External installer checksum authorization 8d0536f6bde3

External installer checksum authorization

This monitor observed installer bytes outside the exact trusted owner boundary.

• Authorization digest: 8d0536f6bde36a872c3519b4be9135a4f696009aa62b383b386eda91b36af06f
• Authorization status: required
• Pinned base: 08d53451632985754a20e02991cbe8907ad60fdd
• Verification report SHA256: e950c4044e52d3db350fdd924f029e7c8098e6a341e255950bda3d88aff004a0

First-observation evidence

• atuin
  • URL: https://github.com/atuinsh/atuin/releases/latest/download/atuin-installer.sh
  • expected: e632c6d1dc71e75c9710caf5f645c11131f0d94c859ed6b4266444e11240abdb
  • observed: 69c7c0e057084ede4536de25f856c037f4649dcf8f29cc98a64ac52340320a99
• opencode
  • URL: https://opencode.ai/install
  • expected: fc3c1b2123f49b6df545a7622e5127d21cd794b15134fc3b66e1ca49f7fb297e
  • observed: a2dd59522b9a091b6cdb2e4870c0f2135f7da09807cd5a7e04222d4316925b72
• uv
  • URL: https://astral.sh/uv/install.sh
  • expected: 7c482d409673a53f4d9bd34ae95c9166be3b8d89ca82f27dd7bca3cab457afff
  • observed: df92f96af079cd8be240fffd2c7f5beb43922d8644e256fd018c5b1882c99ff9

Human authorization

After reviewing the upstream bytes, place exactly this line in /home/ubuntu/.local/state/acfs-monitor/authorized-checksum-change as an owner-only, non-symlink file:

authorize:8d0536f6bde36a872c3519b4be9135a4f696009aa62b383b386eda91b36af06f