remove unnecessary files

.editorconfig

@@ -16,4 +16,3 @@ indent_size = 4
 [*]
 end_of_line = lf
 insert_final_newline = true
-trim_trailing_whitespace = true

Makefile

@@ -1,24 +1,24 @@
 PORT := 8080
 .PHONY: default
-default: build-trove
+default: build-qvs
 
 out:
 	mkdir -p out
 
-.PHONY: build-trove
-build-trove: out/trove/index.json
-out/trove/index.json: out Containerfile.trove $(shell find quorum-vault-system -type f)
-	mkdir -p out/trove
+.PHONY: build-qvs
+build-qvs: out/qvs/index.json
+out/qvs/index.json: out Containerfile.qvs $(shell find quorum-vault-system -type f)
+	mkdir -p out/qvs
 	docker \
 		build \
-		-f Containerfile.trove \
-		--output type=oci,rewrite-timestamp=true,force-compression=true,name=git.distrust.co/public/docs-trove,tar=true,dest=- \
+		-f Containerfile.qvs \
+		--output type=oci,rewrite-timestamp=true,force-compression=true,name=git.distrust.co/public/docs-qvs,tar=true,dest=- \
 		. \
-	| tar -C out/trove -mx
+	| tar -C out/qvs -mx
 
-.PHONY: serve-trove
-serve-trove: build-trove
-	tar -C out/trove -cf - . | docker load
-	docker run -p $(PORT):8080 git.distrust.co/public/docs-trove
+.PHONY: serve-qvs
+serve-qvs: build-qvs
+	tar -C out/qvs -cf - . | docker load
+	docker run -p $(PORT):8080 git.distrust.co/public/docs-qvs
 
 

quorum-vault-system/README.md

@@ -1,6 +1,6 @@
-# Trove
+# Quorum Key Management (QVS)
 
-Trove is an open source system of playbooks and tooling which
+Quorum Key Management (QVS) is an open source system of playbooks and tooling which
 facilitates the creation and maintenance of highly resilient Quorum-based Key
 Management Systems based on a strict threat model which can be used for a
 variety of different cryptographic algorithms.

quorum-vault-system/book.toml

@@ -3,4 +3,4 @@ authors = ["Anton Livaja", "Lance R. Vick", "Ryan Heywood"]
 language = "en"
 multilingual = false
 src = "src"
-title = "Trove"
+title = "Quorum Vault System (QVS)"

quorum-vault-system/src/SUMMARY.md

@@ -3,7 +3,7 @@
     * [Threat Model](threat-model.md)
     * [Selecting a Quorum](selecting-quorum.md)
     * [System Roles](system-roles.md)
-    * [PGP Key Types](key-types.md)
+    * [Key Types](key-types.md)
     * [Software](software.md)
     * [Location](locations.md)
     * [Glossary](glossary.md)
@@ -24,11 +24,7 @@
                 * [Provision AirgapOS](generated-documents/level-2/fixed-location/provisioner/provision-airgapos.md)
                 * [Provision Air-Gapped Bundle](generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
             * [Proposer]()
-                * [Solana: Create Transaction Payload](generated-documents/level-2/fixed-location/proposer/sol-create-transaction-payload.md)
-                * [Pyth: Create Transaction Payload](generated-documents/level-2/fixed-location/proposer/pyth-create-transaction-payload.md)
-                * [Cosmos: Create Transaction Payload](generated-documents/level-2/fixed-location/proposer/cosmos-create-transaction-payload.md)
-                * [Kyve: Create Transaction Payload](generated-documents/level-2/fixed-location/proposer/kyve-create-transaction-payload.md)
-                * [Seda: Create Transaction Payload](generated-documents/level-2/fixed-location/proposer/seda-create-transaction-payload.md)
+                * [Propose Transaction](generated-documents/level-2/fixed-location/proposer/create-transaction-payload.md)
             * [Approver]()
                 * [Transaction Approval](generated-documents/level-2/fixed-location/approver/approve-transaction.md)
             * [Operator](generated-documents/level-2/fixed-location/operator/index.md)
@@ -40,18 +36,7 @@
                     * [Encrypt Wallet To Namespace PGP Key](generated-documents/level-2/fixed-location/operator/encrypt-wallet-to-namespace-key.md)
                     * [Export Namespace Mnemonic](generated-documents/level-2/fixed-location/operator/export-namespace-mnemonic.md)
                 * [Coins]()
-                    * [Solana]()
-                        * [Generate Address](generated-documents/level-2/fixed-location/operator/coins/sol/generate-address.md)
-                        * [Sign and Broadcast Transaction](generated-documents/level-2/fixed-location/operator/coins/sol/sign-and-broadcast-transaction.md)
-                    * [Pyth]()
-                        * [Generate Address](generated-documents/level-2/fixed-location/operator/coins/pyth/generate-address.md)
-                        * [Sign and Broadcast Transaction](generated-documents/level-2/fixed-location/operator/coins/pyth/sign-and-broadcast-transaction.md)
-                    * [Cosmos - General]()
-                        * [Generate Address](generated-documents/level-2/fixed-location/operator/coins/cosmos/generate-address.md)
-                        * [Sign and Broadcast Transaction](generated-documents/level-2/fixed-location/operator/coins/cosmos/sign-and-broadcast-transaction.md)
-                    * [Kyve]()
-                        * [Generate Address](generated-documents/level-2/fixed-location/operator/coins/kyve/generate-address.md)
-                        * [Sign and Broadcast Transaction](generated-documents/level-2/fixed-location/operator/coins/kyve/sign-and-broadcast-transaction.md)
-                    * [Seda]()
-                        * [Generate Address](generated-documents/level-2/fixed-location/operator/coins/seda/generate-address.md)
-                        * [Sign and Broadcast Transaction](generated-documents/level-2/fixed-location/operator/coins/seda/sign-and-broadcast-transaction.md)
+                    * [Generate Address](generated-documents/level-2/fixed-location/operator/coins/generate-address.md)
+                    * [Sign and Broadcast Transaction](generated-documents/level-2/fixed-location/operator/coins/sign-and-broadcast-transaction.md)
+                    * [SOL]()
+                        * [Generate Nonce Account](generated-documents/level-2/fixed-location/operator/coins/sol/generate-nonce-account.md)

quorum-vault-system/src/component-documents/finding-device-name.md

@@ -1,6 +1,6 @@
 /* ANCHOR: all */
 // ANCHOR: content
 Look for your SD card device name (`<device_name>`) in the output of the `lsblk` command. It will typically be listed as `/dev/sdX` or `/dev/mmcblk<num>`, where X is a letter (e.g., `/dev/sdb`, `/dev/sdc`). You can identify it by its size or by checking if it has a partition (like `/dev/sdX1`)
-    * Mount the device using: `sudo mount /dev/<your_device> /media`
+    * You may mount the device using: `sudo mount /dev/<your_device> /media` 
 // ANCHOR_END: content
-/* ANCHOR_END: all */
+/* ANCHOR_END: all */

quorum-vault-system/src/component-documents/git-basics.md

@@ -1,18 +1,18 @@
 /* ANCHOR: all */
 // ANCHOR: content
-1. Connect SD card to online linux workstation
+1. Connect SD card to online machine
 
 1. {{ #include finding-device-name.md:content }}
 
 1. If the `~/vaults/` repository already exists, ensure it doesn't have any changes that haven't been committed, then remove it using `sudo rm -rf ~/vaults` before re-running the previous step
 
-1. Copy the repository with updated files to an online linux workstation, sign, commit and push to the `vaults` repository:
+1. Copy the repository with updated files to an online machine, sign, commit and push to the `vaults` repository:
     ```
     $ cp -r /media/vaults ~/vaults/
     $ cd ~/vaults
     $ git add .
-    $ git commit -S -m "<message>"
+    $ git commit -m -S "<message>"
     $ git push origin HEAD
     ```
 // ANCHOR_END: content
-/* ANCHOR_END: all */
+/* ANCHOR_END: all */

quorum-vault-system/src/component-documents/git-commit-signing.md

@@ -12,8 +12,8 @@
     $ git config --global user.name <name>
     $ git config --global user.email <email>
     $ git config --global user.signingKey <pgp_key_id>
-    $ git config --global commit.gpgsign true
-    $ git config --global commit.merge true
+    $ git config --global commit.gpgsign = true
+    $ git config --global commit.merge = true
     ```
 
 1. Configure ssh to authenticate with smartcard

quorum-vault-system/src/component-documents/git-repository-initialization.md

@@ -7,13 +7,13 @@ Git is used because it permits cryptographic singing of commits using PGP, as we
 
 ## Procedure: Setting up Repository
 // ANCHOR: procedure
-1. Create a git repository using a git system such as Forgejo, GitLab, GitHub etc.
+1. Create a git repository using a git system such as Forjego, GitLab, GitHub etc.
 
 1. Set appropriate permissions to limit who can write to the repository.
 
-    * Require that all commits are signed using well known PGP keys
+    * Require that all commits are signed using well known PGP keys 
 
-1. Optionally set up a cron job that periodically pulls the data from the repository as a backup.
+1. Optionally set up a chron job that periodically pulls the data from the repository as a backup.
 // ANCHOR_END: procedure
 /* ANCHOR_END: all */
 

quorum-vault-system/src/component-documents/openpgp-setup.md

@@ -1,6 +1,10 @@
 /* ANCHOR: all */
 # OpenPGP Setup
 
+Setting up a personal PGP key pair is necessary for a number of different
+aspects while bootstrapping QVS. The keys are a fundamental building block, and
+as such need to be set up in a manner that minimizes exposure risks.
+
 ## Generating Keys using `keyfork`
 // ANCHOR: steps-keyfork
 
@@ -35,41 +39,41 @@
 
 // ANCHOR_END: steps-keyfork
 
-## Generating Keys on Smartcard
+## Generating Keys on Smartcard 
 // ANCHOR: steps-on-key-gen
 
 1. Insert the smart card into the USB port if it is not already plugged in.
 
 1. Open Command Prompt (Windows) or Terminal (macOS / Linux).
 
-1. Enter the GPG command:
+1. Enter the GPG command: 
 
 	* `gpg --card-edit`
 
 1. At the gpg/card> prompt, enter the command: admin
-
+    
 1. If you want to use keys larger than 2048 bits, run: key-attr
 
 1. Enter the command: generate
-
-1. When prompted, specify if you want to make an off-card backup of your encryption key.
-
+    
+1. When prompted, specify if you want to make an off-card backup of your encryption key. 
+        
     * Note: This is a shim backup of the private key, not a full backup, and cannot be used to restore the key.
-
+    
 1. Specify how long the key should be valid for (specify the number in days, weeks, months, or years).
-
+    
 1. Confirm the expiration day.
-
+    
 1. When prompted, enter your name.
 
 1. Enter your email address.
-
+    
 1. If needed, enter a comment.
-
+    
 1. Review the name and email, and accept or make changes.
-
+    
 1. Enter the default admin PIN again. The green light on the smart card will flash while the keys are being written.
-
+    
 1. Enter a Passphrase as the key will not allow you to pass without having a passphrase. If you do not enter a Passphrase generation will fail.
 
 // ANCHOR_END: steps-on-key-gen

quorum-vault-system/src/component-documents/physical-artifact-storage.md

@@ -1,6 +1,6 @@
 # Physical Artifact Storage
 
-Trove requires that some of the hardware containing cryptographic material be
+QVS requires that some of the hardware containing cryptographic material be
 securely stored in physical locations. The two primary cases where physical
 storage is necessary are the storage of Location Key Smart Cards, and Operator
 Key Smart Cards. These Smart Cards are necessary to successfully execute a

quorum-vault-system/src/component-documents/public-ceremony-artifact-storage.md

@@ -1,7 +1,7 @@
 # Redundant Storage of Ceremony Artifacts
 
 Ceremony Artifacts consist of data which is not sensitive in nature, but
-essential to ongoing operation of a Trove.
+essential to ongoing operation of a QVS.
 
 The primary artifacts which are produced during the ceremony are:
 

quorum-vault-system/src/component-documents/tamper-evidence-methods.md

@@ -114,7 +114,7 @@ Sealing bags of standard size objects which need to be protected can fit in. The
 #### Sealing
 // ANCHOR: vsbwf-procedure-sealing
 
-1. Insert object(s) into plastic sealing bag
+1. Insert object(s) into plastic bag
 
 1. Fill bag with enough plastic beads that most of the object is surrounded
 
@@ -132,11 +132,11 @@ Sealing bags of standard size objects which need to be protected can fit in. The
 // ANCHOR: vsbwf-procedure-unsealing
 
     a. Retrieve digital/physical photographs of both sides of sealed bundle
-
+    
     b. Compare all photographs to object for differences
-
+    
     c. Proceed with unsealing the object if no differences are detected
-
+  
 // ANCHOR_END: vsbwf-procedure-unsealing
 
 // ANCHOR_END: vsbwf-procedure

quorum-vault-system/src/fixed-location-reusable-laptop-ceremony.md

@@ -0,0 +1,67 @@
+# Fixed Location Reusable Laptop Ceremony
+
+This device is intended for use in a secure facility such as a [SCIF](TODO) which has the added assurances of protecting the environment from a wide range of side-channel attacks, as well as protection from physical attacks, and more comprehensive tamper proofing controls.
+
+The fixed location should include a work-station which makes it easy to perform the [tamper proofing](tamper-evidence-methods.md#tamper-proofing-station) procedure. This station may consist of a simple frame which holds a LED light, for consistent lightning, as well as a camera stand above it which can be used to take pictures. The camera should have an SD card that easily slides out of it so that the device doesn't leave and re-enter the room, only the SD card does.
+
+    * TODO: this is actually not necessary for the fixed location device, but it's good to have this setup in the same facility maybe for processing/setting up the one time use laptops
+
+The primary tamper proofing methods for the fixed location device are:
+
+* Heads firmware protection (TODO link to document which explains how to set up Purism)
+
+* Glitter to prevent physical access to hardware (TODO link to how to properly use glitter for tamper proofing)
+
+* On-premises audio and visual monitoring (TODO select appropriate equipment)
+
+* Physical vault (TODO find adequate vaults)
+
+## Procedure
+
+### Unsealing
+
+1. Select at least two authorized operators who will be participating in the ceremony
+
+2. Print photographs of tamper proofing of the laptop which will be used for the ceremony
+
+    * Both photos of vacuum sealed bag with filler and glitter on the bottom screws of laptop are required
+
+3. Make an entry into the access log, specifying the:
+
+    * Individuals involved
+
+    * Approximate time of entry
+
+4. Enter the SCIF, ensuring to lock the door behind you from the inside. The room should not be accessible from the outside during a ceremony.
+
+    * Ensure that no individual is bringing in any electronic devices. A hand-held or gate metal detector can be used for this.
+
+5. Access the laptop safe, and move the laptop, its hardware token, and polaroid to the Tamper Proofing Workstation
+
+    * Compare the polaroid and digital photographs for any differences
+
+    * Then compare the photographs to the actual object
+
+    * Check the glitter on the bottom screws of the laptop ensuring there are no scratch marks, and compare the screws to photos
+
+    * If there are any issues detected, initiate incident response
+
+6. Initiate the [Secure Boot Sequence](secure-boot-sequence.md)
+
+{{ #include secure-boot-sequence.md }}
+
+7. Use one of the [Playbooks](todo) to carry out a task
+
+#### Sealing
+
+{{ #include tamper-evidence-methods.md:vsbwf-procedure-sealing}}
+
+2. Remove the SD card from the camera and use chain of custody principles to ensure the integrity of the data
+
+3. Place the sealed laptop and signed polaroids, as well as the hardware token back in the safe
+
+4. Exit the SCIF and lock it
+
+5. Update the log with the exit time
+
+6. Upload the photos to a git repository, ensuring the commit is signed using PGP

quorum-vault-system/src/generated-documents/all-levels/pgp-key-provisioning.md

@@ -3,11 +3,11 @@
 ## Requirements
 
 * [AirgapOS SD card](../level-2/fixed-location/provisioner/provision-airgapos.md)
-  * Provided by [Air-Gapped Bundle](../level-2/fixed-location/provisioner/air-gapped-bundle.md)
+  * Provided by [AirGapped Bundle](../level-2/fixed-location/provisioner/air-gapped-bundle.md)
   * Alternative: Create your own from documentation in [AirgapOS Repository](https://git.distrust.co/public/airgap)
 
 * AirgapOS Laptop
-  * Provided by [Air-Gapped Bundle](../level-2/fixed-location/provisioner/air-gapped-bundle.md)
+  * Provided by [AirGapped Bundle](../level-2/fixed-location/provisioner/air-gapped-bundle.md)
   * Alternative: Computer that can load AirgapOS ([compatibility reference](https://git.distrust.co/public/airgap#tested-models))
 
 {{ #include ../../component-documents/linux-workstation.md:content }}
@@ -40,7 +40,7 @@
 1. Import newly generated public key into local keychain
 
     ```
-    $ gpg --import /media/TRANSFER/*.pub.asc
+    $ gpg --import /media/transport/*.pub.asc
     ```
 
 {{ #include ../../component-documents/git-commit-signing.md:steps }}
@@ -57,7 +57,7 @@
     $ git checkout main
     $ git pull origin main
     ```
-	c. Commit and push modifications
+	b. Commit and push modifications
     ```
     $ cp /media/TRANSFER/*.asc keys/all
     $ git add .
@@ -67,11 +67,11 @@
 
 1. Communicate your new key fingerprint to all other participants:
 
-    * Preferred: In person
-
+    * Preferred: In person 
+    
     * Fallback: via two logically distinct online communications methods (e.g. encrypted chat, and video call)
 
 1. Get confirmation they have imported your key to their keychains
 
-    * e.g. `gpg --import <your_key_id>.asc`
+    * e.g. `gpg --import <your_key_id>.asc` 
     * Confirm this is done for keyrings on workstations used to interact with the Vaults repository

quorum-vault-system/src/generated-documents/level-2/fixed-location/approver/approve-transaction.md

@@ -6,7 +6,7 @@ The approver is responsible for verifying a transaction proposed by a [proposer]
 
 * [Quorum PGP Key](../operator/quorum-entropy-ceremony.md)
 
-{{ #include ../../../../component-documents/linux-workstation.md:content }}
+* [Online Machine](TODO)
 
 * [SD Card Pack](../provisioner/provision-sd-card.md)
 
@@ -20,7 +20,7 @@ The approver is responsible for verifying a transaction proposed by a [proposer]
 
 ## Procedure
 
-1. Turn on online linux workstation
+1. Turn on online machine 
 
 1. Pull the latest changes from the `vaults` repository
 
@@ -28,7 +28,7 @@ The approver is responsible for verifying a transaction proposed by a [proposer]
 
 {{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
 
-1. Plug a fresh SD card into the online linux workstation
+1. Plug a fresh SD card into the online machine
 
 1. Save the `vaults` repository to the SD card, referred to as the Ceremony SD card
 
@@ -40,7 +40,7 @@ The approver is responsible for verifying a transaction proposed by a [proposer]
 
 1. Insert the AirgapOS SD card into the airgapped machine and turn it on
 
-1. Once booted, unplug the AirgapOS SD card
+1. Once booted, unplug the AirgapOS SD card 
 
 1. Plug in the Ceremony SD card
 
@@ -65,7 +65,7 @@ The approver is responsible for verifying a transaction proposed by a [proposer]
 
 1. Unplug the SD card from the air-gapped machine
 
-1. Plug in the SD card into the online linux workstation
+1. Plug in the SD card into the online machine
 
 1. {{ #include ../../../../component-documents/finding-device-name.md:content }}
 

quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/coins/generate-address.md

@@ -0,0 +1,122 @@
+# Generate Address
+
+
+## Requirements
+
+{{ #include ../../../operator-requirements.md:requirements }}
+
+{{ #include ../../../../../component-documents/linux-workstation.md:content }}
+
+* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
+
+* [Quorum PGP key pairs](../../key-types.md#quorum-pgp-keypair) 
+
+* [Ceremony SD card](../../ceremony-sd-card-provisioning.md)
+
+## Procedure
+
+1. Enter the designated location with the quorum of operators and all required equipment
+
+1. Lock access to the location - there should be no inflow or outflow of people during the ceremony
+
+1. Place Ceremony SD card in High Visibility Storage
+
+1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage
+
+{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
+
+1. Place all contents except for the laptop into High Visibility Storage
+
+### Offline Machine: Generate Address
+
+1. Retrieve AirgapOS SD card and plug it into the air-gapped machine
+
+1. Turn on air-gapped machine
+
+1. Unplug the AirgapOS SD card and place it in High Visibility Storage
+
+1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine 
+
+1. Copy the `vaults` repository to the machine and switch to it
+    ```
+	$ cp -r /media/vaults /root/
+	$ cd /root/vaults
+    ```
+
+1. Start Keyfork using the relevant Shardfile:
+
+	1. `keyfork recover shard --daemon <namespace>/shardfile.asc`
+
+    1. Follow on screen prompts
+
+1. If the desired `<coin>` directory doesn't exist for the namespace, create it:
+
+    * `mkdir -p <namespace>/<coin>`
+
+    * e.g `mkdir -p vault_1/sol/`
+
+1. Connect to the appropriate coin directory:
+
+    * `cd <namespace>/<coin>/`
+
+1. Check what the latest address account is:
+
+	* `ls -la .`
+
+1. Find what the latest number for the address is, and add 1 to it. This will be the new address account.
+
+	* For example if the latest address file is 42, the new account_id would be 43. The addresses should start at `0`
+
+	* Set an environment variable with the new account_id:
+
+		* `account_id=<num>`, e.g `account_id=43`
+
+1. Generate a new address (replace `<coin>` with desired coin (`sol`, `cosmos`)):
+
+    * `icepick workflow <coin> generate-address --account $account_id | jq -r .pubkey > $account_id.txt`
+        * [38 removes need to use jq](https://git.distrust.co/public/icepick/issues/38)
+
+1. Sign the file using:
+
+    * Import OpenPGP keys:
+
+        * `gpg --import /media/<device_name>/vaults/keys/all/*.asc`
+
+    * `gpg --detach-sign $account_id.txt`
+
+1. You may repeat the previous steps, starting at the step where the `account_id` is set.
+
+1. Once finished, copy the updated repository back to the Ceremony SD card:
+
+    * `cp -rf /root/vaults /media/`
+
+1. Shut down the air gapped machine
+
+1. Unplug the Ceremony SD card and place it into High Visibility Storage
+
+1. Transfer the SD card from the air-gapped machine to the online machine
+
+1. {{ #include ../../../../component-documents/finding-device-name.md:content }}
+
+1. Copy the updated repository locally and switch to it:
+	```
+	$ cp -r /media/vaults ~/
+	$ cd ~/vaults
+	```
+1. Stage, sign, commit and push the changes to the ceremonies repository:
+	```
+    $ git add <namespace>/ceremonies/<date>/payloads/*
+	$ git commit -S -m "add payload signature for payload_<num>.json"
+	$ git push origin main
+	```
+
+### Sealing
+
+1. Gather all the original items that were in the air-gapped bundle:
+
+    * Air-gapped computer
+
+    * AirgapOS SD card
+
+{{ #include ../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}
+

quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/coins/sign-and-broadcast-transaction.md

@@ -1,16 +1,16 @@
-# Solana: Sign and Broadcast Transaction
+# Sign and Broadcast Transaction
 
 ## Requirements
 
-{{ #include ../../../../operator-requirements.md:requirements }}
+{{ #include ../../../operator-requirements.md:requirements }}
 
-{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
+* Online machine
 
 * [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
 
-* [Quorum PGP key pairs](../../../key-types.md#quorum-pgp-keypair)
+* [Quorum PGP key pairs](../key-types.md#quorum-pgp-keypair) 
 
-* [Ceremony SD card](../../../ceremony-sd-card-provisioning.md)
+* [Ceremony SD card](../ceremony-sd-card-provisioning.md)
 
 ## Procedure
 
@@ -22,13 +22,13 @@
 
 1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage
 
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
+{{ #include ../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
 
 1. Place all contents except for the laptop into High Visibility Storage
 
 ### Online Machine: Acquire Nonce
 
-1. Turn on online linux workstation
+1. Turn on online machine
 
 1. Retrieve the Ceremony SD card from High Visibility Storage and plug it into the computer
 
@@ -36,25 +36,22 @@
 
 	* e.g `vaults/<namespace>/<coin>/0-na.txt`
 
-	* Set the nonce address variable:
-	```
-	$ nonce_address="$(cat vaults/<namespace>/<coin>/<account_id>-na.txt)"
-	```
 1. Set `ICEPICK_DATA_DIRECTORY`:
 
-	{{ #include ../../../../../../component-documents/finding-device-name.md:content }}
-	```
-	$ export ICEPICK_DATA_DIRECTORY=/media/external/
-	```
+	{{ #include ../../../../../component-documents/finding-device-name.md:content }}
+
+	* `export ICEPICK_DATA_DIRECTORY=/media/external/`
 
 1. set `ICEPICK_CONFIG_FILE`
-	```
-	$ export ICEPICK_CONFIG_FILE=<path_to_icepick_repo>/icepick.toml`
-	```
-1. Run the command:
-	```
-	$ icepick workflow sol broadcast --nonce-address=$nonce_address
-	```
+
+	* `export ICEPICK_CONFIG_FILE=<path_to_icepick_repo>/icepick.toml`
+
+1. Run the command: `icepick workflow <coin> broadcast`
+
+    * For `<sol>` add `--nonce-address=$nonce-address` if using durable transactions
+        * Set the nonce address variable:
+            * `nonce_address="$(cat vaults/<namespace>/<coin>/<account_id>-na.txt)"`
+
 	* Await completion message before removing Ceremony SD card
 
 	* This command will set the computer into "awaiting mode", which will broadcast the signed transaction from the SD card once it's plugged back in after the workflow payloads are signed on the offline machine
@@ -63,33 +60,30 @@
 
 1. Retrieve AirgapOS SD card and plug it into the air-gapped machine
 
-1. Boot the computer
+1. Boot the computer  
 
 1. Unplug the AirgapOS SD card and place it in High Visibility Storage
 
-1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine
+1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine 
 
-1. {{ #include ../../../../../../component-documents/finding-device-name.md:content }}
+1. {{ #include ../../../../../component-documents/finding-device-name.md:content }}
 
 1. Start Keyfork using the relevant Shardfile:
-	```
-	$ keyfork recover shard --daemon /media/<device_name>/vaults/<namespace>/shardfile.asc
-	```
+
+	* `keyfork recover shard --daemon /media/<device_name>/vaults/<namespace>/shardfile.asc`
 
 	* The Shardfile may be named something else. Use `find /media/<device_name>/vaults -type f -name '*shardfile*.asc'` to list all files.
 
 1. Follow on screen prompts
 
 1. Set `ICEPICK_DATA_DIRECTORY`:
-	```
-	$ export ICEPICK_DATA_DIRECTORY=/media/<device_name>
-	```
+
+	* `export ICEPICK_DATA_DIRECTORY=/media/<device_name>`
+
 1. Run the `icepick` command with the transaction payload
 
-	* The payload is located in the appropriate vault location (e.g /media/<device_name>/vaults/<namespace>/ceremonies/<date>...)
-	```
-	$ icepick workflow --run-quorum <payload>.json --shardfile /media/<device_name>/vaults/<namespace>/shardfile.asc
-	```
+	* `icepick workflow --run-quorum <payload>.json --shardfile /media/<device_name>/vaults/<namespace>/shardfile.asc`
+
 	* Follow on screen prompts
 
 1. Unplug the Ceremony SD card and place it in High Visibility Storage
@@ -103,10 +97,10 @@
 1. The url that's found in the response after a successful broadcast should be reviewed and committed to the ceremony repository
 
 1. Remove the transaction files in `ICEPICK_DATA_DIRECTORY`
-	```
-	$ rm $ICEPICK_DATA_DIRECTORY/transaction.json
-	$ rm $ICEPICK_DATA_DIRECTORY/nonce.json
-	```
+
+  * `rm $ICEPICK_DATA_DIRECTORY/transaction.json`
+
+  * `rm $ICEPICK_DATA_DIRECTORY/nonce.json`
 
 1. Unplug the Ceremony SD card and place it in High Visibility Storage
 
@@ -128,4 +122,5 @@
 
     * AirgapOS SD card
 
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}
+{{ #include ../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}
+

quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/coins/sol/generate-nonce-account.md

@@ -0,0 +1,90 @@
+# Generate Nonce Account
+
+## Requirements
+
+{{ #include ../../../../operator-requirements.md:requirements }}
+
+{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
+
+* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
+
+* [Quorum PGP key pairs](../../key-types.md#quorum-pgp-keypair) 
+
+* [Ceremony SD card](../../ceremony-sd-card-provisioning.md)
+
+## Procedure
+
+1. Turn on online machine
+
+1. Make sure `jq` is installed:
+
+    * `sudo apt install jq`
+
+1. Clone the `vaults` repository if it's not available locally and get the latest changes:
+	```
+    $ cd ~
+	$ git clone <repository_git_url>
+	$ git pull origin main
+	```
+
+1. Ensure `keyfork` is available on the system:
+
+    * Follow steps from [installation guide](https://git.distrust.co/public/keyfork#install)
+
+1. Ensure `icepick` is available on system
+
+    * Follow steps from [installation guide](TODO)
+
+1. Set unsafe `keyfork` usage variable:
+
+    * `export SHOOT_SELF_IN_FOOT=1`
+
+1. Generate throwaway mnemonic to generate address which will be used for funding the creation of nonce account: 
+
+    * `keyfork mnemonic generate | KEYFORK_PROMPT_TYPE=headless keyfork recover mnemonic --daemon`
+
+1. Change directory into the desired \<namespace>/\<coin> directory:
+
+    * `cd ~/vaults/<namespace>/<coin>`
+
+1. Select which account you are creating the delegate address by viewing the appropriate \<namespace>/\<coin>/ directory:
+
+    * `ls -la .`
+
+1. Once you have selected the appropriate account, set the account_id variable:
+
+    * `account_id=<num>`
+
+1. Use `icepick` to generate nonce account:
+
+    * The following command will need to be updated to use the appropriate \<cluster>, which can be `devnet`, `testnet` or `mainnet-beta` 
+
+    * Set `icepick` config file:
+
+        * `export ICEPICK_CONFIG_FILE=<path_to_icepick_repositry>/icepick.toml`
+
+    * `icepick workflow sol generate-nonce-account  --authorization-address "$(cat $account_id.txt)" | jq -r .nonce_account > $account_id-na.txt`
+        * [38 removes he need to use jq and cat](https://git.distrust.co/public/icepick/issues/38)
+
+    * Repeat command if returned message is "The transaction was possibly not received by the cluster."
+
+1. Airdrop the wallet displayed on-screen with 0.01 SOL
+
+    * Once the airdrop is done, nonce account will be created
+
+1. Stage, commit, sign and push the changes:
+    ```
+    $ git add .
+    $ git commit -m -S "<message>"
+    $ git push origin HEAD
+    ```
+### Sealing
+
+1. Gather all the original items that were in the air-gapped bundle:
+
+    * Air-gapped computer
+
+    * AirgapOS SD card
+
+{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}
+

quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/decrypt-namespace-secret.md

@@ -4,7 +4,7 @@
 
 {{ #include ../../operator-requirements.md:requirements }}
 
-* [Ceremony SD Card](../operator/ceremony-sd-card-provisioning.md)
+* [Ceremony SD Card](../operator/ceremony-sd-card-provisioning.md) 
 
 * [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
 
@@ -19,20 +19,20 @@
     * `cp -r /media/vaults /root/`
 
 1. Start `keyfork` using the relevant Shardfile:
-	```
-	$ keyfork recover shard --daemon /root/vaults/<namespace>/shardfile.asc
-	```
+
+	* `keyfork recover shard --daemon /root/vaults/<namespace>/shardfile.asc`
+
     * Follow on screen prompts
 
 1. Derive the OpenPGP root certificate:
-	```
-    $ keyfork derive openpgp > secret_key.asc
-	```
+
+    * `keyfork derive openpgp > secret_key.asc`
+
 1. Decrypt the secret material:
 
     * `sq decrypt --recipient-file secret_key.asc < encrypted.asc --output decrypted`
 
-1. Proceed to transfer the secret (`decrypted`) to desired location such as hardware wallet, power washed chromebook (via SD card) etc.
+1. Proceed to transfer the secret (`decrypted`) to desired location such as hardware wallet, power washed chromebook (via SD card) etc. 
 
 1. Shut down the air gapped machine
 
@@ -42,4 +42,4 @@
 
     * AirgapOS SD card
 
-{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}
+{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}

quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/encrypt-wallet-to-namespace-key.md

@@ -4,7 +4,7 @@ Procedure for importing an arbitrary secret (raw key, mnemonic, state secrets) i
 
 ## Requirements
 
-* [Namespace OpenPGP Certificate]()
+* [Namespace OpenPGP Certificate]() 
 
     * It can be on an SD card or accessed online
 
@@ -16,7 +16,7 @@ Procedure for importing an arbitrary secret (raw key, mnemonic, state secrets) i
 
 1. Encrypt the secret to certificate:
 
-    * `sq encrypt --without-signature --for-file <certificate> <file_to_encrypt> --output encrypted.asc`
+    * `sq encrypt --for-file <certificate> <file_to_encrypt> --output encrypted.asc` 
 
 1. Once encrypted, name the file appropriately and add it to an `artifacts/` directory in the appropriate namespace subdirectory in the `vaults` repository
 

quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/namespace-entropy-ceremony.md

@@ -8,22 +8,21 @@ This is a ceremony for generating and sharding entropy to a set of existing Quor
 
 * [SD Card Pack](../procurer/procure-sd-card-pack.md)
 
-* [Ceremony SD Card](../operator/ceremony-sd-card-provisioning.md)
+* [Ceremony SD Card](../operator/ceremony-sd-card-provisioning.md) 
 
 * [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
 
-## Procedure
+## Procedure 
 
 {{ #include template-ceremony-setup.md:content }}
 
-1. Plug the Ceremony SD card into the machine
+1. Plug the Ceremony SD card into the machine 
 
 1. Run the command to generate new entropy and shard it to quorum of public certificates of the input shardfile:
 
     * Replace the values: <path_to_input_shard>, <pgp_user_id>
-	```
-    $ keyfork mnemonic generate --shard-to <path_to_input_shard>,output=shardfile.asc --derive='openpgp --public "Your Name <your@email.co>" --output certificate.asc'
-	```
+
+    * `keyfork mnemonic generate --shard-to <path_to_input_shard>,output=shardfile.asc --derive='openpgp --public "<pgp_user_id>" --output certificate.asc'
 
 1. Unseal an SD card pack
 
@@ -33,7 +32,7 @@ This is a ceremony for generating and sharding entropy to a set of existing Quor
 
 1. Plug in the Ceremony SD card
 
-1. Back up the files
+1. Back up the files     
     ```
     $ cp shardfile.asc /media/vaults/<namespace>/
     $ cp certificate.asc /media/vaults/<namespace>/
@@ -54,7 +53,7 @@ This is a ceremony for generating and sharding entropy to a set of existing Quor
 
 1. Power down the air-gapped machine
 
-1. Transfer the ceremony artifacts to an online machine using one of the SD cards and commit the changes made to the `vaults` repository that's on the Ceremony SD card
+1. Transfer the ceremony artifacts to an online machine using one of the SD cards and commit the changes made to the `vaults` repository that's on the Ceremony SD card 
 
 {{ #include ../../../../component-documents/git-basics.md:content }}
 

quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/quorum-entropy-ceremony.md

@@ -1,6 +1,6 @@
 # Quorum Entropy Ceremony
 
-This is a ceremony for generating entropy which is used to derive Quorum PGP keys, load them into smart cards and shard entropy to them.
+This is a ceremony for generating entropy which is used to derive Quorum PGP keys, load them into smart cards and shard entropy to them. 
 
 ## Requirements
 
@@ -14,17 +14,16 @@ This is a ceremony for generating entropy which is used to derive Quorum PGP key
 
 * High Visibility Storage: plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
 
-## Procedure
+## Procedure 
 
 {{ #include template-ceremony-setup.md:content }}
 
 1. Run the relevant keyfork operation to perform the ceremony:
 
-    * Replace the following values: \<M>, \<N>, <number_of_smart_cards_per_operator>, <pgp_user_id> with appropriate values
-	```
-	$ keyfork mnemonic generate --shard-to-self shardfile.asc,threshold=<M>,max=<N>,cards_per_shard=<number_of_smartcards_per_operator>,cert_output=keyring.asc --derive='openpgp --public "Your Name <your@email.co>" --output certificate.asc'
-	```
+    * Replace the following values: \<M>, \<N>, <number_of_smart_cards_per_operator>, <pgp_user_id> with appropriate values 
 
+	* `keyfork mnemonic generate --shard-to-self shardfile.asc,threshold=<M>,max=<N>,cards_per_shard=<number_of_smartcards_per_operator>,cert_output=keyring.asc --derive='openpgp --public "<pgp_user_id>" --output certificate.asc'`
+    
 1. Unseal an SD card pack by following tamper proofing steps:
 
 {{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
@@ -33,9 +32,9 @@ This is a ceremony for generating entropy which is used to derive Quorum PGP key
 
 1. Plug in the Ceremony SD card
 
-1. Back up the files
+1. Back up the files   
     ```
-    $ cp shardfile.asc /media/vaults/<namespace>/
+    $ cp shardfile.asc /media/vaults/<namespace>/ 
     $ cp keyring.asc /media/vaults/<namespace>/
     $ cp certificate.asc /media/vaults/<namespace>/
     $ cp -r /media/vaults /root/
@@ -47,7 +46,7 @@ This is a ceremony for generating entropy which is used to derive Quorum PGP key
 
     1. `cp -r /root/vaults /media/`
 
-    1. Unplug the SD card
+    1. Unplug the SD card  
 
     1. Label the SD card "Ceremony [date]"
 
@@ -55,7 +54,7 @@ This is a ceremony for generating entropy which is used to derive Quorum PGP key
 
 1. Power down the air-gapped machine
 
-1. Transfer the ceremony artifacts to online linux workstation using one of the SD cards and commit the changes made to the `vaults` repository that's on the Ceremony SD card
+1. Transfer the ceremony artifacts to an online machine using one of the SD cards and commit the changes made to the `vaults` repository that's on the Ceremony SD card 
 
 {{ #include ../../../../component-documents/git-basics.md:content }}
 

quorum-vault-system/src/generated-documents/level-2/fixed-location/proposer/create-transaction-payload.md

@@ -0,0 +1,117 @@
+# Proposer - Create Transaction Payload
+
+The proposer is a fiduciary whose responsibility is to make sound financial decisions on behalf of a business and determine where funds are moving from, where to and in which amount. The reasons for sending funds may range across settlement, exchanging, staking and more.
+
+The proposer MUST include the workflow type and all arguments required by a workflow, such as `from_address`, `to_address`, `asset_name`, etc., as well as a UTC datetime representing the time when the transaction is proposed.
+
+The proposer must combine these values into a JSON file, such as:
+
+```json
+{
+	"workflow": ["cosmos", "withdraw"],
+	"values": {
+		"delegate_address": "kyve1q9w3nar74up6mxnwd428wpr5nffcw3360tkxer",
+		"validator_address": "kyvevaloper1ghpmzfuggm7vcruyhfzrczl4aczy8gas8guslh",
+		"asset_name": "KYVE",
+		"asset_amount": "0.4",
+		"chain_name": "korellia"
+	},
+	"proposal_datetime": "2025-01-28T18:18:00"
+}
+```
+
+## Requirements
+
+* [Quorum PGP Key](../operator/quorum-entropy-ceremony.md)
+
+* [Air-Gapped Bundle](../provisioner/air-gapped-bundle.md)
+
+	* The proposer  should print photographic evidence from digital cameras which is stored in a PGP signed repository. The photographs should be of the top and underside of the vacuum sealed object.
+
+	* The proposer should verify the commit signatures of the photographs they are printing against a list of permitted PGP keys found in the `vaults` repo
+
+{{ #include ../../../../component-documents/linux-workstation.md:content }}
+
+* Clone the [Vaults Repository](../../../all-levels/create-vaults-repository.md) for your organization to the machine
+
+## Procedure
+
+1. Turn on online machine 
+
+1. Clone the `vaults` repository if it's not available locally and get the latest changes:
+	```
+	$ git clone <repository_git_url>
+	$ git pull origin main
+	```
+1. Unseal the SD Card Pack
+
+{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
+
+1. Plug a fresh SD card into the online machine
+
+1. {{ #include ../../../../component-documents/finding-device-name.md:content }}
+
+1. Save the `vaults` repo to the SD card, referred to as the Ceremony SD card
+
+	* `cp -r ~/vaults/ /media`
+
+1. Unplug the Ceremony SD card
+
+1. Unseal the tamper proofed bundle
+
+{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
+
+1. Insert the AirgapOS SD card into the airgapped machine and turn it on
+
+1. Once booted, unplug the AirgapOS SD card and place it in High Visibility Storage 
+
+1. Plug in the Ceremony SD card
+
+1. Copy the git repo locally from the Ceremony SD card and change to it
+	```
+	$ cp -r /media/vaults /root
+	$ cd /root/vaults
+	```
+1. Create a new payloads directory in the `vaults` repository for the date on which the ceremony for the transaction will take place if it doesn't already exist
+
+	* `mkdir -p <namespace>/ceremonies/<date>/payloads`
+
+	* e.g `mkdir -p solana-01/ceremonies/2025-01-01/payloads`
+
+1. Use `icepick workflow --help` to list the available workflows and options
+
+1. Plug in the Operator smart card
+
+1. Use icepick to generate and sign the payload:
+
+	* `icepick workflow <chain> <workflow> <--option value> <--option value> --export-for-quorum --sign > <output_file>`
+
+	* e.g `icepick workflow cosmos withdraw-rewards --delegate-address kyve1q9w3nar74up6mxnwd428wpr5nffcw3360tkxer --validator-address kyvevaloper1ghpmzfuggm7vcruyhfzrczl4aczy8gas8guslh --chain-name korellia --export-for-quorum --sign > <namespace>/ceremonies/<date>/payloads/payload_<num>.json`
+
+	* e.g `icepick workflow sol transfer --from-address "$(cat <namespace>/<coin>/0.txt)" --to-address "$(cat to_address.txt)" --amount <amount> --export-for-quorum --sign > <namespace>/ceremonies/<date>/payloads/payload_<num>.json`
+
+1. Copy the updated ceremonies repo to the SD card
+
+	* `cp -r /root/vaults /media`
+
+1. Transfer the SD card from the air-gapped machine to the online machine
+
+1. {{ #include ../../../../component-documents/finding-device-name.md:content }}
+
+1. Copy the updated repository locally and switch to it:
+	```
+	$ cp -r /media/vaults ~/
+	$ cd ~/vaults
+	```
+1. Stage, sign, commit and push the changes to the ceremonies repository:
+	```
+    $ git add <namespace>/ceremonies/<date>/payloads/*
+	$ git commit -S -m "add payload signature for payload_<num>.json"
+	$ git push origin main
+	```
+
+1. Notify relevant individuals that there are new transactions queued up, and that a ceremony should be scheduled. This can be automated in the future so that when a commit is made or PR opened, others are notified, for example using a incident management tool.
+
+1. Tamper proof the AirgapOS and Air-gapped laptop
+
+{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}

quorum-vault-system/src/generated-documents/level-2/fixed-location/provisioner/provision-airgapos.md

@@ -6,7 +6,7 @@
 
 * Tamper proofing evidence (photographs)
 
-* [SD Card Pack(s)](../procurer/procure-sd-card-pack.md)
+* [SD Card Pack(s)](../procurer/procure-sd-card-pack.md) 
 
 * High Visibility Storage
 
@@ -18,7 +18,7 @@
 
 1. Turn on one of the computers - this one will be used for writing the SD cards
 
-1. Build the software according to the [readme](https://git.distrust.co/public/airgap) in the repository.
+1. Build the software according to the [readme](https://git.distrust.co/public/airgap) in the repository. 
 
 1. Use the `make reproduce` command
 
@@ -36,9 +36,9 @@
 
 1. Flash `airgap.iso` to an SD Card:
 
-    * `dd if=out/airgap.iso of=/dev/<device_name> bs=4M conv=fsync`
+    * `dd if=out/airgap.iso of=/dev/<device_name> bs=4M status=progress conv=fsync`
 
-1. Reset the computer, and boot the SD card
+1. Reset the computer, and boot the SD card 
 
 1. Once booted, the card needs to be locked using `sdtool` which is available in `AirgapOS`:
 
@@ -56,6 +56,6 @@
 
 1. Verify the card can't be written to:
 
-    * `echo "42" | dd of=/dev/<device_name>`
+    * `echo "42" | dd of=/dev/<device_name>`        
 
-{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing }}
+{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing }}

quorum-vault-system/src/generated-documents/level-2/operator-requirements.md

@@ -9,11 +9,11 @@
     * The operators should verify the commit signatures of the photographs they are printing against a list of permitted PGP keys found in the "ceremonies" repo
 
 * [AirgapOS SD card](/generated-documents/level-2/fixed-location/provisioner/provision-airgapos.md)
-  * Provided by [Air-Gapped Bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
+  * Provided by [AirGapped Bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
   * Alternative: Create your own from documentation in [AirgapOS Repository](https://git.distrust.co/public/airgap)
 
 * AirgapOS Laptop
-  * Provided by [Air-Gapped Bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
+  * Provided by [AirGapped Bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
   * Alternative: Computer that can load AirgapOS ([compatibility reference](https://git.distrust.co/public/airgap#tested-models))
 
 * Minimum of 1 [Operator](/system-roles.md#operator) and 1 [Witness](/system-roles.md#witness)
@@ -23,4 +23,4 @@
 * Tamper-proofing equipment
 
 // ANCHOR_END: requirements
-/* ANCHOR_END: all */
+/* ANCHOR_END: all */

quorum-vault-system/src/glossary.md

@@ -10,7 +10,7 @@ using an algorithm, called a cipher.
 Entropy in cryptography refers to the measure of randomness or unpredictability
 in data used for generating cryptographic keys and other security elements.
 
-## Trove
+## Quorum Key Management (QVS)
 
 A set of highly specified processes and tooling used for setting up a highly
 resilient quorum-based key management system.
@@ -19,7 +19,7 @@ resilient quorum-based key management system.
 
 An individual who manages an [Operator Key](#operator-key) which is used for
 protecting the passphrase of a Location key and participates in different
-aspects of the lifecycle management of the Trove system.
+aspects of the lifecycle management of the QVS system.
 
 ## Operator Key
 
@@ -116,7 +116,7 @@ the total number of shards that exist. The minimum recommended threshold is
 
 ## Organization
 
-An organization which owns the Trove and is responsible for funding the setup and
+An organization which owns the QVS and is responsible for funding the setup and
 maintenance. The organization is also responsible for ensuring that the
 [Warehouse](#warehouse) is properly maintained in order to ensure that the
 ciphertext blobs associated with the system are redundantly stored and

quorum-vault-system/src/intro.md

@@ -1,13 +1,13 @@
 # Introduction
 
-Trove is an open source system of playbooks and
+Quorum Vaulting System (QVS) is an open source system of playbooks and
 tooling which facilitates the creation and maintenance of highly resilient
 [quorum](glossary.md#quorum)-based key management systems based on a strict
 [threat model](threat-model.md) which can be used for a variety of different
 cryptographic algorithms. The system was designed and developed by
 [Distrust](https://distrust.co), with the generous support of sponsors.
 
-The basic premise of Trove is that primary cryptographic material akin to a root
+The basic premise of QVS is that primary cryptographic material akin to a root
 certificate, called [Root Entropy (RE)](glossary.md#root-entropy-re), is generated
 during a secure key derivation ceremony, and then used to derive chosen
 cryptographic material via different algorithms such as PGP keys, digital asset
@@ -23,7 +23,7 @@ access controls in order to reconstruct the secret material, namely the RE.
 
 ## Use Cases
 
-Trove can be used for a wide range of use-cases which span but are not limited
+QVS can be used for a wide range of use-cases which span but are not limited
 to:
 
 * Deriving a PGP key pair whose public key can be used as a "one-way deposit
@@ -42,7 +42,7 @@ a cold signing setup.
 
 ## Playbooks
 
-Trove can be set up by using a set of highly opinionated playbooks which outline
+QVS can be set up by using a set of highly opinionated playbooks which outline
 the process. The base documentation should be read in its entirety by all
 participants of the ceremony in order to ensure that the system is well
 understood by all to ensure that the integrity of the process is preserved and

quorum-vault-system/src/key-types.md

@@ -1,4 +1,4 @@
-# PGP Key Types
+# Key Types
 
 ## Personal PGP Keypair
 
@@ -8,7 +8,7 @@ When bootstrapping a system, the initial PGP keys can be generated using [this g
 
 ### Requirements
 
-* MUST not be transferred
+* MUST not be transferred 
 
 * MUST be generated offline
 

quorum-vault-system/src/local-key-provisioning.md

@@ -1,7 +1,7 @@
 # Local Key Provisioning
 
 This document contains instructions on how Operators collaborate to set up
-Trove which requires an N-of-M quorum to be reconstituted. The encrypted shards
+QVS which requires an N-of-M quorum to be reconstituted. The encrypted shards
 which result from this ceremony are stored in separate physical
 [Locations](locations.md) which contain [Location Keys](glossary.md#location-key)
 to which shards are encrypted, and whose passphrases are protected using

quorum-vault-system/src/location-key-provisioning.md

@@ -3,7 +3,7 @@
 ## Description
 This ceremony is for generating Location Keys. Location Keys are typically
 stored in vaults as prescribed in the [Secure Storage Guidelines](secure-storage-guidelines.md).
-Location Keys are keypairs to which the Root Entropy of a Trove is sharded. The
+Location Keys are keypairs to which the Root Entropy of a QVS is sharded. The
 keypairs are stored exclusively on Smart Cards, and the PINs which protect the
 Smart Cards are encrypted to Operator Keys.
 

quorum-vault-system/src/locations.md

@@ -30,7 +30,7 @@ This level of defenses is largely focused on remote attacks, and as such does no
 
 * Co-working space
 
-* Regular office (non specific to Trove)
+* Regular office (non specific to QVS)
 
 ### Reference Design 
 
@@ -44,7 +44,7 @@ This level of defenses is focused on insider threats and as such requires a cons
 
 ### Examples
 
-* Purpose specific facility for Trove
+* Purpose specific facility for QVS
 
 * Short term rental
 
@@ -82,7 +82,7 @@ This level of defenses is focused on insider threats and as such requires a cons
     locations simultaneously
 
 * SHOULD be facilities owned by different organizations to reduce the risk of
-collusion unless the organization who owns the Trove system has their own facility such
+collusion unless the organization who owns the QVS system has their own facility such
 as a [SCIF](glossary.md#secure-compartmentalized-information-facility-scif).
 
 ## Level 4 (SCIF)

quorum-vault-system/src/quorum-team.md

@@ -1,7 +1,7 @@
 # Quorum Team
 
 The Quorum Team is a team of individuals who are selected to perform different
-roles related to a Trove. Some of the Quorum Team members have ongoing roles,
+roles related to a QVS. Some of the Quorum Team members have ongoing roles,
 while others may participate in a partial manner.
 
 Depending on the type of actions performed, some or all of the members of the
@@ -28,7 +28,7 @@ Controllers may be used to protect access to physical locations - according to
 risk appetite.
 
 ## Witness
-Witnesses are individuals who are familiar with the Trove specification, and can
+Witnesses are individuals who are familiar with the QVS specification, and can
 ensure that the different aspects of the system are set up correctly, and
 processes carried out as they should be. The main objective of the witnesses is
 to monitor and attest that processes such as the ceremonies are done according

quorum-vault-system/src/selecting-quorum.md

@@ -1,6 +1,6 @@
 # Selecting a Quorum
 
-The backbone of Trove is a Quorum which is used to reconstitute or re-assemble
+The backbone of QVS is a Quorum which is used to reconstitute or re-assemble
 cryptographic material, and approve actions. Quorum is a general term referring
 to a system which requires the collaboration of multiple individuals in order to
 achieve something, and it is based on a Threshold which determines how many

quorum-vault-system/src/software.md

@@ -1,5 +1,5 @@
 # Software
-This page outlines the software used for setting up Trove.
+This page outlines the software used for setting up QVS.
 
 ## [[Stageˣ]](https://codeberg.org/stagex/stagex)
 
@@ -39,7 +39,7 @@ BIP-0039 mnemonic phrase. BIP-0039 phrases are used to calculate a BIP-0032
 seed, which is used for hierarchical deterministic key derivation.
 
 This software is the backbone for all cryptographic actions performed as part
-of Trove. It was developed by [Distrust](https://distrust.co) and is included
+of QVS. It was developed by [Distrust](https://distrust.co) and is included
 with AirgapOS and has been audited by two firms, NCC and Cure53 with no
 significant vulnerabilities found.
 

quorum-vault-system/src/system-roles.md

@@ -0,0 +1,43 @@
+# System Roles
+
+There are several roles which are required to properly operate the QVS system. While it is possible to have an individual perform multiple roles, typically they should only perform one role at a time. It is also recommended to have at least 2 individuals, or ideally the full quorum be used to make decisions pertaining to QVS. At least 2 individuals are required for [level 2](threat-model.md#adversary-1).
+
+To better understand why the different roles are required, refer to the [selecting a quorum](selecting-quorum.md) and [threat model](threat-model.md) sections which enumerate a number of assumptions around pertinent threats to the system as well as the use of a quorum. 
+
+## General Requirements
+
+Individuals who are selected for the roles:
+
+* MUST have background checks conducted
+
+* MUST have a clearly defined set of responsibilities
+
+* MUST be reinvestigated once a year to ensure they meet necessary standards to access restricted information
+
+## Provisioner
+
+Responsible for more technical aspects of preparing equipment for ceremonies such as creating air-gapped machines by removing radio cards, and tamper proofing them along with SD cards which are loaded with AirgapOS etc.
+
+## Procurer
+
+Responsible for tasks such as procuring a location, tamper proofing equipment, hardware, and maintaining inventory.
+
+## Proposer
+
+This is an individual who is a business owner or stakeholder, or a financial controller. Their role is to make fiduciary decisions which protect the financial interest of the organization and its clients. Their role is specifically to propose the movement of funds, specifying the amount, origin and destination.
+
+## Approver
+
+This is an administrative role which participates in the decision making capacity, typically as part of a quorum. Additional policies which are not for the QVS system but related decision making may be under the purview of an Approver. While there is 1 proposer per transaction, there may be an arbitrary number of Approvers, and they are required to sign proposed transactions according to a [policy](todo) which should be well defined.
+
+## Operator
+
+Trained on how the QVS system operates, with intimate knowledge of the processes which are required to maintain the integrity, confidentiality and availability (CIA triad) of the system.
+
+Operators conduct ceremonies and ensure that the controls around QVS are in tact. They verify instructions from [Approvers](#approver) and perform different actions which are part of the QVS system, ranging across hardware procurement, accessing SCIFs, preparing field kits, performing ceremonies and more.
+
+As a QVS grows, it may be prudent to create more highly specialized roles whose responsibilities are limited to a more narrow range, creating more isolation across the system, thus enforcing the principle of least privilege and separation of concerns.
+
+## Witness
+
+QVS relies of having individuals present to witness that processes which uphold the security of the system are properly followed. [Operators](#operator) make ideal witnesses as their familiarity with the QVS system allows them to detect any deviation from the processes which uphold the security of the system. While it is not required that a Witness be a trained Operator, it is highly preferred.

quorum-vault-system/src/threat-model.md

@@ -1,10 +1,10 @@
 # Threat Model
 
-Trove is designed according to a high-assurance threat model which ers on the
+QVS is designed according to a high-assurance threat model which ers on the
 side of making exaggerated, rather than conservative assumptions in order to
 build a resilient system.
 
-The assumption is made that attackers who target Trove are extremely
+The assumption is made that attackers who target QVS are extremely
 sophisticated, well funded and patient attackers, and as such, the full arsenal
 of attacks is on the table. This means that the attacker can purchase and
 weaponize multiple 0day vulnerabilities, execute physical attacks or deploy
@@ -18,7 +18,7 @@ whether it's maintainers of software used in the system, the firmware that's
 used, or the individuals or locations that hold secret material which is the
 backbone of the system.
 
-To achieve this, the Trove focuses on reducing the risk by:
+To achieve this, the QVS focuses on reducing the risk by:
 
 * Only using fully open source software and firmware to allow full verification
 of their security properties
@@ -26,7 +26,7 @@ of their security properties
 * Creating custom purpose specific tooling which eliminates dependencies in
 order to reduce supply chain attacks, and adds desirable security properties
 
-* Building as much of the software and firmware deterministically as possible - aiming for 100%
+* Building as much of the software and firmware deterministically as possible - aiming for 100% 
 
   * The [StageX](https://codeberg.org/stagex/stagex) project is the effort towards this end
 
@@ -64,7 +64,7 @@ Some additional assumptions are made to help contextualize the threat model:
 
 ## Threat Model Levels
 
-Different threat model levels allow an organization to start benefiting from the security properties of the Trove system immediately, with a clear path to upgrading over time as resources and time become available.
+Different threat model levels allow an organization to start benefiting from the security properties of the QVS system immediately, with a clear path to upgrading over time as resources and time become available.
 
 Each subsequent level assumes all threats and mitigations from the previous level, and introduces more sophisticated attacks and mitigations. As such, the levels should for the most part be adhered to one at a time, to ensure comprehensive defenses for all viable threats enumerated herein.
 
@@ -140,7 +140,7 @@ This level focuses on defending against insider threats.
 
 * Exploit any vulnerability within 24h of public knowledge
 
-#### Requirements
+### Requirements
 
 * All production access:
 
@@ -156,7 +156,7 @@ This level focuses on defending against insider threats.
 
   * MUST be anchored to keys in dedicated HSMs held by each administrator
 
-    * Consider OpenPGP or PKCS#11 smart cards that support touch-approval for ssh
+    * Consider OpenPGP or PKSC#11 smart cards that support touch-approval for ssh
 
 * Any code in the transaction signing trust supply chain:
 
@@ -198,11 +198,11 @@ This level focuses on defending against insider threats.
 
       * App phone stores already anchor to developer held signing keys
 
-#### Reference Design
+### Reference Design
 
 * Create offline CA key(s)
 
-* Consider OpenPGP key generated on airgap using keyfork, backed up, and copies transmitted to a smart cards such as a Yubikey
+* Consider OpenGPG key generated on airgap using keyfork, backed up, and copies transmitted to a smart cards such as a Yubikey
 
 * CA key smart cards are stored in dual-access tamper evident locations
 

trove/src/generated-documents/level-2/fixed-location/operator/coins/cosmos/generate-address.md

@@ -1,43 +0,0 @@
-# Cosmos: Generate Address
-
-## Requirements
-
-{{ #include ../../../../operator-requirements.md:requirements }}
-
-{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
-
-* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
-
-* [Quorum PGP key pairs](../../../key-types.md#quorum-pgp-keypair)
-
-* [Ceremony SD card](../../../ceremony-sd-card-provisioning.md)
-
-## Procedure
-
-1. Enter the designated location with the quorum of operators and all required equipment
-
-1. Lock access to the location - there should be no inflow or outflow of people during the ceremony
-
-1. Place Ceremony SD card in High Visibility Storage
-
-1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
-
-1. Place all contents except for the laptop into High Visibility Storage
-
-### Offline Machine: Generate Address
-
-{{ #include ../template-gen-address-0.md:content }}
-
-1. Generate a new address:
-
-    * `icepick workflow cosmos generate-address --chain-name <chain-name> --account $account_id > $account_id.json`
-
-{{ #include ../template-gen-address-1.md:content }}
-
-### Online Machine: Updating Vaults Repository
-
-1. Turn on online linux workstation
-
-{{ #include ../../../../../../component-documents/git-basics.md:content }}

trove/src/generated-documents/level-2/fixed-location/operator/coins/cosmos/sign-and-broadcast-transaction.md

@@ -1,130 +0,0 @@
-# Solana: Sign and Broadcast Transaction
-
-## Requirements
-
-{{ #include ../../../../operator-requirements.md:requirements }}
-
-{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
-
-* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
-
-* [Quorum PGP key pairs](../../../key-types.md#quorum-pgp-keypair)
-
-* [Ceremony SD card](../../../ceremony-sd-card-provisioning.md)
-
-## Procedure
-
-1. Enter the designated location with the quorum of operators and all required equipment
-
-1. Lock access to the location - there should be no inflow or outflow of people during the ceremony
-
-1. Place Ceremony SD card in High Visibility Storage
-
-1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
-
-1. Place all contents except for the laptop into High Visibility Storage
-
-### Online Machine: Acquire Nonce
-
-1. Turn on online linux workstation
-
-1. Retrieve the Ceremony SD card from High Visibility Storage and plug it into the computer
-
-1. Get the nonce address for the address you are sending from by checking the appropriate \<namespace>/\<coin>/ directory.
-
-	* e.g `vaults/<namespace>/<coin>/0-na.txt`
-
-	* Set the nonce address variable:
-	```
-	$ nonce_address="$(cat vaults/<namespace>/<coin>/<account_id>-na.txt)"
-	```
-1. Set `ICEPICK_DATA_DIRECTORY`:
-
-	{{ #include ../../../../../../component-documents/finding-device-name.md:content }}
-	```
-	$ export ICEPICK_DATA_DIRECTORY=/media/external/
-	```
-
-1. set `ICEPICK_CONFIG_FILE`
-	```
-	$ export ICEPICK_CONFIG_FILE=<path_to_icepick_repo>/icepick.toml`
-	```
-1. Run the command:
-	```
-	$ icepick workflow cosmos broadcast --chain-name <chain-name> --nonce-address=$nonce_address
-	```
-	* Await completion message before removing Ceremony SD card
-
-	* This command will set the computer into "awaiting mode", which will broadcast the signed transaction from the SD card once it's plugged back in after the workflow payloads are signed on the offline machine
-
-### Offline Machine: Create and Sign Transaction
-
-1. Retrieve AirgapOS SD card and plug it into the air-gapped machine
-
-1. Boot the computer
-
-1. Unplug the AirgapOS SD card and place it in High Visibility Storage
-
-1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine
-
-1. {{ #include ../../../../../../component-documents/finding-device-name.md:content }}
-
-1. Start Keyfork using the relevant Shardfile:
-	```
-	$ keyfork recover shard --daemon /media/<device_name>/vaults/<namespace>/shardfile.asc
-	```
-	* The Shardfile may be named something else. Use `find /media/<device_name>/vaults -type f -name '*shardfile*.asc'` to list all files.
-
-1. Follow on screen prompts
-
-1. Set `ICEPICK_DATA_DIRECTORY`:
-	```
-	$ export ICEPICK_DATA_DIRECTORY=/media/<device_name>
-	```
-1. Run the `icepick` command with the transaction payload
-
-	* The payload is located in the appropriate vault location (e.g /media/<device_name>/vaults/<namespace>/ceremonies/<date>...)
-	```
-	$ icepick workflow --run-quorum <payload>.json --shardfile /media/<device_name>/vaults/<namespace>/shardfile.asc
-	```
-	* Follow on screen prompts
-
-1. Unplug the Ceremony SD card and place it in High Visibility Storage
-
-### Broadcast Transaction: Online Machine
-
-1. Retrieve Ceremony SD from High Visibility Storage and plug it into online machine
-
-1. The still running broadcast command on the online machine will broadcast the transaction automatically
-
-1. The url that's found in the response after a successful broadcast should be reviewed and committed to the ceremony repository
-
-1. Remove the transaction files in `ICEPICK_DATA_DIRECTORY`
-	```
-	$ rm $ICEPICK_DATA_DIRECTORY/transaction.json
-	$ rm $ICEPICK_DATA_DIRECTORY/account_info.json
-	```
-
-1. Unplug the Ceremony SD card and place it in High Visibility Storage
-
-### Repeat
-
-1. You may repeat previous steps as many times as necessary to process all workflow payloads
-
-## Finalization
-
-1. Shut down online linux workstation
-
-1. Shut down the air gapped machine
-
-### Sealing
-
-1. Gather all the original items that were in the air-gapped bundle:
-
-    * Air-gapped computer
-
-    * AirgapOS SD card
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}

trove/src/generated-documents/level-2/fixed-location/operator/coins/kyve/generate-address.md

@@ -1,45 +0,0 @@
-# Kyve: Generate Address
-
-## Requirements
-
-{{ #include ../../../../operator-requirements.md:requirements }}
-
-{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
-
-* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
-
-* [Quorum PGP key pairs](../../../key-types.md#quorum-pgp-keypair)
-
-* [Ceremony SD card](../../../ceremony-sd-card-provisioning.md)
-
-## Procedure
-
-1. Enter the designated location with the quorum of operators and all required equipment
-
-1. Lock access to the location - there should be no inflow or outflow of people during the ceremony
-
-1. Place Ceremony SD card in High Visibility Storage
-
-1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
-
-1. Place all contents except for the laptop into High Visibility Storage
-
-### Offline Machine: Generate Address
-
-{{ #include ../template-gen-address-0.md:content }}
-
-1. Generate a new address:
-
-    * `icepick workflow cosmos generate-address --chain-name kyve --account $account_id > $account_id.json`
-
-	The option `--chain-name` can use `kyve`, `kaon` (testnet), and `korellia` (devnet)
-
-{{ #include ../template-gen-address-1.md:content }}
-
-### Online Machine: Updating Vaults Repository
-
-1. Turn on online linux workstation
-
-{{ #include ../../../../../../component-documents/git-basics.md:content }}

trove/src/generated-documents/level-2/fixed-location/operator/coins/kyve/sign-and-broadcast-transaction.md

@@ -1,132 +0,0 @@
-# Kyve: Sign and Broadcast Transaction
-
-## Requirements
-{{ #include ../../../../operator-requirements.md:requirements }}
-
-{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
-
-* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
-
-* [Quorum PGP key pairs](../../../key-types.md#quorum-pgp-keypair)
-
-* [Ceremony SD card](../../../ceremony-sd-card-provisioning.md)
-
-## Procedure
-
-1. Enter the designated location with the quorum of operators and all required equipment
-
-1. Lock access to the location - there should be no inflow or outflow of people during the ceremony
-
-1. Place Ceremony SD card in High Visibility Storage
-
-1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
-
-1. Place all contents except for the laptop into High Visibility Storage
-
-### Online Machine: Acquire Nonce
-
-1. Turn on online linux workstation
-
-1. Retrieve the Ceremony SD card from High Visibility Storage and plug it into the computer
-
-1. Get the nonce address for the address you are sending from by checking the appropriate \<namespace>/\<coin>/ directory.
-
-	* e.g `vaults/<namespace>/<coin>/0-na.txt`
-
-	* Set the nonce address variable:
-	```
-	$ nonce_address="$(cat vaults/<namespace>/<coin>/<account_id>-na.txt)"
-	```
-1. Set `ICEPICK_DATA_DIRECTORY`:
-
-	{{ #include ../../../../../../component-documents/finding-device-name.md:content }}
-	```
-	$ export ICEPICK_DATA_DIRECTORY=/media/external/
-	```
-
-1. set `ICEPICK_CONFIG_FILE`
-	```
-	$ export ICEPICK_CONFIG_FILE=<path_to_icepick_repo>/icepick.toml`
-	```
-1. Run the command:
-	```
-	$ icepick workflow cosmos broadcast --chain-name kyve  --nonce-address=$nonce_address
-	```
-
-	The option `--chain-name` can use `kyve`, `kaon` (testnet), and `korellia` (devnet)
-
-	* Await completion message before removing Ceremony SD card
-
-	* This command will set the computer into "awaiting mode", which will broadcast the signed transaction from the SD card once it's plugged back in after the workflow payloads are signed on the offline machine
-
-### Offline Machine: Create and Sign Transaction
-
-1. Retrieve AirgapOS SD card and plug it into the air-gapped machine
-
-1. Boot the computer
-
-1. Unplug the AirgapOS SD card and place it in High Visibility Storage
-
-1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine
-
-1. {{ #include ../../../../../../component-documents/finding-device-name.md:content }}
-
-1. Start Keyfork using the relevant Shardfile:
-	```
-	$ keyfork recover shard --daemon /media/<device_name>/vaults/<namespace>/shardfile.asc
-	```
-	* The Shardfile may be named something else. Use `find /media/<device_name>/vaults -type f -name '*shardfile*.asc'` to list all files.
-
-1. Follow on screen prompts
-
-1. Set `ICEPICK_DATA_DIRECTORY`:
-	```
-	$ export ICEPICK_DATA_DIRECTORY=/media/<device_name>
-	```
-1. Run the `icepick` command with the transaction payload
-
-	* The payload is located in the appropriate vault location (e.g /media/<device_name>/vaults/<namespace>/ceremonies/<date>...)
-	```
-	$ icepick workflow --run-quorum <payload>.json --shardfile /media/<device_name>/vaults/<namespace>/shardfile.asc
-	```
-	* Follow on screen prompts
-
-1. Unplug the Ceremony SD card and place it in High Visibility Storage
-
-### Broadcast Transaction: Online Machine
-
-1. Retrieve Ceremony SD from High Visibility Storage and plug it into online machine
-
-1. The still running broadcast command on the online machine will broadcast the transaction automatically
-
-1. The url that's found in the response after a successful broadcast should be reviewed and committed to the ceremony repository
-
-1. Remove the transaction files in `ICEPICK_DATA_DIRECTORY`
-	```
-	$ rm $ICEPICK_DATA_DIRECTORY/transaction.json
-	$ rm $ICEPICK_DATA_DIRECTORY/account_info.json
-	```
-
-1. Unplug the Ceremony SD card and place it in High Visibility Storage
-
-### Repeat
-
-1. You may repeat previous steps as many times as necessary to process all workflow payloads
-
-## Finalization
-
-1. Shut down online linux workstation
-
-1. Shut down the air gapped machine
-
-### Sealing
-
-1. Gather all the original items that were in the air-gapped bundle:
-
-    * Air-gapped computer
-
-    * AirgapOS SD card
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}

trove/src/generated-documents/level-2/fixed-location/operator/coins/pyth/generate-address.md

@@ -1,102 +0,0 @@
-# Pyth: Generate Address
-
-## Requirements
-
-{{ #include ../../../../operator-requirements.md:requirements }}
-
-{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
-
-* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
-
-* [Quorum PGP key pairs](../../../key-types.md#quorum-pgp-keypair)
-
-* [Ceremony SD card](../../../ceremony-sd-card-provisioning.md)
-
-## Procedure
-
-1. Enter the designated location with the quorum of operators and all required equipment
-
-1. Lock access to the location - there should be no inflow or outflow of people during the ceremony
-
-1. Place Ceremony SD card in High Visibility Storage
-
-1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
-
-1. Place all contents except for the laptop into High Visibility Storage
-
-### Offline Machine: Generate Address
-
-{{ #include ../template-gen-address-0.md:content }}
-
-1. Generate a new address:
-	```
-    $ icepick workflow sol generate-address --account $account_id > $account_id.json
-	```
-
-{{ #include ../template-gen-address-1.md:content }}
-
-### Online Machine: Generate Nonce Account
-
-1. Turn on online machine
-
-1. Retrieve the Ceremony SD card from High Visibility Storage and plug it into the computer
-
-1. {{ #include ../../../../../../component-documents/finding-device-name.md:content }}
-
-1. Copy the `vaults` repository from the Ceremony SD card:
-	```
-    $ cp -r /media/vaults ~/
-	```
-    * If the `~/vaults/` repository already exists, ensure it doesn't have any changes that haven't been committed, then remove it using `sudo rm -rf ~/vaults` before re-running the previous step
-
-1. Ensure `icepick` is available on system
-
-    * Follow steps from [installation guide](TODO)
-
-1. Change directory into the desired \<namespace>/\<coin> directory:
-	```
-    $ cd ~/vaults/<namespace>/<coin>
-	```
-1. Select which account you are creating the delegate address by viewing the appropriate \<namespace>/\<coin>/ directory:
-	```
-    $ ls -la .
-	```
-1. Once you have selected the appropriate account, set the account_id variable:
-	```
-    $ account_id=<num>
-	```
-1. Use `icepick` to generate nonce account:
-
-	* If using a non-`mainnet-beta` cluster, be sure to provide the `--cluster` argument
-
-    * Set `icepick` config file:
-	```
-    $ export ICEPICK_CONFIG_FILE=<path_to_icepick_repositry>/icepick.toml`
-	```
-	```
-    $ icepick workflow sol generate-nonce-account --input-file $account_id.json > $account_id-na.json
-	```
-    * Repeat command if returned message is "The transaction was possibly not received by the cluster."
-
-1. Fund the wallet displayed on-screen with 0.01 SOL
-
-    * Once the funding is done, the nonce account will be created
-
-1. Stage, commit, sign and push the changes:
-    ```
-    $ git add .
-    $ git commit -m -S "<message>"
-    $ git push origin HEAD
-    ```
-### Sealing
-
-1. Gather all the original items that were in the air-gapped bundle:
-
-    * Air-gapped computer
-
-    * AirgapOS SD card
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}
-

trove/src/generated-documents/level-2/fixed-location/operator/coins/pyth/sign-and-broadcast-transaction.md

@@ -1 +0,0 @@
-# Sign and Broadcast Transaction

trove/src/generated-documents/level-2/fixed-location/operator/coins/seda/generate-address.md

@@ -1,45 +0,0 @@
-# Seda: Generate Address
-
-## Requirements
-
-{{ #include ../../../../operator-requirements.md:requirements }}
-
-{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
-
-* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
-
-* [Quorum PGP key pairs](../../../key-types.md#quorum-pgp-keypair)
-
-* [Ceremony SD card](../../../ceremony-sd-card-provisioning.md)
-
-## Procedure
-
-1. Enter the designated location with the quorum of operators and all required equipment
-
-1. Lock access to the location - there should be no inflow or outflow of people during the ceremony
-
-1. Place Ceremony SD card in High Visibility Storage
-
-1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
-
-1. Place all contents except for the laptop into High Visibility Storage
-
-### Offline Machine: Generate Address
-
-{{ #include ../template-gen-address-0.md:content }}
-
-1. Generate a new address:
-
-    * `icepick workflow cosmos generate-address --chain-name seda --account $account_id > $account_id.json`
-
-	The option `--chain-name` can use `seda` or `seda-devnet`.
-
-{{ #include ../template-gen-address-1.md:content }}
-
-### Online Machine: Updating Vaults Repository
-
-1. Turn on online linux workstation
-
-{{ #include ../../../../../../component-documents/git-basics.md:content }}

trove/src/generated-documents/level-2/fixed-location/operator/coins/seda/sign-and-broadcast-transaction.md

@@ -1,132 +0,0 @@
-# Seda: Sign and Broadcast Transaction
-
-## Requirements
-{{ #include ../../../../operator-requirements.md:requirements }}
-
-{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
-
-* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
-
-* [Quorum PGP key pairs](../../../key-types.md#quorum-pgp-keypair)
-
-* [Ceremony SD card](../../../ceremony-sd-card-provisioning.md)
-
-## Procedure
-
-1. Enter the designated location with the quorum of operators and all required equipment
-
-1. Lock access to the location - there should be no inflow or outflow of people during the ceremony
-
-1. Place Ceremony SD card in High Visibility Storage
-
-1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
-
-1. Place all contents except for the laptop into High Visibility Storage
-
-### Online Machine: Acquire Nonce
-
-1. Turn on online linux workstation
-
-1. Retrieve the Ceremony SD card from High Visibility Storage and plug it into the computer
-
-1. Get the nonce address for the address you are sending from by checking the appropriate \<namespace>/\<coin>/ directory.
-
-	* e.g `vaults/<namespace>/<coin>/0-na.txt`
-
-	* Set the nonce address variable:
-	```
-	$ nonce_address="$(cat vaults/<namespace>/<coin>/<account_id>-na.txt)"
-	```
-1. Set `ICEPICK_DATA_DIRECTORY`:
-
-	{{ #include ../../../../../../component-documents/finding-device-name.md:content }}
-	```
-	$ export ICEPICK_DATA_DIRECTORY=/media/external/
-	```
-
-1. set `ICEPICK_CONFIG_FILE`
-	```
-	$ export ICEPICK_CONFIG_FILE=<path_to_icepick_repo>/icepick.toml`
-	```
-1. Run the command:
-	```
-	$ icepick workflow cosmos broadcast --chain-name seda  --nonce-address=$nonce_address
-	```
-
-	The option `--chain-name` can use `seda` or `seda-devnet`.
-
-	* Await completion message before removing Ceremony SD card
-
-	* This command will set the computer into "awaiting mode", which will broadcast the signed transaction from the SD card once it's plugged back in after the workflow payloads are signed on the offline machine
-
-### Offline Machine: Create and Sign Transaction
-
-1. Retrieve AirgapOS SD card and plug it into the air-gapped machine
-
-1. Boot the computer
-
-1. Unplug the AirgapOS SD card and place it in High Visibility Storage
-
-1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine
-
-1. {{ #include ../../../../../../component-documents/finding-device-name.md:content }}
-
-1. Start Keyfork using the relevant Shardfile:
-	```
-	$ keyfork recover shard --daemon /media/<device_name>/vaults/<namespace>/shardfile.asc
-	```
-	* The Shardfile may be named something else. Use `find /media/<device_name>/vaults -type f -name '*shardfile*.asc'` to list all files.
-
-1. Follow on screen prompts
-
-1. Set `ICEPICK_DATA_DIRECTORY`:
-	```
-	$ export ICEPICK_DATA_DIRECTORY=/media/<device_name>
-	```
-1. Run the `icepick` command with the transaction payload
-
-	* The payload is located in the appropriate vault location (e.g /media/<device_name>/vaults/<namespace>/ceremonies/<date>...)
-	```
-	$ icepick workflow --run-quorum <payload>.json --shardfile /media/<device_name>/vaults/<namespace>/shardfile.asc
-	```
-	* Follow on screen prompts
-
-1. Unplug the Ceremony SD card and place it in High Visibility Storage
-
-### Broadcast Transaction: Online Machine
-
-1. Retrieve Ceremony SD from High Visibility Storage and plug it into online machine
-
-1. The still running broadcast command on the online machine will broadcast the transaction automatically
-
-1. The url that's found in the response after a successful broadcast should be reviewed and committed to the ceremony repository
-
-1. Remove the transaction files in `ICEPICK_DATA_DIRECTORY`
-	```
-	$ rm $ICEPICK_DATA_DIRECTORY/transaction.json
-	$ rm $ICEPICK_DATA_DIRECTORY/account_info.json
-	```
-
-1. Unplug the Ceremony SD card and place it in High Visibility Storage
-
-### Repeat
-
-1. You may repeat previous steps as many times as necessary to process all workflow payloads
-
-## Finalization
-
-1. Shut down online linux workstation
-
-1. Shut down the air gapped machine
-
-### Sealing
-
-1. Gather all the original items that were in the air-gapped bundle:
-
-    * Air-gapped computer
-
-    * AirgapOS SD card
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}

trove/src/generated-documents/level-2/fixed-location/operator/coins/sol/generate-address.md

@@ -1,102 +0,0 @@
-# Solana: Generate Address
-
-## Requirements
-
-{{ #include ../../../../operator-requirements.md:requirements }}
-
-{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
-
-* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
-
-* [Quorum PGP key pairs](../../../key-types.md#quorum-pgp-keypair)
-
-* [Ceremony SD card](../../../ceremony-sd-card-provisioning.md)
-
-## Procedure
-
-1. Enter the designated location with the quorum of operators and all required equipment
-
-1. Lock access to the location - there should be no inflow or outflow of people during the ceremony
-
-1. Place Ceremony SD card in High Visibility Storage
-
-1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
-
-1. Place all contents except for the laptop into High Visibility Storage
-
-### Offline Machine: Generate Address
-
-{{ #include ../template-gen-address-0.md:content }}
-
-1. Generate a new address:
-	```
-    $ icepick workflow sol generate-address --account $account_id > $account_id.json
-	```
-
-{{ #include ../template-gen-address-1.md:content }}
-
-### Online Machine: Generate Nonce Account
-
-1. Turn on online machine
-
-1. Retrieve the Ceremony SD card from High Visibility Storage and plug it into the computer
-
-1. {{ #include ../../../../../../component-documents/finding-device-name.md:content }}
-
-1. Copy the `vaults` repository from the Ceremony SD card:
-	```
-    $ cp -r /media/vaults ~/
-	```
-    * If the `~/vaults/` repository already exists, ensure it doesn't have any changes that haven't been committed, then remove it using `sudo rm -rf ~/vaults` before re-running the previous step
-
-1. Ensure `icepick` is available on system
-
-    * Follow steps from [installation guide](TODO)
-
-1. Change directory into the desired \<namespace>/\<coin> directory:
-	```
-    $ cd ~/vaults/<namespace>/<coin>
-	```
-1. Select which account you are creating the delegate address by viewing the appropriate \<namespace>/\<coin>/ directory:
-	```
-    $ ls -la .
-	```
-1. Once you have selected the appropriate account, set the account_id variable:
-	```
-    $ account_id=<num>
-	```
-1. Use `icepick` to generate nonce account:
-
-	* If using a non-`mainnet-beta` cluster, be sure to provide the `--cluster` argument
-
-    * Set `icepick` config file:
-	```
-    $ export ICEPICK_CONFIG_FILE=<path_to_icepick_repositry>/icepick.toml`
-	```
-	```
-    $ icepick workflow sol generate-nonce-account --input-file $account_id.json > $account_id-na.json
-	```
-    * Repeat command if returned message is "The transaction was possibly not received by the cluster."
-
-1. Fund the wallet displayed on-screen with 0.01 SOL
-
-    * Once the funding is done, the nonce account will be created
-
-1. Stage, commit, sign and push the changes:
-    ```
-    $ git add .
-    $ git commit -m -S "<message>"
-    $ git push origin HEAD
-    ```
-### Sealing
-
-1. Gather all the original items that were in the air-gapped bundle:
-
-    * Air-gapped computer
-
-    * AirgapOS SD card
-
-{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}}
-

trove/src/generated-documents/level-2/fixed-location/operator/coins/template-gen-address-0.md

@@ -1,42 +0,0 @@
-/* ANCHOR: all */
-// ANCHOR: content
-1. Retrieve AirgapOS SD card and plug it into the air-gapped machine
-
-1. Turn on air-gapped machine
-
-1. Unplug the AirgapOS SD card and place it in High Visibility Storage
-
-1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine
-
-1. Copy the `vaults` repository to the machine and switch to it
-    ```
-	$ cp -r /media/vaults /root/
-	$ cd /root/vaults
-    ```
-1. Start Keyfork using the relevant Shardfile:
-	```
-	$ keyfork recover shard --daemon <namespace>/shardfile.asc
-	```
-    * Follow on screen prompts
-1. If the desired `<coin>` directory doesn't exist for the namespace, create it:
-	```
-    $ mkdir -p <namespace>/<coin>
-	```
-1. Connect to the appropriate coin directory:
-	```
-    $ cd <namespace>/<coin>/
-	```
-1. Check what the latest address account is:
-	```
-	$ ls -la .
-	```
-1. Find what the latest number for the address is, and add 1 to it. This will be the new address account.
-
-	* For example if the latest address file is 42, the new account_id would be 43. The addresses should start at `0`
-
-	* Set an environment variable with the new account_id:
-		```
-		$ account_id=<num>
-		```
-// ANCHOR_END: content
-/* ANCHOR_END: all */

trove/src/generated-documents/level-2/fixed-location/operator/coins/template-gen-address-1.md

@@ -1,22 +0,0 @@
-
-/* ANCHOR: all */
-// ANCHOR: content
-1. Sign the file using:
-
-    * Import OpenPGP keys:
-
-        * `gpg --import /media/vaults/keys/all/*.asc`
-
-    * `gpg --detach-sign $account_id.json`
-
-1. You may repeat the previous steps, starting at the step where the `account_id` is set.
-
-1. Once finished, copy the updated repository back to the Ceremony SD card:
-
-    * `cp -rf /root/vaults /media/`
-
-1. Shut down the air gapped machine
-
-1. Unplug the Ceremony SD card and place it into High Visibility Storage
-// ANCHOR_END: content
-/* ANCHOR_END: all */

trove/src/generated-documents/level-2/fixed-location/proposer/cosmos-create-transaction-payload.md

@@ -1,50 +0,0 @@
-# Cosmos: Create Transaction Payload
-
-{{ #include template-create-tx-0.md:content }}
-
-1. Use icepick to generate and sign the payload by running one of the following available workflows:
-
-	All commands in the following sections take `--chain-name` and (with the
-	exception of `withdraw-rewards`) `--asset-name`. These are the "Chain" and
-	"Asset" fields from the table below. For example, Kyve Mainnet tokens would
-	be `--chain-name kyve --asset-name KYVE`. Seda Mainnet tokens would be
-	`--chain-name seda --asset-name SEDA`. The table below documents all
-	currently-supported combinations of chain and primary asset.
-
-	| Chain Name | Chain | Asset |
-	| ---------- | ----- | ----- |
-	| Seda | seda | SEDA |
-	| Seda Devnet | seda-devnet | SEDA |
-	| Kyve | kyve | KYVE |
-	| Kyve Testnet | kaon | KYVE |
-	| Kyve Devnet | korellia | KYVE |
-
-	Additionally, there may be some difficulty broadcasting a transaction due
-	to the amount of gas consumed, as each Cosmos chain may have different
-	computation power available. The option `--gas-factor` may be set to a
-	number to multiply the gas by, such as `1.2`, to increase the amount of gas
-	for a transaction. The default value is `1`, and may be omitted if desired.
-	A value lower than 1 is not recommended.
-
-	#### Stake
-	Stake coins on the provided chain towards a validator operator's address.
-
-	`$ icepick workflow cosmos stake --delegate-address <delegate-address> --validator-address <validator-address> --chain-name <chain-name> --asset-name <asset-name> --asset-amount <asset-amount> --gas-factor <gas-factor> --export-for-quorum --sign`
-
-	#### Transfer
-	Transfer coins on the cosmos blockchain.
-
-	`$ icepick workflow cosmos transfer --from-address <from-address> --to-address <to-address> --chain-name <chain-name> --asset-name <asset-name> --asset-amount <asset-amount> --export-for-quorum --sign`
-
-	#### Withdraw
-	Withdraw staked coins from a validator. Staked coins may be held for an unbonding period, depending on the chain upon which they are staked.
-
-	`$ icepick workflow cosmos withdraw --delegate-address <delegate-address> --validator-address <validator-address> --chain-name <chain-name> --asset-name <asset-name> --gas-factor <gas-factor> --export-for-quorum-sign`
-
-
-	#### Withdraw Rewards
-	Withdraw rewards gained from staking to a validator.
-
-	`$ icepick workflow cosmos withdraw-rewards --delegate-address <delegate-address> --validator-address <validator-address> --chain-name <chain-name> --gas-factor <gas-factor> --export-for-quorum-sign`
-
-{{ #include template-create-tx-1.md:content }}

trove/src/generated-documents/level-2/fixed-location/proposer/kyve-create-transaction-payload.md

@@ -1,37 +0,0 @@
-# Kyve: Create Transaction Payload
-
-{{ #include template-create-tx-0.md:content }}
-
-1. Use icepick to generate and sign the payload by running one of the following available workflows:
-
-	There may be some difficulty broadcasting a transaction due
-	to the amount of gas consumed, as each Cosmos chain may have different
-	computation power available. The option `--gas-factor` may be set to a
-	number to multiply the gas by, such as `1.2`, to increase the amount of gas
-	for a transaction. The default value is `1`, and may be omitted if desired.
-	A value lower than 1 is not recommended.
-
-	The option `--chain-name` can use `kyve`, `kaon` (testnet), and `korellia` (devnet)
-
-	#### Stake
-	Stake coins on the provided chain towards a validator operator's address.
-
-	`$ icepick workflow cosmos stake --delegate-address <delegate-address> --validator-address <validator-address> --chain-name kyve --asset-name KYVE --asset-amount <asset-amount> --gas-factor <gas-factor> --export-for-quorum --sign`
-
-	#### Transfer
-	Transfer coins on the cosmos blockchain.
-
-	`$ icepick workflow cosmos transfer --from-address <from-address> --to-address <to-address> --chain-name kyve --asset-name <asset-name> --asset-amount <asset-amount> --export-for-quorum --sign`
-
-	#### Withdraw
-	Withdraw staked coins from a validator. Staked coins may be held for an unbonding period, depending on the chain upon which they are staked.
-
-	`$ icepick workflow cosmos withdraw --delegate-address <delegate-address> --validator-address <validator-address> --chain-name kyve --asset-name KYVE --gas-factor <gas-factor> --export-for-quorum-sign`
-
-
-	#### Withdraw Rewards
-	Withdraw rewards gained from staking to a validator.
-
-	`$ icepick workflow cosmos withdraw-rewards --delegate-address <delegate-address> --validator-address <validator-address> --chain-name kyve --gas-factor <gas-factor> --export-for-quorum-sign`
-
-{{ #include template-create-tx-1.md:content }}

trove/src/generated-documents/level-2/fixed-location/proposer/pyth-create-transaction-payload.md

@@ -1,12 +0,0 @@
-# Solana: Create Transaction Payload
-
-{{ #include template-create-tx-0.md:content }}
-
-1. Use icepick to generate and sign the payload by running one of the following available workflows:
-
-	#### Transfer Token
-	Transfer Pyth on Solana blockchain.
-
-	`$ icepick workflow sol transfer-token --from-address <from-address> --to-address <to-address> --token-name PYTH --token-amount <token-amount> --export-for-quorum --sign`
-
-{{ #include template-create-tx-1.md:content }}

trove/src/generated-documents/level-2/fixed-location/proposer/seda-create-transaction-payload.md

@@ -1,37 +0,0 @@
-# Seda: Create Transaction Payload
-
-{{ #include template-create-tx-0.md:content }}
-
-1. Use icepick to generate and sign the payload by running one of the following available workflows:
-
-	There may be some difficulty broadcasting a transaction due
-	to the amount of gas consumed, as each Cosmos chain may have different
-	computation power available. The option `--gas-factor` may be set to a
-	number to multiply the gas by, such as `1.2`, to increase the amount of gas
-	for a transaction. The default value is `1`, and may be omitted if desired.
-	A value lower than 1 is not recommended.
-
-	The option `--chain-name` can use `seda` or `seda-devnet`.
-
-	#### Stake
-	Stake coins on the provided chain towards a validator operator's address.
-
-	`$ icepick workflow cosmos stake --delegate-address <delegate-address> --validator-address <validator-address> --chain-name seda --asset-name SEDA --asset-amount <asset-amount> --gas-factor <gas-factor> --export-for-quorum --sign`
-
-	#### Transfer
-	Transfer coins on the cosmos blockchain.
-
-	`$ icepick workflow cosmos transfer --from-address <from-address> --to-address <to-address> --chain-name seda --asset-name <asset-name> --asset-amount <asset-amount> --export-for-quorum --sign`
-
-	#### Withdraw
-	Withdraw staked coins from a validator. Staked coins may be held for an unbonding period, depending on the chain upon which they are staked.
-
-	`$ icepick workflow cosmos withdraw --delegate-address <delegate-address> --validator-address <validator-address> --chain-name seda --asset-name SEDA --gas-factor <gas-factor> --export-for-quorum-sign`
-
-
-	#### Withdraw Rewards
-	Withdraw rewards gained from staking to a validator.
-
-	`$ icepick workflow cosmos withdraw-rewards --delegate-address <delegate-address> --validator-address <validator-address> --chain-name seda --gas-factor <gas-factor> --export-for-quorum-sign`
-
-{{ #include template-create-tx-1.md:content }}

trove/src/generated-documents/level-2/fixed-location/proposer/sol-create-transaction-payload.md

@@ -1,20 +0,0 @@
-# Solana: Create Transaction Payload
-
-{{ #include template-create-tx-0.md:content }}
-
-1. Use icepick to generate and sign the payload by running one of the following available workflows:
-	#### Transfer
-	Transfer native Solana asset - SOL.
-
-	`$ icepick workflow sol transfer --to-address <to-address> --from-address <from-address> --amount <amount> --export-for-quorum --sign`
-
-	#### Transfer Token
-	Transfer SPL tokens on Solana blockchain.
-
-	The following SPL tokens, provided to `--token-name`, are supported:
-
-	* [PYTH](https://www.pyth.network/)
-
-	`$ icepick workflow sol transfer-token --from-address <from-address> --to-address <to-address> --token-name <token-name> --token-amount <token-amount> --export-for-quorum --sign`
-
-{{ #include template-create-tx-1.md:content }}

trove/src/generated-documents/level-2/fixed-location/proposer/template-create-tx-0.md

@@ -1,65 +0,0 @@
-/* ANCHOR: all */
-// ANCHOR: content
-## Requirements
-
-* [Quorum PGP Key](../operator/quorum-entropy-ceremony.md)
-
-* [Air-Gapped Bundle](../provisioner/air-gapped-bundle.md)
-
-	* The proposer  should print photographic evidence from digital cameras which is stored in a PGP signed repository. The photographs should be of the top and underside of the vacuum sealed object.
-
-	* The proposer should verify the commit signatures of the photographs they are printing against a list of permitted PGP keys found in the `vaults` repo
-
-{{ #include ../../../../component-documents/linux-workstation.md:content }}
-
-* Clone the [Vaults Repository](../../../all-levels/create-vaults-repository.md) for your organization to the machine
-
-## Procedure
-
-1. Turn on online linux workstation
-
-1. Clone the `vaults` repository if it's not available locally and get the latest changes:
-	```
-	$ git clone <repository_git_url>
-	$ git pull origin main
-	```
-1. Unseal the SD Card Pack
-
-{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
-
-1. Plug a fresh SD card into the online linux workstation
-
-1. {{ #include ../../../../component-documents/finding-device-name.md:content }}
-
-1. Save the `vaults` repo to the SD card, referred to as the Ceremony SD card
-	```
-	$ cp -r ~/vaults/ /media
-	```
-1. Unplug the Ceremony SD card
-
-1. Unseal the tamper proofed bundle
-
-{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
-
-1. Insert the AirgapOS SD card into the airgapped machine and turn it on
-
-1. Once booted, unplug the AirgapOS SD card and place it in High Visibility Storage
-
-1. Plug in the Ceremony SD card
-
-1. Copy the git repo locally from the Ceremony SD card and change to it
-	```
-	$ cp -r /media/vaults /root
-	$ cd /root/vaults
-	```
-1. Create a new payloads directory in the `vaults` repository for the date on which the ceremony for the transaction will take place if it doesn't already exist
-
-	* `mkdir -p <namespace>/ceremonies/<date>/payloads`
-
-	* e.g `mkdir -p acme-coin-01/ceremonies/2025-01-01/payloads`
-
-1. Use `icepick workflow --help` to list the available workflows and options
-
-1. Plug in the Operator smart card
-// ANCHOR_END: content
-/* ANCHOR_END: all */