Trust policy

The trust policy is baked into initramfs at /etc/trust_policy/

It contains:

• trust_policy.json (renamed from security_configuration.json)
• ospkg_signing_root.pem

trust_policy.json contains:

• Version #115 (moved)
• Valid signatures threshold
• Fetching mechanism (Boot mode)

Further reading