B-2 · High
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
The security floor is derived from
environment.systemPackagesonly; fixes in service packages, the kernel or firmware do not move it
| Breaks | Status | Mitigation | Closes in |
|---|---|---|---|
| Correct (I16) | Closed (d2e173b) | Derived from every package value the evaluated configuration holds (system and unit packages, enabled services’ package options, unit path, kernel, firmware) and their runtime inputs; the residue is B-19. Gym: floor-service-package-fix (VM) | A closure; B feed |
The guarantees it narrows
I16.