{ "cache_id": "yeffai_remote_evidence_cache", "version": "v1", "status": "PASS", "created_at": "2026-07-02T22:26:38-0300", "updated_at": "2026-07-07T21:45:17.557818+00:00", "provenance": "WARESITES_CACHE_FROM_YEFFAI_REMOTE_ARTIFACT", "source_of_truth": "YEFFAI", "yeffai_provenance": "YES", "promotion_allowed": "YES", "evidence_type": "REMOTE_EXECUTION_ARTIFACT", "remote_hostname": "vmi2858754", "remote_timestamp": "2026-07-03T10:22:19+0200", "remote_hash": "8e482f0d52e61c0239f480780741958637d6ed75a67aa743695913eb5e3fab40", "remote_evidence_path": "/opt/yeffai/evidence/latest_state.json", "remote_events_path": "/opt/yeffai/evidence/execution_events.jsonl", "pull_status": "PASS", "pull_error": "", "installation_started": "NO", "yeffai_installation_command_executed": "NO", "yeffai_reboot_executed": "NO", "execution_items": [ { "item_id": "remote_evidence_artifact_layer_bootstrap", "event_id": "yeffai_execution_item_remote_evidence_artifact_layer_bootstrap_20260703_011736_504cf993", "status": "PASS", "provenance": "YEFFAI", "yeffai_provenance": "YES", "promotion_allowed": "NO", "evidence_type": "REMOTE_EXECUTION_ARTIFACT", "remote_hostname": "vmi2858754", "remote_timestamp": "2026-07-03T06:17:41+0200", "remote_evidence_path": "/opt/yeffai/evidence/latest_state.json", "remote_hash": "e352c491cdfbad31cdd845004f20d8e2bfd790b6deddaf018c77b9de3635ceeb", "action": "REMOTE_EVIDENCE_ARTIFACT_LAYER_BOOTSTRAP", "mutation_scope": "REMOTE_EVIDENCE_ITEM_ONLY", "installation_started": "NO", "yeffai_installation_command_executed": "NO", "yeffai_reboot_executed": "NO", "message": "Item-level evidence for the remote evidence artifact layer itself. This proves item auditing path only; it does not promote installation." }, { "item_id": "yeffai_apt_update_upgrade_baseline_audit", "event_id": "yeffai_execution_item_yeffai_apt_update_upgrade_baseline_audit_20260703_045523_3b3c648d", "status": "PASS", "provenance": "YEFFAI", "yeffai_provenance": "YES", "promotion_allowed": "NO", "evidence_type": "REMOTE_EXECUTION_ARTIFACT", "remote_hostname": "vmi2858754", "remote_timestamp": "2026-07-03T09:55:29+0200", "remote_evidence_path": "/opt/yeffai/evidence/latest_state.json", "remote_hash": "c3103099fdf7d9a6b3a14fdc32c810ea1139e3e3ea16d1063f6e73a72d5f8acf", "action": "APT_UPDATE_UPGRADE_BASELINE_AUDIT", "mutation_scope": "REMOTE_EVIDENCE_ITEM_ONLY", "installation_started": "NO", "yeffai_installation_command_executed": "NO", "yeffai_reboot_executed": "NO", "apt_evidence_status": "PASS", "apt_update_evidence_count": 3, "apt_upgrade_evidence_count": 11, "evidence_bundle": { "apt_update_evidence": [ { "type": "apt_periodic_stamp", "path": "/var/lib/apt/periodic/update-success-stamp", "mtime": "2026-07-03T00:56:39+0200", "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" }, { "type": "apt_periodic_stamp", "path": "/var/lib/apt/periodic/upgrade-stamp", "mtime": "2026-07-03T06:50:11+0200", "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" }, { "type": "apt_lists_recent_files", "command": "find /var/lib/apt/lists", "stdout_sha256": "043f04494a60fd42858cc4a7a05760a55ff07e450e3181bc20cc63d5ed43b5f4", "sample": [ "1783024633.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_InRelease", "1783022107.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_main_binary-amd64_Packages", "1783022107.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_InRelease", "1783020036.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_universe_cnf_Commands-amd64", "1783019922.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_main_cnf_Commands-amd64" ] } ], "apt_upgrade_evidence": [ { "type": "apt_history_commandline", "line": "Commandline: apt-get install -y ca-certificates curl gnupg lsb-release ufw nginx docker.io" }, { "type": "apt_history_package_change", "line": "Install: libnginx-mod-http-image-filter:amd64 (1.18.0-6ubuntu14.16, automatic), libnginx-mod-stream-geoip2:amd64 (1.18.0-6ubuntu14.16, automatic), bridge-utils:amd64 (1.7-1ubuntu3, automatic), libnginx-mod-http-geoip2:amd64 (1.18.0-6ubuntu14.16, automatic), pigz:amd64 (2.6-1, automatic), containerd:amd64 (2.2.1-0ubuntu1~22.04.2, automatic), ubuntu-fan:amd64 (0.12.16, automatic), libjpeg-turbo8:amd64 (2.1.2-0ubuntu1, automatic), nginx:amd64 (1.18.0-6ubuntu14.16), nginx-common:amd64 (1.18.0-6ubunt" }, { "type": "apt_history_package_change", "line": "Upgrade: libcurl4:amd64 (7.81.0-1ubuntu1.24, 7.81.0-1ubuntu1.25), curl:amd64 (7.81.0-1ubuntu1.24, 7.81.0-1ubuntu1.25)" }, { "type": "apt_history_package_change", "line": "Upgrade: libcurl3-gnutls:amd64 (7.81.0-1ubuntu1.24, 7.81.0-1ubuntu1.25)" }, { "type": "apt_history_package_change", "line": "Upgrade: vim:amd64 (2:8.2.3995-1ubuntu2.32, 2:8.2.3995-1ubuntu2.33), vim-common:amd64 (2:8.2.3995-1ubuntu2.32, 2:8.2.3995-1ubuntu2.33), vim-tiny:amd64 (2:8.2.3995-1ubuntu2.32, 2:8.2.3995-1ubuntu2.33), vim-runtime:amd64 (2:8.2.3995-1ubuntu2.32, 2:8.2.3995-1ubuntu2.33)" }, { "type": "apt_history_package_change", "line": "Upgrade: libnghttp2-14:amd64 (1.43.0-1ubuntu0.3, 1.43.0-1ubuntu0.4)" }, { "type": "apt_history_package_change", "line": "Upgrade: libtinfo6:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2), libncursesw6:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2), libncurses6:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2)" }, { "type": "apt_history_package_change", "line": "Upgrade: ncurses-base:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2)" }, { "type": "apt_history_package_change", "line": "Upgrade: ncurses-term:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2)" }, { "type": "apt_history_package_change", "line": "Upgrade: ncurses-bin:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2)" }, { "type": "apt_history_package_change", "line": "Upgrade: xxd:amd64 (2:8.2.3995-1ubuntu2.32, 2:8.2.3995-1ubuntu2.33)" } ], "apt_history_sha256": "76cd5bce56a96cd6050463b34eb89c686f938814f74fc789eb449b2265c972ef", "apt_term_sha256": "ac1b04353d9a928747930b7506528ff535cf50f6f8b4394a5523f80a76bce2ea", "apt_history_paths": [ "/var/log/apt/history.log" ], "apt_term_paths": [ "/var/log/apt/term.log" ] }, "message": "APT baseline evidence was found on YEFF AI through remote logs/stamps. This records evidence only and does not promote installation." }, { "item_id": "verify_yeffai_install_step_001_server_baseline_config", "event_id": "yeffai_execution_item_verify_yeffai_install_step_001_server_baseline_config_expanded_apt_20260703_052214_ed4c1c81", "status": "PASS", "provenance": "YEFFAI", "yeffai_provenance": "YES", "promotion_allowed": "YES", "evidence_type": "REMOTE_EXECUTION_ARTIFACT", "remote_hostname": "vmi2858754", "remote_timestamp": "2026-07-03T10:22:19+0200", "remote_evidence_path": "/opt/yeffai/evidence/latest_state.json", "remote_hash": "e9943ba44b50557c36e93a8dcf076b24eb88e4bda5f267f2bf011f77172289f6", "action": "VERIFY_YEFFAI_INSTALL_STEP_001_SERVER_BASELINE_CONFIG", "mutation_scope": "REMOTE_EVIDENCE_ITEM_ONLY", "installation_started": "NO", "yeffai_installation_command_executed": "NO", "yeffai_reboot_executed": "NO", "baseline_audit_status": "PASS", "baseline_promotion_allowed": "YES", "apt_expanded_evidence_status": "PASS", "mandatory_failures": [], "pass_count": 21, "fail_count": 0, "evidence_bundle": { "hostname": "vmi2858754", "timestamp": "2026-07-03T10:22:19+0200", "baseline_audit_status": "PASS", "promotion_allowed": "YES", "mandatory_failures": [], "pass_count": 21, "fail_count": 0, "apt_expanded_evidence_status": "PASS", "checks": [ { "name": "os_release_readable", "status": "PASS", "evidence": { "cmd": "cat /etc/os-release 2>/dev/null", "exit_code": 0, "stdout": "PRETTY_NAME=\"Ubuntu 22.04.5 LTS\"\nNAME=\"Ubuntu\"\nVERSION_ID=\"22.04\"\nVERSION=\"22.04.5 LTS (Jammy Jellyfish)\"\nVERSION_CODENAME=jammy\nID=ubuntu\nID_LIKE=debian\nHOME_URL=\"https://www.ubuntu.com/\"\nSUPPORT_URL=\"https://help.ubuntu.com/\"\nBUG_REPORT_URL=\"https://bugs.launchpad.net/ubuntu/\"\nPRIVACY_POLICY_URL=\"https://www.ubuntu.com/legal/terms-and-policies/privacy-policy\"\nUBUNTU_CODENAME=jammy", "stderr": "" } }, { "name": "kernel_readable", "status": "PASS", "evidence": { "cmd": "uname -a", "exit_code": 0, "stdout": "Linux vmi2858754 5.15.0-185-generic #195-Ubuntu SMP Fri Jun 19 17:11:50 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux", "stderr": "" } }, { "name": "opt_yeffai_exists", "status": "PASS", "evidence": { "exists": "YES", "path": "/opt/yeffai", "mode": "0o755", "uid": 0, "gid": 0, "size": 4096, "mtime": "2026-07-01T23:33:16+0200", "sha256": "DIR" } }, { "name": "opt_yeffai_evidence_exists", "status": "PASS", "evidence": { "exists": "YES", "path": "/opt/yeffai/evidence", "mode": "0o755", "uid": 0, "gid": 0, "size": 4096, "mtime": "2026-07-03T03:26:36+0200", "sha256": "DIR" } }, { "name": "latest_state_exists", "status": "PASS", "evidence": { "exists": "YES", "path": "/opt/yeffai/evidence/latest_state.json", "mode": "0o644", "uid": 0, "gid": 0, "size": 24685, "mtime": "2026-07-03T10:17:40+0200", "sha256": "e154376de83d5224da99e60737d606ce948b1c30261cb6ebc4b0f22bb596382a" } }, { "name": "execution_events_exists", "status": "PASS", "evidence": { "exists": "YES", "path": "/opt/yeffai/evidence/execution_events.jsonl", "mode": "0o644", "uid": 0, "gid": 0, "size": 2974, "mtime": "2026-07-03T10:17:40+0200", "sha256": "5dafeec1ae3140773d8d9f96495d7221e63e9f634e77c9bca457458d7d301afe" } }, { "name": "package_ca-certificates_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' ca-certificates 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 20260601~22.04.1", "stderr": "" } }, { "name": "package_curl_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' curl 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 7.81.0-1ubuntu1.25", "stderr": "" } }, { "name": "package_gnupg_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' gnupg 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 2.2.27-3ubuntu2.5", "stderr": "" } }, { "name": "package_lsb-release_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' lsb-release 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 11.1.0ubuntu4", "stderr": "" } }, { "name": "package_ufw_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' ufw 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 0.36.1-4ubuntu0.1", "stderr": "" } }, { "name": "package_nginx_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' nginx 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 1.18.0-6ubuntu14.16", "stderr": "" } }, { "name": "docker_command_exists", "status": "PASS", "evidence": { "cmd": "command -v docker 2>/dev/null", "exit_code": 0, "stdout": "/usr/bin/docker", "stderr": "" } }, { "name": "docker_package_installed", "status": "PASS", "evidence": { "docker-ce": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' docker-ce 2>/dev/null", "exit_code": 1, "stdout": "", "stderr": "" }, "docker.io": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' docker.io 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 29.1.3-0ubuntu3~22.04.2", "stderr": "" } } }, { "name": "nginx_command_exists", "status": "PASS", "evidence": { "cmd": "command -v nginx 2>/dev/null", "exit_code": 0, "stdout": "/usr/sbin/nginx", "stderr": "" } }, { "name": "ssh_service_active", "status": "PASS", "evidence": { "cmd": "systemctl is-active ssh 2>/dev/null || systemctl is-active sshd 2>/dev/null", "exit_code": 0, "stdout": "active", "stderr": "" } }, { "name": "nginx_service_known", "status": "PASS", "evidence": { "cmd": "systemctl is-enabled nginx 2>/dev/null; systemctl is-active nginx 2>/dev/null", "exit_code": 0, "stdout": "enabled\nactive", "stderr": "" } }, { "name": "ufw_status_readable", "status": "PASS", "evidence": { "cmd": "ufw status 2>/dev/null", "exit_code": 0, "stdout": "Status: inactive", "stderr": "" } }, { "name": "listening_ports_readable", "status": "PASS", "evidence": { "cmd": "ss -lntp 2>/dev/null | head -n 120", "exit_code": 0, "stdout": "State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess \nLISTEN 0 511 0.0.0.0:80 0.0.0.0:* users:((\"nginx\",pid=179644,fd=6),(\"nginx\",pid=179643,fd=6),(\"nginx\",pid=179642,fd=6),(\"nginx\",pid=179641,fd=6),(\"nginx\",pid=179640,fd=6),(\"nginx\",pid=179639,fd=6),(\"nginx\",pid=179637,fd=6))\nLISTEN 0 128 0.0.0.0:22 0.0.0.0:* users:((\"sshd\",pid=708,fd=3)) \nLISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:((\"systemd-resolve\",pid=625,fd=14)) \nLISTEN 0 4096 127.0.0.1:36051 0.0.0.0:* users:((\"containerd\",pid=179098,fd=15)) \nLISTEN 0 511 [::]:80 [::]:* users:((\"nginx\",pid=179644,fd=7),(\"nginx\",pid=179643,fd=7),(\"nginx\",pid=179642,fd=7),(\"nginx\",pid=179641,fd=7),(\"nginx\",pid=179640,fd=7),(\"nginx\",pid=179639,fd=7),(\"nginx\",pid=179637,fd=7))\nLISTEN 0 128 [::]:22 [::]:* users:((\"sshd\",pid=708,fd=4))", "stderr": "" } }, { "name": "apt_update_evidence_present", "status": "PASS", "evidence": { "update_success_stamp": { "exists": "YES", "path": "/var/lib/apt/periodic/update-success-stamp", "mode": "0o644", "uid": 0, "gid": 0, "size": 0, "mtime": "2026-07-03T00:56:39+0200", "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" }, "upgrade_stamp": { "exists": "YES", "path": "/var/lib/apt/periodic/upgrade-stamp", "mode": "0o644", "uid": 0, "gid": 0, "size": 0, "mtime": "2026-07-03T06:50:11+0200", "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" }, "apt_lists_recent": { "cmd": "find /var/lib/apt/lists -type f -printf '%T@ %p\\n' 2>/dev/null | sort -nr | head -n 12", "exit_code": 0, "stdout": "1783024633.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_InRelease\n1783022107.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_main_binary-amd64_Packages\n1783022107.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_InRelease\n1783020036.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_universe_cnf_Commands-amd64\n1783019922.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_main_cnf_Commands-amd64\n1783017756.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_universe_binary-amd64_Packages\n1783011254.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_universe_binary-amd64_Packages\n1783011254.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_main_binary-amd64_Packages\n1782998977.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_restricted_i18n_Translation-en\n1782998977.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_restricted_binary-amd64_Packages\n1782998977.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_main_i18n_Translation-en\n1782989413.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_restricted_i18n_Translation-en", "stderr": "" } } }, { "name": "apt_history_evidence_present", "status": "PASS", "evidence": { "searched_paths": [ "/var/log/apt/history.log", "/var/log/apt/history.log.1.gz", "/var/log/apt/term.log", "/var/log/apt/term.log.1.gz", "/var/log/dpkg.log", "/var/log/dpkg.log.1" ], "apt_log_payload": [ { "path": "/var/log/apt/history.log", "stat": { "exists": "YES", "path": "/var/log/apt/history.log", "mode": "0o644", "uid": 0, "gid": 0, "size": 3398, "mtime": "2026-07-03T06:50:03+0200", "sha256": "5663faffc5242c8950664ac65d53b922d419d634e9ca372c6bcd68ca83f27cf5" }, "tail_sha256": "5663faffc5242c8950664ac65d53b922d419d634e9ca372c6bcd68ca83f27cf5", "contains_commandline": "YES", "contains_upgrade": "YES", "contains_install": "YES", "contains_configure": "NO" }, { "path": "/var/log/apt/history.log.1.gz", "stat": { "exists": "YES", "path": "/var/log/apt/history.log.1.gz", "mode": "0o644", "uid": 0, "gid": 0, "size": 1925, "mtime": "2026-06-30T06:05:45+0200", "sha256": "0ba43c0157b0a114400078edd765c8498057df7fbbcd4cf4caee651ab3aa9875" }, "tail_sha256": "917f0d13ee4c9f48dd4adee629eca86f5ecb6bf2b1c3ae51795082ffe103b012", "contains_commandline": "YES", "contains_upgrade": "YES", "contains_install": "YES", "contains_configure": "NO" }, { "path": "/var/log/apt/term.log", "stat": { "exists": "YES", "path": "/var/log/apt/term.log", "mode": "0o640", "uid": 0, "gid": 4, "size": 16835, "mtime": "2026-07-03T06:50:03+0200", "sha256": "8ab3a10b1131d435939e7a7d7c0073a0a6d9bb610e43c0456e7d7e4f14d9f943" }, "tail_sha256": "8ab3a10b1131d435939e7a7d7c0073a0a6d9bb610e43c0456e7d7e4f14d9f943", "contains_commandline": "NO", "contains_upgrade": "NO", "contains_install": "NO", "contains_configure": "NO" }, { "path": "/var/log/apt/term.log.1.gz", "stat": { "exists": "YES", "path": "/var/log/apt/term.log.1.gz", "mode": "0o640", "uid": 0, "gid": 4, "size": 4497, "mtime": "2026-06-30T06:05:45+0200", "sha256": "6d44f66a429d5f35fd24a077d11852d0f32be7894cd299c085750c1876cb30be" }, "tail_sha256": "c059cd99df5534c23ccbc7f460fd63d0e281ed01dde901a5c5380a5555f44cc3", "contains_commandline": "NO", "contains_upgrade": "NO", "contains_install": "NO", "contains_configure": "NO" }, { "path": "/var/log/dpkg.log", "stat": { "exists": "YES", "path": "/var/log/dpkg.log", "mode": "0o644", "uid": 0, "gid": 0, "size": 28586, "mtime": "2026-07-03T06:50:03+0200", "sha256": "51c83ac8cc58d08d7701cf85be268afbb5136c6aa17a6d4f69969ffc37d453e6" }, "tail_sha256": "51c83ac8cc58d08d7701cf85be268afbb5136c6aa17a6d4f69969ffc37d453e6", "contains_commandline": "NO", "contains_upgrade": "YES", "contains_install": "YES", "contains_configure": "YES" }, { "path": "/var/log/dpkg.log.1", "stat": { "exists": "YES", "path": "/var/log/dpkg.log.1", "mode": "0o644", "uid": 0, "gid": 0, "size": 84284, "mtime": "2026-06-30T06:05:45+0200", "sha256": "f6c75fc4015eb1a38b7daeaa8c446a0b41cd6fc8f9a17b13b37cf0e9ae5e6768" }, "tail_sha256": "f6c75fc4015eb1a38b7daeaa8c446a0b41cd6fc8f9a17b13b37cf0e9ae5e6768", "contains_commandline": "NO", "contains_upgrade": "YES", "contains_install": "YES", "contains_configure": "YES" } ], "package_state_evidence_count": 7, "package_state_evidence": [ { "package": "ca-certificates", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' ca-certificates 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 20260601~22.04.1", "stderr": "" } }, { "package": "curl", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' curl 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 7.81.0-1ubuntu1.25", "stderr": "" } }, { "package": "gnupg", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' gnupg 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 2.2.27-3ubuntu2.5", "stderr": "" } }, { "package": "lsb-release", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' lsb-release 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 11.1.0ubuntu4", "stderr": "" } }, { "package": "ufw", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' ufw 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 0.36.1-4ubuntu0.1", "stderr": "" } }, { "package": "nginx", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' nginx 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 1.18.0-6ubuntu14.16", "stderr": "" } }, { "package": "docker", "status": "installed_or_command_available", "evidence": { "docker_command": { "cmd": "command -v docker 2>/dev/null", "exit_code": 0, "stdout": "/usr/bin/docker", "stderr": "" }, "docker_package": { "docker-ce": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' docker-ce 2>/dev/null", "exit_code": 1, "stdout": "", "stderr": "" }, "docker.io": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' docker.io 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 29.1.3-0ubuntu3~22.04.2", "stderr": "" } } } } ], "combined_log_sha256": "c5359e6861ce4db1dbb983d933d9367a342fa03567efd81bd38c541fa431a37f" } } ] }, "message": "Expanded real YEFF AI baseline audit using apt logs, gz logs, dpkg logs, apt stamps, package state and service state." } ], "summary": { "pass_count": 3, "fail_count": 0, "missing_count": 0, "remote_valid_items": 3, "local_only_items": 0, "real_server_baseline_pass_count": 21, "real_server_baseline_fail_count": 0 }, "remote_latest_state": { "artifact_id": "yeffai_remote_latest_state", "version": "v1", "status": "PASS", "created_at": "2026-07-03T03:26:36+0200", "updated_at": "2026-07-03T10:22:19+0200", "provenance": "YEFFAI", "yeffai_provenance": "YES", "promotion_allowed": "YES", "evidence_type": "REMOTE_EXECUTION_ARTIFACT", "remote_hostname": "vmi2858754", "remote_evidence_path": "/opt/yeffai/evidence/latest_state.json", "remote_events_path": "/opt/yeffai/evidence/execution_events.jsonl", "remote_backup_dir": "/root/yeffai_remote_evidence_artifact_backup_20260702_222631", "remote_mutation_scope": "REMOTE_EVIDENCE_ARTIFACT_ONLY", "installation_started": "NO", "yeffai_installation_command_executed": "NO", "yeffai_reboot_executed": "NO", "bridge_rule": "This artifact proves remote YEFF AI evidence provenance exists. It does not promote installation or category execution by itself.", "checks": { "hostname": "vmi2858754", "whoami": { "command": "whoami", "exit_code": 0, "stdout": "root", "stderr": "" }, "os_release": { "command": "grep -E '^(PRETTY_NAME|VERSION_ID|ID)=' /etc/os-release 2>/dev/null || true", "exit_code": 0, "stdout": "PRETTY_NAME=\"Ubuntu 22.04.5 LTS\"\nVERSION_ID=\"22.04\"\nID=ubuntu", "stderr": "" }, "opt_exists": "YES", "opt_yeffai_exists": "YES", "evidence_dir_exists": "YES", "apt_history_exists": "YES", "apt_term_exists": "YES" }, "execution_items": [ { "item_id": "remote_evidence_artifact_layer_bootstrap", "event_id": "yeffai_execution_item_remote_evidence_artifact_layer_bootstrap_20260703_011736_504cf993", "status": "PASS", "provenance": "YEFFAI", "yeffai_provenance": "YES", "promotion_allowed": "NO", "evidence_type": "REMOTE_EXECUTION_ARTIFACT", "remote_hostname": "vmi2858754", "remote_timestamp": "2026-07-03T06:17:41+0200", "remote_evidence_path": "/opt/yeffai/evidence/latest_state.json", "remote_hash": "e352c491cdfbad31cdd845004f20d8e2bfd790b6deddaf018c77b9de3635ceeb", "action": "REMOTE_EVIDENCE_ARTIFACT_LAYER_BOOTSTRAP", "mutation_scope": "REMOTE_EVIDENCE_ITEM_ONLY", "installation_started": "NO", "yeffai_installation_command_executed": "NO", "yeffai_reboot_executed": "NO", "message": "Item-level evidence for the remote evidence artifact layer itself. This proves item auditing path only; it does not promote installation." }, { "item_id": "yeffai_apt_update_upgrade_baseline_audit", "event_id": "yeffai_execution_item_yeffai_apt_update_upgrade_baseline_audit_20260703_045523_3b3c648d", "status": "PASS", "provenance": "YEFFAI", "yeffai_provenance": "YES", "promotion_allowed": "NO", "evidence_type": "REMOTE_EXECUTION_ARTIFACT", "remote_hostname": "vmi2858754", "remote_timestamp": "2026-07-03T09:55:29+0200", "remote_evidence_path": "/opt/yeffai/evidence/latest_state.json", "remote_hash": "c3103099fdf7d9a6b3a14fdc32c810ea1139e3e3ea16d1063f6e73a72d5f8acf", "action": "APT_UPDATE_UPGRADE_BASELINE_AUDIT", "mutation_scope": "REMOTE_EVIDENCE_ITEM_ONLY", "installation_started": "NO", "yeffai_installation_command_executed": "NO", "yeffai_reboot_executed": "NO", "apt_evidence_status": "PASS", "apt_update_evidence_count": 3, "apt_upgrade_evidence_count": 11, "evidence_bundle": { "apt_update_evidence": [ { "type": "apt_periodic_stamp", "path": "/var/lib/apt/periodic/update-success-stamp", "mtime": "2026-07-03T00:56:39+0200", "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" }, { "type": "apt_periodic_stamp", "path": "/var/lib/apt/periodic/upgrade-stamp", "mtime": "2026-07-03T06:50:11+0200", "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" }, { "type": "apt_lists_recent_files", "command": "find /var/lib/apt/lists", "stdout_sha256": "043f04494a60fd42858cc4a7a05760a55ff07e450e3181bc20cc63d5ed43b5f4", "sample": [ "1783024633.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_InRelease", "1783022107.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_main_binary-amd64_Packages", "1783022107.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_InRelease", "1783020036.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_universe_cnf_Commands-amd64", "1783019922.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_main_cnf_Commands-amd64" ] } ], "apt_upgrade_evidence": [ { "type": "apt_history_commandline", "line": "Commandline: apt-get install -y ca-certificates curl gnupg lsb-release ufw nginx docker.io" }, { "type": "apt_history_package_change", "line": "Install: libnginx-mod-http-image-filter:amd64 (1.18.0-6ubuntu14.16, automatic), libnginx-mod-stream-geoip2:amd64 (1.18.0-6ubuntu14.16, automatic), bridge-utils:amd64 (1.7-1ubuntu3, automatic), libnginx-mod-http-geoip2:amd64 (1.18.0-6ubuntu14.16, automatic), pigz:amd64 (2.6-1, automatic), containerd:amd64 (2.2.1-0ubuntu1~22.04.2, automatic), ubuntu-fan:amd64 (0.12.16, automatic), libjpeg-turbo8:amd64 (2.1.2-0ubuntu1, automatic), nginx:amd64 (1.18.0-6ubuntu14.16), nginx-common:amd64 (1.18.0-6ubunt" }, { "type": "apt_history_package_change", "line": "Upgrade: libcurl4:amd64 (7.81.0-1ubuntu1.24, 7.81.0-1ubuntu1.25), curl:amd64 (7.81.0-1ubuntu1.24, 7.81.0-1ubuntu1.25)" }, { "type": "apt_history_package_change", "line": "Upgrade: libcurl3-gnutls:amd64 (7.81.0-1ubuntu1.24, 7.81.0-1ubuntu1.25)" }, { "type": "apt_history_package_change", "line": "Upgrade: vim:amd64 (2:8.2.3995-1ubuntu2.32, 2:8.2.3995-1ubuntu2.33), vim-common:amd64 (2:8.2.3995-1ubuntu2.32, 2:8.2.3995-1ubuntu2.33), vim-tiny:amd64 (2:8.2.3995-1ubuntu2.32, 2:8.2.3995-1ubuntu2.33), vim-runtime:amd64 (2:8.2.3995-1ubuntu2.32, 2:8.2.3995-1ubuntu2.33)" }, { "type": "apt_history_package_change", "line": "Upgrade: libnghttp2-14:amd64 (1.43.0-1ubuntu0.3, 1.43.0-1ubuntu0.4)" }, { "type": "apt_history_package_change", "line": "Upgrade: libtinfo6:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2), libncursesw6:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2), libncurses6:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2)" }, { "type": "apt_history_package_change", "line": "Upgrade: ncurses-base:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2)" }, { "type": "apt_history_package_change", "line": "Upgrade: ncurses-term:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2)" }, { "type": "apt_history_package_change", "line": "Upgrade: ncurses-bin:amd64 (6.3-2ubuntu0.1, 6.3-2ubuntu0.2)" }, { "type": "apt_history_package_change", "line": "Upgrade: xxd:amd64 (2:8.2.3995-1ubuntu2.32, 2:8.2.3995-1ubuntu2.33)" } ], "apt_history_sha256": "76cd5bce56a96cd6050463b34eb89c686f938814f74fc789eb449b2265c972ef", "apt_term_sha256": "ac1b04353d9a928747930b7506528ff535cf50f6f8b4394a5523f80a76bce2ea", "apt_history_paths": [ "/var/log/apt/history.log" ], "apt_term_paths": [ "/var/log/apt/term.log" ] }, "message": "APT baseline evidence was found on YEFF AI through remote logs/stamps. This records evidence only and does not promote installation." }, { "item_id": "verify_yeffai_install_step_001_server_baseline_config", "event_id": "yeffai_execution_item_verify_yeffai_install_step_001_server_baseline_config_expanded_apt_20260703_052214_ed4c1c81", "status": "PASS", "provenance": "YEFFAI", "yeffai_provenance": "YES", "promotion_allowed": "YES", "evidence_type": "REMOTE_EXECUTION_ARTIFACT", "remote_hostname": "vmi2858754", "remote_timestamp": "2026-07-03T10:22:19+0200", "remote_evidence_path": "/opt/yeffai/evidence/latest_state.json", "remote_hash": "e9943ba44b50557c36e93a8dcf076b24eb88e4bda5f267f2bf011f77172289f6", "action": "VERIFY_YEFFAI_INSTALL_STEP_001_SERVER_BASELINE_CONFIG", "mutation_scope": "REMOTE_EVIDENCE_ITEM_ONLY", "installation_started": "NO", "yeffai_installation_command_executed": "NO", "yeffai_reboot_executed": "NO", "baseline_audit_status": "PASS", "baseline_promotion_allowed": "YES", "apt_expanded_evidence_status": "PASS", "mandatory_failures": [], "pass_count": 21, "fail_count": 0, "evidence_bundle": { "hostname": "vmi2858754", "timestamp": "2026-07-03T10:22:19+0200", "baseline_audit_status": "PASS", "promotion_allowed": "YES", "mandatory_failures": [], "pass_count": 21, "fail_count": 0, "apt_expanded_evidence_status": "PASS", "checks": [ { "name": "os_release_readable", "status": "PASS", "evidence": { "cmd": "cat /etc/os-release 2>/dev/null", "exit_code": 0, "stdout": "PRETTY_NAME=\"Ubuntu 22.04.5 LTS\"\nNAME=\"Ubuntu\"\nVERSION_ID=\"22.04\"\nVERSION=\"22.04.5 LTS (Jammy Jellyfish)\"\nVERSION_CODENAME=jammy\nID=ubuntu\nID_LIKE=debian\nHOME_URL=\"https://www.ubuntu.com/\"\nSUPPORT_URL=\"https://help.ubuntu.com/\"\nBUG_REPORT_URL=\"https://bugs.launchpad.net/ubuntu/\"\nPRIVACY_POLICY_URL=\"https://www.ubuntu.com/legal/terms-and-policies/privacy-policy\"\nUBUNTU_CODENAME=jammy", "stderr": "" } }, { "name": "kernel_readable", "status": "PASS", "evidence": { "cmd": "uname -a", "exit_code": 0, "stdout": "Linux vmi2858754 5.15.0-185-generic #195-Ubuntu SMP Fri Jun 19 17:11:50 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux", "stderr": "" } }, { "name": "opt_yeffai_exists", "status": "PASS", "evidence": { "exists": "YES", "path": "/opt/yeffai", "mode": "0o755", "uid": 0, "gid": 0, "size": 4096, "mtime": "2026-07-01T23:33:16+0200", "sha256": "DIR" } }, { "name": "opt_yeffai_evidence_exists", "status": "PASS", "evidence": { "exists": "YES", "path": "/opt/yeffai/evidence", "mode": "0o755", "uid": 0, "gid": 0, "size": 4096, "mtime": "2026-07-03T03:26:36+0200", "sha256": "DIR" } }, { "name": "latest_state_exists", "status": "PASS", "evidence": { "exists": "YES", "path": "/opt/yeffai/evidence/latest_state.json", "mode": "0o644", "uid": 0, "gid": 0, "size": 24685, "mtime": "2026-07-03T10:17:40+0200", "sha256": "e154376de83d5224da99e60737d606ce948b1c30261cb6ebc4b0f22bb596382a" } }, { "name": "execution_events_exists", "status": "PASS", "evidence": { "exists": "YES", "path": "/opt/yeffai/evidence/execution_events.jsonl", "mode": "0o644", "uid": 0, "gid": 0, "size": 2974, "mtime": "2026-07-03T10:17:40+0200", "sha256": "5dafeec1ae3140773d8d9f96495d7221e63e9f634e77c9bca457458d7d301afe" } }, { "name": "package_ca-certificates_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' ca-certificates 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 20260601~22.04.1", "stderr": "" } }, { "name": "package_curl_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' curl 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 7.81.0-1ubuntu1.25", "stderr": "" } }, { "name": "package_gnupg_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' gnupg 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 2.2.27-3ubuntu2.5", "stderr": "" } }, { "name": "package_lsb-release_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' lsb-release 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 11.1.0ubuntu4", "stderr": "" } }, { "name": "package_ufw_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' ufw 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 0.36.1-4ubuntu0.1", "stderr": "" } }, { "name": "package_nginx_installed", "status": "PASS", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' nginx 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 1.18.0-6ubuntu14.16", "stderr": "" } }, { "name": "docker_command_exists", "status": "PASS", "evidence": { "cmd": "command -v docker 2>/dev/null", "exit_code": 0, "stdout": "/usr/bin/docker", "stderr": "" } }, { "name": "docker_package_installed", "status": "PASS", "evidence": { "docker-ce": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' docker-ce 2>/dev/null", "exit_code": 1, "stdout": "", "stderr": "" }, "docker.io": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' docker.io 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 29.1.3-0ubuntu3~22.04.2", "stderr": "" } } }, { "name": "nginx_command_exists", "status": "PASS", "evidence": { "cmd": "command -v nginx 2>/dev/null", "exit_code": 0, "stdout": "/usr/sbin/nginx", "stderr": "" } }, { "name": "ssh_service_active", "status": "PASS", "evidence": { "cmd": "systemctl is-active ssh 2>/dev/null || systemctl is-active sshd 2>/dev/null", "exit_code": 0, "stdout": "active", "stderr": "" } }, { "name": "nginx_service_known", "status": "PASS", "evidence": { "cmd": "systemctl is-enabled nginx 2>/dev/null; systemctl is-active nginx 2>/dev/null", "exit_code": 0, "stdout": "enabled\nactive", "stderr": "" } }, { "name": "ufw_status_readable", "status": "PASS", "evidence": { "cmd": "ufw status 2>/dev/null", "exit_code": 0, "stdout": "Status: inactive", "stderr": "" } }, { "name": "listening_ports_readable", "status": "PASS", "evidence": { "cmd": "ss -lntp 2>/dev/null | head -n 120", "exit_code": 0, "stdout": "State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess \nLISTEN 0 511 0.0.0.0:80 0.0.0.0:* users:((\"nginx\",pid=179644,fd=6),(\"nginx\",pid=179643,fd=6),(\"nginx\",pid=179642,fd=6),(\"nginx\",pid=179641,fd=6),(\"nginx\",pid=179640,fd=6),(\"nginx\",pid=179639,fd=6),(\"nginx\",pid=179637,fd=6))\nLISTEN 0 128 0.0.0.0:22 0.0.0.0:* users:((\"sshd\",pid=708,fd=3)) \nLISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:((\"systemd-resolve\",pid=625,fd=14)) \nLISTEN 0 4096 127.0.0.1:36051 0.0.0.0:* users:((\"containerd\",pid=179098,fd=15)) \nLISTEN 0 511 [::]:80 [::]:* users:((\"nginx\",pid=179644,fd=7),(\"nginx\",pid=179643,fd=7),(\"nginx\",pid=179642,fd=7),(\"nginx\",pid=179641,fd=7),(\"nginx\",pid=179640,fd=7),(\"nginx\",pid=179639,fd=7),(\"nginx\",pid=179637,fd=7))\nLISTEN 0 128 [::]:22 [::]:* users:((\"sshd\",pid=708,fd=4))", "stderr": "" } }, { "name": "apt_update_evidence_present", "status": "PASS", "evidence": { "update_success_stamp": { "exists": "YES", "path": "/var/lib/apt/periodic/update-success-stamp", "mode": "0o644", "uid": 0, "gid": 0, "size": 0, "mtime": "2026-07-03T00:56:39+0200", "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" }, "upgrade_stamp": { "exists": "YES", "path": "/var/lib/apt/periodic/upgrade-stamp", "mode": "0o644", "uid": 0, "gid": 0, "size": 0, "mtime": "2026-07-03T06:50:11+0200", "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" }, "apt_lists_recent": { "cmd": "find /var/lib/apt/lists -type f -printf '%T@ %p\\n' 2>/dev/null | sort -nr | head -n 12", "exit_code": 0, "stdout": "1783024633.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_InRelease\n1783022107.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_main_binary-amd64_Packages\n1783022107.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_InRelease\n1783020036.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_universe_cnf_Commands-amd64\n1783019922.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_main_cnf_Commands-amd64\n1783017756.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_universe_binary-amd64_Packages\n1783011254.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_universe_binary-amd64_Packages\n1783011254.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_main_binary-amd64_Packages\n1782998977.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_restricted_i18n_Translation-en\n1782998977.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_restricted_binary-amd64_Packages\n1782998977.0000000000 /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_jammy-security_main_i18n_Translation-en\n1782989413.0000000000 /var/lib/apt/lists/archive.ubuntu.com_ubuntu_dists_jammy-updates_restricted_i18n_Translation-en", "stderr": "" } } }, { "name": "apt_history_evidence_present", "status": "PASS", "evidence": { "searched_paths": [ "/var/log/apt/history.log", "/var/log/apt/history.log.1.gz", "/var/log/apt/term.log", "/var/log/apt/term.log.1.gz", "/var/log/dpkg.log", "/var/log/dpkg.log.1" ], "apt_log_payload": [ { "path": "/var/log/apt/history.log", "stat": { "exists": "YES", "path": "/var/log/apt/history.log", "mode": "0o644", "uid": 0, "gid": 0, "size": 3398, "mtime": "2026-07-03T06:50:03+0200", "sha256": "5663faffc5242c8950664ac65d53b922d419d634e9ca372c6bcd68ca83f27cf5" }, "tail_sha256": "5663faffc5242c8950664ac65d53b922d419d634e9ca372c6bcd68ca83f27cf5", "contains_commandline": "YES", "contains_upgrade": "YES", "contains_install": "YES", "contains_configure": "NO" }, { "path": "/var/log/apt/history.log.1.gz", "stat": { "exists": "YES", "path": "/var/log/apt/history.log.1.gz", "mode": "0o644", "uid": 0, "gid": 0, "size": 1925, "mtime": "2026-06-30T06:05:45+0200", "sha256": "0ba43c0157b0a114400078edd765c8498057df7fbbcd4cf4caee651ab3aa9875" }, "tail_sha256": "917f0d13ee4c9f48dd4adee629eca86f5ecb6bf2b1c3ae51795082ffe103b012", "contains_commandline": "YES", "contains_upgrade": "YES", "contains_install": "YES", "contains_configure": "NO" }, { "path": "/var/log/apt/term.log", "stat": { "exists": "YES", "path": "/var/log/apt/term.log", "mode": "0o640", "uid": 0, "gid": 4, "size": 16835, "mtime": "2026-07-03T06:50:03+0200", "sha256": "8ab3a10b1131d435939e7a7d7c0073a0a6d9bb610e43c0456e7d7e4f14d9f943" }, "tail_sha256": "8ab3a10b1131d435939e7a7d7c0073a0a6d9bb610e43c0456e7d7e4f14d9f943", "contains_commandline": "NO", "contains_upgrade": "NO", "contains_install": "NO", "contains_configure": "NO" }, { "path": "/var/log/apt/term.log.1.gz", "stat": { "exists": "YES", "path": "/var/log/apt/term.log.1.gz", "mode": "0o640", "uid": 0, "gid": 4, "size": 4497, "mtime": "2026-06-30T06:05:45+0200", "sha256": "6d44f66a429d5f35fd24a077d11852d0f32be7894cd299c085750c1876cb30be" }, "tail_sha256": "c059cd99df5534c23ccbc7f460fd63d0e281ed01dde901a5c5380a5555f44cc3", "contains_commandline": "NO", "contains_upgrade": "NO", "contains_install": "NO", "contains_configure": "NO" }, { "path": "/var/log/dpkg.log", "stat": { "exists": "YES", "path": "/var/log/dpkg.log", "mode": "0o644", "uid": 0, "gid": 0, "size": 28586, "mtime": "2026-07-03T06:50:03+0200", "sha256": "51c83ac8cc58d08d7701cf85be268afbb5136c6aa17a6d4f69969ffc37d453e6" }, "tail_sha256": "51c83ac8cc58d08d7701cf85be268afbb5136c6aa17a6d4f69969ffc37d453e6", "contains_commandline": "NO", "contains_upgrade": "YES", "contains_install": "YES", "contains_configure": "YES" }, { "path": "/var/log/dpkg.log.1", "stat": { "exists": "YES", "path": "/var/log/dpkg.log.1", "mode": "0o644", "uid": 0, "gid": 0, "size": 84284, "mtime": "2026-06-30T06:05:45+0200", "sha256": "f6c75fc4015eb1a38b7daeaa8c446a0b41cd6fc8f9a17b13b37cf0e9ae5e6768" }, "tail_sha256": "f6c75fc4015eb1a38b7daeaa8c446a0b41cd6fc8f9a17b13b37cf0e9ae5e6768", "contains_commandline": "NO", "contains_upgrade": "YES", "contains_install": "YES", "contains_configure": "YES" } ], "package_state_evidence_count": 7, "package_state_evidence": [ { "package": "ca-certificates", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' ca-certificates 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 20260601~22.04.1", "stderr": "" } }, { "package": "curl", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' curl 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 7.81.0-1ubuntu1.25", "stderr": "" } }, { "package": "gnupg", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' gnupg 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 2.2.27-3ubuntu2.5", "stderr": "" } }, { "package": "lsb-release", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' lsb-release 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 11.1.0ubuntu4", "stderr": "" } }, { "package": "ufw", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' ufw 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 0.36.1-4ubuntu0.1", "stderr": "" } }, { "package": "nginx", "status": "installed", "evidence": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' nginx 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 1.18.0-6ubuntu14.16", "stderr": "" } }, { "package": "docker", "status": "installed_or_command_available", "evidence": { "docker_command": { "cmd": "command -v docker 2>/dev/null", "exit_code": 0, "stdout": "/usr/bin/docker", "stderr": "" }, "docker_package": { "docker-ce": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' docker-ce 2>/dev/null", "exit_code": 1, "stdout": "", "stderr": "" }, "docker.io": { "cmd": "dpkg-query -W -f='${Status} ${Version}\\n' docker.io 2>/dev/null", "exit_code": 0, "stdout": "install ok installed 29.1.3-0ubuntu3~22.04.2", "stderr": "" } } } } ], "combined_log_sha256": "c5359e6861ce4db1dbb983d933d9367a342fa03567efd81bd38c541fa431a37f" } } ] }, "message": "Expanded real YEFF AI baseline audit using apt logs, gz logs, dpkg logs, apt stamps, package state and service state." } ], "summary": { "pass_count": 3, "fail_count": 0, "missing_count": 0, "remote_valid_items": 3, "local_only_items": 0, "real_server_baseline_pass_count": 21, "real_server_baseline_fail_count": 0 }, "latest_event_id": "yeffai_execution_item_verify_yeffai_install_step_001_server_baseline_config_expanded_apt_20260703_052214_ed4c1c81", "baseline_audit_status": "PASS", "baseline_promotion_allowed": "YES", "mandatory_failures": [], "apt_expanded_evidence_status": "PASS" }, "rule": "This file is a Waresites cache generated from YEFF AI remote artifact. It is not the execution source of truth.", "baseline_audit_status": "PASS", "baseline_promotion_allowed": "YES", "mandatory_failures": [], "apt_expanded_evidence_status": "PASS", "next_required_action": "VERIFY_YEFFAI_INSTALL_STEP_001_SERVER_BASELINE_CONFIG", "runtime_next_required_action": "VERIFY_YEFFAI_INSTALL_STEP_001_SERVER_BASELINE_CONFIG", "plan_next_required_action": "VERIFY_YEFFAI_INSTALL_STEP_001_SERVER_BASELINE_CONFIG", "ledger_required_next_action": "VERIFY_YEFFAI_INSTALL_STEP_001_SERVER_BASELINE_CONFIG", "step001_closure_status": "PASS", "step001_closed": "YES" }