[feat] Add owner authorization manifest support#3824
Open
mhatrevi wants to merge 1 commit into
Open
Conversation
mhatrevi
requested review from
JohnTraverAmd,
ajisaxena,
bluegate010,
clundin25,
fdamato,
jhand2,
korran,
rusty1968,
swenson,
ternst-nv,
timothytrippel,
vsonims and
zhalvorsen
as code owners
June 3, 2026 17:06
Add owner-only authorization manifest types and runtime handling for SET_OWNER_AUTH_MANIFEST, including verification of owner key endorsements, owner IMC signatures, append/replace behavior, and owner-only authorization fallback in AUTHORIZE_AND_STASH. Add owner authorization manifest generation to the auth-manifest tooling and expose it through create-owner-auth-man. Update integration tests to exercise the shared generator and owner-only authorization flow.
mhatrevi
force-pushed
the
vmhatre/owner-soc-manifest
branch
from
July 15, 2026 17:10
b176dd6 to
502db11
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add owner-only authorization manifest types and runtime handling for SET_OWNER_AUTH_MANIFEST, including verification of owner key endorsements, owner IMC signatures, update-in-place/replace behavior, and owner-only authorization fallback in AUTHORIZE_AND_STASH.
Add owner authorization manifest generation to the auth-manifest tooling and expose it through create-owner-auth-man. Document the owner manifest wire format and update integration tests to exercise the shared generator and owner-only authorization flow.