From 0e9cb25ac30143946a2b66d4703bb19a67cbefbc Mon Sep 17 00:00:00 2001
From: Veronica Pascu <veronica@zdos-sec.it>
Date: Sun, 30 Aug 2026 14:48:38 +0200
Subject: [PATCH] =?UTF-8?q?feat:=20aggiunta=20contratti=20di=20installabil?=
 =?UTF-8?q?it=C3=A0=20(boot,=20installer,=20hardware,=20recovery)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 distro/boot/grub.cfg                  |  7 +++++++
 distro/installer/hardware-policy.yaml | 12 ++++++++++++
 distro/installer/install-policy.yaml  | 11 +++++++++++
 distro/recovery/recovery-policy.yaml  |  6 ++++++
 4 files changed, 36 insertions(+)
 create mode 100644 distro/boot/grub.cfg
 create mode 100644 distro/installer/hardware-policy.yaml
 create mode 100644 distro/installer/install-policy.yaml
 create mode 100644 distro/recovery/recovery-policy.yaml

diff --git a/distro/boot/grub.cfg b/distro/boot/grub.cfg
new file mode 100644
index 0000000..0639412
--- /dev/null
+++ b/distro/boot/grub.cfg
@@ -0,0 +1,7 @@
+set default=0
+set timeout=5
+
+menuentry "ZDOS Linux (M2 Preview)" {
+    linux /boot/vmlinuz console=ttyS0 console=tty1 root=/dev/ram0 rw
+    initrd /boot/initramfs.cpio.gz
+}
diff --git a/distro/installer/hardware-policy.yaml b/distro/installer/hardware-policy.yaml
new file mode 100644
index 0000000..3f05ac7
--- /dev/null
+++ b/distro/installer/hardware-policy.yaml
@@ -0,0 +1,12 @@
+policy: "ZDOS Hardware Matrix"
+certified_architectures:
+  - "x86_64"
+minimum_requirements:
+  ram: "512M"
+  storage: "2G"
+  consoles:
+    - "ttyS0"
+    - "tty1"
+supported_nics:
+  - "virtio-net"
+  - "e1000"
diff --git a/distro/installer/install-policy.yaml b/distro/installer/install-policy.yaml
new file mode 100644
index 0000000..91cad4e
--- /dev/null
+++ b/distro/installer/install-policy.yaml
@@ -0,0 +1,11 @@
+policy: "ZDOS Installation Policy"
+destructive_confirmation_required: true
+default_partitioning:
+  - mount: "/boot"
+    size: "512M"
+    type: "vfat"
+  - mount: "/"
+    size: "remaining"
+    type: "ext4"
+    encryption: "optional"
+rollback_supported: true
diff --git a/distro/recovery/recovery-policy.yaml b/distro/recovery/recovery-policy.yaml
new file mode 100644
index 0000000..10d698b
--- /dev/null
+++ b/distro/recovery/recovery-policy.yaml
@@ -0,0 +1,6 @@
+policy: "ZDOS Recovery Policy"
+access: "explicit_authorization_required"
+support_media: "usb"
+features:
+  - "reset_to_factory"
+  - "export_diagnostic_bundle"