{
  "schemaVersion": "nodedc.device-plane.device-control-core-release.v2",
  "releaseId": "__PATCH_ID__",
  "action": "upgrade",
  "predecessor": {
    "kind": "release",
    "patchId": "device-control-core-release-20260812-024",
    "artifactSha256": "a289e909283109642e6bba3d9822a31f63423cfe0bbcd52705979681bd2bc793"
  },
  "service": "device-control-core",
  "composeActivation": "preserve-active-v4-topology",
  "identity": "reuse-existing-runner-managed-host-local-private-key-public-certificate-export",
  "identityRecovery": "forbidden-valid-existing-identity-required",
  "tlsPurpose": "clientAuth",
  "direction": "core-initiated",
  "endpointPolicy": "public-ipv4-standard-https-tcp-443-only",
  "coreNetworks": [
    "device-plane-private",
    "device-plane-egress"
  ],
  "publicIngress": "none-on-synology",
  "edgeRegistrations": "preserved",
  "commandTransport": "typed-service-ping-v1",
  "commandCatalog": "allowlisted-adapter-typed-commands-only",
  "credentialBoundary": "transient-core-memory-then-single-pinned-mtls-command-envelope-to-edge-never-persisted-never-logged-never-returned",
  "gelios": "untouched-legacy-only",
  "preservedServices": [
    "device-manager",
    "device-gateway",
    "device-postgres",
    "device-backhaul-target"
  ],
  "healthGate": "bounded-container-grace+core-edge-contract+exact-private-egress-network-boundary",
  "rollback": "restore-preapply-source-and-core-runtime"
}