# ASG Store — About and release policy

Publisher: Australian Smart Group (ASG)
Store candidate: 0.2.0-alpha.9 — SHAC bench; installation acceptance pending.
Runtime release source: https://asg-store-feed.pages.dev/catalogue.v1.json

All runtime catalogue listings, About text, release notes and signed IPK files are served from the approved ASG Cloudflare Pages endpoint. There are no public Google Drive links, alternate-feed settings or manual file-import controls. The Store contains no signing private key.

## How managed updates work

1. Confirm the controller-reported model, firmware and CPU architecture under Controller status. This is a firmware-advertised model ID, not independent physical-hardware proof.
2. Choose Production or Testing & beta, inspect the release notes, signed release scope and known issues.
3. Select Download & verify ASG release. The controller retrieves bounded files from Cloudflare over HTTPS. The browser verifies the pinned ASG Ed25519 detached manifest signature, exact IPK SHA-256/length, signed version/channel, architecture and target allowlists.
4. Ensure a current backup and independent recovery route. Complete the explicit install checkbox and a fresh native Apps administrator password check. Only the same verified IPK bytes are submitted.
5. Inspect native Apps to confirm the result. Unknown native outcomes require inspection before the per-session retry hold may be cleared.

Catalogue data alone never authorises installation. URLs cannot be redirected to another host, signatures cannot introduce unpinned keys and an installed version entered manually is never an authorisation source.

## Experimental hardware (advanced)

Allow untested compatible hardware is OFF by default and resets when the Store is reopened. Turning it on reveals all controller families and allows a trial when a signed release differs from the reported model, firmware or platform. Such a trial is explicitly classified SIGNED BUT UNTESTED; it is not ASG-tested compatibility, approval, support or manufacturer certification.

CPU architecture matching remains mandatory (unless the signed package is architecture all). Ed25519 approval, exact bytes, publisher release scope, a checked backup/recovery plan, an extra experimental-risk acknowledgement and independent native Apps administrator authorisation are still required. The operator must observe the signed release's accepted scope. Incorrect software can disrupt building controls or require recovery. Never attempt an experimental install on a live site without specific change approval and independent controls.

## Release channels and bench checkpoint

Production and Beta are separate channels and neither implies a package was accepted for a particular model. Alpha.8 successfully installed on the disposable 5500NAC2 firmware 2.5.0, verified/downloaded the signed inert probe, completed native probe install/uninstall and rebooted with Store persistence. Its controller HTTPS check against the then-empty Cloudflare catalogue worked.

Alpha.9 introduces catalogue-managed Cloudflare release download/install, a bounded controller HTTPS temporary-file relay, refreshed Cloudflare About text, and the experimental-hardware switch. Static builds and signature tests have passed. **Alpha.9 has not yet been installed or end-to-end tested on the physical SHAC.**

The original Tailscale Micro 1.0.0 ARMv7 IPK is already signed, but its existing signed release scope is for a controlled bench install and expressly excludes public catalogue publication. Keep the package bytes unchanged; public Cloudflare publication requires a newly authorised and signed release manifest.

## Publication and recovery

Every published release needs reviewed About, version, changelog, known issues, precise hardware and firmware scope, immutable IPK bytes, SHA-256, signed manifest and detached signature. Release URLs are versioned and old accepted versions are retained for recovery. No private keys, passphrases, controller passwords or access tokens belong in the Store, project archives or Cloudflare assets. Never present bench success as manufacturer certification or field acceptance.