docs: bring attestation, boot, build and verification up to the STARK backend - #1
Merged
Conversation
… backend Attestation now has two backends behind the gate, selected by nonos-stark-attest: the production transparent post-quantum FRI-STARK membership proof, and the earlier enrolled-secret discrete-log proof that still gates the default build. Document both, STARK first, add the kernel self-attestation the bootloader verifies before jump, add the capsule STARK enrollment step and the configurable build (menuconfig, from-config, nonos-mk-zerostate), and record the 203-theorem STARK proof body with its Kani and Verus coverage on the verification page.
eKisNonos
force-pushed
the
stark-attestation-docs
branch
from
July 17, 2026 13:29
76042a1 to
5b25edc
Compare
added 2 commits
July 17, 2026 15:38
Rename the make target across the capsule contributing pages and the toolchain page (nonos-mk-full-gui-prod is now nonos-mk-zerostate, kept as an alias). Update the security index and the userland attest page to name the two attestation backends, and the security model and docs index to reflect the STARK proof body. No enrolled-secret-only claims left.
The macro fold shifted the desktop-gui-prod and zerostate target lines to 1183 and 1215. Fix those target-line references. Body and prerequisite line refs vary by context and are part of the wider, pre-existing Makefile-line drift the wiki regenerates separately.
eKisNonos
force-pushed
the
stark-attestation-docs
branch
from
July 17, 2026 14:02
b4019f0 to
583e11b
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Brings the wiki up to the transparent post-quantum STARK attestation now in the kernel and bootloader (kernel PRs #375 to #378). Written against the code, with the honest framing kept intact: STARK is the production (nonos-mk-zerostate) backend, and the earlier enrolled-secret Pedersen proof still gates the default build.
Core pages
Wider sweep
Convention
Every source reference carries file:line, matching the wiki's own standard. No em-dashes, one voice.
Out of scope
The wider Makefile:LINE drift on refs unrelated to these targets predates this change and belongs to the wiki's own regeneration pass.