4. No Version Lock or Artifact Integrity

4. No Version Lock or Artifact Integrity

Tools or agents update silently over time, especially from Git-based pulls. Tech Detail:

• No tool.lock or SHA256 pinned tool_bundle.tgz
• Mutable containers load latest logic on restart

Exploit Potential:

• Attacker performs Git push to alter agent execution chain
• Regression bugs or backdoors introduced silently

Mitigation:

• Use hash-based locking (e.g., tool.yaml + tool.hash)
• Validate with SHA256 at runtime using sigstore or Notary