Reconcile promotion and manifest documentation

This commit is contained in:
2026-08-10 03:04:20 +00:00
parent b556fc2f4f
commit 7cb18a1a40
6 changed files with 62 additions and 16 deletions

View File

@@ -28,7 +28,9 @@ Extraction uses run-local receipt, stderr, and output-root helpers, then
promotes the validated external bundle to the unique immutable Notarius bundle
path supplied by `internal/artifacts`. `internal/fileops.PromoteDirectory`
copies only regular files and directories to a same-filesystem temporary
sibling and atomically renames it without following symlinks or replacing an
sibling. Source traversal uses confined directory handles and identity checks
so replacing an inspected root, directory, or file is rejected rather than
followed. The completed tree is atomically renamed without replacing an
existing destination. Exact physical paths belong in
[Operations](../operations.md#extraction-workflow).