also looking at this
test: control purge history preparation clock
#55
37 files
+1804
-168
| @@ -270,8 +270,10 @@ store retains verified metadata, clock/release floors and historical recovery; | ||
| 270 | 270 | `updates:prepare` authenticates actual image bytes under that protected state. |
| 271 | 271 | `updates:reserve`, `updates:candidates` and `updates:retire` add durable candidate |
| 272 | 272 | identity, recorded-byte status and explicit retirement while retaining files/history. |
| 273 | Physical logging/commissioning, key revocation/repair, installed/known-good slots | |
| 274 | and image-bound boot/session health remain pending. | |
| 273 | `updates:trial`, `updates:slots`, `updates:rollback` and `updates:abandon` add retained | |
| 274 | host slots, actual image/boot/session health and fresh-policy rollback for the owned | |
| 275 | neutral host build. Physical logging/commissioning, key repair, complete storage-fault | |
| 276 | coverage and board image/install/boot/rollback qualification remain pending. | |
| 275 | 277 | |
| 276 | 278 | ## Sensor acquisition and replay |
| 277 | 279 | |