Skip to main content

Loaded devices

PermawebOS devices are the modules behind paths such as ~meta@1.0, ~measurement@1.0, ~tpm@2.0a, ~ao-payment@1.0, and ~bundler-settlement@1.0.

Platform images ship base devices. Profiles can allow additional devices to be loaded from signed AO messages without rebuilding the image.

Policy Keys

KeyMeaning
load-remote-devicesAllows device modules to be loaded from signed messages.
trusted-device-signersSigner addresses allowed to publish loadable device code.
name-resolversMaps public device names to published device IDs or resolvers.

Example shape:

{
"load-remote-devices": true,
"trusted-device-signers": [
"DEVICE_SIGNER_ADDRESS"
],
"name-resolvers": [
{
"example@1.0": "DEVICE_SPEC_OR_IMPLEMENTATION_ID"
}
]
}

Remote device loading is code loading, not a sandbox. A node that trusts a device signer is trusting that signer's code to run inside the node.

The LapEE bundler profile uses the lapee-bundler-devices package. The profile pins the current device signer and maps device names such as ao-payment@1.0, arweave-byte-pricing@1.0, bundler-settlement@1.0, pricing-router@1.0, process-ledger@1.0, and simple-oracle@1.0 to their published Forge IDs.

Verification

A verifier that accepts loaded devices should check:

  • load-remote-devices has the expected value.
  • trusted-device-signers is the expected signer set.
  • name-resolvers maps the expected public device names.
  • the architecture measurement binds those config values into the public node message.

When checking a node over HTTP, request AO JSON explicitly:

curl -fsS \
-H 'accept: application/json' \
-H 'accept-bundle: true' \
"$NODE_URL/~meta@1.0/info/trusted-device-signers" \
| jq '[to_entries[] | select(.key | test("^[0-9]+$")) | .value]'

trusted-device-signers is an AO json@1.0 list. The raw response uses numeric object keys such as "1" rather than a plain JSON array.

Secrets

Do not put API keys, private service credentials, or WiFi passwords in config.json. It is public node policy and can appear in measurement evidence.