floor-service-package-fix
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
A change whose only security fix is in a service’s package (gym-vulnsvc 1.0 -> 1.1; services.gym-vulnsvc.package, never in environment.systemPackages) commits. The security floor moves to it: the inspected set is the configuration’s whole package set, not environment.systemPackages.
| Harness | Scoring | Expects | Latest verdict |
|---|---|---|---|
| vm | must-pass | security_floor: candidate; txn: Committed ApplyChange | VM: not run in this build |