Repository navigation
Release PTxray 1.8.1: close IBM i evidence gaps - #23
Merged
Merged
Conversation
Assess NetServer SMB flags and SMTP relay/authentication policy from documented local IBM interfaces. Preserve explicit IBM PTF-to-product mappings so an absent affected product is distinguished from installed fixes and unknown evidence. Assessment makes no service connections or configuration changes. Ship the signed complete AIX and IBM i report bundles and update verification, release notes, and public version references while preserving benefits-first messaging and the published safety boundaries. GOLDEN-CHANGE: Advance version-bound integrity fixture names to 1.8.1; retain all signature, payload-count, archive-safety, and tampering assertions.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
PTxray 1.8.1 closes three IBM i evidence gaps: NetServer SMB protocol flags, SMTP relay/authentication policy, and explicit CVE product applicability. These checks read documented local evidence without network probes or host configuration changes. Missing or ambiguous evidence remains explicit.
This release includes signed AIX and IBM i report bundles, matching version references and verification examples, and focused release notes. The benefits-first README and open-source/safety messaging remain intact.
Validation: all 81 public tests passed, 784 packaged programs passed the no-egress check, and all eight signed payloads passed release integrity verification. Privacy and IBM redistribution checks passed. Version-bound test fixture names changed to 1.8.1 without relaxing assertions.
Native acceptance: the exact IBM i bundle completed all 134 checks with zero NOT_ASSESSED findings and matching HTML, JSON, Blueprint, and PTX output. The exact AIX bundle completed 557 checks, 566 findings, and 17 FLRTVC exposure rows with validated report artifacts; seven AIX findings still explicitly report unavailable evidence. This is full report execution, not a claim of complete benchmark automation.