From fd967e37e6532dbfdffaf4fc7c9d2e24694d343f Mon Sep 17 00:00:00 2001 From: Krzysztof kuhy Rudnicki Date: Sun, 23 Aug 2026 20:14:00 +0200 Subject: [PATCH] Prettier-format INSTALLER_FIX_TASK.md It was untracked until this rename, so the pre-push prettier hook had never seen it. Table separators and one blockquote marker; no prose changes. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01PJrqKERAo5QUeEHWS5Asgp --- INSTALLER_FIX_TASK.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/INSTALLER_FIX_TASK.md b/INSTALLER_FIX_TASK.md index 79498349..6fa98cf9 100644 --- a/INSTALLER_FIX_TASK.md +++ b/INSTALLER_FIX_TASK.md @@ -17,12 +17,12 @@ correct on 2026-08-22; the repo moves. The sandbox progression, measured with the repo's own hardening checks: -| State | Result | -|---|---| -| Bare guest, nothing installed | 0 passed / 17 skipped | -| After `install_core_system.sh --all` | 10 passed / 14 skipped | -| After manually installing guard-lib + the shutdown timer | 14 passed / 10 skipped | -| After manually running the hosts migration | **18 passed, 6 skipped, 0 failed** | +| State | Result | +| -------------------------------------------------------- | ---------------------------------- | +| Bare guest, nothing installed | 0 passed / 17 skipped | +| After `install_core_system.sh --all` | 10 passed / 14 skipped | +| After manually installing guard-lib + the shutdown timer | 14 passed / 10 skipped | +| After manually running the hosts migration | **18 passed, 6 skipped, 0 failed** | The remaining 6 skips are legitimately screen_locker's. The gap between row 2 and row 4 is entirely defects 2 and 3 below: everything needed to reach a green @@ -64,7 +64,7 @@ claims otherwise: > Enforcement does not depend on these sources being immutable: /etc/hosts > itself is chattr +i, guard-lib's "hosts" file-guard instance (`guardctl -> file-guard status hosts`) watches and re-enforces it against its canonical +file-guard status hosts`) watches and re-enforces it against its canonical > snapshot, and the same instance's bind mount pins it. That is only true after running