmac-key-do-not-echo" "$BEACON" && fail_msg "B12: beacon.sh must NOT inline the HMAC key"
|
||||
true
|
||||
) && ok
|
||||
fi
|
||||
|
||||
echo
|
||||
if [ -s "$FAILFILE" ]; then
|
||||
|
||||
Reference in New Issue
Block a user