Firefox strict trust mechanism results

Finite harness prerequisite at 04349aafcbcbf9e670c82e6ea6701469d441cf65, Firefox 157.0.1. This is not packaged console acceptance, owner enrollment, or physical authenticator certification.

The actual trusted origin was secure. The wrong-SAN and untrusted-CA cases returned the exact browser NSS errors (SSL_ERROR_BAD_CERT_DOMAIN, SEC_ERROR_UNKNOWN_ISSUER) before any HTTP request. All four below exited 0 and their resource receipts confirmed stop. Tools remained immutable, the owned child guardian was empty, and TLS/profile cleanup completed.

All commands used the registered outer driver, which invokes the required resource launcher; DATA-only storage, 1 GiB reservation, strict whole-drive census and serial execution. Native root 5/6 GiB, no swap, 1536 tasks, 200% CPU; browser 850 MiB/1 GiB, no swap, 512 tasks. Inner deadline 180 seconds. Exact plan candidate-build-fresh-8fb6f413179b-01/firefox-trust-preflight-05.json SHA-256 7a9d5231ccbb7623b3fa1ee69f609fbbed7391feb7e9d9adf2847b07b78534e1.

Actual commands and receipts

• firefox-trust-source-03: exit 0, finished 2026-10-15T21:33:15.081285+00:00. Outer JSON SHA-256 8f12cdaf008de42a8a4297bb60bd69c39e205e4c6387d405de75cd6c8973ad57; resource receipt SHA-256 18e3c306ea19112f59763487820c0dd6dedfe71614a0da11fa89839545811d19, stop confirmed True.

python3 -B /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/run-step-firefox-trust-05.py firefox-trust-source-03 1073741824 env PYTHONPATH=tools/qualification:tools python3 -B -m unittest -v test_console_firefox test_console_bridge

• firefox-trust-trusted-04: exit 0, finished 2026-10-15T21:33:31.972742+00:00. Outer JSON SHA-256 d10f234cb9b871bbbd45462d2dfeb0bb52a2468df60fa4f1f1fd39560a8c6784; resource receipt SHA-256 bc699dbe528b79361e51d732381d8e83ce9a1b157c38e5b5d5258c88a3b00456, stop confirmed True.

python3 -B /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/run-step-firefox-trust-05.py firefox-trust-trusted-04 1073741824 --delegate env PYTHONPATH=tools/qualification:tools python3 -B tools/qualification/console_firefox_trust.py --case trusted --out /run/media/kmosoti/data/FabricO11y/results/firefox-trust-trusted-04 --pins /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/firefox-trust-tools-02.json --pins-sha256 6cd294d75d02fe0d6637bbf3b7ba91d6fd4eb89b45f94027b6071d91b5256b40

• firefox-trust-wrong-san-02: exit 0, finished 2026-10-15T21:33:45.820926+00:00. Outer JSON SHA-256 83cb9be3e6f77a0f3df9e5363ac9978bb7217d28fd0136725de5fcd96ad94968; resource receipt SHA-256 650e9c7ae4a8654b2915fbbdee365ed1cade5a2a6b5422da6d262bc9c72af270, stop confirmed True.

python3 -B /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/run-step-firefox-trust-05.py firefox-trust-wrong-san-02 1073741824 --delegate env PYTHONPATH=tools/qualification:tools python3 -B tools/qualification/console_firefox_trust.py --case wrong-san --out /run/media/kmosoti/data/FabricO11y/results/firefox-trust-wrong-san-02 --pins /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/firefox-trust-tools-02.json --pins-sha256 6cd294d75d02fe0d6637bbf3b7ba91d6fd4eb89b45f94027b6071d91b5256b40

• firefox-trust-untrusted-ca-01: exit 0, finished 2026-10-15T21:33:58.753405+00:00. Outer JSON SHA-256 f7cdbbc7c7a776b9728c35ff4ebba70bec8ea2e58e2556f1e56f58aff8a3bfbc; resource receipt SHA-256 e8343a93d2f13207993eb1c519d435250d775b94f8ff4e724c3ce47178b155c1, stop confirmed True.

python3 -B /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/run-step-firefox-trust-05.py firefox-trust-untrusted-ca-01 1073741824 --delegate env PYTHONPATH=tools/qualification:tools python3 -B tools/qualification/console_firefox_trust.py --case untrusted-ca --out /run/media/kmosoti/data/FabricO11y/results/firefox-trust-untrusted-ca-01 --pins /run/media/kmosoti/data/FabricO11y/results/candidate-build-fresh-8fb6f413179b-01/firefox-trust-tools-02.json --pins-sha256 6cd294d75d02fe0d6637bbf3b7ba91d6fd4eb89b45f94027b6071d91b5256b40

Preserved failures and causal correction

trusted-01 preserved a generic startup failure. Added bounded capability diagnostics in trusted-02 identified the stale expected 157.0 browser label: actual capabilities and installed package reported 157.0.1. Exact maintenance-version pins were corrected and strengthened to the complete Firefox file/link inventory, without changing strict certificate verification.

wrong-san-01 exited 2 because its observer scraped light-DOM text while Firefox 157 exposes the certificate error in net-error-card.errorInfo. Its observed generic certificate-page URI was never accepted as a specific refusal. The correction waits at most five seconds for the actual browser error model and retains the unchanged exact NSS-code assertions. Source controls ensure a generic page cannot become an accepted specific refusal. The earlier positive trusted-03 remains valid at its own revision; current trusted-04 reran at the corrected observer revision.

The actual model access is also used in Mozilla's certificate-error UI test. No browser trust bypass, certificate exception, or failure reclassification was introduced. All failures and prior plans remain on DATA. Actual replacement-package browser acceptance remains pending.