Explanation¶
Explanation documents describe why meta-tolomeo is designed the way it is: design decisions, trade-offs, and the reasoning behind non-obvious choices.
| Explanation | Topic |
|---|---|
| Architecture | Layer separation rationale, target platforms, build configurations |
| Update Mechanism | Feature flag design, two-layer configuration model, runtime argument composition |
| Encrypted Updates | Feature boundary, signing vs. encryption, on-device key delivery design space |
| CVE Database | NVD fetch problem, backup seed, scheduled refresh, per-branch update policy |
| Secure Boot Chain | Two-stage boot chain: NXP HAB/AHAB and U-Boot FIT image signing |