1.24.17 — Reliable firewall proof under reconcile bursts

2026-09-09

MojoSec now keeps legitimate cron-owned firewall reconciliations locally classified even when a full reconcile produces a large burst of process and receipt evidence. It also follows the newest audit-health observation after deployment sequence resets. No migrations, configuration changes, or consumer API changes are required.

Fixed

• MojoSec now correlates firewall broker receipts across high-volume reconciliation bursts instead of expiring legitimate JobEngine work as unexplained sudo activity.
• Post-deployment audit health is selected by observation time, so a restarted publisher sequence cannot leave stale pre-deploy health authoritative.