feat: port user-overlay features + exec-arg-wildcards onto unified ContainerProfileCache#37

Closed

entlein wants to merge 17 commits into

merge/upstream-cp-cachefrom

feat/port-user-overlays-to-cp

Commits on Apr 30, 2026

test(component): port Test_28 to upstream's unified user-overlay label
Entlein
committed
feat(cel): re-port CompareExecArgs hookup onto upstream's CP cache
Entlein
committed
feat(rules): R0040 'Unexpected process arguments' + Test_32 e2e
Entlein
committed
deps(storage): bump to rebased feat/exec-arg-wildcards tip (0de34ebc)
Entlein
committed
ci(component-tests): add Test_32_UnexpectedProcessArguments to matrix
Entlein
committed
fix(containerprofilecache): re-wire R1016 tamper alert + expand Test_31
Entlein
committed
test(component): Test_32 profile uses full-path argv[0]
Entlein
committed
test: AP-fixture linter (R-AP-* rules) + canonical reference profile
Entlein
committed
fix(tamper_alert): accept self-signed profiles, only flag actual tamper
Entlein
committed
test(component): make Test_30 30b deterministic by re-execing inside Eventually
Entlein
committed

Commits on May 1, 2026