archy-x250-mad2 is a user's device holding real funds. Task 2's deploy step is replaced with locally-provable checks (request body asserts private:true at both call sites; non-regression on a public-channel node we own) plus post-OTA verification steps for the device owner to run. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>