Migrate ordinary I/O from confined file helpers

2026-09-01 17:51:37 +00:00
parent 0d57422b61
commit ba858cc997
34 changed files with 96 additions and 547 deletions
--- a/internal/artifacts/extraction_evidence.go
+++ b/internal/artifacts/extraction_evidence.go
@@ -144,7 +144,7 @@ func inspectExtractionPayload(root, path, checksum string) (ExtractionEvidenceSt
 	if actual != checksum {
 		return ExtractionEvidenceObsolete, "extract output checksum does not match durable bytes", 0
 	}
-	body, err := fileops.ReadRegularFile(path, MaxExtractionPayloadBytes)
+	body, err := fileops.ReadFileBounded(path, MaxExtractionPayloadBytes)
 	if err != nil || !json.Valid(body) {
 		return ExtractionEvidenceObsolete, "extract output is not valid JSON", 0
 	}