malicious-decl-owner-rebuild
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
The owner’s flake gains gym-bad-payload and root runs nixos-rebuild switch outside Planarian. The incident on gym-web names gym-bad-payload’s declaration: the owner source file, the out-of-band rebuild as the path, and when that generation appeared.
| Harness | Scoring | Expects | Latest verdict |
|---|---|---|---|
| fake, vm | must-pass | declaration_origin: file owner:configuration.nix, path out-of-band nixos-rebuild, unit service:gym-bad-payload, when generation-created, who root; incident: service:gym-web | fake: PASS; VM: not run in this build |
What it exercises
No invariant by name.