Restamp the trust ledger over the enrolled keystore

nonos-sync commented

2026-09-11 11:23:12 -04:00

Member

The re-enrollment commit replaced every trust artifact but kept the ledger stamped over the previous tree, so a checksum pass over a clean checkout refuses 295 of 320 entries. This restamps MANIFEST.sha256 over the committed tree with the standard recipe: 371 artifacts, all verifying. Pinned by NON-OS/nonos-micro-kernel#470.

Opened on GitHub by eKisNonos as pull request 1. Review and merge happen there while this repository is kept in step from GitHub; this copy follows it, and is marked merged or closed when it is.

The re-enrollment commit replaced every trust artifact but kept the ledger stamped over the previous tree, so a checksum pass over a clean checkout refuses 295 of 320 entries. This restamps MANIFEST.sha256 over the committed tree with the standard recipe: 371 artifacts, all verifying. Pinned by NON-OS/nonos-micro-kernel#470. --- Opened on GitHub by eKisNonos as [pull request 1](https://github.com/NON-OS/nonos-trust-keystore/pull/1). Review and merge happen there while this repository is kept in step from GitHub; this copy follows it, and is marked merged or closed when it is.

nonos-sync added 4 commits

2026-09-11 11:23:12 -04:00

trust: add browser release publisher keys cc90961f2f

wallpapers: add the nonos dev wallpaper 2403f70045

trust: re-enroll the capsule keystore under a private attestation seed 6a6be21a48

Regenerate the whole capsule trust set so the transparent attestation root is
enrolled from a held secret rather than the public evaluation seed, and add the
RTL8821CE Wi-Fi driver as a first-class signed capsule. Every capsule keeps a
hybrid Ed25519 + ML-DSA-65 publisher key, a certificate issued by the trust
anchor, a manifest bound to its payload, and a membership trailer against the new
root. Only public material is tracked here; the enrollment and signing seeds stay
offline. CUSTODY.md documents the mint, enroll, verify, and rotation ceremony.

trust: restamp the ledger over the enrolled keystore aa8a78ab40

The keystore re-enrollment replaced every trust artifact but kept the
ledger stamped over the previous tree, so the manifest check refused
295 of 320 entries on any clean checkout. Stamp the ledger over the
committed tree with the standard recipe: 371 artifacts, all verified.

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin +refs/pull/1/head:nonos-sync/gh-1

git switch nonos-sync/gh-1

Rows
Columns

Restamp the trust ledger over the enrolled keystore #1

Checkout