{ "title": "Restore access to the pinned Linux XMPP experiment toolchain", "reason": "S00-003 cannot reproduce accepted Node 24.21.0/npm 11.19.0 or install locked Stanza: host tools are 24.1.0/11.3.0, parent node_modules is absent, and normal official HTTPS retrieval fails with unresolved configured proxy.", "reproduction": "node --version => v24.1.0; npm --version => 11.3.0; parent node_modules/stanza absent; curl official v24.21.0 SHASUMS256.txt => exit 5 Could not resolve proxy. Details: state/evidence/S00-003-auto-protocol-59f4d359b339.md", "role": "ci-cd", "reviewer_role": "qa", "scope": [ "experiments/0002-xmpp-library/environment-access/**" ], "outcome": "One independently reviewed environment-access probe demonstrates authentic pinned Linux Node/npm and integrity-verified installation of the parent locked dependency graph without changing accepted stack or network security policy.", "steps": [ "Read S00-003 blocker evidence and accepted stack pins.", "Obtain external approved HTTPS connectivity or authentic locally supplied pinned Linux runtime and locked dependency artifacts.", "Verify vendor checksum for runtime, exact node/npm versions, and lock integrity with a script confined to the remediation directory; install a copy of the parent manifest/lock only inside that directory.", "Document reproducible approved artifact paths or connectivity and actual results; submit for independent review." ], "acceptance": [ "Node 24.21.0 and npm 11.19.0 execute on this Linux host with authenticated vendor checksum verification recorded.", "Copied unchanged parent package-lock installs successfully with package integrity enforced and Stanza 12.22.1 available.", "No stack/lock/spec changes, engine or TLS bypass, proxy policy bypass or secrets in evidence." ], "checks": [ "Exact runtime version and official checksum comparison.", "Isolated npm ci of unchanged parent manifest/lock with lifecycle scripts disabled and TLS verification retained.", "Independent review repeats access/runtime/lock checks." ], "depends_on": [], "requires_user_input": true }