27 lines
885 B
Forth
27 lines
885 B
Forth
Block 4016
|
|
( zuse.4th - Bootstrap superuser for StarForth ACL )
|
|
( Named for Konrad Zuse, pioneer of programmable computers. )
|
|
( Sole superuser; mints credentials; owns emergency REPL. )
|
|
( Loaded by ACL.4th; must not load before ACL.4th. )
|
|
( FUTURE: Replace with thumbdrive Ed25519 PKI. )
|
|
( HUMAN-REVIEW: capsule hash = root of superuser trust. )
|
|
0 CONSTANT ZUSE-CERT-LO
|
|
0 CONSTANT ZUSE-CERT-HI
|
|
|
|
Block 4017
|
|
( ACL-ZUSE-BOOT ( -- ) )
|
|
( Authenticates zuse session (sets vm->zuse_session=1)
|
|
( via C primitive) and pins zuse capsule words. )
|
|
( ZUSE-AUTHENTICATE is C-only; no FORTH word grants )
|
|
( god-mode except through this boot sequence. )
|
|
: ACL-ZUSE-BOOT ( -- )
|
|
ZUSE-AUTHENTICATE
|
|
['] ZUSE-CERT-LO ACL-PIN
|
|
['] ZUSE-CERT-HI ACL-PIN
|
|
LOG-INFO" zuse: activated"
|
|
['] ACL-ZUSE-BOOT ACL-PIN ;
|
|
|
|
Block 4018
|
|
( Self-activation )
|
|
ACL-ZUSE-BOOT
|