pqrascv-hardware 1.0.0-rc.5

Hardware-rooted trust and distributed verifier consensus for PQ-RASCV
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

//! Runtime Integrity Evidence
//!
//! Provides placeholders and abstractions for post-boot integrity checks,
//! such as Linux IMA (Integrity Measurement Architecture) and EVM/Appraisal.
//!
//! **WARNING**: Measured Boot provides boot-time guarantees. This module
//! is prepared for future runtime semantics but does not yet claim runtime trust.

use crate::digest::TypedDigest;
use alloc::vec::Vec;

/// Evidence of runtime integrity subsystems.
#[derive(Debug, Clone, PartialEq, Eq, serde::Serialize, serde::Deserialize)]
pub struct RuntimeIntegrityEvidence {
    /// Indicates whether IMA is enabled and enforcing.
    pub ima_enabled: bool,
    /// Indicates whether EVM/Appraisal is enabled.
    pub appraisal_enabled: bool,
    /// A list of runtime measurements observed (e.g., IMA log hashes).
    pub runtime_measurements: Vec<TypedDigest>,
}