diff options
| author | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-10-01 01:12:40 -0400 |
|---|---|---|
| committer | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-10-01 01:12:40 -0400 |
| commit | 60afa9a299889e247b0dee1570956b9fbedfbf77 (patch) | |
| tree | d0bf4dda31f0b9166ea35aa8afaaba4a044643af | |
| parent | 9a038702b1fc6ab867ebd3d6652ac3c7d04d6fff (diff) | |
| download | open-iov-60afa9a299889e247b0dee1570956b9fbedfbf77.tar.gz open-iov-60afa9a299889e247b0dee1570956b9fbedfbf77.zip | |
STATE-CURRENT: PLAN B claim path proven safe 3/3; real FB size 8 GiB; secure-verification stage coded (build-only)
| -rw-r--r-- | STATE-CURRENT.md | 16 |
1 files changed, 10 insertions, 6 deletions
diff --git a/STATE-CURRENT.md b/STATE-CURRENT.md index dfd93cd..728a85b 100644 --- a/STATE-CURRENT.md +++ b/STATE-CURRENT.md @@ -1,6 +1,6 @@ # Open-IOV Current State -> **Snapshot: 2026-10-01 00:12.** This is a dated public status page, not live +> **Snapshot: 2026-10-01 01:12.** This is a dated public status page, not live > state; it is refreshed on every progress check. Live working notes are > maintained outside this repository; the public known-knowns/unknowns document > is authoritative here: @@ -126,11 +126,15 @@ chain succeeds. against the distribution driver's udev bind-event power-policy write, and a reusable supervised claim-cycle harness exists (`tools/guest-diag/phys_claim_cycle.sh`). The real-GSP-boot design is - complete: exact secure-verification/booter/RISC-V/RM-init sequence, boot - artifacts (booter/FMC/SEC2 BL bindata; VBIOS BIT FWSEC blob) and the real - FB-size decode (local-memory-range register; the BAR1-aperture approximation - is retired). Implementation starts with the real FB size and layout - self-checks, then secure verification, then the booter and RISC-V start. + complete: exact secure-verification/booter/RISC-V/RM-init sequence and boot + artifacts (booter/FMC/SEC2 BL bindata; VBIOS BIT FWSEC blob). The real FB + size (8 GiB, decoded from the local-memory-range register - the BAR1-aperture + approximation is retired) and the protected-region boot layout have been + verified live under the supervised claim harness (three green claim/release + cycles; the root-port D0 hold is the load-bearing invariant), and the + secure-verification stage (VBIOS security-blob extraction, falcon reset and + staging) is implemented build-only pending an adversarially-reviewed, + supervised live boot; the booter and RISC-V start follow. - Host stability: the host hang class observed on 2026-09-28 (kernel stack overflow in a channel snapshot path) is fixed and frame-audited; repeated VM load/attach/teardown cycles run without panics or pstore records. A |