Security and privacy
Secure updates
Updating without a mandatory internet connection, with rollback.
Planned: listed in the catalog, not built
What to plan for
- Failed update
- Offline update media
- Version skew in a shop
What the catalog lists
Planned items that match this topic (keyword match; read each as a pointer):
- Pre-update automatic backup DATA-0022
- No outbound network by default SEC-0028
- Signed updates SEC-0031
- Optional yearly update plan LIC-0003
- Update delivery by file/USB LIC-0010
- Update delivery by direct download (opt-in) LIC-0011
- Update signature verification LIC-0012
- Update rollback LIC-0013
- Staged update (canary on one device) LIC-0014
- Clock rollback block for fiscal docs FAIL-0035
- App update mid-shift FAIL-0103
- Migration failure rollback FAIL-0105
Honesty note
Everything listed is a plan or a design principle. No app is released and nothing is audited or certified.