{
  "schemaVersion": "nodedc.device-plane.device-control-core-release.v3",
  "releaseId": "__PATCH_ID__",
  "action": "upgrade",
  "predecessor": {
    "kind": "release",
    "patchId": "device-control-core-release-v2-20260822-038",
    "artifactSha256": "e2d062b82b022dba662522b5d6e192026ac964d78950d903295ca3cbbc95ab28"
  },
  "service": "device-control-core",
  "composeActivation": "preserve-active-v4-topology",
  "identity": "reuse-existing-runner-managed-host-local-private-key-public-certificate-export",
  "identityRecovery": "forbidden-valid-existing-identity-required",
  "tlsPurpose": "clientAuth",
  "direction": "core-initiated",
  "endpointPolicy": "public-ipv4-standard-https-tcp-443-only",
  "coreNetworks": [
    "device-plane-private",
    "device-plane-egress"
  ],
  "publicIngress": "none-on-synology",
  "edgeRegistrations": "preserved",
  "commandTransport": "typed-service-ping-v1",
  "commandCatalog": "allowlisted-adapter-typed-commands-only",
  "credentialBoundary": "transient-core-memory-then-single-pinned-mtls-command-envelope-to-edge-never-persisted-never-logged-never-returned",
  "telemetryTransport": "edge-channel-host-telemetry-observed-v1",
  "telemetryContract": "nodedc.infrastructure.host-telemetry.v1",
  "telemetryStorage": "device-control-core-postgres-seven-day-retention",
  "ontologyProjection": "observation-observed-property-provenance-freshness-v1",
  "telemetryFreshness": "fifteen-seconds-missing-stale-not-unhealthy",
  "gelios": "untouched-legacy-only",
  "preservedServices": [
    "device-manager",
    "device-gateway",
    "device-postgres",
    "device-backhaul-target"
  ],
  "healthGate": "bounded-container-grace+core-edge-contract+exact-private-egress-network-boundary",
  "rollback": "restore-preapply-source-and-core-runtime"
}