DataDemon v0.2.35 - Linux x86-64 native update Preview

This Ubuntu amd64 canary includes the latest agent security changes and adds native ddemon update apply and ddemon update rollback for DataDemon-owned Linux x86-64 DEBs. ARM64 retains the same transaction behavior. RPM and portable installations retain manual installation.

The host selects its own TUF target and every downloaded DEB must match the exact DataDemon package name, selected version and native architecture. The privileged helper refreshes signed metadata and rechecks the confirmed version and digest, downloads the verified predecessor, installs through apt, validates the frozen runtime and existing configuration, preserves service states and retains one verified package for rollback. Failed or interrupted transactions use the protected recovery journal. No URL, package path or key override is accepted across the privilege boundary.

Existing x86-64 v0.2.33 and earlier installations cannot enable the adapter through their old CLI. Verify and install this release's x86-64 DEB manually once with sudo apt install ./datademon-agent-0.2.35-linux-x86_64.deb. This manual bootstrap preserves configuration and state but does not create a retained rollback package. Confirm the new adapter with ddemon update status --json, then inspect future releases with ddemon update --channel canary --json and apply a newer selected version with ddemon update apply --channel canary.

Updates remain explicit and require administrator elevation. Installation briefly restarts enabled agent services, interrupting active connections. There is no APT repository: apt update and a package-name-only upgrade do not download this standalone canary. DataDemon release signatures and TUF protect package authenticity; native DEB repository signing is separate.

The release requires two independent native x86-64 builds with identical package bytes, frozen print/transport checks, native package lifecycle checks, an installed-CLI native-update capability check, protected signing and public asset/TUF probes. Publication advances only the x86-64 canary selection. Stable selections and ARM64 canary remain unchanged. Ubuntu native apply, rollback, reboot, recovery and sustained-use qualification remain required before stable promotion. Physical serial, printer and GPIO qualification is separate.