orchestrator: Device table is the single source of the chain of trust - #26

Closed

chrysh wants to merge 16 commits into

add-boot-walkfrom

device-table-single-source

Commits on Aug 7, 2026

orchestrator: Replace BootMonitor with checkpoint-embedded evidence checks
chrysh
committed
5810d68
orchestrator: Defunctionalize evidence checks into board-defined signal ids
chrysh
committed
e4b198a
orchestrator: Let devices report failure and its retriability as evidence
chrysh
committed
0cf81e5
orchestrator: Exercise message-path evidence in the reader tests
chrysh
committed
a379115
orchestrator: Carry the re-armed deadline in WalkVerdict::Retry
chrysh
committed
68eb7a8
orchestrator: Document wiring a concrete reader into EvidenceReader
chrysh
committed
4282840
orchestrator: Reject duplicate checkpoint names; pin max_retries=0 meaning
chrysh
committed
19f0021
orchestrator: Anchor the signal-id docs; show board-local validation
chrysh
committed
a088e2e
orchestrator: Drop CommitPolicy from the device table
chrysh
committed
7356e9b
orchestrator: Leave retry and terminal decisions to the orchestrator
chrysh
committed
4e1f031
orchestrator: Pin the orchestrator seams in the docs
chrysh
committed
b632715
orchestrator: Make invalid table entries unconstructible
chrysh
committed
7d6bea8
orchestrator: Fold BootStatus into the evidence module
chrysh
committed
5d9974c
orchestrator: Move component classification into the config schema
chrysh
committed
3b87d24
orchestrator: Declare kind, policy, and dependency in the device table
chrysh
committed
1e4769a
orchestrator: Derive the chain of trust from the device table
chrysh
committed
cce1780