[RFC PATCH 0/3] Add QEMU virt WorldGuard support on top of HWISO

[Raymond Mao]

From: Raymond Mao <raymond.mao at riscstar.com>

This series adds an WorldGuard implementation for OpenSBI on top of
previous hardware-isolation framework (HWISO) RFC [1].

The goal is to let OpenSBI program platform WorldGuard checker state
at boot and reprogram WorldGuard hart state during domain transitions.
The current RFC targets the QEMU virt WorldGuard model on top of the
proposed generic HWISO hooks.

This series does the following:
1. Add the WorldGuard CSR definitions and hart extension flags needed
   to detect support for MLWID, MWIDDELEG, and SLWID.
2. Document the HWISO/WorldGuard DT bindings and add a QEMU virt
   overlay example for domain WID/WID list assignment and checker
   permissions.
3. Add a QEMU virt WorldGuard HWISO mechanism that:
   - parses checker topology and protected resource permissions from
     DT
   - programs wgChecker MMIO state at boot
   - parses per-hart default WorldGuard execution state
   - parses per-domain WorldGuard metadata
   - reprograms MLWID, MWIDDELEG, and SLWID on domain transitions

[1] [RFC PATCH] sbi: add hardware isolation abstraction framework
https://lore.kernel.org/opensbi/20260317201849.903071-1-raymondmaoca@gmail.com/

Raymond Mao (3):
  hart: add WorldGuard CSR IDs and hart extension flags
  docs: document hwiso WorldGuard DT bindings and add QEMU overlay
    example
  platform: virt: add QEMU virt WorldGuard hwiso mechanism

 docs/domain_support.md                        |  159 +++
 include/sbi/riscv_encoding.h                  |    3 +
 include/sbi/sbi_hart.h                        |    4 +
 lib/sbi/sbi_hart.c                            |    2 +
 platform/generic/include/qemu_virt_wg.h       |   60 +
 platform/generic/objects.mk                   |    1 +
 platform/generic/platform.c                   |   11 +
 .../generic/virt/qemu-virt-hwiso-overlay.dts  |  120 ++
 platform/generic/virt/qemu_virt_wgchecker.c   | 1050 +++++++++++++++++
 9 files changed, 1410 insertions(+)
 create mode 100644 platform/generic/include/qemu_virt_wg.h
 create mode 100644 platform/generic/virt/qemu-virt-hwiso-overlay.dts
 create mode 100644 platform/generic/virt/qemu_virt_wgchecker.c

-- 
2.25.1