K08 · traceable Machine Intelligence knowledge infrastructure
Malicious Or Unauthorized Firmware
Direct answer
This defensive reference playbook defines internal evidence, containment, and recovery actions. It does not authorize action against a supplier or third party.
Authority and evidence boundary. K08 publishes governed research, synthetic reference traces, non-certifying workbooks, acquisition evaluation structures, offline planning records, and bounded protocol experiments. It does not prove historical authority, facility truth, compliance, certification, contract award, deployment, current operation, or authorization for external effects.
Scenario
SCIP-K08-003 · malicious or unauthorized firmware
Detect
- hash or signature mismatch
- behavioral deviation
- supplier advisory
Contain
- block update channel
- isolate affected management plane
- preserve image and logs
Recover
- restore known-good firmware
- rotate affected credentials
- revalidate boot and control functions
Evidence
- firmware manifest
- signature chain
- rollback log
- functional and safety retest