PSS: safe provider download during init (interactive mode only)#38205

Open

SarahFrench wants to merge 13 commits intomainfrom

pss/safe-provider-download-during-init

Commits on Mar 9, 2026

feat: Add -safe-init flag to init command, including validation of use with experiments and mutually-exclusive flags
SarahFrench
committed
test: Remove temporary test case, update test names when testing init in an uninitialised directory
SarahFrench
committed
feat: implement safe init security features when PSS is used while input is enabled
SarahFrench
committed
feat: Show all preferred hashes for a provider in the prompt to users, update tests to assert hashes are in the prompt.
SarahFrench
committed
test: Add test showing that upgrading a provider via HTTP triggers the new security features
SarahFrench
committed
test: Update test to show that init -upgrade fails when -safe-init isn't provided, and passes when the flag is present.
SarahFrench
committed
feat: Show users the platform that the provider is going to be used with, to help when interpreting hashes
SarahFrench
committed
feat: Update user prompt text when asking whether to trust a downloaded provider
SarahFrench
committed
docs: Update code comment to say what scenarios a provider could not be downloaded in.
SarahFrench
committed
Update output when provider is accepted/rejected, update test assertions, add test showing provider being rejected
SarahFrench
committed
Replace "state storage provider" with "state store provider" in user-facing errors, and in test names
SarahFrench
committed
Add provider address to error telling users to use the new flag when downloading a state store provider
SarahFrench
committed

Commits on Mar 10, 2026

feat: Enable access to decl range for the required_providers entry used in PSS. This is used during errors related to verifying the provider's installation
SarahFrench
committed