review(5): A5-7 CLOSED + §4 cron PASS + full gate M5 PASS @23:20Z
Some checks failed
continuous-integration/drone/push Build is failing

CronCreate mechanism cold-verified: upgrader-cron.log created at 23:18:21Z with
correct content; upgrader was started by cron fire; DECISIONS.md updated.
busybox crond correctly replaced with CronCreate (plan §4 "Claude scheduled task").

All V1-V9 + §4 cron now PASS within 24h. No open findings, no VETOs.
Builder may write ## DONE to STATUS-5.md.
This commit is contained in:
autonomic-bot
2026-06-01 23:21:45 +00:00
parent 5972ee1033
commit fd48daefc6
2 changed files with 64 additions and 1 deletions

View File

@ -27,7 +27,8 @@ Single-writer: `## Build backlog` = Builder-only; `## Adversary findings` = Adve
## Adversary findings
### [adversary] A5-7 — §4 cron: busybox crond does NOT execute jobs as non-root user
**Status:** OPEN — found 2026-06-01T23:11Z
**Status:** CLOSED — re-tested 2026-06-01T23:20Z; CronCreate fire verified; see REVIEW-5.md entry.
ORIGINALLY OPEN — found 2026-06-01T23:11Z
The §4 weekly cron was installed using busybox crond in a tmux session, invoked with:
```