Repository navigation

PXE-FABRIC 0B: R2 boot-origin bucket purpose, digest-keyed publish + custom-domain readback folds - #11603

Merged

gunbai-bot[bot] merged 72 commits into

mainfrom

session/nimble-seal-721

Sep 19, 2026

Commits on Sep 18, 2026
- Establish fleet HTTPS network-boot as a join of the existing four-axis carrier.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  658a04d
- Bind network-boot join to existing architecture and DHCP authorities.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  041ccc9
- Keep the 0WET subject a parameter: propose Mt. Jade, not a minted UnitKey.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  a09d8af
- Consume the predecessor census in the network-boot join.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  a3bbed8
- Spell the census optional as Present, not some.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  f26c63c
- 0B: boot-origin bucket purpose, digest-keyed publish and readback folds (WIP)
  
  Brian Searls
  and
  claude
  committed
  d38bb75
- Merge session/sleek-carp-159 (0A f26c63c43c)
  
  Brian Searls
  and
  claude
  committed
  1525462
- Address review 67724: locate join refusals, consume DHCP arch coproduct.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  4abce24
- Address review 67731: evidence kind on receipts, refuse as its own arm.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  3920838
- Import String from std.string_type in extdeps.linux.edac.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  74ee25d
- Import String from std.string_type in extdeps.linux.edac.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  4fced1e
- 0B: public-bucket secret refusal, TLS-only readback via extdeps.uri uri_scheme_is_https
  
  Brian Searls
  and
  claude
  committed
  a2f4d7d
- Merge remote-tracking branch 'origin/session/nimble-seal-721' into session/nimble-seal-721
  Brian Searls
  committed
  0a2fd41
- Merge commit '74ee25d8d73' into session/nimble-seal-721
  Brian Searls
  committed
  a7ec740
- Establish artifacts only from a verified ticket, against observed time.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  3572a10
- Keep site architecture refusal located on the delivery join.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  e18a3eb
- Locate MAC-refused tickets on the artifacts axis; restate the join frontier.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  926e897
- 0B: integrate 0A 74ee25d8d7 (census retired); r2.dev refusal carries the transcribed citation
  
  Brian Searls
  and
  claude
  committed
  f399007
- Merge commit '926e897a6cb' into session/nimble-seal-721
  Brian Searls
  committed
  84564a8
- Refuse observed join mismatches; do not report them as missing axes.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  5ef8028
- Distinguish HMAC firmware-class refusal from architecture.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  73e18ae
- Make predecessor observations a distinct standing, not a field.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  cf0c207
- 0B: address reviews 67757 and 67763 (derive admission from BucketPurpose, R2Origin* carrier, http red on the real fold, canonical-host readback, drop unread cache row)
  
  Brian Searls
  and
  claude
  committed
  a35d99d
- Merge remote-tracking branch 'origin/session/sleek-carp-159' into session/nimble-seal-721
  Brian Searls
  committed
  e9e9036
- Join the site chainloader and fleet signing key, and return both witness matches.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  c98dad9
- Join bootstrap trust and locate a missing site separately from missing fleet.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  4e85b0d
- Drop join architecture refusals that first_slice already makes unwritable.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  3093291
- Stop re-deriving DHCP class after the join has already required UefiArm64.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  06ecfd8
- Merge remote-tracking branch 'origin/session/sleek-carp-159' into session/nimble-seal-721
  Brian Searls
  committed
  4f50843
- 0B: drop evidence_class from the receipt fixture (review 67796); http red through extdeps.uri uri_http
  
  Brian Searls
  and
  claude
  committed
  5a39cb7
- Delete unused discovery-hint and join-architecture constructors.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  42c877a
- Split client, chainloader, and ticket architecture refusals.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  c01af8b
- Keep site, fleet, manifest identity, and trust grade on an established delivery.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  c9d199a
- Fix extra whitespace in the controlled-trust join witness.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  33d4b6c
- Consume DhcpBootDirection for site discovery instead of renaming Native/Proxy.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  7207225
- 0B: review 67822 -- host via extdeps.dns.domain_name, census frontier rows for the unexecuted folds, create-only derived from purpose admission in the object executor
  
  Brian Searls
  and
  claude
  committed
  e5d71f9
- Merge remote-tracking branch 'origin/session/sleek-carp-159' into session/nimble-seal-721
  Brian Searls
  committed
  6911343
- Put ClientNetworkBootMode on the signed ticket identity and join it to DHCP class.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  3dc0ce0
- Mint bootstrap trust from independent HTTPS and Secure Boot observations.
  
  gunbc-ci-auto-heal
  and
  cursoragent
  committed
  8632d66
- 0B: boot credentials get a distinct no-mint-entry arm; join_network_boot_delivery frontier as a typed FrontierRow (reviews 67861, 67884)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  2814497
- Merge origin/main
  gunbc-ci-auto-heal
  committed
  76ad7cf
- Ground production bootstrap trust in a grounds coproduct and derive the establishment's axes from its receipts
  
  Brian Searls
  and
  claude
  committed
  7e02e27
- Restore the extdeps.uri import that the axis-refusal commit overwrote
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  a16ed27
- 0B: move the MintEntryUnbuilt annotation to module grain (parse refusal); regenerate extdeps_uri.rs stage0 mirror
  
  Brian Searls
  and
  claude
  committed
  4af08e9
- network_boot_delivery: compare SiteIdentity through site_identity_eq beside the brand (review 67927)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  92f828b
- network_boot_delivery: ObservedDhcpPxeClient annotation states what the join admits (review 67925)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  733dce9
- boot_origin: digest equality consumes std.content_hash content_hash_eq_cryptographic (review 67935)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  c9f9940
- network_boot_delivery: the join's unexecuted production route is a typed FrontierRow (review 67884)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  014b358
- 0B: take the 0A edits (network_boot_delivery frontier row + census registration) back out of #11603; review 67884 lands on #11602
  
  Brian Searls
  and
  claude
  committed
  25cf69d
- network_boot_delivery: manifest receipt on the establishment; site mismatch names its axis (review 67939)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ac525e6
- 0B: regenerate extdeps_uri.rs stage0 mirror over main's uri_from_wire
  
  Brian Searls
  and
  claude
  committed
  38ecdba
- 0A: trust grounds bound to boot mode and subject; route identity; bundle availability (HOLD at ac525e6)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  6d5ad44
- Merge 0A 6d5ad44 (BootBundleAvailabilityReceipt) into 0B
  
  Brian Searls
  and
  claude
  committed
  b68a9d9
- 0B: resolve the r2.dag conflict left in b68a9d934e (keep the cited custom-domain reading the r2.dev refusal consumes)
  
  Brian Searls
  and
  claude
  committed
  ce82c5b
- network_boot_delivery: optional if-branches return none, not Absent
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  35c32bc
- 0B: state uri_http's consumer and route (review 67977 advisory)
  
  Brian Searls
  and
  claude
  committed
  68b863d
- Merge commit '35c32bc4c9' into session/nimble-seal-721
  Brian Searls
  committed
  92c158e
- 0A: trust admission as a closed result; established trust has no ungrounded arm; drop producerless verification classes
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  15a2efc
- Merge commit '15a2efc' into session/nimble-seal-721
  Brian Searls
  committed
  11085dd
Commits on Sep 19, 2026
- 0A: one discriminating witness per refusal arm (review 67992); one manifest window adjudicator (review 67998)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  76253ce
- 0A: closed manifest window result (review 68020); observed bundle refusals are refused, not missing (review 68011)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  c3ad4cc
- Merge commit 'c3ad4cc' into session/nimble-seal-721
  Brian Searls
  committed
  86bb969
- network_boot_delivery: BootBundleAvailabilityStanding's producer is a declared frontier (review 68042)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  656bf7a
- 0B: boot_bundle_availability produces 0A BootBundleRefused per observed cause; drop uri_http (review 68042)
  
  Brian Searls
  and
  claude
  committed
  d066843
- network_boot_delivery witness: production fixture's ground is Secure Boot (CI red on 656bf7a)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  bee93bc
- Merge commit 'bee93bc' into session/nimble-seal-721
  Brian Searls
  committed
  323b431
- network_boot_delivery: signing_key_identity is MacKeyId, compared branded (review 68100)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  95fb87e
- Merge commit '95fb87e7' into session/nimble-seal-721
  Brian Searls
  committed
  f1d9067
- 0B: served_from is the observed readback origin (review 68098); MacKeyId fixture for 0A 95fb87e7; state why uri_scheme_is_https is a named match (review 68134)
  
  Brian Searls
  and
  claude
  committed
  c3bd339
- 0B: compare the readback scheme to extdeps.uri.Https; delete uri_scheme_is_https (review 68166)
  
  Brian Searls
  and
  claude
  committed
  45911b8
- 0B: witness observation refs cite declarations that exist (floor CITED-DECLARATION-ABSENT)
  
  Brian Searls
  and
  claude
  committed
  6a1feaf
- Merge origin/main (#11602 landed) into 0B; keep the boot_origin frontier registration beside 0A's
  
  Brian Searls
  and
  claude
  committed
  116d76d

Commits

Commits on Sep 18, 2026

Commits on Sep 19, 2026