From 777806cee1f1594af5911403d7f70fe3a89fcf66 Mon Sep 17 00:00:00 2001 From: Svrnty Date: Mon, 15 Jun 2026 06:44:40 -0400 Subject: [PATCH] CC: tolerate repaired Core S654 validator --- tools/validate_steev_child.py | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/tools/validate_steev_child.py b/tools/validate_steev_child.py index 3970b72..776f8aa 100755 --- a/tools/validate_steev_child.py +++ b/tools/validate_steev_child.py @@ -180,6 +180,12 @@ GOVERNED_BOUNDARY_SOURCE_LOCKS = { "../proton-rclone/.sot/08-OUTPUTS/proton-suite-health-panel-proof.json": "03ece893a3c7678365741cfdd01cb2c6cc2c30c20519e5d8649c25afac5ce31b", } +GOVERNED_BOUNDARY_REPAIRED_SOURCE_HASHES = { + "../core/tools/check_personal_agent_21_seed_main_branch_authority_gate_pickup.py": { + "e1a14760468140f16290fea816a2650c953fff618fdae6619f3eed4e35689d64", + }, +} + GOVERNED_BOUNDARY_SNIPPETS = [ "PACR-015", "Core S654", @@ -1300,7 +1306,8 @@ def main() -> int: errors.append(f"governed_boundary_source_missing:{rel}") continue actual_hash = sha256_file(path) - if actual_hash != expected_hash: + allowed_hashes = GOVERNED_BOUNDARY_REPAIRED_SOURCE_HASHES.get(rel, set()) + if actual_hash != expected_hash and actual_hash not in allowed_hashes: errors.append(f"governed_boundary_source_hash_drift:{rel}:{actual_hash}") result = {