Agent OS · Component · attested-offline-release
Attested release and offline image verification
What it does
Validate source/version/platform manifests, verify release attestations, safely extract installers and check offline container image/config/layer bindings without trusting mutable tags.
Core pattern
Signature and manifest checks + offline installation verification
- Input
- Manifest, attestation bundle, image/installer archive and trusted-root policy
- Output
- Verified release metadata and normalized offline artifacts
Key parameters
| Name | Type | Default | Values |
|---|---|---|---|
| manifest_file | string | — | — |
| attestation_bundle | string | — | — |
| archive_file | string | — | — |
| architecture | — | — | — |
| trust_policy | object | — | — |
Maturity and limits
verify_release checks strict manifest keys, publisher/version identity and attestation inputs; regular_file rejects symlink/hardlink paths; verify_offline_image binds digest and layer evidence and rejects tag aliases. Source inspected statically; tests and external integrations were not executed.
Publisher/workflow and format constants are application-specific; parameterizing them must preserve the trust boundary. Offline verification depends on compatible gh and trust-root material.
1 sentence citing source paths or vendor names omitted for publication.
Used in pipelines
Industry tags
- EnergyTransferable use
For offline delivery and recovery preparation for site operations software, use signature and manifest checks followed by offline installation verification.
Skills pack
Reference pack with offline tests
Download · 18KBSHA-256 65f7dd4b356bed31eb9edce05057170458f6f4bdd0f3d8b9810a9638bf717852
Related components
-
Agent application release and operational readiness reporting
Readiness evidence aggregation + graded release gates
Working 1 pipeline -
Encrypted database backup and isolated restore verification
Encrypted backups and manifests + isolated restore checks
Working 1 pipeline -
Verified legacy agent-session migration
Verified history backups + idempotent import and quarantine
Working 1 pipeline -
Allowlisted source distribution and leakage checks
Allowlisted file selection + sensitive-content checks and packaging
Working 1 pipeline