Which package actually installs?

Set both versions and the index mode, then watch the resolver decide — the same choice pip install acme-internal-utils makes in Task 2, computed live from the real rule, not looked up.

Private index

acme-internal-utils

Public index

acme-internal-utils (attacker's)

Resolver mode

Resolver decision