Explanation
Explanation documents describe why meta-tolomeo is designed the way it is: design decisions, trade-offs, and the
reasoning
behind non-obvious choices.
| Explanation |
Covers |
| Architecture |
Layer separation rationale, target platforms, build configurations |
Update
| Explanation |
Covers |
| Update Mechanism |
Feature flag design, two-layer configuration model, runtime argument composition |
| Encrypted Updates |
Feature boundary, signing vs. encryption, on-device key delivery design space |
Security
| Explanation |
Covers |
| CVE Database |
NVD fetch problem, backup seed, scheduled refresh, per-branch update policy |
| Secure Boot Chain |
Two-stage boot chain: NXP HAB/AHAB and U-Boot FIT image signing |
Configuration
| Explanation |
Covers |
| Configuration Classes |
TLM_ interface rationale, OTA single source of truth, parse-time validation, class hierarchy |