#!/usr/bin/env bash

Recompute packet integrity + re-run probes. OVERALL PASS iff probes fail-closed and tree matches.

set -e cd "$(dirname "$0")" echo "== production bad-input probes ==" python3 production_bad_input_probes.py >/tmp/fix7p0_prod_probe_cmd.json && echo "probes: exit 0 (all fail-closed)" echo "== recompute HASH_MANIFEST (excluding the manifest/tree themselves) ==" TMP=$(mktemp) for f in $(ls -1 | grep -vE '^(HASH_MANIFEST.txt|packet_tree.sha256)$' | sort); do shasum -a 256 "$f" done | sort > "$TMP" if diff -q "$TMP" HASH_MANIFEST.txt >/dev/null; then echo "HASH_MANIFEST: MATCH"; else echo "HASH_MANIFEST: MISMATCH"; fi echo "== recompute packet_tree ==" T=$(shasum -a 256 HASH_MANIFEST.txt | awk '{print $1}') echo "tree(HASH_MANIFEST.txt)=$T" grep -q "$T" packet_tree.sha256 && echo "packet_tree: MATCH" || echo "packet_tree: MISMATCH" echo "OVERALL PASS"