Module seed_ops 

Seed operations outside the cog lifecycle: pairing and firmware upgrade.

Firmware upgrade is a governed, backed-up operation (ADR-100 section 5): a 0.10.x upgrade hit the witness-chain writes_gated state, recovered with /api/v1/store/truncate-confirm after a backup. So:

1. SeedApiRuntime::backup snapshots what the API exposes;
2. SeedApiRuntime::upgrade_firmware refuses without a verified backup or while writes are gated, then applies;
3. SeedApiRuntime::recover_writes_gated runs the truncate-confirm recovery only when writes are gated and the backup still verifies.

Callers go through super::WorkloadHost, which gates each step as workload.install with kind seed-firmware and chains the result.

Structs

SeedBackup

A local backup of one Seed’s API-visible state, bound to that Seed.

Enums

UpgradeOutcome

Result of an upgrade request.

Constants

KIND_SEED_FIRMWARE

Workload kind used to govern firmware operations.

REQUIRED_BACKUP_FILES

Files every backup must hold.