External installer checksum authorization 7f6554f9a074

External installer checksum authorization

This monitor observed installer bytes outside the exact trusted owner boundary.

• Authorization digest: 7f6554f9a074a8faec5e83fe52a01c6f361353e80cfdd183e94afc91eaeec4fa
• Authorization status: required
• Pinned base: 08d53451632985754a20e02991cbe8907ad60fdd
• Verification report SHA256: 85e176271b031b236334d93733c7d9d0d84ca6c193a2f76e39db68d262f3c430

First-observation evidence

• atuin
  • URL: https://github.com/atuinsh/atuin/releases/latest/download/atuin-installer.sh
  • expected: e632c6d1dc71e75c9710caf5f645c11131f0d94c859ed6b4266444e11240abdb
  • observed: 69c7c0e057084ede4536de25f856c037f4649dcf8f29cc98a64ac52340320a99
• opencode
  • URL: https://opencode.ai/install
  • expected: fc3c1b2123f49b6df545a7622e5127d21cd794b15134fc3b66e1ca49f7fb297e
  • observed: a2dd59522b9a091b6cdb2e4870c0f2135f7da09807cd5a7e04222d4316925b72
• uv
  • URL: https://astral.sh/uv/install.sh
  • expected: 7c482d409673a53f4d9bd34ae95c9166be3b8d89ca82f27dd7bca3cab457afff
  • observed: 320a286374f5306c4f8c807bd6a7d504dc318841457cf8f2194bee37fe02a2bd

Human authorization

After reviewing the upstream bytes, place exactly this line in /home/ubuntu/.local/state/acfs-monitor/authorized-checksum-change as an owner-only, non-symlink file:

authorize:7f6554f9a074a8faec5e83fe52a01c6f361353e80cfdd183e94afc91eaeec4fa