Audiobuzz 8e105c8bf1 docs/TODO #18: kiosk render bench-verified on VM + 820 (i915 firmware confirmed) ...

f59eb79 now fully bench-verified: the fleet SPA renders on both the VM
(virtio-gpu) and the 820 (i915), so the i915 DMC/GuC firmware loads on real
hardware and the firmware keep-list is validated end-to-end. The two later
commits (nss-mdns drop, omit_drivers + keep-list tightening) don't touch i915,
so render should be safe, but still need their own build+boot.

2026-07-03 06:58:52 +00:00

..

design-v2-errata.md

tpm-enrol: move NV cert index off OEM-occupied 0x01800001 → 0x01800100

2026-07-03 02:51:38 +00:00

diskless-fleet-design-v2.pdf

Initial commit

2026-06-12 01:46:29 +00:00

fleet-management-design.md

tpm-enrol: move NV cert index off OEM-occupied 0x01800001 → 0x01800100

2026-07-03 02:51:38 +00:00

secure-boot-keys.md

Update SSP

2026-06-25 23:46:42 +00:00

ssp-annex-a-ism-residual-risk.md

tpm-enrol: move signing key off the EK slot 0x81010001 → 0x81000100

2026-07-02 12:19:59 +00:00

ssp.md

tpm-enrol: move NV cert index off OEM-occupied 0x01800001 → 0x01800100

2026-07-03 02:51:38 +00:00

stig-deviations.md

stig: ship SELinux allow module for chrony DHCP-NTP dispatcher (stop chronyd AVC)

2026-07-03 01:16:26 +00:00

TODO.md

docs/TODO #18: kiosk render bench-verified on VM + 820 (i915 firmware confirmed)

2026-07-03 06:58:52 +00:00

tpm-enrolment-design.md

tpm-enrol: move NV cert index off OEM-occupied 0x01800001 → 0x01800100

2026-07-03 02:51:38 +00:00