tree dbf7a5767d598ef94291c712861d9c57f8e74561
parent 0aa4404c344b00cb2009f4938c6a921bffb85487
author Christina Quast <christina.quast@9elements.com> 1785957294 +0200
committer Anthony Rocha <116300062+rusty1968@users.noreply.github.com> 1786489473 -0700

orchestrator: Replace BootMonitor with checkpoint-embedded evidence checks

A BootCheckpoint is timing policy plus its own evidence check: a
capture-less fn handed the board's device context, so the channel
underneath never leaks past the check and an unobservable checkpoint
is unrepresentable. config.rs defines the schema (BootSignal is gone);
the board table declares the checkpoints against its own context and
error types. BootStatus stays as the shared vocabulary and absorbs
the latch-cleared-by-reset contract; GpioBootMonitor keeps its
behavior as a plain reader. BootWatch/WalkVerdict is the erased seam
the orchestrator polls — timeout and retry-budget judgment lands with
the walker that implements it.

Assisted-by: Claude:claude-fable-5
Signed-off-by: Christina Quast <christina.quast@9elements.com>