// POST_QUANTUM · RISC_V · MEASURED_BOOT
Measured boot. Zero trust. A bare-metal RISC-V chain-of-trust with real SHA-256 and ML-KEM-768 post-quantum crypto — firmware measures itself, an external verifier confirms, on QEMU virt.
| SHA-256 | sha2 crate — real FIPS 180-4 hashing, not a placeholder |
| ML-KEM-768 | ml-kem crate — FIPS 203 post-quantum key encapsulation |
| MMIO UART | ns16550a driver on QEMU virt 0x10000000 |
| Measured boot | SHA-256 PCR registers over real binary sections |
| 3-stage boot | firmware → measurement → attestation report |
| External root of trust | verifier reads ELF, computes expected PCR, compares — trusts nothing self-reported |