 Linehu
|
506d1b18c6
|
feat: SAS-R0 signature-feature attestation - not-ready means very-early panic
- SAS-E01: scheduler bootstrap failure was "non-fatal" -> panic (O(1)
scheduler must stand up or nothing runs)
- PCKC-E01: boot-time key-derive roundtrip in utsm_init (get_or_derive
probe segment, all-zero key or error -> panic; probe slot invalidated)
- DKM-E04..E07: manifest required-driver failures (module missing /
ELF invalid / symbol scan fail / load fail) -> panic instead of
"abort stage" silent continue
- QEMU verify: pckc derive roundtrip ok, sealed MAC established,
selftest OK, boot reaches wizard, zero spurious panics
[STUB] P0/UTSM SAS-R0 attestation | 剩余STUB命中=101（违规=0） | “特色不是招牌，是性命” | 已提交=<this>
|
2026-10-03 15:49:19 +08:00 |
|