ClaimFIRMWARE
  1. The firmware with $artifactHash is unique for {$platform, $revision} tuple
  2. The firmware was built from $git@tag using $tamago@tag and $usbarmory@tag and REV=... (with -trimpath)
  3. The firmware is functionally correct and without known attack vectors
  4. The firmware was knowingly issued by WithSecure
StatementFIRMWARE
  Firmware Manifest
ClaimantFIRMWARE
  WithSecure
BelieverFIRMWARE
  Firmware Update Client
VerifierFIRMWARE
  - Third Party: The firmware with $artifactHash is unique for {$platform, $revision} tuple
  - Third Party: The firmware was built from $git@tag using $tamago@tag and $usbarmory@tag and REV=... (with -trimpath)
  - Malware Scanner: The firmware is functionally correct and without known attack vectors
  - WithSecure: The firmware was knowingly issued by WithSecure
ArbiterFIRMWARE
  Ecosystem

ClaimLOG_FIRMWARE
  1. This data structure is append-only from any previous version
  2. This data structure is globally consistent
  3. This data structure contains only leaves of type `Firmware Manifest`
StatementLOG_FIRMWARE
  Log Checkpoint
ClaimantLOG_FIRMWARE
  WithSecure
BelieverLOG_FIRMWARE
  - Firmware Update Client
  - Third Party
  - Malware Scanner
  - WithSecure
VerifierLOG_FIRMWARE
  - Witness: This data structure is append-only from any previous version
  - Witness Quorum: This data structure is globally consistent
  - Third Party: This data structure contains only leaves of type `Firmware Manifest`
ArbiterLOG_FIRMWARE
  Ecosystem