)]}'
{
  "commit": "690c72eeb2cbadf7f116f9af5c53ee7988b30908",
  "tree": "d1c287ab322c3ec79c88678eb544000fcaa9dd2b",
  "parents": [
    "3e6d69cd10451b27ae9deef05e3660d87d0cc3ef"
  ],
  "author": {
    "name": "Christina Quast",
    "email": "christina.quast@9elements.com",
    "time": "Tue Sep 29 15:21:53 2026 +0200"
  },
  "committer": {
    "name": "Christina Quast",
    "email": "chrysh.ng+github@gmail.com",
    "time": "Sat Oct 10 20:51:13 2026 +0200"
  },
  "message": "docs: what the orchestrator cannot check during an update\n\nFirmware bytes bypass the orchestrator, so its grants are policy, not\nenforcement. Record which checks that rules out and which threat model\neach one matters in.\n\nAssisted-by: Claude\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "4891825fd28f3e5b50b0f3c2e2704412b64bfb74",
      "old_mode": 33188,
      "old_path": "docs/src/design/orchestrator/orchestrator-model.md",
      "new_id": "31750b26392efefc55de85caa3ad328bacb6d45c",
      "new_mode": 33188,
      "new_path": "docs/src/design/orchestrator/orchestrator-model.md"
    }
  ]
}