alpha26: correct collector semantics and add time sync

[Deadbytes101]

ALPHA.26 STATUS SEMANTICS

Corrects three issues found during physical BIOS validation of the exact Alpha.26 source candidate.

SOURCE BOUNDARY

base source: 85075b271ae5029e887790ec7c8eaa23e8d1b2b8
branch:      alpha26-status-semantics

WHAT CHANGED

• recognizes the expected Debian live overlay root as operational only when every lower layer is under /run/live/rootfs
• keeps unexpected writable roots and untrusted overlays as major outages
• replaces broad thermal and watchdog substring counting with bounded kernel-fault signatures
• ignores normal thermal-governor, thermal-zone and NMI-watchdog registration messages
• installs and enables systemd-timesyncd
• reports synchronized time as operational and unsynchronized time as degraded
• expands the physical acceptance matrix for collector semantics and NTP

PRESERVED CONTRACTS

• exact 19-component registry
• no wallet, worker, pool, hashrate, shares, hostname, IP, secrets or raw journal
• exact timestamp.nonce.body HMAC-SHA256 wire contract
• transport exit 75 and protocol exit 76
• status timer remains disabled until explicit configuration
• no miner dependency or remote-control path

VERIFICATION

Local Python verification:

15 / 15 PASS

The tests cover expected live-overlay truth, unexpected writable roots, normal kernel boot messages, real bounded fault messages, time synchronization, privacy, HMAC, source identity and failure exit contracts.

RELEASE BOUNDARY

This changes the appliance image. The existing successful image and its hash remain historical evidence and must not be overwritten. A new Debian 12 Bookworm build, new artifact identity, QEMU BIOS gate, physical BIOS gate, physical UEFI gate and unattended soak are required before any Alpha.26 tag or stable claim.

[cloudflare-workers-and-pages]

Deploying rigos with    Cloudflare Pages

Latest commit:	20dcc22
Status:	🚫  Build failed.

View logs