[themartiano]

What changed and why

The VM update modal showed the complete migration catalog on every new bundle. Keep the existing layout, but filter rows, groups, and notes to new, revised, or unfinished migrations using per-disk revision receipts.

Existing VMs without history receive one headless inspection using their saved boot kit and disposable disk writes, with no network or host integration bridges. The launcher shows a spinner and “Checking migrations…”; failed checks offer Launch Without Updating. Fresh/reset VMs seed their baseline from factory provenance, and disk creation time prevents reused inodes from inheriting old history.

Also refresh bubblewrap, fastfetch, LuaJIT, and Qt base pins to restore make build. Document the requirement to increment migration revisions when repair behavior or managed files change.

Testing

• make build passed on Apple Silicon macOS; rebuilt factory records all 16 migration revisions.
• make test passed: 456 Swift tests, 424 guest tests, and shell suites. One opt-in QEMU pinch ABI test skipped; an earlier UDP availability test flake passed on rerun.
• make test-swift and git diff --check passed after final filtering changes.
• Verified the real app against a private VM clone: inspection took 9.8 seconds, the modal showed five pending items, and a second review reused the baseline without another boot. Original VM unchanged.
• Verified the packaged helper seeds factory revisions and isolates a replacement disk; no update was applied to the original VM.