code wiki / _hdl_build / nx_trust_store_corroborated.nx
nx_trust_store_corroborated.nx
buildroot/runtime/_hdl_build/nx_trust_store_corroborated.nx
about
nx_trust_store_corroborated.nx -- the SPORE builds its whole trust store by CORROBORATION (operator: "build
from the hardware layer up so the spore can get this... keep helping them build capabilities"). This is the
store-building PASS on top of nx_trust_corroborate: scan M candidate roots, each presented by N independent
sources, and ADMIT a root into the store ONLY IF >= K sources agree on bytes the team hashed itself. Hearsay
(lone source) and poison (a tampered presentation) are rejected. The admitted index list is what the caller
then parses (nx_x509) + adds (trust_store_add) so nx_https_get can validate real chains. The DER bytes come
from any (untrusted) source -- the NAS local store, an HTTP-served CA root via the team's own nx_browse_text,
a mirror -- because trust is on the corroboration, not the transport. license_tier: ORIGINAL
dependencies 2 imports · 1 importers
imports: nx_trust_corroborate.nxnx_syscalls.nx
imported by: nx_trust_store_corroborated_test.nx
structs
| none |
consts
| none |
functions
| 15 | func tsc_build(roots_base: *u8, m_roots: i64, n_sources: i64, der_stride: i64, der_len: i64, k: i64, admitted_idx: *i64) -> i64 |
| 29 | func tsc_all_corroborated(roots_base: *u8, admitted_idx: *i64, count: i64, n_sources: i64, der_stride: i64, der_len: i64, k: i64) -> i64 |
| 41 | func tsc_usable(count: i64) -> i64 { if count > 0 { return 1 } return 0 } called by 1: main |