zed-pkg-test/security-adversarial-e2e

Generated security-e2e harness for zed-pkg.

Contract

Profile: security-e2e
Source organization: zed-pkg

• path traversal
• symlink escape
• malicious hooks
• tampered locks
• read-only roots
• interrupted atomic writes

Immutable source pins

Source	Commit	Branch observed
zed-pkg/zed-cli	7977b1d43231a68e1ac34903e0f18cef5135add6	main
zed-pkg/zed-api-server.rs	4eaacda14d5c5e38b81404415631e364ac7bdb2c	main

Dependency lanes

Mode	Source	Manager	Path/subdir
none	-	-	-

Running

The pull-request workflow validates the generated contract without cross-organization credentials. Full integration is intentionally release-gated until required source repositories and organization read credentials are present. Run the profile-specific checks recorded in test-plan.json after materializing the submodule, Zed, or native-package lane.