External installer checksum authorization cac8b3f90f44

External installer checksum authorization

This monitor observed installer bytes outside the exact trusted owner boundary.

• Authorization digest: cac8b3f90f449d767f7e0adab4aab3407ab5f2f6654ca45be4798b0d5d2a9d33
• Authorization status: required
• Pinned base: 03e85a323567f14165f125d635b9995b106a6d24
• Verification report SHA256: 5420c5827c9cfbc00fb8be154d4ad9e2a7698b91253a132931c4efd68e3df7f5

First-observation evidence

• atuin
  • URL: https://github.com/atuinsh/atuin/releases/latest/download/atuin-installer.sh
  • expected: e632c6d1dc71e75c9710caf5f645c11131f0d94c859ed6b4266444e11240abdb
  • observed: a8bd40dc786dbed74e63bcb9c2571314c619491d0bcbc8735dba5c77a076cdb2
• opencode
  • URL: https://opencode.ai/install
  • expected: fc3c1b2123f49b6df545a7622e5127d21cd794b15134fc3b66e1ca49f7fb297e
  • observed: a2dd59522b9a091b6cdb2e4870c0f2135f7da09807cd5a7e04222d4316925b72

Human authorization

After reviewing the upstream bytes, place exactly this line in /home/ubuntu/.local/state/acfs-monitor/authorized-checksum-change as an owner-only, non-symlink file:

authorize:cac8b3f90f449d767f7e0adab4aab3407ab5f2f6654ca45be4798b0d5d2a9d33