Blueberry is a rolling system — there is no frozen release train. Your box stays current with bpm upgrade, and userspace and the pinned kernel roll forward as new signed artifacts are published. Tagged releases on GitHub mark signed ISO snapshots and milestones.
The rolling repo is the source of truth for day-to-day updates. Git tags are point-in-time snapshots — a known-good ISO and rootfs you can install from — not a separate, frozen distribution.
Every install tracks the same signed mirror. bpm upgrade moves userspace forward; the kernel advances when a new pinned artifact ships.
Milestones are cut as semver tags (e.g. v0.3.0-beta) with a signed ISO, rootfs and SHA256SUMS attached to the GitHub release.
Every artifact carries a SHA-256 in SHA256SUMS; the package index itself is ed25519-signed and verified by bpm.
The current tagged snapshot: the base (pinned Linux 7.0 kernel, glibc, busybox, bash, runit/systemd, Dropbear) plus the bpm package manager and the from-source build system. Install it, then stay current with bpm upgrade.
Blueberry