{
  "schema": 1,
  "note": "Multisig-gated kernel update stream: replicate candidate /boot/init.js bytes via swarm; verify quorum before boot policy accepts requireInitJsSha256.",
  "initJsSha256Hex": "hex sha256 of candidate /boot/init.js raw bytes",
  "signersQuorum": {
    "signers": ["ed25519_pubkey_hex..."],
    "quorum": 2
  },
  "swarmTopicClassHex": "optional 64-hex topic class for kernel-stream peers",
  "validFromMs": 0,
  "validToMs": null
}