XFESystem

{
  "architecture": "i686",
  "status": "PASS",
  "checks": [
    "UEFI, isolated user shell and first-boot authentication",
    "DHCP lease",
    "read-only offline application transport and import",
    "file CRUD, pipes and redirection",
    "out-of-memory rollback, zero-filled recovery and fresh process creation",
    "ELF execution, invalid pointers and process fault isolation",
    "timer preemption, background jobs and foreground-only Ctrl-C",
    "DNS, HTTP streaming/framing, redirects and partial download preservation",
    "DNS packet-loss retry, redirect limit and stalled-body timeout",
    "text browser and relative links",
    "real guest TLS chain/intermediate and hostname/CA/expiry rejection",
    "application import and architecture validation",
    "clean shutdown and block FLUSH",
    "disk and accounts survive a full reboot",
    "logout/login supervisor and UID/file/power permissions",
    "guest HTTPS refuses unavailable trusted time",
    "guest HTTPS refuses absent secure random device",
    "TCP retransmission under delayed packets (4 repeated SYNs captured)",
    "dirty media read-only, corrupt media rejected, no disk modification",
    "real guest disk/inode exhaustion preserves files and recovers after removal",
    "corrupt accounts refuse login without default credentials"
  ],
  "version": "0.2.0-dev.4",
  "validation_phase": "Before the final requested default-blue, scroll performance and pointer theme changes; build identities below preserve the exact validated source.",
  "evidence_directory": "build/acceptance/i686-1791932183130817600",
  "build_info": {
    "schema": 1,
    "version": "0.2.0-dev.4",
    "architecture": "i686",
    "system_sha256": "7f9db056bd0faa99ab2e3dd0e9c4a155a499874fbcf81eaa806c4dbc6d4e220b",
    "kernel_sha256": "07efe46e4dc57a668f5600c0f44e18c575799f522e128ad8d3f93a4c32e6d8a1",
    "rootfs_sha256": "fda17da29041a57bfc685066ed6a6e61d72081fd9f4a2bfacafac1e72af35add",
    "bootshim_sha256": "c1e9fbe65f8479730efcc07ceb310d98574ecb85f8ce4e3e7e09e35cf8d16d39"
  },
  "build_info_sha256": "f180f3e1fff86c652ecc8bb62a3808fe796de1738419f1810cc7ec0c7987f5a3",
  "kernel_sha256": "07efe46e4dc57a668f5600c0f44e18c575799f522e128ad8d3f93a4c32e6d8a1",
  "production_system_sha256": "7f9db056bd0faa99ab2e3dd0e9c4a155a499874fbcf81eaa806c4dbc6d4e220b",
  "production_rootfs_sha256": "fda17da29041a57bfc685066ed6a6e61d72081fd9f4a2bfacafac1e72af35add",
  "bootshim_sha256": "c1e9fbe65f8479730efcc07ceb310d98574ecb85f8ce4e3e7e09e35cf8d16d39",
  "test_system_image_sha256": "b360e180e8a912e8e95802167f0ec248828fd096947de52892fb0c361443a9be",
  "test_rootfs_sha256": "cbd94f17e1c900f09733e44dced518cd2ca629a702618780530659f2b0f4ee6d",
  "embedded_files_verified_from_fat": {
    "boot/xfe-kernel": {
      "sha256": "07efe46e4dc57a668f5600c0f44e18c575799f522e128ad8d3f93a4c32e6d8a1",
      "bytes": 13408968,
      "matches_current_build_info": true
    },
    "boot/rootfs.cpio": {
      "sha256": "cbd94f17e1c900f09733e44dced518cd2ca629a702618780530659f2b0f4ee6d",
      "bytes": 679116,
      "matches_current_build_info": false
    },
    "EFI/BOOT/BOOTIA32.EFI": {
      "sha256": "c1e9fbe65f8479730efcc07ceb310d98574ecb85f8ce4e3e7e09e35cf8d16d39",
      "bytes": 15872,
      "matches_current_build_info": true
    }
  },
  "rootfs_comparison": {
    "format": "CPIO newc (070701)",
    "path_count": 18,
    "changed_payload_paths": [
      "usr/share/xfesystem/cert.pem"
    ],
    "added_paths": [],
    "removed_paths": [],
    "all_modes_uid_gid_identical": true,
    "unchanged_payload_and_mode_entries": 17,
    "only_fixture_ca_appended_to_cert_pem": true,
    "fixture_ca_sha256": "c98032a62540ec37f5238d57b8e7976c3c06741bedda86c9b1aa26de13495fdc"
  },
  "rootfs_comparison_evidence": "build/acceptance/i686-1791932183130817600/rootfs-verification.json",
  "source_hash_verification": "Actual test GPT/FAT32 kernel and EFI shim match current final architecture build-info.json. The test newc rootfs has exactly the production path set and identical modes/UIDs/GIDs; all payloads are identical except cert.pem, which is the production bundle plus only the fixture CA. No certificate or private key material is copied into this receipt.",
  "physical_hardware_tested": false
}