commit 055096853fca95e15d0f813d33a14aca13be3881
parent 73bc3f01f5a8a8d20aeaac9fc31d2283b8ceedd6
Author: triesap <tyson@radroots.org>
Date: Sun, 6 Sep 2026 23:58:44 +0000
fix: bind Step 299 to plan authority
- Derive the gate identifier from the exact planned gate definition.
- Update the command authority to the corrected check identity.
- Rebind the verifier digest after the forward correction.
- Preserve the already-green Nix and helper verification scope.
Diffstat:
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/contracts/rshr-202-step-299-gates.v1.json b/contracts/rshr-202-step-299-gates.v1.json
@@ -1 +1 @@
-{"gate_command_contract":[{"argv_template":["cargo","extbuild","run","--","cargo","run","--offline","--locked","-q","-p","xtask","--","rshr-step-299-gate","--step={step}","--check-id={check_id}","--source-revision={source_revision}","--source-tree={source_tree}","--candidate-digest={candidate_digest}","--platform=macos_aarch64","--execution-request-sha256={execution_request_sha256}"],"assertion_id":["step_299_gate_01_aaf288b5bf9102722f61bd8160188dc80bf84a62f48ddaef9023a4417654d8ba"],"check_id":"gate-01-aaf288b5bf9102722f61bd8160188dc80bf84a62f48ddaef9023a4417654d8ba","environment_authority":{"cache_policy_id":"rshr-200-step-287-cache-policy.v1","cache_policy_sha256":"3e81d178bce97b6c349dfbb00c68fd6f620ac00b1a1c8d37b12e9998f3c9eaaa","cadence_policy_id":"rshr-200-step-287-cadence-policy.v1","cadence_policy_sha256":"d24903df8659ee3772297c84994911efe7d21cb8b988320ddc6ddce0431892a1","isolation":"extbuild_host_constrained","network":"disabled","network_policy_id":"none","network_policy_sha256":"none","resource_policy_id":"rshr-200-step-287-resource-policy.v1","resource_policy_sha256":"05d3c7a89185d3c55678d97955193fce2ed92b1eee5af99083d77ea64c98d14e"},"environment_names":["EXT_BUILD_CONFIG","EXT_BUILD_MACHINE_CONFIG","EXT_BUILD_ROOT","HOME","PATH","RUSTUP_TOOLCHAIN","TMPDIR"],"gate_definition_sha256":"aaf288b5bf9102722f61bd8160188dc80bf84a62f48ddaef9023a4417654d8ba","required_platforms":["macos_aarch64"],"required_tools":["rustc"],"result_schema":"radroots.services-hardening.rshr-200-step-check-result.v1","schema":"radroots.services-hardening.rshr-200-step-check-command.v1","step":299,"verifier_path":"tools/xtask/src/rshr_202_step_299_gate.rs","verifier_sha256":"106164ac8f32512ab9ea288c49e7ae5dc2bd08d97bcfb05a22fc8b0b4774b7d1"}],"schema":"radroots.lib.rshr-202-step-299-gates.v1","step":[299]}
+{"gate_command_contract":[{"argv_template":["cargo","extbuild","run","--","cargo","run","--offline","--locked","-q","-p","xtask","--","rshr-step-299-gate","--step={step}","--check-id={check_id}","--source-revision={source_revision}","--source-tree={source_tree}","--candidate-digest={candidate_digest}","--platform=macos_aarch64","--execution-request-sha256={execution_request_sha256}"],"assertion_id":["step_299_gate_01_b76f61a9a5365ca088d4b00eb140ed30b0b51f418cba68e26e3f3cf1c0ff3a15"],"check_id":"gate-01-b76f61a9a5365ca088d4b00eb140ed30b0b51f418cba68e26e3f3cf1c0ff3a15","environment_authority":{"cache_policy_id":"rshr-200-step-287-cache-policy.v1","cache_policy_sha256":"3e81d178bce97b6c349dfbb00c68fd6f620ac00b1a1c8d37b12e9998f3c9eaaa","cadence_policy_id":"rshr-200-step-287-cadence-policy.v1","cadence_policy_sha256":"d24903df8659ee3772297c84994911efe7d21cb8b988320ddc6ddce0431892a1","isolation":"extbuild_host_constrained","network":"disabled","network_policy_id":"none","network_policy_sha256":"none","resource_policy_id":"rshr-200-step-287-resource-policy.v1","resource_policy_sha256":"05d3c7a89185d3c55678d97955193fce2ed92b1eee5af99083d77ea64c98d14e"},"environment_names":["EXT_BUILD_CONFIG","EXT_BUILD_MACHINE_CONFIG","EXT_BUILD_ROOT","HOME","PATH","RUSTUP_TOOLCHAIN","TMPDIR"],"gate_definition_sha256":"b76f61a9a5365ca088d4b00eb140ed30b0b51f418cba68e26e3f3cf1c0ff3a15","required_platforms":["macos_aarch64"],"required_tools":["rustc"],"result_schema":"radroots.services-hardening.rshr-200-step-check-result.v1","schema":"radroots.services-hardening.rshr-200-step-check-command.v1","step":299,"verifier_path":"tools/xtask/src/rshr_202_step_299_gate.rs","verifier_sha256":"4a1a667efe44b00e72d33a11f6249d3f74619a48c0e2b027df2823f61219f9b7"}],"schema":"radroots.lib.rshr-202-step-299-gates.v1","step":[299]}
diff --git a/tools/xtask/src/rshr_202_step_299_gate.rs b/tools/xtask/src/rshr_202_step_299_gate.rs
@@ -7,7 +7,7 @@ use serde_json::{Value, json};
use sha2::{Digest, Sha256};
const STEP: u16 = 299;
-const GATE_DIGEST: &str = "aaf288b5bf9102722f61bd8160188dc80bf84a62f48ddaef9023a4417654d8ba";
+const GATE_DIGEST: &str = "b76f61a9a5365ca088d4b00eb140ed30b0b51f418cba68e26e3f3cf1c0ff3a15";
const NIX_SHA256: &str = "a59ab70f97f6d571642d13c7506aafec0a4275520d53daee2d8451be7c495cd1";
const NIX_VERSION_SHA256: &str = "6db806391ffaea4cdb08ade0031feac399c0cd08474b3bfde8cb33f88a36c8e1";
const MAX_OUTPUT_BYTES: usize = 32 * 1024 * 1024;
