External installer checksum authorization d7643f38a766

External installer checksum authorization

This monitor observed installer bytes outside the exact trusted owner boundary.

• Authorization digest: d7643f38a766a806f15fb0fb97a17621adf8fcb25b0e911b66eb5f1501a9b4b9
• Authorization status: required
• Pinned base: b1f6db2d7688398a7293ffb15bcee6a5a68fb66e
• Verification report SHA256: 4ed6b6982f438e02b838ff485656a037a930812c6bc2e60bfd69fd4d649c6dc7

First-observation evidence

• atuin
  • URL: https://github.com/atuinsh/atuin/releases/latest/download/atuin-installer.sh
  • expected: 69c7c0e057084ede4536de25f856c037f4649dcf8f29cc98a64ac52340320a99
  • observed: 682117ada10ef0886fa4974f1afcf5fb396ce466c45acaffbf075eeb06f6dc25
• uv
  • URL: https://astral.sh/uv/install.sh
  • expected: 1f5390d273b0158bd5eaa3527ae049f3667baa881abb1e7c883dd637d84432f9
  • observed: 1c6e7f025499664633ac2dce43a210800510e9ef0625c52e034a8afdf8bf177a

Human authorization

After reviewing the upstream bytes, place exactly this line in /home/ubuntu/.local/state/acfs-monitor/authorized-checksum-change as an owner-only, non-symlink file:

authorize:d7643f38a766a806f15fb0fb97a17621adf8fcb25b0e911b66eb5f1501a9b4b9