Happy-path boot. When the overlay is reachable and the local
generation matches what the org wants, preboot authenticates,
unlocks /persist, verifies image.sig,
and kexecs into the main OS in a few seconds. No display input
needed.
If ethernet is down, gen-auth is unreachable, or the operator presses a key during the first 3 seconds, preboot drops to a recovery prompt with three explicit paths out: connect to a network, resume from hibernate, or emergency-boot the last cached generation.
View recovery prompt