Device Guard Pilot 0.5.1

Pilot 0.5.1 restores the signed self-update channel for the existing managed-device pilot.

Highlights:

• explicit, fail-closed pilot update-channel build
• release artifact verification for package, version, signer, compiled URL, and P-256 metadata key
• exact signed-manifest-to-APK binding before publication
• ordinary builds remain updater-disabled by construction
• production identity and update configuration remain separate

Upgrade note: devices already on Pilot 0.5.0 require this one final ADB update because 0.5.0 was published without its update-channel constants. Future pilot updates can then use the authenticated in-app updater.

This remains a public pilot pre-release, not a production deployment artifact. Kiosk mode is not enabled automatically.

Production roadmap

• Durable architecture and product boundary
• Public execution Project
• Pilot 0.5.2 milestone
• Pilot 0.5.3 milestone
• 1.0 production-candidate milestone