# The relay from the sandboxed agent to a root apply of a new platform
# binary (spec §4). The agent (User=carlos, ProtectSystem=strict) can fetch
# and verify the artifact but cannot write /opt or /etc; it touches this
# marker and root does the rest. Same shape as carlos-stage.path.
[Unit]
Description=CARLOS platform self-update on agent request

[Path]
PathChanged=/data/system-update-requested
Unit=carlos-system-update.service

[Install]
WantedBy=multi-user.target