v0.3.0: select-model.sh shipped without exec bit; secure-ai-inference fails with status=203/EXEC

[Moonwolf711]

Summary

/usr/libexec/secure-ai/select-model.sh ships without an executable bit, so secure-ai-inference.service fails on ExecStartPre= with status=203/EXEC immediately on first boot.

Reproduction

ls -la /usr/libexec/secure-ai/select-model.sh
# -rw-r--r--   ...  no x bit

sudo systemctl start secure-ai-inference.service
sudo systemctl status secure-ai-inference.service
# Failed with result 'exit-code'
# Process: ... ExecStartPre=/usr/libexec/secure-ai/select-model.sh, status=203/EXEC

Suggested fix

In the RPM/install spec, ensure mode 0755 for everything under /usr/libexec/secure-ai/. Likely a missing %attr(0755, root, root) line in the .spec, or a cp in the build that didn't preserve permissions.

My local workaround

sudo rpm-ostree usroverlay
sudo chmod +x /usr/libexec/secure-ai/select-model.sh

(non-persistent — lost on reboot, which is itself the bug)

🤖 Generated with claude-flow