Baseline · Updates & integrity
J-01 Updates are signature-verified
highmanual review
Why it matters
Never auto-executes unverified remote updates.
How to test
Whether update packages are verified before execution.
How to fix
Enforce update signature verification.