From b572c20f2646251360feed9f972f10b7f6a393b9 Mon Sep 17 00:00:00 2001
From: Arian van Putten <arian.vanputten@gmail.com>
Date: Fri, 14 Nov 2025 15:40:26 +0100
Subject: [PATCH 1/3] Add note about canonical order of UKI components

---
 specs/unified_kernel_image.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/specs/unified_kernel_image.md b/specs/unified_kernel_image.md
index 06551d5e..5ef3b962 100644
--- a/specs/unified_kernel_image.md
+++ b/specs/unified_kernel_image.md
@@ -47,6 +47,7 @@ header to 0x0A (i.e. `IMAGE_SUBSYSTEM_EFI_APPLICATION`).
 ## UKI Components
 UKIs consist of the following resources:
 
+<!-- NOTE: these components are in canonical for predictable PCR measurements. Please add any new components at the bottom of the list and NEVER reorder anything in this list. -->
 * An UEFI boot stub that forms the initial program.
   It contains various PE sections normally required for a program,
   including `.text`, `.reloc`, `.data`, and others.

From 9b5b66221ef3b9cb22e543887872d76fa831211c Mon Sep 17 00:00:00 2001
From: Arian van Putten <arian.vanputten@gmail.com>
Date: Fri, 14 Nov 2025 16:22:51 +0100
Subject: [PATCH 2/3] Add line-breaks

---
 specs/unified_kernel_image.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/specs/unified_kernel_image.md b/specs/unified_kernel_image.md
index 5ef3b962..9d33321c 100644
--- a/specs/unified_kernel_image.md
+++ b/specs/unified_kernel_image.md
@@ -47,7 +47,10 @@ header to 0x0A (i.e. `IMAGE_SUBSYSTEM_EFI_APPLICATION`).
 ## UKI Components
 UKIs consist of the following resources:
 
-<!-- NOTE: these components are in canonical for predictable PCR measurements. Please add any new components at the bottom of the list and NEVER reorder anything in this list. -->
+<!--
+NOTE: these components are in canonical for predictable PCR measurements.
+Please add any new components at the bottom of the list and NEVER reorder anything in this list.
+-->
 * An UEFI boot stub that forms the initial program.
   It contains various PE sections normally required for a program,
   including `.text`, `.reloc`, `.data`, and others.

From 8925b80bccc3a2643124e5f4db2b0be07201d5a1 Mon Sep 17 00:00:00 2001
From: Arian van Putten <arian.vanputten@gmail.com>
Date: Fri, 14 Nov 2025 16:38:01 +0100
Subject: [PATCH 3/3] Update specs/unified_kernel_image.md
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Jörg Behrmann <behrmann@physik.fu-berlin.de>
---
 specs/unified_kernel_image.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/specs/unified_kernel_image.md b/specs/unified_kernel_image.md
index 9d33321c..3ef5edaa 100644
--- a/specs/unified_kernel_image.md
+++ b/specs/unified_kernel_image.md
@@ -48,7 +48,7 @@ header to 0x0A (i.e. `IMAGE_SUBSYSTEM_EFI_APPLICATION`).
 UKIs consist of the following resources:
 
 <!--
-NOTE: these components are in canonical for predictable PCR measurements.
+NOTE: these components are in canonical order for predictable PCR measurements.
 Please add any new components at the bottom of the list and NEVER reorder anything in this list.
 -->
 * An UEFI boot stub that forms the initial program.