An account is not a receiver pass.
The receiver programme is deliberately split into eight controls. Public account registration is open while receiver download, claim, credentials, ingest and publication remain independently restricted.
One switch cannot open the whole path.
Green means information can be shown. Closed means an operator must make a separate, reviewed decision.
Information pages describe the restricted release; the signed binary is never exposed to an anonymous visitor.
A visitor can create and verify a Layer400 account. Registration alone enables none of the receiver controls below.
Signed immutable Raspberry Pi release 0.1.0-15 is published behind the verified-account and exact legal-acceptance gate.
Claim issuance is available only to the eligible owner account for its one designated Raspberry Pi 5.
No account can activate a receiver credential until the designated Pi is claimed and its exact device identity is allowlisted.
Production ingest remains closed and can open only for the claimed owner-canary identity after the approved acceptance checks.
Receiver observations are not eligible for public projection until the separately allowlisted canary passes genuine on-air acceptance.
No unattended stable-channel update can run.
Install, claim, then prove the physical path.
The owner must complete clean registration, install the signed bundle on the inventoried Pi 5, claim that exact device and prove genuine on-air reception from the authorised transmitter. Encrypted signing-key backup and restore remain mandatory before any external receiver or broader enrolment.