10/14

SECURITY_REVIEW_2026-07-16.md

@@ -27,6 +27,12 @@ root, or shadows real `/usr` binaries."
 * **Severity:** High
 * **Category:** `authorization-bypass`
 * **Confidence:** High
+* **Status (2026-10-06):** closed for local installs by recommendation
+  (b): `syspkg -l` of a package whose manifest says base requires its
+  sidecar signed by a key `/etc/glacier/repos.conf` lists for base
+  (REPO_DESIGN.txt section 7); user scope refuses base outright. Remote
+  packages get (a) with the signed index (REPO_DESIGN section 4). Still
+  open for a third-party caller of `gl_install_pkg` (ROADMAP 3.2).
 
 **Description:** System-scope symlink placement into `/usr` is gated only
 by a package's manifest self-declaring `PKG_REPO="base"`. There is no