Rust parsers for MBR/GPT and filesystem signatures; guest files reached through qemu-nbd or loop mounts.
Evidence snapshot to boot score, blockers, per-target migration plan, policy and fleet analysis.
Fix plans applied with backups and rollback; signed Cutover Passport; gated QEMU launch.
Axum API, Redis job queue and a privileged guestkit-worker behind the web console.