WIP: Paused over-hardening fix wave (boot checkout verification, double-read package manifest)

This commit is contained in:
Gabriel Brown
2026-09-17 11:43:30 -04:00
parent 28e387868f
commit 442eec19fa
15 changed files with 2553 additions and 326 deletions
@@ -187,6 +187,18 @@ case "${1:-}" in
*) exit 97 ;;
esac
;;
ls-tree)
[[ "$#" -eq 6 && "$4" == -rz && "$5" == --full-tree \
&& "$6" == "$PANAMA_BOOT_REVISION" ]] || exit 97
object_id="$(/usr/bin/git hash-object --no-filters -- \
"$PANAMA_BOOT_FIXTURE_ROOT/stub-install")" || exit 97
printf '100755 blob %s\tinstall\0' "$object_id"
;;
hash-object)
[[ "$#" -eq 6 && "$4" == --no-filters && "$5" == -- \
&& "$6" == install ]] || exit 97
/usr/bin/git hash-object --no-filters -- "$2/$6"
;;
*) exit 97 ;;
esac
;;