External installer checksum authorization 7fc3803fe42c

External installer checksum authorization

This monitor observed installer bytes outside the exact trusted owner boundary.

• Authorization digest: 7fc3803fe42c2d772072b60259fbda90b0baa665460076a999f13796b045ae92
• Authorization status: required
• Pinned base: 897395ed024b17cecdb820a077796506def30ef5
• Verification report SHA256: 5bd09925108736d97e3ed82a39f3dfc0c60320362e8cdcb69cf1a696fbd215ec

First-observation evidence

• atuin
  • URL: https://github.com/atuinsh/atuin/releases/latest/download/atuin-installer.sh
  • expected: 69c7c0e057084ede4536de25f856c037f4649dcf8f29cc98a64ac52340320a99
  • observed: 682117ada10ef0886fa4974f1afcf5fb396ce466c45acaffbf075eeb06f6dc25
• uv
  • URL: https://astral.sh/uv/install.sh
  • expected: 1f5390d273b0158bd5eaa3527ae049f3667baa881abb1e7c883dd637d84432f9
  • observed: f7a56e7afaec49a3bcbc3ac3cdbe917e7c6ce30e0d815308a12e531aa5ef23b7

Human authorization

After reviewing the upstream bytes, place exactly this line in ~/.local/state/acfs-monitor/authorized-checksum-change as an owner-only, non-symlink file:

authorize:7fc3803fe42c2d772072b60259fbda90b0baa665460076a999f13796b045ae92