Ergonomic facade over the generated update binding.
A device that cannot be fixed in the field is a device that has to be visited,
and some of them are a day's travel away. Signed updates make that a network
operation instead: a release carries a manifest naming who it is for and what
it hashes to, a device refuses anything not signed by the key it trusts, and
an image that fails to confirm itself is rolled back to the one that worked.
The slot state and boot action are re-exported as runtime objects, because
the generated enums are types-only.
Ergonomic facade over the generated update binding.
A device that cannot be fixed in the field is a device that has to be visited, and some of them are a day's travel away. Signed updates make that a network operation instead: a release carries a manifest naming who it is for and what it hashes to, a device refuses anything not signed by the key it trusts, and an image that fails to confirm itself is rolled back to the one that worked.
The slot state and boot action are re-exported as runtime objects, because the generated enums are types-only.