Skip to content

README: where the released UCI images keep the trust store - #303

Merged
JC-000 merged 4 commits into
masterfrom
docs/readme-trust-store-dir
Oct 15, 2026
Merged

JC-000 merged 4 commits into
masterfrom
docs/readme-trust-store-dir

Conversation

@JC-000

@JC-000 JC-000 commented Oct 15, 2026 •

Copy link
Copy Markdown
Owner

README gains one bullet (under "What this client does NOT authenticate", beside the pin bullet) plus a cross-reference from the G-prompt paragraph, and "latest is" is bumped to v0.5.1. Docs-only; no hardware run (the docs exception to "run the rigs"). PRG unaffected.

Claims and where each was verified (red-green for docs)

Claim Verified at
Default dir is /USB1 Makefile:297
Files are TRUST.A/TRUST.B Makefile:307; src/net/uci/trust_store.s:626-628
TRUST.P is the signed bundle, needs TRUST_BUNDLE=1 Makefile:314-337
Released uci-onchip / uci-comb are TRUST_STORE=1, default dir, no pin/bundle tools/package/_common.sh:26-27; README:191
Later fetches refuse a changed key unless accepted trust_policy.s:51 ("ACCEPT ON RETRY? A=YES")
Unreadable store: TRUST FAIL nn, then CONTINUE UNPINNED? Y/N trust_policy.s:32-34, 171-180, 434, 538
nn is one hex byte; 02 = path/medium does not exist trust_policy.s:175-178; trust_store.inc:58; trust_store.s:529-538; scan fails on slot-A NOPATH: trust_store.s:385-397
Y: that fetch runs unpinned, never records; the banner ** UNPINNED: KEY NOT CHECKED ** prints twice (before the dial :474, after the result :275). Two Y prompts: after TRUST FAIL (:178) and after KEY CHANGED (:350) trust_policy.s:464-475, 539; :42, :55
Other key: NOT DIALLED, no connect trust_policy.s:178-184, 435
TRUST SAVE FAIL nn / TRUST STORE FULL: nothing recorded; new host stays unpinned (no banner); an accepted key change is not saved, old key still applies (next G says KEY CHANGED again) trust_policy.s:409-415 (STORE FULL), :416-422 (SAVE FAIL), i.e. :409-422; TS_MAX_RECS=32 trust_store.inc:33; rev-303 round 2
Another dir: TRUST_STORE_DIR=/SD with the product's own args Makefile:297-307; _common.sh:26-27
Dir must already exist (client never creates one) no mkdir in src/net/uci/uci_dos.s
Absolute path of [A-Za-z0-9_.-] components Makefile:304-305
Dir at most 41 chars trust_store.s:58 asserts full string DIR/TRUST. <= 48; Makefile:307
TRUST_STORE=1 is UCI-only Makefile:301-303
Volume name on a C64 Ultimate not asserted: README says to check the Ultimate's file browser
"latest is v0.5.1" tag v0.5.1 exists (git tag)

Checks run

  • python3 tools/test_reserved_test_host.py (only test scanning README text): 9/9 on master and 9/9 at head 12968d1.
  • No other README-consistency test exists.

🤖 Generated with Claude Code

JC-000 and others added 4 commits October 15, 2026 09:42
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
…-fail, xref, v0.5.1)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant