feat(k1): recover exact application bootstrap

2026-07-18 13:54:25 +03:00
parent af9319a33b
commit d7749208a7
15 changed files with 906 additions and 215 deletions
@@ -37,9 +37,10 @@ is observed, but its media decoder/replay flags remain independent.
 The v1 loader rejects every `write_enabled: true`. Owner-operated LixelGO wire
 capture verifies the `ModelingRequest` topic, action values, field layout,
 literal `{device_id}:ModelingRequest` session relation, retained start settings
-and numeric success code. The bounded codec accepts an OpenAPI value only as an
-explicit secret; its provenance and secure provisioning are unresolved, as are
-durable save completion, timeout and rollback behavior. Acquisition therefore
+and numeric success code. Retained client/wire evidence identifies OpenAPI as
+one private application-level value rather than a per-scanner profile. Its
+secure runtime loading remains unresolved, as do durable save completion,
+timeout and rollback behavior. Acquisition therefore
 stays `operator-manual` through the verified physical double-click.
 The standalone encoder models the recovered wire schema, including enum values
 outside the retained request. It is not an authorization policy: any future