01
Signed by default
Every update is cryptographically signed and verified on the device before anything else runs. Releases can require a second, human approval, and devices refuse anything that lacks it.
$ overair publish --channel production → compatible release 2.14.0 ✓ → package delta 183 KB → signed release key ✓ approver ✓ → rollout 10% of devices