code wiki / _hdl_build / nx_trust_store_corroborated.nx

nx_trust_store_corroborated.nx

buildroot/runtime/_hdl_build/nx_trust_store_corroborated.nx

2456 B41 linesdepth 6pulls 6 transitivereach 1 importersview sourcekind librarytopic trust
docsdependenciesstructsconstsfunctions

about

nx_trust_store_corroborated.nx -- the SPORE builds its whole trust store by CORROBORATION (operator: "build from the hardware layer up so the spore can get this... keep helping them build capabilities"). This is the store-building PASS on top of nx_trust_corroborate: scan M candidate roots, each presented by N independent sources, and ADMIT a root into the store ONLY IF >= K sources agree on bytes the team hashed itself. Hearsay (lone source) and poison (a tampered presentation) are rejected. The admitted index list is what the caller then parses (nx_x509) + adds (trust_store_add) so nx_https_get can validate real chains. The DER bytes come from any (untrusted) source -- the NAS local store, an HTTP-served CA root via the team's own nx_browse_text, a mirror -- because trust is on the corroboration, not the transport. license_tier: ORIGINAL

dependencies 2 imports · 1 importers

nx_trust_corroborate.nx nx_syscalls.nx nx_trust_store_corroborated.nx nx_trust_store_corroborated_test.n

imports: nx_trust_corroborate.nxnx_syscalls.nx

imported by: nx_trust_store_corroborated_test.nx

structs

none

consts

none

functions

15func tsc_build(roots_base: *u8, m_roots: i64, n_sources: i64, der_stride: i64, der_len: i64, k: i64, admitted_idx: *i64) -> i64
called by 1: main calls 1: tc_admit_root
29func tsc_all_corroborated(roots_base: *u8, admitted_idx: *i64, count: i64, n_sources: i64, der_stride: i64, der_len: i64, k: i64) -> i64
called by 1: main calls 1: tc_corroboration_strength
41func tsc_usable(count: i64) -> i64 { if count > 0 { return 1 } return 0 }
called by 1: main