feat(config): default bare target entries to GENERATE mode

PATCH and AUTO modes inherit the real TEE's attestation quirks (epoch 0
cert dates, version mismatch, missing USAGE_COUNT_LIMIT) which can't be
fixed in post-patch. GENERATE mode builds attestation from scratch with
full control over every field. Users who want real TEE key generation
can still use the ? suffix for explicit PATCH mode.
This commit is contained in:
Enginex0
2026-03-26 02:32:14 +01:00
parent 2241bfb13d
commit 784373c8b5
@@ -164,9 +164,8 @@ object ConfigurationManager {
newModes[pkg] = Mode.PATCH
newKeyboxes[pkg] = currentKeybox
}
// No suffix means AUTO mode.
else -> {
newModes[trimmedLine] = Mode.AUTO
newModes[trimmedLine] = Mode.GENERATE
newKeyboxes[trimmedLine] = currentKeybox
}
}