CustomOS3.1 OBSIDIAN
Signed updates
customos-update: fail-closed — without a valid signature nothing is applied.
Signature
Ed25519 · TUF
root · targets · snapshot · timestamp
Anti-rollback
not read in this demo
TPM NV, PCR policy · software floor without TPM
Anti-freeze
expires 7 d
short timestamp expiry
ferran@customos:~$ customos-update check
Sample transcript of the command, not a reading of this machine.
◑ post-quantum second signature: slot exists, not active (§2.6bis)
◑ a local root can force the counter back to the pinned baseline, never below it
✓ protects against a network or mirror attacker