also looking at this

feat: prepare runtime images with protected trust

#47

Merged chris wants to merge codex/runtime-store-staging into main

27 files +1675 -73

.github/workflows/ci.ymlmodified+4-0

Changes to .github/workflows/ci.yml
		@@ -38,6 +38,10 @@ jobs:
38	38	run: bun tests/fixtures/updates/qualify-trust.ts "$RUNNER_TEMP/runtime-trust-qualification" "$GITHUB_WORKSPACE/storage/runtime-build/cli/drone"
39	39	- name: Verify typed SDK failures in a minified copied standalone executable
40	40	run: bun tests/fixtures/updates/qualify-sdk.ts "$RUNNER_TEMP/runtime-sdk-qualification"
	41	- name: Verify persistent metadata and recovery with a copied standalone CLI
	42	run: bun tests/fixtures/updates/qualify-store.ts "$RUNNER_TEMP/runtime-store-qualification" "$GITHUB_WORKSPACE/storage/runtime-build/cli/drone"
	43	- name: Verify protected signed-image preparation with a copied standalone CLI
	44	run: bun tests/fixtures/updates/qualify-preparation.ts "$RUNNER_TEMP/runtime-preparation-qualification" "$GITHUB_WORKSPACE/storage/runtime-build/cli/drone"
41	45	- run: $GITHUB_WORKSPACE/storage/runtime-build/cli/drone runtime:bench --project "$GITHUB_WORKSPACE" --ticks 100 --fault deadline
42	46	working-directory: ${{ runner.temp }}
43	47	- run: $GITHUB_WORKSPACE/storage/runtime-build/cli/drone sensors:replay "$GITHUB_WORKSPACE/tests/fixtures/sensors/bench-v1.json" --at-ms 500