[codex] OM-SEC-15: Keep mixed-trust installers outside sudo lifetime - #9470

Draft

AFOliveira wants to merge 10 commits into

omacom:quattrofrom

AFOliveira:codex/om-sec-15-cold-install-chains

Commits on Aug 31, 2026

OM-SEC-15: Keep mixed-trust installers outside sudo lifetime
AFOliveira
committed
a9c71ee

Commits on Sep 1, 2026

OM-SEC-01: Make passwordless sudo expiry fail closed
AFOliveira
committed
87625c2
Document privileged Bash startup exception
AFOliveira
committed
2f816a8
Refactor OM-SEC-15 onto shared install helpers
AFOliveira
committed
5b74b46

Commits on Sep 2, 2026

Address installer authentication review
AFOliveira
committed
e57c112

Commits on Sep 7, 2026