Show manual first-admin command after verified Windows startup #13
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "issue/5-manual-admin"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Related to #5. Replacement for the unmerged #12 design. The managed Windows startup prints the existing SR local CLI command for the verified full container ID and explicit Docker Desktop pipe; the operator deliberately runs it in a trusted private terminal and uses the browser onboarding form. Foundry does not issue or handle claims. The legacy bind path remains blocked.
Evidence: independent Sol High review of exact HEAD
3a4429f55b70b637337f66ad98e0853dfee3366efound no material security defects within this scope; see the review evidence comment. The reviewer ran 85 tests (78 passed, 7 skipped). A disposable upstream SR synthetic claim was accepted once and refused on replay. Native Windows interactive onboarding and browser trust are not established. Startup liveness does not establish authenticated readiness. #5 remains open.Independent GPT-6.1 Sol High review of exact HEAD
3a4429f55b70b637337f66ad98e0853dfee3366eagainst23d94fb3af183faaacd6ca6f8a014be95cd47caa: no material findings under the trusted local host/operator/Docker boundary; accepted for bounded manual-instruction scope only, not native onboarding or operational readiness. Reviewer ran 85 tests: 78 passed, 7 skipped. A separate disposable SR7985cbadd31e6b594cb3a7b5fc27a06f6e03f33etest accepted a synthetic claim once and refused replay (200 then 409). No claim was printed.Native target test approval was requested and dismissed; no Windows host-affecting test was run. Repeated startup preserving existing administrator credentials for this exact replacement and native browser trust remain unverified. PR remains open; #12 remains open unmerged pending acceptance and integration. #5 remains open.