wt
2af4f143d8
Changes: Add a bounded reproducible HTTPS/checksum/runtime probe under environment-access, vendor checksums, unchanged parent manifest/lock copies, strict npm settings, result and reproduction notes. Record evidence and QA handoff; submit S00-026 without completing parent tasks. Validation: Run verify.py twice successfully: vendor Linux archive SHA256 matched, Node 24.21.0/npm 11.19.0 executed, fresh-cache npm ci installed eight integrity-locked packages with scripts disabled, parent bytes stayed unchanged and Stanza import passed. tasks.py validate, git diff --check and scoped file whitespace checks passed. No browser/WSS, detached signature or provenance audit performed. Task: S00-026 Agent: auto-ci-cd-4255c34da227 Role: ci-cd Action: claim Status: review Task title: Provide approved access to the pinned Linux experiment artifacts
21 lines
798 B
JSON
21 lines
798 B
JSON
{
|
|
"platform": "Linux x86_64",
|
|
"origin": "https://nodejs.org/dist/v24.21.0/",
|
|
"archive": "node-v24.21.0-linux-x64.tar.xz",
|
|
"archive_sha256": "fd8e59d5a511510f6a298afb548f18c7d2b1be404d8b4a27d94fbe49f56cb2d6",
|
|
"versions": {
|
|
"node": "v24.21.0",
|
|
"npm": "11.19.0"
|
|
},
|
|
"runtime_bin": "/tmp/luma-S00-026-gyx_1csp/node-v24.21.0-linux-x64/bin",
|
|
"cache": "/tmp/luma-S00-026-gyx_1csp/npm-cache",
|
|
"parent_sha256": {
|
|
"package.json": "e0ffb0c94e198e26f8e44e9b22ff4e121760d9f1197ed7bd5a90e1b4bb112766",
|
|
"package-lock.json": "9c85ad62721eb2deacb298f29fa2bae211a29c964707d52c2dfbf8614b7dbb05"
|
|
},
|
|
"locked_packages": 8,
|
|
"stanza": "12.22.1",
|
|
"import_check": "Stanza createClient import passed",
|
|
"checksum_method": "Vendor HTTPS SHASUMS256.txt; no detached signature check"
|
|
}
|