Skip to content

orchestrator: Wire CommitSvnFloor through the platform driver - #437

Merged
leongross merged 1 commit into
OpenPRoT:mainfrom
9elements:wire-svn-commit
Sep 3, 2026
Merged

orchestrator: Wire CommitSvnFloor through the platform driver#437
leongross merged 1 commit into
OpenPRoT:mainfrom
9elements:wire-svn-commit

Conversation

@chrysh

@chrysh chrysh commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

SvnFloor joins BoardCapabilities, one floor per component slot. The SVN to advance to travels in Verdict::Authenticated: verification is the only authenticated read of the manifest, so nothing else may tell the floor where to go. The driver caches it per component, clears it on rejection, and fails closed when asked to commit without it. A None slot marks a component that tracks its own SVN (iRoT, or a PLDM device committing internally); the eRoT keeps no second floor for it and its commit is a no-op.

Part of 9elements#18

@chrysh
chrysh force-pushed the wire-svn-commit branch 5 times, most recently from 13069cf to ac56e28 Compare August 26, 2026 18:58
@chrysh
chrysh marked this pull request as ready for review August 26, 2026 19:04
Comment thread services/orchestrator/driver/src/board.rs Outdated
Comment thread services/orchestrator/driver/src/board.rs Outdated
Comment thread services/orchestrator/driver/src/driver.rs
@leongross leongross linked an issue Aug 27, 2026 that may be closed by this pull request
@chrysh
chrysh force-pushed the wire-svn-commit branch 2 times, most recently from fa0aa8c to bc6dd04 Compare August 27, 2026 19:28
@chrysh
chrysh requested a review from leongross August 27, 2026 19:40
SvnFloor joins BoardCapabilities, one floor per component slot. The SVN
to advance to travels in Verdict::Authenticated: verification is the
only authenticated read of the manifest, so nothing else may tell the
floor where to go. The driver caches it per component, clears it on
rejection, and fails closed when asked to commit without it.
SvnFloorBinding names the two wirings a board can choose: Erot, where
the eRoT holds the floor, and SelfManaged for a component that tracks
its own SVN (iRoT, or a PLDM device committing internally), whose
commit is a no-op.

Assisted-by: Claude:claude-fable-5
Signed-off-by: Christina Quast <christina.quast@9elements.com>
@leongross
leongross merged commit 32c4634 into OpenPRoT:main Sep 3, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update anti-rollback params

2 participants