#1171 Santa: social voting for unknown binaries Issue created by javuto Part of Santa/Workshop parity, building on the Santa sync server from #1142 (

pkg/santa

,

osctrl-tls

sync endpoint, Santa page in the UI). Problem For software many people use, a voting threshold (in the style of Upvote/Workshop) scales better than a central approver. Scope • Per-environment voting config: local threshold (allow for the voter's machine) and global threshold (promote to an environment rule). • Votes recorded per user; one vote per user per binary. • Known-bad binaries (risk engine, blocklist) cannot be promoted. Acceptance • Reaching the global threshold creates one environment-scoped allow rule and audits it. • Depends on: #1168 jmpsec/osctrl