Signed device redemption A1: P-256 ECDSA verify + ES256 APNs provider token

.gitattributes

@@ -24,6 +24,7 @@ ROADMAP.md merge=generated-artifact
 dag/gunbc/stage0/stage0_crate_layout_generated.dag merge=generated-artifact
 dag/gunbc/stage0/stage0_crate_partition_generated.dag merge=generated-artifact
 dag/gunbc/stage0/stage0_executable_assembly_generated.dag merge=generated-artifact
+dag/test/fixture/approval_device_redemption/vectors.json merge=generated-artifact
 docs/design-rung-drops.md merge=generated-artifact
 docs/onboarding.md merge=generated-artifact
 docs/plans/blackjack-onboarding.md merge=generated-artifact

.github/workflows/witnesses.yml

@@ -552,6 +552,7 @@ jobs:
           if [ -e "tools/fabric_ci_fci1_bounded_execution_context.env" ]; then git add "tools/fabric_ci_fci1_bounded_execution_context.env"; else echo "chore-heal: registered generated artifact absent on this tree, not staging: tools/fabric_ci_fci1_bounded_execution_context.env"; fi
           if [ -e "src/v1/stage0/src/gunbc_file_transport_generated.rs" ]; then git add "src/v1/stage0/src/gunbc_file_transport_generated.rs"; else echo "chore-heal: registered generated artifact absent on this tree, not staging: src/v1/stage0/src/gunbc_file_transport_generated.rs"; fi
           if [ -e "tools/whole_corpus_compile_measured_root_demands.json" ]; then git add "tools/whole_corpus_compile_measured_root_demands.json"; else echo "chore-heal: registered generated artifact absent on this tree, not staging: tools/whole_corpus_compile_measured_root_demands.json"; fi
+          if [ -e "dag/test/fixture/approval_device_redemption/vectors.json" ]; then git add "dag/test/fixture/approval_device_redemption/vectors.json"; else echo "chore-heal: registered generated artifact absent on this tree, not staging: dag/test/fixture/approval_device_redemption/vectors.json"; fi
           if [ -e "provisioning/srv1/gunbc-ghrunner.sudoers" ]; then git add "provisioning/srv1/gunbc-ghrunner.sudoers"; else echo "chore-heal: registered generated artifact absent on this tree, not staging: provisioning/srv1/gunbc-ghrunner.sudoers"; fi
           if [ -e "provisioning/srv2/gunbc-ghrunner.sudoers" ]; then git add "provisioning/srv2/gunbc-ghrunner.sudoers"; else echo "chore-heal: registered generated artifact absent on this tree, not staging: provisioning/srv2/gunbc-ghrunner.sudoers"; fi
           if [ -e "provisioning/srv3/gunbc-ghrunner.sudoers" ]; then git add "provisioning/srv3/gunbc-ghrunner.sudoers"; else echo "chore-heal: registered generated artifact absent on this tree, not staging: provisioning/srv3/gunbc-ghrunner.sudoers"; fi

dag/extdeps/android/key_attestation.dag

@@ -0,0 +1,34 @@
+module extdeps.android.key_attestation
+
+import std.types { NonEmptyStr, List }
+import extdeps.external_authority { ExternalAuthority }
+import extdeps.uri { Uri, Https }
+
+// Android Keystore hardware-backed key attestation. A key generated with setAttestationChallenge
+// yields an X.509 chain carrying the KeyDescription extension (OID 1.3.6.1.4.1.11129.2.1.17). The
+// verifier must NOT assume the extension sits in the leaf: it reads the first occurrence in the
+// chain that chains to a trusted root, checks every certificate against Google's revocation list,
+// and trusts the CURRENT set of Google attestation roots (more than one; the page lists them). The
+// extension carries:
+// the attestation challenge, security level (Software / TrustedEnvironment / StrongBox), and the key's
+// authorization list (purpose, userAuthenticationType, per-operation auth, attestationApplicationId
+// naming the package and signing-certificate digests).
+data extdeps_external_authority_anchor: ExternalAuthority = ExternalAuthority {
+  uri: Uri {
+    scheme: Https
+    locator: "source.android.com/docs/security/features/keystore/attestation"
+  }
+}
+
+data key_description_extension_oid: NonEmptyStr = "1.3.6.1.4.1.11129.2.1.17"
+
+type KeymasterSecurityLevel
+  = SecurityLevelSoftware
+  | SecurityLevelTrustedEnvironment
+  | SecurityLevelStrongBox
+
+// Unlike App Attest, Android attests THE DECISION KEY ITSELF, including whether its use requires
+// per-operation biometric authorization -- so no second key is needed to bind app to key.
+type AndroidAttestationChain {
+  certificates_der_b64: List<NonEmptyStr>
+}