Loaded devices
PermawebOS devices are the modules behind paths such as ~meta@1.0,
~measurement@1.0, ~tpm@2.0a, ~ao-payment@1.0, and
~bundler-settlement@1.0.
Platform images ship base devices. Profiles can allow additional devices to be loaded from signed AO messages without rebuilding the image.
Policy Keys
| Key | Meaning |
|---|---|
load-remote-devices | Allows device modules to be loaded from signed messages. |
trusted-device-signers | Signer addresses allowed to publish loadable device code. |
name-resolvers | Maps public device names to published device IDs or resolvers. |
Example shape:
{
"load-remote-devices": true,
"trusted-device-signers": [
"DEVICE_SIGNER_ADDRESS"
],
"name-resolvers": [
{
"example@1.0": "DEVICE_SPEC_OR_IMPLEMENTATION_ID"
}
]
}
Remote device loading is code loading, not a sandbox. A node that trusts a device signer is trusting that signer's code to run inside the node.
Paid-Bundler Package
The LapEE bundler profile uses the lapee-bundler-devices package. The
profile pins the current device signer and maps device names such as
ao-payment@1.0, arweave-byte-pricing@1.0, bundler-settlement@1.0,
pricing-router@1.0, process-ledger@1.0, and simple-oracle@1.0 to their
published Forge IDs.
Verification
A verifier that accepts loaded devices should check:
load-remote-deviceshas the expected value.trusted-device-signersis the expected signer set.name-resolversmaps the expected public device names.- the architecture measurement binds those config values into the public node message.
When checking a node over HTTP, request AO JSON explicitly:
curl -fsS \
-H 'accept: application/json' \
-H 'accept-bundle: true' \
"$NODE_URL/~meta@1.0/info/trusted-device-signers" \
| jq '[to_entries[] | select(.key | test("^[0-9]+$")) | .value]'
trusted-device-signers is an AO json@1.0 list. The raw response uses
numeric object keys such as "1" rather than a plain JSON array.
Secrets
Do not put API keys, private service credentials, or WiFi passwords in
config.json. It is public node policy and can appear in measurement evidence.