internal/

Package buildinfo contains the public Aegis and runtime-adapter version.

Package layout resolves and validates Aegis's per-operator filesystem layout.

Package migration implements authenticated migration from exact legacy local defaults to the canonical per-operator layout.

Package onboarding derives bootstrap progress from authoritative artifacts and implements exact-plan configuration changes.

Package reset implements the authenticated, plan-bound local reset transaction.

Package safefs provides descriptor-anchored no-follow filesystem mutations.

Package update securely replaces a release-built Aegis executable.