nx_cmos_signed.nx

nx_cmos_signed.nx -- AUTHENTICATED CMOS config recovery (rung 7 CMOS x rung 8 capsule). module: nishi-core.genealogy.cmos_signed capability: CORE_COMPUTE (recover CMOS only from a platform-SIGNED golden snapshot) nx_cmos kept a golden snapshot for restore -- but a checksum-valid golden could still be a TAMPERED or FORGED config. Here the golden snapshot is a platform-SIGNED capsule (the 128-byte CMOS image is the ed25519-signed payload). cmos_restore_signed restores ONLY IF: the golden's signature verifies against the trusted platform key AND the payload is a CMOS image AND its AT checksum is valid. So config recovery is AUTHENTIC -- a forged/tampered golden cannot brick you with a bad config. Sandboxed/in-memory. Sovereign: nx_cmos + nx_fw_capsule (-> nx_ed25519) + nx_syscalls. license_tier: ORIGINAL