ba1212361f
Commit the previously-untracked standard directories and catalog them in the
root README alongside proof:
- aac/ — communication cargo class: portable boards + a ten-level
offline-first cascade (Apache-2.0 code / CC-BY-4.0 spec).
- map/ — geospatial cargo class: range-requestable signed tilesets +
an F0–F4 fidelity cascade (Apache-2.0 code / CC-BY-4.0 spec).
- sandbox/— isolated, metered, attested execution across the heterogeneous
compute fabric (Apache-2.0 code / CC-BY-4.0 spec).
- jouleclaw-otel-authz, jouleclaw-trust — new jouleclaw reference crates.
Root README now lists aac, map, sandbox, and proof in the catalog, the tree,
and the contribution guide.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
69 lines
9 KiB
JSON
69 lines
9 KiB
JSON
{
|
|
"tee": [
|
|
{
|
|
"note": "valid SEV-SNP report verifies against policy + VCEK",
|
|
"report_hex": "020000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000637aacc77996e1579ce17c216d5f6cdf53c2f537cdb75cc4389ca5cdcfff2d1b77c90e49e31411f404e69ed15f3a87f20000000000000000000000000000000000000000000000004858ce841fd7ef470272d1171713c01af0b042e00b7cebeb2ac38c86166ff03d970181fd898e2ff61cf90c29e5a09a260000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
|
|
"vcek_sec1_hex": "04aabb0fb0666acfcf01fad52bfcfd4c2bf2cb3c3497de73950e5819b61fe695098741c8c491439b34a0431caffe5bf9b4c1c8e8ae0001f9f4dc8ad82c59f3639e96cd6c3d4db0cefec26c3d62517b37761372743f8e8add77b10064f2abe5e050",
|
|
"measurement_hex": "111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111",
|
|
"expect_valid": true
|
|
},
|
|
{
|
|
"note": "report rejected: launch measurement does not match policy",
|
|
"report_hex": "020000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000637aacc77996e1579ce17c216d5f6cdf53c2f537cdb75cc4389ca5cdcfff2d1b77c90e49e31411f404e69ed15f3a87f20000000000000000000000000000000000000000000000004858ce841fd7ef470272d1171713c01af0b042e00b7cebeb2ac38c86166ff03d970181fd898e2ff61cf90c29e5a09a260000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
|
|
"vcek_sec1_hex": "04aabb0fb0666acfcf01fad52bfcfd4c2bf2cb3c3497de73950e5819b61fe695098741c8c491439b34a0431caffe5bf9b4c1c8e8ae0001f9f4dc8ad82c59f3639e96cd6c3d4db0cefec26c3d62517b37761372743f8e8add77b10064f2abe5e050",
|
|
"measurement_hex": "222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222",
|
|
"expect_valid": false
|
|
},
|
|
{
|
|
"note": "report rejected: tampered body fails the ECDSA-P384 signature",
|
|
"report_hex": "020000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000637aacc77996e1579ce17c216d5f6cdf53c2f537cdb75cc4389ca5cdcfff2d1b77c90e49e31411f404e69ed15f3a87f20000000000000000000000000000000000000000000000004858ce841fd7ef470272d1171713c01af0b042e00b7cebeb2ac38c86166ff03d970181fd898e2ff61cf90c29e5a09a260000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
|
|
"vcek_sec1_hex": "04aabb0fb0666acfcf01fad52bfcfd4c2bf2cb3c3497de73950e5819b61fe695098741c8c491439b34a0431caffe5bf9b4c1c8e8ae0001f9f4dc8ad82c59f3639e96cd6c3d4db0cefec26c3d62517b37761372743f8e8add77b10064f2abe5e050",
|
|
"measurement_hex": "111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111",
|
|
"expect_valid": false
|
|
}
|
|
],
|
|
"audit": {
|
|
"note": "a valid hash-chained audit log verifies",
|
|
"log": {
|
|
"head": [
|
|
74,
|
|
30,
|
|
24,
|
|
126,
|
|
145,
|
|
33,
|
|
68,
|
|
58,
|
|
238,
|
|
108,
|
|
96,
|
|
221,
|
|
0,
|
|
160,
|
|
14,
|
|
230,
|
|
36,
|
|
204,
|
|
245,
|
|
54,
|
|
110,
|
|
83,
|
|
254,
|
|
170,
|
|
219,
|
|
144,
|
|
189,
|
|
12,
|
|
136,
|
|
166,
|
|
141,
|
|
198
|
|
],
|
|
"entries": [
|
|
"b3:J9cldrZYgCUdhNB0yzs_brzqY4cFA_WeVkH900vyspU",
|
|
"b3:Ss1jwxOYeO3jsWa4JYY-pH1UWUw2zXWIZ6QfjSV_L3E"
|
|
]
|
|
},
|
|
"expect_valid": true
|
|
}
|
|
}
|