test(win): nested AF-02 verifier path hardening (signed DCO)

Merged
TH
7d ago
+55-11

Signed, DCO-compliant replacement for original PR #191

Stabilizes the nested AF-02 verifier executable target location in deep Windows checkouts while preserving the fail-closed tamper-test diagnostic, without changing AF-02 authority. The old unsigned candidate suffered an unrelated transient GitHub API 403 on its historic authority test; its subsequent exact-head rerun passed. The old outcome remains recorded and no rate-limit cause is assumed.

Original #191 is historically technically qualified but its GitHub API commits were unsigned. This candidate recreates its exact byte-identical Git tree in a single fresh commit signed with SSH key and DCO, using the authorized online Windows device. It does not rebase, amend, force-push or rewrite original commits and does not modify protected main or workflows.

  • Signed SHA: d45aa61f43b224e5d1b5b467c0122b491437827c — GitHub API verified=true, reason=valid.
  • DCO signoff: Signed-off-by: Abdulaziz M. Shehri <alshehriofficial@gmail.com>.
  • Tree: 056acc37a0be7e8d90b56f457ae79b33724d178d, exactly equal to original PR #191 head.
  • Parent: f82565cca917d119e1c774b2c470e2ac20e0d6dd.
  • Windows validation: ephemeral shallow main clone, fetched current original PR head, git apply --index --check, whitespace diff check, cargo fmt --all -- --check, exact pre/post-sign tree comparison, git commit -S -s and normal git push; prior GitHub CLI active account restored.

Qualification is not inherited. The original green CI is only evidence for identical file bytes, not this new commit identity. All GitHub technical checks must pass at d45aa61f43b224e5d1b5b467c0122b491437827c independently. Actual independent eligible human Code Owner APPROVED review after last push, all resolved threads, normal merge commit, fresh main CI, and any separate AF-02 FD-1/FD-2 governance gates remain mandatory. No self-review, bot comment as approval, ruleset bypass or false product completion is authorized. The original candidate should be closed without merge after this replacement is publicly documented.

CommandF remains incomplete: full consumer-specific decision and atomic signed receipts, release qualification and Studio are not claimed.

Summary by cubic

Fixes the AF-02 verifier corpus test on Windows by routing nested cargo builds to short-lived per-test target directories, avoiding path-length failures in deep checkouts. Also hardens the tamper failure assertion to require the verifier's own rejection diagnostic, so compile errors can't pass for tamper rejection.