Pick a signed deployment by board, profile and artifact kind. This repository publishes no public download list: images are built from source, or delivered by the integrator together with what is needed to verify them.
No published artifact catalogue yet. Build an image from source, or ask your integrator for one.
The metadata public key has to come from an independent trusted channel — a checksum served beside the artifact is not authentication. Boot, content and metadata have separate trust anchors.
bash verify/run.sh --verify --board x64 \ --image /path/to/disk.img --public-key /path/to/metadata-public.key
The offline check verifies the authenticated signature record and inspects content, geometry, firmware receipts and root policy.