build: a Release build of a real board refuses to configure without a production trust anchor by Kartikey1306 · Pull Request #122 · embeddedos-org/eBoot

fix: repair master after the 09-07 batch merge

Kartikey1306

committed

35280b5

test(imgpack): pass the version as --version=X so argparse never sees -1.0.0 as an option

Kartikey1306

committed

2b30fd7

test(fw_update): pin the fixture header to its generator

Kartikey1306

committed

a95400f

docs: record the install-path check ordering as ADR-020 and log the repair

Kartikey1306

committed

edfbaed

docs: state the Valgrind gap and the ADR's provenance exactly

Kartikey1306

committed

b01e9ce

test(fw_update): exercise the stale-header report, not only the match

Kartikey1306

committed

e152d8e

fix(keystore): the compiled-in dev trust anchor was not a point on the curve

Kartikey1306

committed

547ab9f

test(keystore): compare the anchor against the generated fixture key, and record the behaviour change

Kartikey1306

committed

ef5b70d

build: a Release build of a real board refuses to configure without a production trust anchor

Kartikey1306

committed

f8afc12

ci(release): pass the production anchor, and refuse an artifact that embeds the development key

Kartikey1306

committed

2096bc3

test: pin the production-anchor gate, the release workflow, and the production keystore

Kartikey1306

committed

58f8216

docs: key lifecycle and changelog for the production anchor

Kartikey1306

committed

700da34

test: drive the workflow guard with a synthetic document so its branches run on a green tree

Kartikey1306

committed

b26c45a

build: gate every release-shaped build type, and refuse a key the verifier would

Kartikey1306

committed

a7d3500

ci(build): the STM32F4 compile check opts into the development key

Kartikey1306

committed

17709bd

ci(release): one artifact scanner that decodes what it scans, in place of six copies

Kartikey1306

committed

a17d272

build: a production key that cannot be checked is refused, not warned about

Kartikey1306

committed

723a631

build: cross-compile the production-key branch before a tag, and say which way a bad key fails

Kartikey1306

committed

7ddc735

ci(build): the production-key proof step looks for .obj too

Kartikey1306

committed

e5dbbb4

ci(release): scan .obj as well as .o, and say what the key check cannot catch

Kartikey1306

committed

a50df28

docs(key_lifecycle): state the typo-collision rate as the derivable one, not one key's count

Kartikey1306

committed

18fab20

Navigation Menu

Repository navigation

build: a Release build of a real board refuses to configure without a production trust anchor - #122

build: a Release build of a real board refuses to configure without a production trust anchor#122
srpatcha merged 21 commits into
embeddedos-org:masterfrom
Kartikey1306:fix/production-trust-anchor-is-structural

Commits on Sep 15, 2026

fix: repair master after the 09-07 batch merge

test(imgpack): pass the version as --version=X so argparse never sees -1.0.0 as an option

test(fw_update): pin the fixture header to its generator

docs: record the install-path check ordering as ADR-020 and log the repair

docs: state the Valgrind gap and the ADR's provenance exactly

test(fw_update): exercise the stale-header report, not only the match

fix(keystore): the compiled-in dev trust anchor was not a point on the curve

test(keystore): compare the anchor against the generated fixture key, and record the behaviour change

build: a Release build of a real board refuses to configure without a production trust anchor

ci(release): pass the production anchor, and refuse an artifact that embeds the development key

test: pin the production-anchor gate, the release workflow, and the production keystore

docs: key lifecycle and changelog for the production anchor

test: drive the workflow guard with a synthetic document so its branches run on a green tree

build: gate every release-shaped build type, and refuse a key the verifier would

ci(build): the STM32F4 compile check opts into the development key

ci(release): one artifact scanner that decodes what it scans, in place of six copies

build: a production key that cannot be checked is refused, not warned about

build: cross-compile the production-key branch before a tag, and say which way a bad key fails

ci(build): the production-key proof step looks for .obj too

ci(release): scan .obj as well as .o, and say what the key check cannot catch

docs(key_lifecycle): state the typo-collision rate as the derivable one, not one key's count