Recovery and rollback

1. Do not install an older binary unless the current signed channel manifest explicitly names it as the rollback target.
2. Export project evidence and close SiliconForge.
3. For Linux, verify the exact signed archive, extract it into a new directory, and launch AppRun before replacing an existing installation. Preserve the previous installation and project data; do not extract over a running installation. A Windows installer is not implied by Linux availability.
4. Application proposals are staged separately; use the proposal’s local Rollback action to restore its hash-bound snapshot.
5. If the service reports an incident, managed proposals stop fail-closed while local projects and validation remain available.

Version 0.1.0 is the initial public version; no older production installer is authorized.