Trust Anchor Reconnaissance — BPO Attack Surface Analysis

RECONNAISSANCE.md documents the attack surface analysis of build.postmarketos.org infrastructure. Attack Surfaces Analyzed /api/public/update-job-status (CRITICAL - No auth) /api/job-callback/build-package (Token theft risk) /api/job-callback/sign-index (Pre-signed injection) /api/push-hook/gitlab (Webhook forgery) State machine bypass vectors Token theft/reuse patterns Part of the Trust Anchor framework for persistent threat environments.