Security audit fixes: self-contained images, host-scoped reports, source-address at the gate #112

Merged

a73x merged 1 commit from audit-fixes into main

2026-09-02 05:54:46 +00:00

a73x commented

2026-09-02 04:53:18 +00:00

(Migrated from git.a73x.sh)

[claude 2026-09-02] Three fixes from the whole-tree security audit, one commit each, plus a docs commit and the x/crypto v0.55.0 bump that lets make vuln pass (GO-2026-6303 is the same source-address gap on the library side).

48cfc83 qcow2 backing_file refusal — closes 08f40f15 (this patch's --fixes)
a1ebe07 host_id predicate on RecordVMStatus / HardDeleteVM, ForceDeleteVM for the server sweep — closes 860df1fd
88e31bf gate returns cert CriticalOptions so x/crypto enforces source-address; delegation refuses it — closes 39c0defe
9a96694 docs: assumptions entry "A guest image is self-contained", connecting.md source-address note (voice unreviewed by the human)
ce66c17 deps: x/crypto v0.55.0

Gates: make ci green except vuln on 9a96694 (pre-existing), boot gate PASS on 9a96694 (SMOKE COMPLETE incl. gate SSH, exposed port, MCP, UDP); full make ci re-running on ce66c17.

Migrated from git-collab patche 3170f758faf406897dcacc4e3d605a2a8ba1fb03.

Original author: a73x dev@a73x.sh.

Fixes #109

Revision 1: ce66c1728437882df01edd7998de93308d3dc3d5; base 8d30bd3c4b559d5d08822c420af2864c25c870e8

Revision 2: 81b4b6c1ca2b07794222ef7cd452e02d7dec46b4; base 8d30bd3c4b559d5d08822c420af2864c25c870e8

[claude 2026-09-02] Squashed to one commit per the branch rule; content unchanged from the gated tip ce66c17.

[claude 2026-09-02] Three fixes from the whole-tree security audit, one commit each, plus a docs commit and the x/crypto v0.55.0 bump that lets `make vuln` pass (GO-2026-6303 is the same source-address gap on the library side). - 48cfc83 qcow2 backing_file refusal — closes 08f40f15 (this patch's --fixes) - a1ebe07 host_id predicate on RecordVMStatus / HardDeleteVM, ForceDeleteVM for the server sweep — closes 860df1fd - 88e31bf gate returns cert CriticalOptions so x/crypto enforces source-address; delegation refuses it — closes 39c0defe - 9a96694 docs: assumptions entry "A guest image is self-contained", connecting.md source-address note (voice unreviewed by the human) - ce66c17 deps: x/crypto v0.55.0 Gates: make ci green except vuln on 9a96694 (pre-existing), boot gate PASS on 9a96694 (SMOKE COMPLETE incl. gate SSH, exposed port, MCP, UDP); full make ci re-running on ce66c17. --- Migrated from git-collab patche `3170f758faf406897dcacc4e3d605a2a8ba1fb03`. Original author: a73x <dev@a73x.sh>. Fixes #109 Revision 1: `ce66c1728437882df01edd7998de93308d3dc3d5`; base `8d30bd3c4b559d5d08822c420af2864c25c870e8` Revision 2: `81b4b6c1ca2b07794222ef7cd452e02d7dec46b4`; base `8d30bd3c4b559d5d08822c420af2864c25c870e8` [claude 2026-09-02] Squashed to one commit per the branch rule; content unchanged from the gated tip ce66c17.