# FriiDump Candidate15 Linux Build Hygiene

## Purpose

Candidate15 preserves Candidate14's explicit Linux `CAP_SYS_RAWIO` contract and
least-privilege authorization workflow while correcting two issues exposed by
the first user-side Candidate14 build.

## Corrections

1. The Linux validator now clamps only source files whose modification times are
   in the future before CMake configuration. This prevents archive time-zone
   metadata from causing GNU Make `Clock skew detected` warnings.
2. The production raw-I/O preflight no longer uses a potentially truncating
   `snprintf` fallback for the executable path.
3. The native-report authorization note buffer was enlarged so the complete
   supported Linux path length fits without `-Wformat-truncation` diagnostics.
4. Source-package ZIP member timestamps are normalized to a stable past date.

## Preserved authorization behavior

- A normal Linux build never silently runs `sudo` or installs capabilities.
- Vendor-command paths require effective `CAP_SYS_RAWIO`.
- FriiDump refuses whole-process root execution for those paths.
- The explicit capability phase applies only `cap_sys_rawio=ep` to the exact
  validated executable and verifies it with `getcap`.
- Rebuilding or replacing the executable clears the capability.

## Acceptance boundary

Candidate15 requires clean Linux and Windows builds, explicit capability
installation on the exact Linux executable, and one short GCC-4244 B101 live
smoke proving the runtime preflight and seed path.