K08 · traceable Machine Intelligence knowledge infrastructure
Firmware And Boot Signing
Direct answer
This record identifies inventory, dependency, interoperability, rollback, and evidence obligations. It does not assert that a named facility has completed a post-quantum migration.
Authority and evidence boundary. K08 publishes governed research, synthetic reference traces, non-certifying workbooks, acquisition evaluation structures, offline planning records, and bounded protocol experiments. It does not prove historical authority, facility truth, compliance, certification, contract award, deployment, current operation, or authorization for external effects.
Domain
CA-K08-002 · firmware and boot signing
Current algorithms
- supplier and platform inventory required
Target options
- ML-DSA or SLH-DSA subject to boot ROM and signature-size constraints
Migration dependencies
- immutable trust anchors
- bootloader support
- update package format
- offline recovery path
- supplier signing infrastructure
Required migration evidence
- dual-sign verification
- boot and recovery testing
- revocation and emergency update exercise
- artifact provenance
Non-claims
- standard publication does not update existing hardware