16 lines
853 B
Markdown
16 lines
853 B
Markdown
|
# HoloLake release broadcast candidate
|
||
|
|
|
||
|
|
This is the HoloLake-owned, loopback-only origin for signed update broadcasts.
|
||
|
|
It has no upstream software feed and never uploads or activates a release.
|
||
|
|
|
||
|
|
Without `ACTIVE.json`, `/health` reports `EMPTY_FAIL_CLOSED` and `/latest.json`
|
||
|
|
returns HTTP 204, the updater protocol's explicit no-update result. An active
|
||
|
|
release is accepted only when the human activation record, immutable broadcast,
|
||
|
|
pipeline receipt, package bytes, Developer ID receipt, and Apple notarization
|
||
|
|
receipt form one exact evidence chain. Invalid evidence locks the whole release
|
||
|
|
endpoint until an operator fixes the evidence and explicitly restarts the
|
||
|
|
service.
|
||
|
|
|
||
|
|
The service listens only on `127.0.0.1`. Public HTTPS routing, updater trust-key
|
||
|
|
provisioning, artifact upload, activation, and desktop rollout are independent
|
||
|
|
deployment gates.
|