# fleet/ Per-host manifests. One YAML per fleet member opting in to kernel-agent. Each manifest pins: - baseline kernel tree + ref - scope-tagged patch includes (resolved against `../patches/`) - config strategy - package naming + install mode (alongside / replace) - verification bars (which of Bar 1..5 apply) - build host routing - backup target Manifest is the single source of truth. Running state may drift; drift is informational, not blocking. ka-status reports per-host drift.