Capability· III · Platformization· Deployment & UpdateDemo
Safe Automatic Update
Current state: InvestigatingTarget: Operational
Available: every prerequisite is at least demonstrated.
Devices update themselves from signed packages and roll back if the update fails.
Package management, cryptographic signing and rollback combined: the write-up's canonical cross-branch capability.
Prerequisites
- Artifact SigningDemonstrated
- Rollback SupportDemonstrated
- Software PackagingOperational
Unlocks
- Fleet Health MonitoringLocked
- Trusted Fleet UpdateLocked
- Fleet-wide updates without site visits
Implementations
- Automatic Updatefeature
- Code Signingfeature
- Yocto Projecttechnology
Eureka goals
- A deliberately bad update rolls back on its own on a bench unit. (achieved)
- An air-gapped unit updates from a signed offline bundle.
Examples (demonstrated by 2 examples)
Demonstrated by (2)
Eureka evidence (1)
State history
— → Investigating · 17 Sept 2026 · Marcus Bell (imported)
FICTIONAL demo state: Offline bundle and rollback drill demonstrated separately.