fix: prove installed module bytes during updates - #13

Merged

exploitintel merged 9 commits into

mainfrom

fix/update-path-module-verification

Sep 15, 2026

Commits on Sep 15, 2026

fix: prove installed module bytes during updates
exploitintel
committed
d100809
fix: verify through the bundled busybox and keep module-state markers
exploitintel
committed
ac90ddd
fix: source the engine identity from the tarball pin only
exploitintel
committed
efc8740
fix: state-accurate module verification guidance
exploitintel
committed
42d1f3a
fix: verify module bytes on installation resumes and guard the pin name
exploitintel
committed
de41577
docs: cover installation resumes in the module proof contract
exploitintel
committed
bbdb197
fix: check the derived engine name at its call sites
exploitintel
committed
4727761
fix: fail closed when the engine pin is unreadable, proven by test
exploitintel
committed
d1061e4
fix: prove the prune outcome with a file-count invariant
exploitintel
committed
f75fed9