Hi Igor, Thank you for the patch.
On Mon, Oct 12, 2026 at 22:25, Igor Opaniuk <[email protected]> wrote: > Describe the three root key sources (AVB_ROOT_KEY_BUILTIN, _TEE, _BOARD), > how to derive the SHA-256 digest of the vbmeta signing key with avbtool > and provision it into the TEE persistent value with "avb write_pvalue_hex", > the fail-closed behaviour when it is missing, and the device lock state as > seen from the U-Boot shell and from fastboot (flashing lock/unlock with the > mandatory userdata erase). > > Signed-off-by: Igor Opaniuk <[email protected]> Reviewed-by: Mattijs Korpershoek <[email protected]>
