📦 Smart Install — distribution & ops
Signed update governance Live
stage→approve→apply, sha256 + ed25519 signed, never auto-applied (RFC-044).
Updates follow a stage→approve→apply flow, each bundle sha256-hashed and ed25519-signed, and are never auto-applied. The update chain is hash-verified, so you always know exactly what is about to change before it does.