ANDDAV OS 1.0 signed update setup

For installed ANDDAV OS 1.0 only. Internet access is required.
This does not change the OS name/version from 1.0.

Extract the complete folder, open a terminal in it, then check first:

  sudo python3 install-anddav-updates.py

If CHECK PASSED is displayed, apply:

  sudo python3 install-anddav-updates.py --apply

The installer authenticates downloads with the scoped ANDDAV signing key,
checks existing ANDDAV files, backs them up under /var/backups/anddav-*,
adopts them into Debian packages and enables https://anddav.net/apt/.
It stops if administrator-modified files conflict. It preserves user avatars,
app folders and welcome preferences, and refuses newer-package downgrades.
If interrupted or unsuccessful, keep the displayed backup path and error.
This is not a full-system rollback tool; use a VM snapshot/system backup first.

Public key fingerprint:
35330D6D71A10932C776BA6216E91A7BDDCB32BD

Validation: original-install migration components passed on UEFI; signed
stable upgrades passed BIOS/UEFI. Combined installer check, modified-file
refusal and already-updated rerun passed on UEFI. The complete combined installer also passed from the restored original BIOS
1.0 baseline, including the final reboot and visual/app checks.

Code: MIT, copyright 2026 Andrew Davies. See LICENSE.
