From 55a8591fb503c3924f5037c39479ca811e00514b Mon Sep 17 00:00:00 2001 From: Arthur Hanson Rasmusson Date: Thu, 1 Oct 2026 01:12:40 -0400 Subject: STATE-CURRENT: PLAN B claim path proven safe 3/3; real FB size 8 GiB; secure-verification stage coded (build-only) --- STATE-CURRENT.md | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) (limited to 'STATE-CURRENT.md') diff --git a/STATE-CURRENT.md b/STATE-CURRENT.md index dfd93cd..728a85b 100644 --- a/STATE-CURRENT.md +++ b/STATE-CURRENT.md @@ -1,6 +1,6 @@ # Open-IOV Current State -> **Snapshot: 2026-10-01 00:12.** This is a dated public status page, not live +> **Snapshot: 2026-10-01 01:12.** This is a dated public status page, not live > state; it is refreshed on every progress check. Live working notes are > maintained outside this repository; the public known-knowns/unknowns document > is authoritative here: @@ -126,11 +126,15 @@ chain succeeds. against the distribution driver's udev bind-event power-policy write, and a reusable supervised claim-cycle harness exists (`tools/guest-diag/phys_claim_cycle.sh`). The real-GSP-boot design is - complete: exact secure-verification/booter/RISC-V/RM-init sequence, boot - artifacts (booter/FMC/SEC2 BL bindata; VBIOS BIT FWSEC blob) and the real - FB-size decode (local-memory-range register; the BAR1-aperture approximation - is retired). Implementation starts with the real FB size and layout - self-checks, then secure verification, then the booter and RISC-V start. + complete: exact secure-verification/booter/RISC-V/RM-init sequence and boot + artifacts (booter/FMC/SEC2 BL bindata; VBIOS BIT FWSEC blob). The real FB + size (8 GiB, decoded from the local-memory-range register - the BAR1-aperture + approximation is retired) and the protected-region boot layout have been + verified live under the supervised claim harness (three green claim/release + cycles; the root-port D0 hold is the load-bearing invariant), and the + secure-verification stage (VBIOS security-blob extraction, falcon reset and + staging) is implemented build-only pending an adversarially-reviewed, + supervised live boot; the booter and RISC-V start follow. - Host stability: the host hang class observed on 2026-09-28 (kernel stack overflow in a channel snapshot path) is fixed and frame-audited; repeated VM load/attach/teardown cycles run without panics or pstore records. A -- cgit v1.2.3