# nordisk/holger: files at cb9d3cad0ca3
.cargo/
.forgejo/
.githooks/
.nornir/
agent/
attestations/
bench-scenarios/
build-space/
crates/
deploy/
distribution/
docs/
errcode/
estate/
estate-tests/
examples/
holger-build/
holger-build-thing/
holger-cli/
holger-estate-front/
holger-front/
holger-recipe/
holger-rs/
intel/
LICENSES/
mannequin/
plugin/
proto/
provenance/
scripts/
server/
slsa/
sync/
traits/
update-bundle/
xtask/
.dockerignore
.gitattributes
.gitignore
bench_baseline.builder-64.json
bench_baseline.json
bench_history.jsonl
brokkr.toml
Cargo.lock
Cargo.toml
CHANGELOG.md
CLA-SIGNATURES.md
CLA.md
CLAUDE.md
COMMERCIAL-LICENSING.md
CONTRIBUTING.md
deny.toml
LICENSE
NOTICE
README.md
rustfmt.toml
SECURITY.md
THIRD_PARTY_LICENSES.md
TRADEMARKS.md
.cargo/config.toml
.cargo/estate-siblings.toml
.forgejo/workflows/
.githooks/post-checkout
.githooks/post-commit
.githooks/post-merge
.githooks/pre-commit
.githooks/pre-push
.nornir/assets/
.nornir/stinky/
.nornir/.gitignore
.nornir/agent-design.md
.nornir/agent-guide.md
.nornir/ai-context.toml
.nornir/appliance-for-idiots.md
.nornir/artifactory-parity-design.md
.nornir/auth-design.md
.nornir/auth-for-idiots.md
.nornir/auth-guide.md
.nornir/auth-providers.md
.nornir/auth-rbac-design.md
.nornir/branch-prune-2026-09-20.md
.nornir/build-thing-design.md
.nornir/build-variants.toml
.nornir/capability-name-map.md
.nornir/CHANGELOG.md
.nornir/checksum-deploy-design.md
.nornir/checksum-deploy-for-idiots.md
.nornir/checksum-deploy-guide.md
.nornir/common-framework-design.md
.nornir/common-framework-for-idiots.md
.nornir/common-framework-guide.md
.nornir/consolidation-jera-embed-design.md
.nornir/consolidation-jera-embed-for-idiots.md
.nornir/consolidation-jera-embed-guide.md
.nornir/deb-rpm-native-metadata-for-idiots.md
.nornir/deb-rpm-native-metadata-guide.md
.nornir/deb-rpm-native-metadata.md
.nornir/design.md
.nornir/docs.toml
.nornir/embed-design.md
.nornir/embed-for-idiots.md
.nornir/embed-guide.md
.nornir/end-to-end-conformance-testing.md
.nornir/feature-complete-gaps.md
.nornir/for-idiots.md
.nornir/guide.md
.nornir/holger-ds-design.md
.nornir/holger-ds-for-idiots.md
.nornir/holger-ds-guide.md
.nornir/holger-error-codes.md
.nornir/holger-evolution.md
.nornir/HOLGER-PLAN.md
.nornir/holger-repo-cleanup.md
.nornir/holger-tiers.md
.nornir/mannequin-for-idiots.md
.nornir/metrics-design.md
.nornir/metrics-for-idiots.md
.nornir/metrics-guide.md
.nornir/mini-holger-for-henrik.md
.nornir/passkey-wire-contract.md
.nornir/PLAN.md
.nornir/promote-sync-attest-design.md
.nornir/promotion-design.md
.nornir/properties-design.md
.nornir/property-policy-design.md
.nornir/proto-codegen-xtask.md
.nornir/proxy-design.md
.nornir/raw-repo-design.md
.nornir/README-full.md
.nornir/README.md
.nornir/reasoning.md
.nornir/registry-design.md
.nornir/registry-guide.md
.nornir/registry-reasoning.md
.nornir/replication-design.md
.nornir/replication-for-idiots.md
.nornir/replication-guide.md
.nornir/retention-design.md
.nornir/retention-for-idiots.md
.nornir/retention-guide.md
.nornir/sbom-hosting-design.md
.nornir/sbom-hosting-for-idiots.md
.nornir/sbom-hosting-guide.md
.nornir/scene-design.md
.nornir/search-design.md
.nornir/search-for-idiots.md
.nornir/search-guide.md
.nornir/serve-design.md
.nornir/serve-guide.md
.nornir/static-dynamic-profile-design.md
.nornir/storage-design.md
.nornir/storage-guide.md
.nornir/SUITES.md
.nornir/test-matrix.md
.nornir/testing-guide.md
.nornir/testmatrix-arms.json
.nornir/testmatrix-functional-emitters.md
.nornir/vec-to-bytes-migration.md
.nornir/version-scheme-design.md
.nornir/znippy-format-pin-design.md
.nornir/znippy-format-pin-for-idiots.md
.nornir/znippy-format-pin-guide.md
agent/cli/
agent/connector/
agent/lib/
attestations/README.md
bench-scenarios/.nornir/
bench-scenarios/examples/
bench-scenarios/fixtures/
bench-scenarios/src/
bench-scenarios/Cargo.toml
bench-scenarios/LICENSE
bench-scenarios/LICENSES
bench-scenarios/NOTICE
build-space/examples/
build-space/src/
build-space/tests/
build-space/Cargo.toml
build-space/LICENSE
build-space/LICENSES
build-space/NOTICE
crates/holger-monetize-guest/
deploy/helm/
deploy/k8s/
deploy/oden-mirror/
distribution/e2e-clients/
distribution/scan-worker/
distribution/Dockerfile
docs/ai-context-full.md
docs/ai-context.md
docs/demo-airgap.md
docs/estate-approvers.md
docs/estate-health-words.md
docs/FEATURES.md
docs/HOLGER-V2.md
docs/idiot_guide.pdf
docs/manual.pdf
docs/secure-update-gateway-limitations.md
docs/secure-update-gateway-mvp.md
docs/secure-update-gateway-operator-guide.md
docs/secure-update-gateway-threat-model.md
docs/security-review-2026-09-11.md
docs/SLSA.md
docs/unsorted.pdf
errcode/src/
errcode/tests/
errcode/Cargo.toml
errcode/LICENSE
errcode/LICENSES
errcode/NOTICE
estate/holger-fleet/
estate/holger-live/
estate/Cargo.lock
estate/Cargo.toml
estate-tests/src/
estate-tests/tests/
estate-tests/Cargo.toml
examples/mirror-credentials/
examples/secure-update-gateway/
holger-build/src/
holger-build/tests/
holger-build/Cargo.toml
holger-build/LICENSE
holger-build/LICENSES
holger-build/NOTICE
holger-build-thing/src/
holger-build-thing/tests/
holger-build-thing/Cargo.toml
holger-build-thing/LICENSE
holger-build-thing/LICENSES
holger-build-thing/NOTICE
holger-cli/src/
holger-cli/tests/
holger-cli/Cargo.toml
holger-estate-front/examples/
holger-estate-front/src/
holger-estate-front/tests/
holger-estate-front/build.rs
holger-estate-front/Cargo.lock
holger-estate-front/Cargo.toml
holger-front/assets/
holger-front/src/
holger-front/tests/
holger-front/build.rs
holger-front/Cargo.toml
holger-front/LICENSE
holger-front/LICENSES
holger-front/NOTICE
holger-recipe/src/
holger-recipe/tests/
holger-recipe/trust/
holger-recipe/Cargo.toml
holger-recipe/LICENSE
holger-recipe/LICENSES
holger-recipe/NOTICE
holger-rs/xtask/
holger-rs/Cargo.lock
holger-rs/Cargo.toml
intel/src/
intel/tests/
intel/Cargo.toml
LICENSES/AGPL-3.0-only.txt
LICENSES/Apache-2.0.txt
LICENSES/CC-BY-4.0.txt
mannequin/.nornir/
mannequin/src/
mannequin/tests/
mannequin/Cargo.toml
mannequin/LICENSE
mannequin/LICENSES
mannequin/mannequin.ron
mannequin/NOTICE
plugin/abi/
plugin/guest-allocation/
plugin/guest-allocation-wasm/
plugin/handler-bundle-core/
plugin/handler-rust-toolchain/
plugin/handler-rust-toolchain-wasm/
plugin/handler-skidbladnir/
plugin/handler-skidbladnir-wasm/
plugin/host/
proto/holger-account.proto
proto/holger-doors.proto
proto/holger-estate.proto
proto/holger-grow.proto
proto/holger-metered.proto
proto/holger-room.proto
proto/holger-token.proto
proto/holger.proto
provenance/examples/
provenance/src/
provenance/tests/
provenance/Cargo.toml
scripts/demo/
scripts/bench-sandbox.sh
scripts/clamd-sandbox.sh
scripts/demo-airgap.sh
scripts/flavour-k8s-cluster.sh
scripts/flavour-systemd-vm.sh
scripts/scan-sandbox-live.sh
server/cli/
server/dev-narrate/
server/downstream/
server/inspect/
server/lib/
server/repository/
server/sandbox/
server/scan-worker/
slsa/README.md
slsa/release-signing-key.attestation.pem
slsa/release-signing-key.pub
slsa/yubikey-piv-attestation-ca.pem
sync/src/
sync/Cargo.toml
traits/.nornir/
traits/src/
traits/tests/
traits/Cargo.toml
traits/LICENSE
traits/LICENSES
traits/NOTICE
update-bundle/src/
update-bundle/testdata/
update-bundle/tests/
update-bundle/Cargo.toml
update-bundle/LICENSE
update-bundle/LICENSES
update-bundle/NOTICE
xtask/.nornir/
xtask/boot/
xtask/examples/
xtask/src/
xtask/tests/
xtask/Cargo.toml
.forgejo/workflows/ci.yml
.forgejo/workflows/security.yml
.nornir/assets/appliance-root/
.nornir/assets/recovered-logo/
.nornir/assets/build-space-executables.svg
.nornir/assets/checksum-deploy-flow.svg
.nornir/assets/common-framework.svg
.nornir/assets/consolidation-jera-embed.svg
.nornir/assets/depgraph.svg
.nornir/assets/flow_deploy.svg
.nornir/assets/flow_families.svg
.nornir/assets/flow_plugin_registry.svg
.nornir/assets/flow_pull.svg
.nornir/assets/flow_push.svg
.nornir/assets/holger-arch-wiring.svg
.nornir/assets/holger-architecture.svg
.nornir/assets/holger-ds-journey.svg
.nornir/assets/holger-tiers.svg
.nornir/assets/holger-znippy-logo.png
.nornir/assets/holger_marriage_flow.svg
.nornir/assets/metrics-flow.svg
.nornir/assets/properties-flow.svg
.nornir/assets/property-policy-flow.svg
.nornir/assets/proxy-negcache-flow.svg
.nornir/assets/raw-repo-flow.svg
.nornir/assets/replication-flow.svg
.nornir/assets/retention-executor-flow.svg
.nornir/assets/retention-flow.svg
.nornir/assets/sbom-flow.svg
.nornir/assets/search-flow.svg
.nornir/assets/ui_grpc_flow.svg
.nornir/stinky/00-index.md
.nornir/stinky/01-dataplane.md
.nornir/stinky/02-twin-growth.md
.nornir/stinky/03-security-attestation.md
.nornir/stinky/04-structure-traits-plugins.md
.nornir/stinky/05-suite-monetize-mvp.md
.nornir/stinky/06-monetize-plugin.md
.nornir/stinky/07-signing-map.md
.nornir/stinky/08-archaeology.md
.nornir/stinky/09-mvp-line-and-feature-honesty.md
.nornir/stinky/10-benchmark-baseline.md
.nornir/stinky/11-dataplane-restored.md
.nornir/stinky/11-dwarves-on-oden.md
.nornir/stinky/12-dataplane-finished.md
.nornir/stinky/13-requirements-2026-09-22.md
.nornir/stinky/14-holger-like-gunnar.md
.nornir/stinky/16-lane-sb-twin-security-proof-2026-10-22.md
.nornir/stinky/17-buy-and-monetize-flow-vs-gunnar.md
agent/cli/.nornir/
agent/cli/src/
agent/cli/tests/
agent/cli/build.rs
agent/cli/Cargo.toml
agent/cli/LICENSE
agent/cli/LICENSES
agent/cli/NOTICE
agent/connector/artifactory/
agent/connector/nexus/
agent/connector/world/
agent/lib/.nornir/
agent/lib/src/
agent/lib/tests/
agent/lib/Cargo.toml
agent/lib/LICENSE
agent/lib/LICENSES
agent/lib/NOTICE
bench-scenarios/.nornir/holger-bench-scenarios.md
bench-scenarios/examples/art_probe.rs
bench-scenarios/examples/dataplane_bench.rs
bench-scenarios/examples/pip_probe.rs
bench-scenarios/examples/retention_probe.rs
bench-scenarios/examples/secure_update_bench.rs
bench-scenarios/fixtures/intake/
bench-scenarios/src/bin/
bench-scenarios/src/artifactory.rs
bench-scenarios/src/audit.rs
bench-scenarios/src/dataplane.rs
bench-scenarios/src/grpc_door.rs
bench-scenarios/src/hops.rs
bench-scenarios/src/intake.rs
bench-scenarios/src/lib.rs
bench-scenarios/src/nexus.rs
bench-scenarios/src/promote.rs
bench-scenarios/src/retention.rs
bench-scenarios/src/sandbox.rs
bench-scenarios/src/secure_update.rs
bench-scenarios/src/served.rs
bench-scenarios/src/stress.rs
build-space/examples/press_build_thing.rs
build-space/src/lib.rs
build-space/tests/appliance_container_robot.rs
build-space/tests/auth_ship_small.rs
build-space/tests/example_press_runs.rs
build-space/tests/suite_build_shape.rs
crates/holger-monetize-guest/src/
crates/holger-monetize-guest/tests/
crates/holger-monetize-guest/build.rs
crates/holger-monetize-guest/Cargo.toml
deploy/helm/holger/
deploy/k8s/configmap.yaml
deploy/k8s/deployment.yaml
deploy/k8s/namespace.yaml
deploy/k8s/networkpolicy.yaml
deploy/k8s/pvc.yaml
deploy/k8s/secret.yaml
deploy/k8s/service-nodeport.yaml
deploy/k8s/service.yaml
deploy/k8s/TALOS.md
deploy/oden-mirror/holger-a-proof.ron
deploy/oden-mirror/holger-c-proof-trustsize.ron
deploy/oden-mirror/holger-c-proof.ron
deploy/oden-mirror/holger-c.ron
distribution/e2e-clients/clamav/
distribution/e2e-clients/seed/
distribution/e2e-clients/yara/
distribution/e2e-clients/Containerfile
distribution/scan-worker/Containerfile
errcode/src/lib.rs
errcode/tests/wiring_guard.rs
estate/holger-fleet/src/
estate/holger-fleet/Cargo.toml
estate/holger-live/src/
estate/holger-live/tests/
estate/holger-live/Cargo.toml
estate-tests/src/lib.rs
estate-tests/tests/a_box_elected_twin_after_its_start_reports_as_the_twin.rs
estate-tests/tests/a_fast_estate_pairs_and_its_front_calls_the_shop_signed.rs
estate-tests/tests/a_shop_installed_box_refused_before_its_pass_pins_after_it.rs
estate-tests/tests/a_shop_paired_main_reports_once_its_front_relays_the_door.rs
estate-tests/tests/mirror_of_monetizes_pull_holger.rs
estate-tests/tests/round_trip_against_monetizes_guardian.rs
estate-tests/tests/the_holger_estate_end_to_end_against_the_one_box.rs
examples/mirror-credentials/upstream-credentials.ron
examples/secure-update-gateway/core-v1.json
examples/secure-update-gateway/e2e-journey.sh
examples/secure-update-gateway/intake-critical.ron
examples/secure-update-gateway/ot-critical-readonly.ron
examples/secure-update-gateway/README.md
examples/secure-update-gateway/trust-policy.ron
# (cut here: the tree is longer; clone the repository for all of it)