ReviewOS

also looking at this

stacks/drone

test: control purge history preparation clock

#55
Merged chris wants to merge codex/purge-history-setup-clock into main
37 files +1804 -168
README.mdmodified+4-2
Changes to README.md
@@ -270,8 +270,10 @@ store retains verified metadata, clock/release floors and historical recovery;
270270`updates:prepare` authenticates actual image bytes under that protected state.
271271`updates:reserve`, `updates:candidates` and `updates:retire` add durable candidate
272272identity, recorded-byte status and explicit retirement while retaining files/history.
273Physical logging/commissioning, key revocation/repair, installed/known-good slots
274and image-bound boot/session health remain pending.
273`updates:trial`, `updates:slots`, `updates:rollback` and `updates:abandon` add retained
274host slots, actual image/boot/session health and fresh-policy rollback for the owned
275neutral host build. Physical logging/commissioning, key repair, complete storage-fault
276coverage and board image/install/boot/rollback qualification remain pending.
275277
276278## Sensor acquisition and replay
277279