luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add audited response apply rehearsal

Browse source
This commit is contained in:
Luna 2026-07-09 05:56:25 -07:00
parent 51d52b5229
commit 0b010df514
No known key found for this signature in database
11 changed files with 198 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

9
docs/ROADMAP.md
View file

@ -71,8 +71,13 @@ Purpose: move from "tell me" to "help me act" without unsafe automation.
identify the owning package, verify signed package-cache metadata, reinstall
from trusted package media, re-run integrity checks, and re-anchor FIM only
after operator review. Debian/RPM support remains future work.
- Require explicit `--apply` for changes; default to read-only plans.
- Extend response audit logs to any future state-changing `--apply` workflow.
- ✅ Add an explicit apply boundary: `respond apply <plan-ref> --dry-run`
reloads a saved reviewed plan, prints the exact actions, and appends a
`response_apply_rehearsed` audit record without executing commands.
- Require a future explicit execution flag for state changes; default to
read-only plans and audited apply rehearsals.
- ✅ Extend response audit logs to the apply boundary with `executed: false`
records. Future state-changing execution must append the same audit trail.
- ✅ Add baseline reconciliation: accept legitimate FIM/package/listener/SUID
drift with a mandatory reason via `baseline accept/revoke/list`. Acks are
fingerprint-bound (content kinds re-alert on further change), support an