External installer checksum authorization eddc828d70f4

External installer checksum authorization

This monitor observed installer bytes outside the exact trusted owner boundary.

• Authorization digest: eddc828d70f408c5f7c6dee13e652095f2db1b311221f1cdee4ad2871035dfbe
• Authorization status: authorized
• Pinned base: cc822a2d0e6faa402a72ab71488384ce6bbc9916
• Verification report SHA256: 9cf16ffb06ab59fb7dbb05a8ed6987200992d4d9aa7a0db55d22093b7714acbe

First-observation evidence

• atuin
  • URL: https://github.com/atuinsh/atuin/releases/latest/download/atuin-installer.sh
  • expected: e632c6d1dc71e75c9710caf5f645c11131f0d94c859ed6b4266444e11240abdb
  • observed: 69c7c0e057084ede4536de25f856c037f4649dcf8f29cc98a64ac52340320a99
• opencode
  • URL: https://opencode.ai/install
  • expected: fc3c1b2123f49b6df545a7622e5127d21cd794b15134fc3b66e1ca49f7fb297e
  • observed: a2dd59522b9a091b6cdb2e4870c0f2135f7da09807cd5a7e04222d4316925b72
• rust
  • URL: https://sh.rustup.rs
  • expected: 7d0ea0f8eba7fa1ebfe998091cd7ec4501e33ec5ca6b884eb4d894d7da5170af
  • observed: 9502b514362a21096210d498f143b8cdacda365d3dfcf45e8f5541e089ccafc0
• uv
  • URL: https://astral.sh/uv/install.sh
  • expected: 7c482d409673a53f4d9bd34ae95c9166be3b8d89ca82f27dd7bca3cab457afff
  • observed: 1f5390d273b0158bd5eaa3527ae049f3667baa881abb1e7c883dd637d84432f9

Human authorization

After reviewing the upstream bytes, place exactly this line in /home/ubuntu/.local/state/acfs-monitor/authorized-checksum-change as an owner-only, non-symlink file:

authorize:eddc828d70f408c5f7c6dee13e652095f2db1b311221f1cdee4ad2871035dfbe