18b7c2f06f
Three distribution tiers: code-only (AGPL), code+knowledge (commercial data package), code+knowledge+hardware (verification appliance). The upgrade challenge: instances diverge in both code and knowledge. A 'git pull' breaks because new code expects fact structures the old store doesn't have. Solved by: - Ontology versioning flags old facts for re-verification - Degradation to fallback mode, not crash - Reversible upgrades via Merkle snapshots - Delta distribution (diffs against current ontology version) - Per-instance verified migration (run new code against old facts in sandbox; ACL2 reports compatibility; operator reviews only failures) Business model: code free, migration scripts subscription, domain knowledge packages subscription, firmware bundled with hardware.