Deterministic PKI contracts, signer tooling, and offline Raspberry Pi appliances for certificate operations that cross software, hardware, and human procedure.
Deliverable PKI workflow toolkit and offline CA appliances
Reproducible NixOS systems that bind encrypted Raspberry Pi storage to device-held key material while preserving an explicit recovery and upgrade path.
Deliverable Encrypted Raspberry Pi 5 NixOS infrastructure