Brimstone Core R1 — 1.0.0-rc.2 — 4 November 2026

Includes the accepted QA114 catalogue memory repair, QA115 Core-first playback
and lyric timing, and QA116 DruidCast/native Meridian podcast streaming.
The audio/metadata implementation is the accepted QA116 build. Three version
identity files now identify this release consistently as 1.0.0-rc.2. Enhanced
metadata, streaming services and Control compatibility remain included.

UPDATING A CORE WITH THE SLOT-C UPDATER ALREADY INSTALLED
1. Finish playback, ripping, recording, imports and downloads.
2. Open Core > Settings > Updates & Recovery. Upload the whole signed .tar.gz;
   do not extract it. Review the verified version and activate it.
3. Choose Restart when offered. Core backs up the database, boots maintenance
   slot C, patches the inactive A/B slot and boots the new Core automatically.
   Keep power connected and let both boots finish. Do not select C manually.
4. Check the displayed version, library and playback. A healthy exact-version
   boot is confirmed automatically. The previous A/B application remains for
   rollback. Application rollback does not rewind persistent DATA or media.

The fresh R1 1.0.0-rc.2 installer includes that trusted C worker. A version number
alone does not prove an older installation has had its one-time C setup: an
ordinary cumulative application patch cannot replace the privileged worker.
If your existing updater uses the older A/B process, follow that verified
process and arrange the separate one-time C setup with support. Never bypass
an unknown-baseline, signature, disk-identity or database-compatibility refusal.

LEGACY Rev29/Rev48 WITHOUT THE TRUSTED WEB HELPER
Verify the downloaded SHA256 before extracting the patch into persistent DATA.
From that directory, use the local administrator console:
  sudo python3 apply_patch.py --check
  sudo python3 apply_patch.py --apply --activate
  sudo reboot
After Core is healthy, return to that same directory and run:
  sudo python3 apply_patch.py --confirm
The previous A/B slot may be selected by --rollback followed by a reboot.
This legacy console procedure installs the earlier trusted A/B web helper;
it does not silently install the new privileged C worker. Do not execute the
legacy patch command while manually booted in C.

FRESH INSTALLATION
Use the separate R1 1.0.0-rc.2 amd64 ISO only for a new deliberately selected system
disk. Installation erases that selected disk. Do not reinstall to update Core.
Minimum system disk: 96 GiB; 128 GiB recommended. RAM: 8 GiB recommended.
The existing verified Debian OS, OCI containers, recovery image, signed EFI
and kernel inputs are retained. The factory boot hook installs pinned update
helpers and public trust keys into A/B/C using the new disk's generated IDs.
Fresh BIOS/UEFI boot and install acceptance is required before publication.

No customer catalogue, media, credentials, private developer/signing keys or
operator machine identity is included. The owner's temporary scan freeze is
not imposed on new installations. Beta service features remain enabled and
still require each user's own provider permission where applicable.

Guide: https://core-audio.uk/update-core.html
