docs(artifacts): record which ESP metadata comparison ignores

Segments are compared by their declaration. The image's and the
signature blocks' format_metadata are not: every field comes from their
own bytes, which content comparison already covers, and a block's
image_digest_matches follows the image's content.
This commit is contained in:
Entrpi committed 2026-10-28 01:24:22 +11:00
1 parent c0899783b6
commit ea2b3864dd
1 file changed
+4 -1
+4 -1
View File
@@ -145,7 +145,10 @@ Artifact comparison uses each segment's `load_addr` and `data_len` as its
declaration, so a segment that moves with unchanged bytes is `changed` in declaration, so a segment that moves with unchanged bytes is `changed` in
`metadata`. Segments pair by index: inserting or removing one shifts the `metadata`. Segments pair by index: inserting or removing one shifts the
paths of the segments after it. Header offsets and `classification` are not paths of the segments after it. Header offsets and `classification` are not
compared; the image's own change covers the header and chip. compared; the image's own change covers the header and chip. The image's and
the signature blocks' `format_metadata` carry no declaration: their fields
come from their own bytes, which content comparison covers, and a block's
`image_digest_matches` follows the image's content.
## Secure Boot v2 signatures ## Secure Boot v2 signatures