Fimeg
14298e73f8
packaging: declare the lock authority's account ...
souveraine-session is machine-tier — one per install, like souveraine.
Agent principals stay out: sysusers is per-install, admission is per
agent and per node, and a line here would mint annie on every device the
package touches. sessiond stays a user unit until the lock handshake,
PAM path and key-eviction order are proven under the new uid.
2026-08-17 14:41:27 -04:00
packaging: declare the lock authority's account
2026-08-17 14:41:27 -04:00
@ aeeb107194
upower: bump to aeeb107 (charge thresholds via the supplier walk)
2026-07-26 17:06:00 -04:00
federation: document node enrolment trust boundary
2026-07-12 15:34:41 -04:00
secrets: at-rest encryption, passphrase wrap, phone packaging
2026-07-20 21:16:32 -04:00
secrets: at-rest encryption, passphrase wrap, phone packaging
2026-07-20 21:16:32 -04:00
packaging: ship the step-up PAM stack and polkit fallback
2026-08-12 10:39:47 -04:00
packaging: ship souveraine-button, the reporter that replaces the policy script
2026-07-31 21:48:08 -04:00
machined: system-tier machine identity daemon
2026-07-16 10:08:33 -04:00
package secrets and machined too
2026-07-24 21:36:31 -04:00
charge becomes a sensor source
2026-08-15 11:45:22 -04:00
package the sessiond pam file
2026-08-15 09:53:26 -04:00
order sessiond at graphical-session-pre
2026-08-15 10:54:30 -04:00
packaging: the FPC pam module is pam_souveraine_fpc.so
2026-08-12 10:50:12 -04:00
ship souveraine-verify-trail in the package that writes the trail
2026-07-26 14:58:48 -04:00
track cross-build cargo config + souveraine user unit
2026-07-12 14:57:19 -04:00
14298e73f8