External installer checksum authorization d567512534e2

External installer checksum authorization

This monitor observed installer bytes outside the exact trusted owner boundary.

• Authorization digest: d567512534e27628be99b3e02b40ac6b4ecd9e5c1e05ae6234f02317924cd8f3
• Authorization status: required
• Pinned base: 9d16dff4516b5ede866dbccbe2b3ce3c69a6b0bd
• Verification report SHA256: b98ac217e2cc44299bb962128bfd9825f44d93dca89cd34edcb180f29f01c7d5

First-observation evidence

• atuin
  • URL: https://github.com/atuinsh/atuin/releases/latest/download/atuin-installer.sh
  • expected: 69c7c0e057084ede4536de25f856c037f4649dcf8f29cc98a64ac52340320a99
  • observed: 4e32fb752978e433fe512bffc83b2d1d1257b72c968180e1c305f4ae5a064c67
• grok
  • URL: https://x.ai/cli/install.sh
  • expected: 7fd6fdc75d9418b2e58356726fcbf1ae849416f773925da07d0ccc7a60d3e791
  • observed: dcc19d498e14f96ab93828251b2848fde94cc2ab0bd6f9cad9baffbf7a229182
• omp
  • URL: https://omp.sh/install.sh
  • expected: cd2ea5553e9ad8f89fe5e04f771ec13db6f33a773f7ba8f85c84b63cdbeb9065
  • observed: cd8f77920da58c6f56b5851c841b61d5e30b4ba8f4cab683afba1f8274b56a06
• uv
  • URL: https://astral.sh/uv/install.sh
  • expected: 1f5390d273b0158bd5eaa3527ae049f3667baa881abb1e7c883dd637d84432f9
  • observed: f7a56e7afaec49a3bcbc3ac3cdbe917e7c6ce30e0d815308a12e531aa5ef23b7

Human authorization

After reviewing the upstream bytes, place exactly this line in ~/.local/state/acfs-monitor/authorized-checksum-change as an owner-only, non-symlink file:

authorize:d567512534e27628be99b3e02b40ac6b4ecd9e5c1e05ae6234f02317924cd8f3