[GH-ISSUE #325] Project native addon into protected retained authority before load #172

New issue

Open

opened 2026-10-15 18:22:01 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-15 18:22:01 +00:00

Owner

Originally created by @morluto on GitHub (Jul 20, 2026).
Original GitHub issue: https://github.com/morluto/rea/issues/325

Ensure the native authority addon itself is projected into a protected, verified-private runtime root before Node loads it. Prevent load-time substitution and cache-confusion attacks.

Acceptance:

Addon is copied/hashed into a private root and loaded from that retained handle.
Pre-existing Node native cache entries for the same path are rejected or invalidated.
Load identity is bound to the protected projection.

Part of #289.

Originally created by @morluto on GitHub (Jul 20, 2026). Original GitHub issue: https://github.com/morluto/rea/issues/325 Ensure the native authority addon itself is projected into a protected, verified-private runtime root before Node loads it. Prevent load-time substitution and cache-confusion attacks. Acceptance: - Addon is copied/hashed into a private root and loaded from that retained handle. - Pre-existing Node native cache entries for the same path are rejected or invalidated. - Load identity is bound to the protected projection. Part of #289.

bsakaguchi added the

area: native

P1: high

enhancement

labels

2026-10-15 18:22:01 +00:00

bsakaguchi referenced this issue

2026-10-15 18:22:53 +00:00

[GH-ISSUE #396] Consolidate cross-adapter error projection helpers #242

bsakaguchi referenced this issue

2026-10-15 18:22:53 +00:00

[GH-ISSUE #395] Consolidate WindowsNativeAuthority and PermissionAuthority validation helpers #243