# TODO

## General

- bazel setup
- tooling setup

## Dockerfiles

- move to an OCI setup

## Provisioning

- packer image building
- ansible deployment
- initrd/initramfs for auto FDE
  - using dracut?

## Secure computing

- TPM provisioning
- TPM identity data store
- automated FDE on provisioning
- secure boot
- SLSA level 3 for repo
  - level 4 isn't feasible with only a single author

## Documentation

- functional specs for everything