Hold enrolled workloads until Phantom Engine is enforce-ready - #151

Merged

zacharybalicki merged 2 commits into

mainfrom

cursor/fd-reboot-1-early-boot-hold-b6f0

Oct 1, 2026

Commits on Oct 1, 2026

Hold enrolled workloads until Phantom Engine is enforce-ready.
zacharybalicki
committed
51fe94f
Install the boot hold on apply, and release only after a live deny check.
zacharybalicki
committed
a492097