feat(wake): W7 A10 idempotent installer + mosaic-wake.service (component-manifest, Gate-A, blank-reset retire, snapshot-guard, fail-closed install-validate) #911

Merged
Mos merged 4 commits from feat/wake-w7-installer into main 2026-07-26 04:19:10 +00:00
Showing only changes of commit fe923a5977 - Show all commits

View File

@@ -296,6 +296,9 @@ echo "== B11: staleness from monitor ingested_ts -> a far-future emit_ts STILL g
) && ok
echo "== B12: HMAC-verify at record -> a spoofed (bad-sig) beacon is REJECTED =="
if ! command -v openssl >/dev/null 2>&1; then
echo "SKIP: openssl not available" >&2
else
(
H="$(fresh_home b12)"
export WAKE_STATE_HOME="$H"
@@ -330,6 +333,7 @@ echo "== B12: HMAC-verify at record -> a spoofed (bad-sig) beacon is REJECTED ==
grep -qF "test-beacon-hmac-key-do-not-echo" "$BEACON" && fail_msg "B12: beacon.sh must NOT inline the HMAC key"
true
) && ok
fi
echo
if [ -s "$FAILFILE" ]; then