# nordisk/holger: files at 0ae58dd9593a .cargo/ .forgejo/ .githooks/ .nornir/ agent/ attestations/ bench-scenarios/ build-space/ crates/ deploy/ distribution/ docs/ errcode/ estate/ estate-tests/ examples/ fuzz/ guests/ holger-build-thing/ holger-cli/ holger-downstream/ holger-estate-front/ holger-front/ holger-recipe/ holger-rs/ holperf/ intel/ jobs/ LICENSES/ mannequin/ plugin/ proto/ provenance/ scripts/ server/ slsa/ sync/ traits/ update-bundle/ xtask/ .dockerignore .git-blame-ignore-revs .gitattributes .gitignore bench_baseline.builder-64.json bench_baseline.json bench_history.jsonl brokkr.toml Cargo.lock Cargo.toml CHANGELOG.md CLA-SIGNATURES.md CLA.md CLAUDE.md CODE_OF_CONDUCT.md COMMERCIAL-LICENSING.md CONTRIBUTING.md deny.toml GOVERNANCE.md LICENSE NOTICE osv-scanner.toml README.md RELEASING.md renovate.json rustfmt.toml SECURITY.md THIRD_PARTY_LICENSES.md TRADEMARKS.md .cargo/audit.toml .cargo/config.toml .cargo/estate-siblings.toml .forgejo/workflows/ .githooks/post-checkout .githooks/post-commit .githooks/post-merge .githooks/pre-commit .githooks/pre-push .nornir/assets/ .nornir/stinky/ .nornir/.gitignore .nornir/agent-design.md .nornir/agent-guide.md .nornir/ai-context.toml .nornir/appliance-for-idiots.md .nornir/artifactory-parity-design.md .nornir/auth-design.md .nornir/auth-for-idiots.md .nornir/auth-guide.md .nornir/auth-providers.md .nornir/auth-rbac-design.md .nornir/branch-prune-2026-09-20.md .nornir/build-thing-design.md .nornir/build-variants.toml .nornir/capability-name-map.md .nornir/CHANGELOG.md .nornir/checksum-deploy-design.md .nornir/checksum-deploy-for-idiots.md .nornir/checksum-deploy-guide.md .nornir/common-framework-design.md .nornir/common-framework-for-idiots.md .nornir/common-framework-guide.md .nornir/consolidation-jera-embed-design.md .nornir/consolidation-jera-embed-for-idiots.md .nornir/consolidation-jera-embed-guide.md .nornir/deb-rpm-native-metadata-for-idiots.md .nornir/deb-rpm-native-metadata-guide.md .nornir/deb-rpm-native-metadata.md .nornir/design.md .nornir/docs.toml .nornir/embed-design.md .nornir/embed-for-idiots.md .nornir/embed-guide.md .nornir/end-to-end-conformance-testing.md .nornir/feature-complete-gaps.md .nornir/for-idiots.md .nornir/guide.md .nornir/holger-ds-design.md .nornir/holger-ds-for-idiots.md .nornir/holger-ds-guide.md .nornir/holger-error-codes.md .nornir/holger-evolution.md .nornir/HOLGER-PLAN.md .nornir/holger-repo-cleanup.md .nornir/holger-tiers.md .nornir/mannequin-for-idiots.md .nornir/metrics-design.md .nornir/metrics-for-idiots.md .nornir/metrics-guide.md .nornir/mini-holger-for-henrik.md .nornir/passkey-wire-contract.md .nornir/PLAN.md .nornir/promote-sync-attest-design.md .nornir/promotion-design.md .nornir/properties-design.md .nornir/property-policy-design.md .nornir/proto-codegen-xtask.md .nornir/proxy-design.md .nornir/raw-repo-design.md .nornir/README-full.md .nornir/README.md .nornir/reasoning.md .nornir/registry-design.md .nornir/registry-guide.md .nornir/registry-reasoning.md .nornir/replication-design.md .nornir/replication-for-idiots.md .nornir/replication-guide.md .nornir/retention-design.md .nornir/retention-for-idiots.md .nornir/retention-guide.md .nornir/sbom-hosting-design.md .nornir/sbom-hosting-for-idiots.md .nornir/sbom-hosting-guide.md .nornir/scene-design.md .nornir/search-design.md .nornir/search-for-idiots.md .nornir/search-guide.md .nornir/serve-design.md .nornir/serve-guide.md .nornir/static-dynamic-profile-design.md .nornir/storage-design.md .nornir/storage-guide.md .nornir/SUITES.md .nornir/test-matrix.md .nornir/testing-guide.md .nornir/testmatrix-arms.json .nornir/testmatrix-functional-emitters.md .nornir/vec-to-bytes-migration.md .nornir/version-scheme-design.md .nornir/znippy-format-pin-design.md .nornir/znippy-format-pin-for-idiots.md .nornir/znippy-format-pin-guide.md agent/cli/ agent/connector/ agent/lib/ attestations/README.md bench-scenarios/.nornir/ bench-scenarios/examples/ bench-scenarios/fixtures/ bench-scenarios/src/ bench-scenarios/Cargo.toml bench-scenarios/LICENSE bench-scenarios/LICENSES bench-scenarios/NOTICE build-space/examples/ build-space/src/ build-space/tests/ build-space/Cargo.toml build-space/LICENSE build-space/LICENSES build-space/NOTICE crates/holger-monetize-guest/ deploy/helm/ deploy/k8s/ deploy/oden-mirror/ distribution/e2e-clients/ distribution/scan-worker/ distribution/Dockerfile docs/tasks/ docs/v1/ docs/v2/ docs/ai-context-full.md docs/ai-context.md docs/idiot_guide.pdf docs/manual.pdf docs/ROADMAP.md docs/unsorted.pdf errcode/src/ errcode/tests/ errcode/Cargo.toml errcode/LICENSE errcode/LICENSES errcode/NOTICE estate/holger-fleet/ estate/holger-live/ estate/Cargo.lock estate/Cargo.toml estate/osv-scanner.toml estate-tests/src/ estate-tests/tests/ estate-tests/Cargo.toml examples/mirror-credentials/ examples/secure-update-gateway/ fuzz/corpus/ fuzz/fuzz_targets/ fuzz/src/ fuzz/tests/ fuzz/.gitignore fuzz/Cargo.lock fuzz/Cargo.toml fuzz/README.md guests/heimdall/ holger-build-thing/src/ holger-build-thing/tests/ holger-build-thing/Cargo.toml holger-build-thing/LICENSE holger-build-thing/LICENSES holger-build-thing/NOTICE holger-cli/src/ holger-cli/tests/ holger-cli/Cargo.toml holger-downstream/src/ holger-downstream/Cargo.lock holger-downstream/Cargo.toml holger-downstream/osv-scanner.toml holger-estate-front/examples/ holger-estate-front/src/ holger-estate-front/tests/ holger-estate-front/build.rs holger-estate-front/Cargo.lock holger-estate-front/Cargo.toml holger-estate-front/osv-scanner.toml holger-front/assets/ holger-front/src/ holger-front/tests/ holger-front/build.rs holger-front/Cargo.toml holger-front/LICENSE holger-front/LICENSES holger-front/NOTICE holger-recipe/src/ holger-recipe/tests/ holger-recipe/trust/ holger-recipe/Cargo.toml holger-recipe/LICENSE holger-recipe/LICENSES holger-recipe/NOTICE holger-rs/xtask/ holger-rs/Cargo.lock holger-rs/Cargo.toml holperf/results/ holperf/sets/ holperf/src/ holperf/tests/ holperf/Cargo.toml intel/src/ intel/tests/ intel/Cargo.toml jobs/runner/ LICENSES/AGPL-3.0-only.txt LICENSES/Apache-2.0.txt LICENSES/CC-BY-4.0.txt mannequin/.nornir/ mannequin/src/ mannequin/tests/ mannequin/Cargo.toml mannequin/LICENSE mannequin/LICENSES mannequin/mannequin.ron mannequin/NOTICE plugin/abi/ plugin/guest-allocation/ plugin/guest-allocation-wasm/ plugin/handler-bundle-core/ plugin/handler-rust-toolchain/ plugin/handler-rust-toolchain-wasm/ plugin/handler-skidbladnir/ plugin/handler-skidbladnir-wasm/ plugin/host/ proto/holger-account.proto proto/holger-doors.proto proto/holger-estate.proto proto/holger-grow.proto proto/holger-metered.proto proto/holger-room.proto proto/holger-token.proto proto/holger.proto provenance/examples/ provenance/src/ provenance/tests/ provenance/Cargo.toml scripts/demo/ scripts/bench-sandbox.sh scripts/clamd-sandbox.sh scripts/demo-airgap.sh scripts/flavour-k8s-cluster.sh scripts/flavour-systemd-vm.sh scripts/heimdall-kernel-tests.sh scripts/heimdall-shim-static.sh scripts/scan-sandbox-live.sh server/cli/ server/dev-narrate/ server/downstream/ server/index-rows/ server/inspect/ server/lib/ server/repository/ server/sandbox/ server/scan-worker/ slsa/README.md slsa/release-signing-key.attestation.pem slsa/release-signing-key.pub slsa/yubikey-piv-attestation-ca.pem sync/src/ sync/Cargo.toml traits/.nornir/ traits/src/ traits/tests/ traits/Cargo.toml traits/LICENSE traits/LICENSES traits/NOTICE update-bundle/src/ update-bundle/testdata/ update-bundle/tests/ update-bundle/Cargo.toml update-bundle/LICENSE update-bundle/LICENSES update-bundle/NOTICE xtask/.nornir/ xtask/boot/ xtask/examples/ xtask/src/ xtask/tests/ xtask/Cargo.toml .forgejo/workflows/ci.yml .forgejo/workflows/security.yml .nornir/assets/appliance-root/ .nornir/assets/recovered-logo/ .nornir/assets/build-space-executables.svg .nornir/assets/checksum-deploy-flow.svg .nornir/assets/common-framework.svg .nornir/assets/consolidation-jera-embed.svg .nornir/assets/depgraph.svg .nornir/assets/flow_deploy.svg .nornir/assets/flow_families.svg .nornir/assets/flow_plugin_registry.svg .nornir/assets/flow_pull.svg .nornir/assets/flow_push.svg .nornir/assets/holger-arch-wiring.svg .nornir/assets/holger-architecture.svg .nornir/assets/holger-ds-journey.svg .nornir/assets/holger-tiers.svg .nornir/assets/holger-znippy-logo.png .nornir/assets/holger_marriage_flow.svg .nornir/assets/metrics-flow.svg .nornir/assets/properties-flow.svg .nornir/assets/property-policy-flow.svg .nornir/assets/proxy-negcache-flow.svg .nornir/assets/raw-repo-flow.svg .nornir/assets/replication-flow.svg .nornir/assets/retention-executor-flow.svg .nornir/assets/retention-flow.svg .nornir/assets/sbom-flow.svg .nornir/assets/search-flow.svg .nornir/assets/ui_grpc_flow.svg .nornir/stinky/00-index.md .nornir/stinky/01-dataplane.md .nornir/stinky/02-twin-growth.md .nornir/stinky/03-security-attestation.md .nornir/stinky/04-structure-traits-plugins.md .nornir/stinky/05-suite-monetize-mvp.md .nornir/stinky/06-monetize-plugin.md .nornir/stinky/07-signing-map.md .nornir/stinky/08-archaeology.md .nornir/stinky/09-mvp-line-and-feature-honesty.md .nornir/stinky/10-benchmark-baseline.md .nornir/stinky/11-dataplane-restored.md .nornir/stinky/11-dwarves-on-oden.md .nornir/stinky/12-dataplane-finished.md .nornir/stinky/13-requirements-2026-09-22.md .nornir/stinky/14-holger-like-gunnar.md .nornir/stinky/16-lane-sb-twin-security-proof-2026-10-22.md .nornir/stinky/17-buy-and-monetize-flow-vs-gunnar.md agent/cli/.nornir/ agent/cli/src/ agent/cli/tests/ agent/cli/Cargo.toml agent/cli/LICENSE agent/cli/LICENSES agent/cli/NOTICE agent/connector/artifactory/ agent/connector/nexus/ agent/connector/world/ agent/lib/.nornir/ agent/lib/src/ agent/lib/tests/ agent/lib/Cargo.toml agent/lib/LICENSE agent/lib/LICENSES agent/lib/NOTICE bench-scenarios/.nornir/holger-bench-scenarios.md bench-scenarios/examples/art_probe.rs bench-scenarios/examples/dataplane_bench.rs bench-scenarios/examples/pip_probe.rs bench-scenarios/examples/retention_probe.rs bench-scenarios/examples/secure_update_bench.rs bench-scenarios/fixtures/intake/ bench-scenarios/src/bin/ bench-scenarios/src/artifactory.rs bench-scenarios/src/audit.rs bench-scenarios/src/dataplane.rs bench-scenarios/src/grpc_door.rs bench-scenarios/src/hops.rs bench-scenarios/src/intake.rs bench-scenarios/src/lib.rs bench-scenarios/src/nexus.rs bench-scenarios/src/promote.rs bench-scenarios/src/retention.rs bench-scenarios/src/sandbox.rs bench-scenarios/src/secure_update.rs bench-scenarios/src/served.rs bench-scenarios/src/stress.rs build-space/examples/press_build_thing.rs build-space/src/lib.rs build-space/tests/appliance_container_robot.rs build-space/tests/auth_ship_small.rs build-space/tests/example_press_runs.rs build-space/tests/suite_build_shape.rs crates/holger-monetize-guest/src/ crates/holger-monetize-guest/tests/ crates/holger-monetize-guest/build.rs crates/holger-monetize-guest/Cargo.toml deploy/helm/holger/ deploy/k8s/configmap.yaml deploy/k8s/deployment.yaml deploy/k8s/namespace.yaml deploy/k8s/networkpolicy.yaml deploy/k8s/pvc.yaml deploy/k8s/secret.yaml deploy/k8s/service-nodeport.yaml deploy/k8s/service.yaml deploy/k8s/TALOS.md deploy/oden-mirror/holger-a-proof.ron deploy/oden-mirror/holger-c-proof-trustsize.ron deploy/oden-mirror/holger-c-proof.ron deploy/oden-mirror/holger-c.ron distribution/e2e-clients/clamav/ distribution/e2e-clients/seed/ distribution/e2e-clients/yara/ distribution/e2e-clients/Containerfile distribution/scan-worker/Containerfile docs/tasks/flow-smart/ docs/tasks/HENRIK-TASKS.md docs/tasks/HOL-FLOW-SMART.md docs/v1/demo-airgap.md docs/v1/estate-approvers.md docs/v1/estate-health-words.md docs/v1/FEATURES.md docs/v1/HOLGER-V2.md docs/v1/README-v1.md docs/v1/scanner-signature-bundles.md docs/v1/secure-update-gateway-limitations.md docs/v1/secure-update-gateway-mvp.md docs/v1/secure-update-gateway-operator-guide.md docs/v1/secure-update-gateway-threat-model.md docs/v1/security-review-2026-09-11.md docs/v1/SLSA.md docs/v1/SUPPLY-CHAIN.md docs/v2/img/ docs/v2/01-what-holger-is.md docs/v2/02-install.md docs/v2/03-three-products.md docs/v2/04-the-ron.md docs/v2/05-intake-chain.md docs/v2/06-pairing.md docs/v2/07-build-thing.md docs/v2/08-supply-chain.md docs/v2/09-estate.md docs/v2/10-security.md docs/v2/11-reference.md docs/v2/README.md docs/v2/threat-model.md errcode/src/lib.rs # (cut here: the tree is longer; clone the repository for all of it)