Jens/chimera-gfx-Public
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
a6037502d7eb5ba1f4207d8b7407c22fada5e1db
chimera-gfx-Public/docs/adr/0007-artifact-provenance.md
T
Chimera GFX release export a6037502d7
phase0-ci / build-and-audit (push) Successful in 2m14s
Details
Publish Chimera GFX source
2026-09-03 03:27:14 +02:00

608 B
Raw Blame History

ADR-0007: Artifact provenance is machine-readable and fail-closed

  • Status: accepted
  • Date: 2026-07-17

Decision

Every review or hardware candidate uses artifact-manifest schema version 1. The manifest binds filename, size, SHA-256, target, clean source commit, toolchain pins, optional SDL commit, firmware gate, and explicit non-execution state. Generation and verification are separate tested tools.

An artifact with firmware identifier NONE is never allowlisted. Any rebuild, including a firmware-specific rebuild, creates a new digest and therefore requires a new artifact-specific approval.

Reference in New Issue View Git Blame Copy Permalink