Robert Allan JamesandClaude Sonnet 5
b031b802e3
FABRIC.md -> FABRIC-0.md FABRIC-2.md -> FABRIC-1.md FABRIC-3.md -> FABRIC-2.md (the current/living document) FABRIC-4.md unchanged (new #3 to follow separately) Every cross-reference repo-wide updated to match, including doc-comment citations inside kernel source (.c/.h) files -- done via an ordered placeholder substitution (FABRIC-3.md->placeholder2, FABRIC-2.md-> placeholder1, FABRIC.md->placeholder0, then placeholders resolved to final names) in a single pass per file to avoid double-shifting already-renamed references. One line in capsules/font.4th grew past the 64-char block-format limit as a side effect of the longer filename; shortened it and reverified with mkcapsule --lint (34/34 pass) before rebuilding. Verified 3-arch boot to ok> (amd64/aarch64/riscv64, each in the foreground) after the fix; logs and DoE CSVs from this session's verification runs included per this repo's own audit-artifact convention. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019YcT3H2PQeyujrzjqS3Var
47 lines
2.2 KiB
C
47 lines
2.2 KiB
C
/*
|
|
* zuse_genesis_marker.h -- on-disk record format for the system-resident
|
|
* "a root Zuse identity already exists" marker (FABRIC-2.md §F.21),
|
|
* stored in devblock_from_top=0 of the top-of-device system-metadata
|
|
* fence (block_subsystem.h's blk_meta_zone_read()/write(), same location
|
|
* zuse_cert_devblock_t used to occupy).
|
|
*
|
|
* Supersedes zuse_cert_devblock_t (zuse_cert_devblock.h, kept in the repo
|
|
* as historical record, no longer written): that type stored Zuse's own
|
|
* *seed* system-resident. Under the thumbdrive-resident Zuse design
|
|
* (§F.20/§F.21), the seed lives only on Zuse's own minted thumbdrive --
|
|
* this record deliberately holds only her *public* key, enough to (a)
|
|
* know genesis has already happened, so a second blank thumbdrive
|
|
* attached on some later boot never mints a second competing root, and
|
|
* (b) recognize which attached identity is genuinely hers. Losing this
|
|
* fence record is not a security problem (it's not a secret); losing the
|
|
* thumbdrive itself is what actually loses the identity.
|
|
*/
|
|
#ifndef STARKERNEL_ZUSE_GENESIS_MARKER_H
|
|
#define STARKERNEL_ZUSE_GENESIS_MARKER_H
|
|
|
|
#include <stdint.h>
|
|
|
|
#define ZUSE_GENESIS_MARKER_MAGIC \
|
|
((uint32_t)'Z' | ((uint32_t)'G' << 8) | ((uint32_t)'E' << 16) | ((uint32_t)'N' << 24))
|
|
|
|
#define ZUSE_GENESIS_MARKER_VERSION 1u
|
|
|
|
typedef struct {
|
|
uint32_t magic; /* ZUSE_GENESIS_MARKER_MAGIC; anything else means
|
|
* "genesis has not happened yet" (blank/foreign
|
|
* bytes), not a format-corruption error. */
|
|
uint32_t version; /* ZUSE_GENESIS_MARKER_VERSION */
|
|
uint8_t zuse_pubkey[32]; /* Ed25519 public key of the root Zuse
|
|
* identity minted at genesis. No seed here --
|
|
* that lives only on Zuse's own thumbdrive. */
|
|
uint64_t crc; /* CRC-64/ISO (block_subsystem.h's compute_crc64())
|
|
* over every byte of this struct up to (not
|
|
* including) this field. */
|
|
uint8_t _pad[4096 - (4 + 4 + 32 + 8)];
|
|
} zuse_genesis_marker_t;
|
|
|
|
_Static_assert(sizeof(zuse_genesis_marker_t) == 4096,
|
|
"zuse_genesis_marker_t must be exactly one 4 KiB devblock");
|
|
|
|
#endif /* STARKERNEL_ZUSE_GENESIS_MARKER_H */
|