Skip to content

Add NLBoot integration docs, fixtures, Makefile validation, and maturity record#12

Merged
mdheller merged 3 commits intomainfrom
copilot/add-nlboot-integration-docs
Apr 30, 2026
Merged

Add NLBoot integration docs, fixtures, Makefile validation, and maturity record#12
mdheller merged 3 commits intomainfrom
copilot/add-nlboot-integration-docs

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 30, 2026

sourceos-boot had no dedicated integration guide for its nlboot adapter, no Makefile validation target (required by AGENTS.md when adding fixtures), and no repo.maturity.yaml.

Added

  • docs/NLBOOT_INTEGRATION.md — operational integration guide covering the 5-stage adapter flow (announce → authorize → fetch → verify → evidence), boot mode→channel→action mapping table, CLI usage, fixture inventory, and known gaps (signature verification not yet wired, artifact fetch/cache lives in Rust lane, host mutation gated)
  • examples/nlboot/adapted-output.example.json — concrete NlbootAdapterOutput fixture produced by running adapt-nlboot against the existing manifest/token fixtures; shows exact authorization, BootReleaseSet patch, and evidence envelope structure
  • Makefilevalidate target (BootReleaseSet schema validation + nlboot adapter CLI smoke test) and test target (pytest), satisfying the AGENTS.md requirement
  • repo.maturity.yaml — M2 maturity record with integration links to nlboot, sourceos-spec, and downstream consumers, plus explicit next actions
  • .gitignore — excludes __pycache__, .pyc, .pytest_cache, build artifacts

CLI output shape (NlbootAdapterOutput)

{
  "apiVersion": "sourceos.dev/v1",
  "kind": "NlbootAdapterOutput",
  "authorization": { "bootReleaseSetRef": "boot/demo", "tokenId": "token-demo-1", ... },
  "bootReleaseSetPatch": {
    "channels": ["recovery"],
    "artifacts": [{ "role": "kernel", ... }, ...],
    "signature": { "type": "x509", "bundleRef": "urn:srcos:signature:demo", ... },
    "provenance": { "builderId": "trusted-key-1", "attestations": ["slsa", "in-toto"], ... }
  },
  "evidence": { "selectedChannel": "recovery", "bootMode": "recovery", "reports": [...], ... }
}

No code changes; documentation, fixtures, and build metadata only.

Copilot AI linked an issue Apr 30, 2026 that may be closed by this pull request
Copilot AI changed the title [WIP] Add NLBoot integration documentation with example fixtures and validation Add NLBoot integration docs, fixtures, Makefile validation, and maturity record Apr 30, 2026
Copilot AI requested a review from mdheller April 30, 2026 12:49
@mdheller mdheller marked this pull request as ready for review April 30, 2026 13:08
Copy link
Copy Markdown
Contributor

@mdheller mdheller left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved. Scope matches issue #11: NLBoot integration docs, fixture, Makefile validation, and maturity metadata only. CI is green and no host-changing behavior was introduced.

@mdheller mdheller merged commit 1ff2566 into main Apr 30, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Agent task: add NLBoot integration documentation

2 participants