rajamesandJunie
a8b70e88d3
Source tree reorganization: - Move StarForth v3 engine to v3/ (src/, include/, Makefile) - Move kernel to kernel/ (src/, include/, linker/, Makefile) - Create v4/ skeleton for F18-ISA golden model (DECOMPOSITION.md, JUSTIFICATION.md) - Move FABRIC-0..4.md to docs/fabric/ - Move ONTOLOGY.md and ROADMAP.md to docs/ Board infrastructure: - Add boards/ser5/, boards/raspi/, boards/milkv/, boards/zynq7020/ - Each board has board.mk (ISA, CPU flags, boot recipe) and README.md - Root Makefile becomes thin dispatcher: boot_image, all, clean, docs take TARGET - make boot_image TARGET=SER5|RASPI|MILKV builds one GPT/MBR image per board - ZYNQ7020 target exists but stops with clear error (ARMv7 port not built yet) - scripts/mkdiskimage.sh builds disk images for all boards Docs pipeline: - docs/book/ with LaTeX master (main.tex) and Makefile - pandoc converts Markdown to LaTeX at build time - Two Lua filters: table-widths.lua (wide tables wrap), code-breaks.lua (inline code breaks) - make docs builds single PDF (754 pages, 0 missing characters) - make docs TARGET=<board> adds board appendix - build/docs/<book|board>/meta.tex stamps git commit into PDF Bug fixes: - 42 include paths that only worked by accident now use correct relative paths - clang-18 hardcode replaced with configurable CC variable (fixed aarch64 build) - Pi 5: kernel_2712.img linked at 0x80000, .bss zeroed, memory reserved - Doxyfile, .clang-tidy, README.md, Kconfig paths updated Verified: - Hosted v3 build passes 1012 tests, 0 failures - SER5 image boots in QEMU (OVMF), POST passes, K exact (65536 = Q48_ONE) - Milk-V image boots in QEMU (OpenSBI + U-Boot + bootefi), POST passes - make clean TARGET=<board> removes only that board and its ISA objects - make all builds all boards, hosted v3, and docs in one run Co-authored-by: Junie <junie@jetbrains.com>
60 lines
2.9 KiB
C
60 lines
2.9 KiB
C
/*
|
|
* zuse_cert_devblock.h -- SUPERSEDED 2026-08-28 (FABRIC-2.md §F.20/§F.21).
|
|
* Zuse is now thumbdrive-resident, not system-resident: her seed lives
|
|
* only on her own minted thumbdrive, never written to the fence. The
|
|
* fence's devblock_from_top=0 slot this type used to occupy now holds
|
|
* zuse_genesis_marker_t (zuse_genesis_marker.h) instead -- pubkey only,
|
|
* no seed. This type is no longer written by any code path; kept in the
|
|
* repo as historical record of the format it replaced, per this
|
|
* project's own convention for superseded design (see e.g. the
|
|
* TRIPOD.md/HERMES.md/ARTEMIS.md/CONSOLE.md superseded-header pattern).
|
|
* Do not resurrect writes to this format.
|
|
*
|
|
* Original doc, kept for context:
|
|
*
|
|
* on-disk record format for Zuse's cert, stored
|
|
* in devblock_from_top=0 of the top-of-device system-metadata fence
|
|
* (block_subsystem.h's blk_meta_zone_read()/write(), Phase 8, FABRIC-2.md
|
|
* §C). Raw, unpacked 4 KiB devblock -- same convention as the volume
|
|
* header itself (magic + version + fields + pad-to-4096, real CRC from
|
|
* day one, matching homeblocks_sig_t's own precedent for exactly this
|
|
* reason: this gates a real security check, not a placeholder).
|
|
*
|
|
* Deliberately its own header, not inlined at the one call site that
|
|
* uses it today (kernel_main.c's first-boot mint-or-load): the ongoing
|
|
* `MINT` word (still open, FABRIC-2.md) will be a second consumer of
|
|
* this exact format later, and the format should be stable and
|
|
* documented once rather than ad-hoc.
|
|
*/
|
|
#ifndef STARKERNEL_ZUSE_CERT_DEVBLOCK_H
|
|
#define STARKERNEL_ZUSE_CERT_DEVBLOCK_H
|
|
|
|
#include <stdint.h>
|
|
|
|
/* Packed via shifts, not a hand-computed hex literal -- this project's
|
|
* own standing lesson about hand-derived numeric constants in this
|
|
* class of code (see FABRIC-2.md's Ed25519/scalar25519 writeups). */
|
|
#define ZUSE_CERT_DEVBLOCK_MAGIC \
|
|
((uint32_t)'Z' | ((uint32_t)'U' << 8) | ((uint32_t)'S' << 16) | ((uint32_t)'E' << 24))
|
|
|
|
#define ZUSE_CERT_DEVBLOCK_VERSION 1u
|
|
|
|
typedef struct {
|
|
uint32_t magic; /* ZUSE_CERT_DEVBLOCK_MAGIC; anything else means
|
|
* "not a real cert yet" (blank/foreign bytes),
|
|
* not a format-corruption error */
|
|
uint32_t version; /* ZUSE_CERT_DEVBLOCK_VERSION */
|
|
uint8_t seed[32]; /* Ed25519 seed -- the private identity */
|
|
uint8_t pubkey[32]; /* Ed25519 public key derived from seed at mint time */
|
|
uint64_t crc; /* CRC-64/ISO (block_subsystem.h's compute_crc64())
|
|
* over every byte of this struct up to (not
|
|
* including) this field -- real from day one,
|
|
* this gates a real security check */
|
|
uint8_t _pad[4096 - (4 + 4 + 32 + 32 + 8)];
|
|
} zuse_cert_devblock_t;
|
|
|
|
_Static_assert(sizeof(zuse_cert_devblock_t) == 4096,
|
|
"zuse_cert_devblock_t must be exactly one 4 KiB devblock");
|
|
|
|
#endif /* STARKERNEL_ZUSE_CERT_DEVBLOCK_H */
|