External installer checksum authorization 45899e4c76eb

External installer checksum authorization

This monitor observed installer bytes outside the exact trusted owner boundary.

• Authorization digest: 45899e4c76ebedce59a39d664d552579b3ec3a8437b7d50a473bbfab6406ad6b
• Authorization status: required
• Pinned base: e356421c4f6443a99b63c975089d9a66bd070b81
• Verification report SHA256: 93c50fbb0631a06f4416befbdd6cc6365ac6bdd9a3545fb8d05f2155faa1585e

First-observation evidence

• atuin
  • URL: https://github.com/atuinsh/atuin/releases/latest/download/atuin-installer.sh
  • expected: e632c6d1dc71e75c9710caf5f645c11131f0d94c859ed6b4266444e11240abdb
  • observed: 69c7c0e057084ede4536de25f856c037f4649dcf8f29cc98a64ac52340320a99
• opencode
  • URL: https://opencode.ai/install
  • expected: fc3c1b2123f49b6df545a7622e5127d21cd794b15134fc3b66e1ca49f7fb297e
  • observed: a2dd59522b9a091b6cdb2e4870c0f2135f7da09807cd5a7e04222d4316925b72
• uv
  • URL: https://astral.sh/uv/install.sh
  • expected: 7c482d409673a53f4d9bd34ae95c9166be3b8d89ca82f27dd7bca3cab457afff
  • observed: 1f5390d273b0158bd5eaa3527ae049f3667baa881abb1e7c883dd637d84432f9

Human authorization

After reviewing the upstream bytes, place exactly this line in /home/ubuntu/.local/state/acfs-monitor/authorized-checksum-change as an owner-only, non-symlink file:

authorize:45899e4c76ebedce59a39d664d552579b3ec3a8437b7d50a473bbfab6406ad6b