Agent task: define SourceOS boot and recovery integration path for M2 lifecycle proof

[mdheller]

Agent-directed work package.

Target agent: Codex environment for SourceOS-Linux/sourceos-boot; Copilot coding agent if available.

Context:
sourceos-boot should own implementation-facing boot/recovery mechanics that consume the normative contracts from SourceOS-Linux/sourceos-spec and interoperate with evolved nlboot semantics.

Scope:

1. Inspect the live repository before editing.
2. Add docs/M2_BOOT_RECOVERY_PLAN.md describing the Mac-first boot/recovery path: SourceOS normal entry, SourceOS Recovery/Installer entry, signed BootReleaseSet fetch, rollback target selection, and evidence emission.
3. Add docs/BOOT_CHANNELS.md defining live, install, rescue, rollback, and normal channels.
4. Add repo.maturity.yaml using repo-maturity.v1 semantics.
5. Add example boot-channel manifests that reference SourceOS spec schemas without duplicating normative schema ownership.
6. Add Makefile validation for examples.

Acceptance criteria:

• make validate passes.
• Docs distinguish Apple Silicon/Asahi-style boot entry mechanics from generic UEFI/iPXE semantics.
• Repo states what it implements vs what remains delegated to nlboot/sourceos-spec/sourceos-installer.
• No secrets, boot keys, private tokens, or binary images are committed.

Boundary:
One PR only. Do not implement full OS image building here unless already present; focus on boot/recovery integration maturity and contract consumption.

[mdheller]

@codex Please take this issue in the sourceos-boot Codex environment. Inspect the repo, implement the bounded boot/recovery maturity plan described in the issue, open one PR, and include make validate evidence.

[mdheller]

@copilot Please take this issue if Copilot coding agent is available. Keep changes bounded to boot/recovery maturity and contract consumption, open one PR, and include make validate evidence.

[chatgpt-codex-connector]

Summary

• Added a bounded M2-focused boot/recovery maturity plan document that explicitly defines Apple Silicon (Asahi-style) entry mechanics, separates them from generic UEFI/iPXE semantics, documents signed BootReleaseSet flow, rollback target selection, and required evidence outputs. docs/M2_BOOT_RECOVERY_PLAN.mdL1-L103
• Added docs/BOOT_CHANNELS.md defining normal, live, install, rescue, and rollback channels and clearly stating implementation/delegation boundaries (sourceos-boot vs sourceos-spec/nlboot/sourceos-installer). docs/BOOT_CHANNELS.mdL1-L25
• Added repo.maturity.yaml using repo-maturity.v1 semantics with bounded-integration status, ownership/delegation declarations, and required acceptance evidence including make validate. repo.maturity.yamlL1-L22
• Added example boot-channel manifests (normal/install/rollback) that reference upstream sourceos-spec schema and policy contracts instead of redefining normative schemas in this repo. examples/boot-channels/normal.channel.example.jsonL1-L14 examples/boot-channels/install.channel.example.jsonL1-L14 examples/boot-channels/rollback.channel.example.jsonL1-L14
• Added validate_channel_examples.py to validate boot-channel example structure and enforce sourceos-spec schema reference usage. src/sourceos_boot/validate_channel_examples.pyL1-L50
• Added a Makefile with make validate to run BootReleaseSet validation, boot-channel example checks, control-plane example JSON integrity check, and test suite execution. MakefileL1-L10

PR / Commit

• Committed on current branch: a1d02ef with message “Add bounded M2 boot/recovery maturity plan and validation”.
• Created PR via make_pr:
  • Title: Follow-up: add bounded M2 boot/recovery maturity plan, channel docs, and validation

Testing

• ✅ make validate
  • Includes:
    • python3 src/sourceos_boot/validate_boot_release_set.py examples/boot-release-set.example.json
    • python3 src/sourceos_boot/validate_channel_examples.py examples/boot-channels/*.json
    • python3 -m json.tool examples/control-plane-boot-release-set.example.json >/dev/null
    • pytest -q (8 passed)

View task →