Release channels
Approved artifacts are private S3 objects with product, version and SHA-256 metadata. Authenticated users receive ten-minute download URLs. The MCP beta lists metadata but never returns download credentials.
| Product | Artifact | Update path |
|---|---|---|
| Oddessy Edge for Ubuntu | .tar.gz | Platform-scheduled pull OTA with versioned slots and rollback |
| Oddessy Edge for Windows | .msi | Administrator-installed in-place MSI upgrade retaining ProgramData identity |
| Argo for Android | .apk | Private authenticated download |
Linux OTA sequence
- An operator schedules an approved Edge release for a real, eligible device.
- The device collects the directive on its outbound authenticated heartbeat.
- A private 15-minute URL, declared size and SHA-256 are delivered.
- The device rejects traversal paths, verifies the archive and preflights the source.
- A root-owned service activates a new slot and verifies core heartbeat health.
- Failed verification restores the previous slot automatically.
No arbitrary URLs
The browser and MCP beta cannot provide an arbitrary package URL or checksum. Linux OTA can select only an approved edge/ object already present in the private release bucket.