{
  "release": "OpenBSD 7.9 Raspberry Pi 4B generic",
  "prepared_date": "2026-09-07",
  "report_utc": "2026-09-07T23:18:59.223714+00:00",
  "official_openbsd_project_image": false,
  "pristine_release_image_never_booted": true,
  "image": {
    "raw_name": "openbsd-7.9-rpi4b-generic.img",
    "raw_bytes": 63864569856,
    "raw_sha256": "30b6f057777d7c24159a1cbd1b6e9ecf7b01906f207d3acffc1719dc2ca496c4",
    "compressed_name": "openbsd-7.9-rpi4b-generic.img.gz",
    "compressed_bytes": 550004570,
    "compressed_sha256": "9b4b03bb606a8460ca661c18a00995a95f477bbb474e59bce8b0b55e61cf3a8d",
    "gzip_matches_raw": true,
    "geometry": {
      "sector_bytes": 512,
      "fat_start_sector": 32768,
      "fat_sectors": 532480,
      "openbsd_start_sector": 565248,
      "openbsd_sectors": 124170240,
      "fat32_bpb_checked": true
    },
    "boot_partition_sha256": "cf512efd6da2296ed7869c21782bcb85c1f3f4d853e08d81d9b82c0101620210"
  },
  "configuration": {
    "default_owner": "openbsd",
    "default_hostname": "openbsd-rpi4b",
    "timezone": "UTC",
    "owner_uid_gid": 1000,
    "ssh": "Disabled until valid owner public-key setup; then key-only",
    "root_ssh_login": false,
    "default_password": false,
    "owner_doas_password_required": false,
    "physical_ethernet": "bse0 IPv4 DHCP and IPv6 autoconfiguration",
    "automatic_partition_expansion": false,
    "syspatches_installed": "001 through 014"
  },
  "sanitization": {
    "fresh_filesystems": true,
    "source_owner_account_removed": true,
    "source_owner_keys_removed": true,
    "inherited_machine_keys_and_entropy_seeds_removed": true,
    "mounted_file_and_symlink_identity_audit_passed": true,
    "whole_raw_image_known_marker_scan": {
      "entire_raw_image_scanned": true,
      "literal_marker_count": 4,
      "matches": 0,
      "scope": "Known literal markers only; separate filesystem sanitation audit required"
    },
    "complete_gzip_decompression_matches_raw": true
  },
  "vm_tests": {
    "architecture": "aarch64",
    "platform": "QEMU virt with virtual Ethernet and virtio RNG",
    "default_owner_setup": true,
    "custom_owner_and_hostname_setup": true,
    "ssh_key_login": true,
    "passwordless_doas": true,
    "effective_password_authentication_disabled": true,
    "negative_authentication_tests": [
      {
        "test": "unrelated-key",
        "rejected": true
      },
      {
        "test": "original-owner-key",
        "rejected": true
      },
      {
        "test": "root-login",
        "rejected": true
      }
    ],
    "missing_key_leaves_ssh_disabled": true,
    "malformed_second_key_leaves_ssh_disabled": true,
    "corrected_input_recovers_on_next_boot": true,
    "partial_account_setup_resumes_without_duplicate_accounts": true,
    "ssh_access_persists_across_reboot": true,
    "changed_fat_input_ignored_after_completion": true,
    "signed_jq_package_and_dependencies_installed": true,
    "kernel_relink_and_checksum_passed": true,
    "identity_isolation": {
      "ssh_ipsec_soii_keys_persist_across_reboot": true,
      "ssh_ipsec_soii_keys_differ_between_independent_clones": true,
      "entropy_seed_hashes_differ_between_clones": true,
      "virtio_rng_used_for_vm_tests": true,
      "physical_generic_boot_tested": false
    }
  },
  "other_checks": {
    "parser_test_cases": 34,
    "parser_platforms": [
      "macOS",
      "OpenBSD 7.9"
    ],
    "offline_root_usr_home_and_fat_checks_passed": true,
    "firmware_binaries_unchanged_from_source": true
  },
  "physical_generic_image_boot_tested": false,
  "limits": [
    "VM tests do not validate the generic image on physical Pi hardware, physical Ethernet, PoE, SD media, or hardware entropy.",
    "Known-marker scanning is not a proof that every possible identity string is absent; it complements fresh-filesystem construction and mounted-file auditing.",
    "Recovery test used an interrupted account-setup state; arbitrary power-loss filesystem corruption is outside its scope.",
    "Companion source materials are provided; no local U-Boot or device-tree rebuild is claimed."
  ]
}