[codex] OM-SEC-19: Protect migration and SSH setup authorization - #9474

Draft

AFOliveira wants to merge 55 commits into

omacom:quattrofrom

AFOliveira:codex/om-sec-19-cold-migration-queue

Commits on Aug 31, 2026

OM-SEC-12: Bind update inhibitor cleanup to process identity
AFOliveira
committed
68d8141
OM-SEC-08: Publish SSH only after proving key-only access
AFOliveira
committed
061dce7
OM-SEC-14: Run update hooks without reusable sudo authority
AFOliveira
committed
1136a71

Commits on Sep 1, 2026

OM-SEC-01: Make passwordless sudo expiry fail closed
AFOliveira
committed
87625c2
Document privileged Bash startup exception
AFOliveira
committed
2f816a8
Narrow OM-SEC-19 to migration sudo lifetime
AFOliveira
committed
94a84d7

Commits on Sep 6, 2026

Merge commit 'b71dcad96e9d0b2962b7d225828a5cb6000ad720' into codex/review-9469-20260906
AFOliveira
committed
7f9a401
Complete command-scoped authentication across update phases
AFOliveira
committed
35b318e
Keep update regressions isolated from host authentication
AFOliveira
committed
c52381f
Integrate shared sudo boundaries and revoke failed migration work
AFOliveira
committed
d91d43b
Merge update regression fixture fixes
AFOliveira
committed
458813c
Stop package helpers when environment sanitization fails
AFOliveira
committed
e09df2d
Revoke before session cleanup and protect standalone inhibition
AFOliveira
committed
f2c3925
Integrate final inhibitor and update cleanup boundaries
AFOliveira
committed
f705edc
Integrate current quattro before security review
AFOliveira
committed
1f8f5ba
Integrate current quattro into migration review
AFOliveira
committed
0b346fa
Integrate authentication prompt documentation
AFOliveira
committed
2a3c299
Clarify unattended updates still require sudo authorization
AFOliveira
committed
a9e9954
Isolate fingerprint regression from fixed privileged package paths
AFOliveira
committed
6434683
Use required gum directly in AI removal prompts
AFOliveira
committed
978dffa
Integrate command style correction
AFOliveira
committed
fe8cc53
Wait for the actual Stay Awake launcher
AFOliveira
committed
d41ca88
Merge branch 'codex/review-9469-20260906' into codex/review-9474-20260906
AFOliveira
committed
0db6a9d
Wait for notifications when restarting the shell
AFOliveira
committed
177d572
Merge branch 'codex/review-9469-20260906' into codex/review-9474-20260906
AFOliveira
committed
a075272
Disable the Yay sudo loop with its supported option
AFOliveira
committed
35551b0
Merge branch 'codex/review-9469-20260906' into codex/review-9474-20260906
AFOliveira
committed
2680c31

Commits on Sep 7, 2026

Merge current Quattro while preserving command checks
AFOliveira
committed
aa422fc
Merge current update security foundation
AFOliveira
committed
0bb5c2f
Preserve user PATH across updater relaunches
AFOliveira
committed
5b692c5
Merge branch 'codex/review-9469-20260906' into codex/review-9474-20260906
AFOliveira
committed
cc73ff1
Bind protected update commands to their source root
AFOliveira
committed
f37c73f
Resolve security libraries beside canonical entrypoints
AFOliveira
committed
5bc41b2
Merge branch 'codex/review-9469-20260906' into codex/review-9474-20260906
AFOliveira
committed
aa88e7d
Keep channel transitions inside command-scoped sudo
AFOliveira
committed
c869740
Validate migration and SSH setup source boundaries
AFOliveira
committed
0f31620
Check dev update support before changing the system
AFOliveira
committed
0add43f
Merge branch 'codex/review-9469-20260906' into codex/review-9474-20260906
AFOliveira
committed
23252a0
Merge remote-tracking branch 'refs/remotes/portfolio/quattro' into codex/portfolio-9457-20260907
AFOliveira
committed
bc235d2
Keep temporary sudo grants bounded through lifecycle failures
AFOliveira
committed
4ae25cd
Bound sudo policy natively and guard expiry package transactions
AFOliveira
committed
a6385e6
Integrate the shared sudo lifecycle foundation
AFOliveira
committed
75e58f0
Merge update inhibitor identity hardening
AFOliveira
committed
104c776
Roll back interrupted inhibitor launches
AFOliveira
committed
76f0abe
Open launch authorization without recreating cancelled state
AFOliveira
committed
0240113
Merge commit 'a6385e60b836f41895fd016bf170c9b62128c59a' into codex/portfolio-9463-20260907
AFOliveira
committed
bf871a2
Merge commit '0240113da2f92d176ce3131d3a0f7755488891eb' into codex/portfolio-9474-20260907
AFOliveira
committed
fd1ad6d
Make SSH migration machine-scoped
AFOliveira
committed
ffdf342
Batch fixed migration machine repairs
AFOliveira
committed
372b179
Merge commit 'ffdf34209a719eaec7f2e7e997b4796018c52e55' into codex/portfolio-9474-20260907
AFOliveira
committed
517c674
Prove SSH service and account admission state
AFOliveira
committed
1fc0511
Handle migration discovery failures safely
AFOliveira
committed
3ecdb8b
Merge corrected SSH migration transaction
AFOliveira
committed
684c08d
Harden migration repair failure handling
AFOliveira
committed
fef8d82
Keep failed T2 repairs retryable
AFOliveira
committed
17a3076