// Scutarius: unattended-upgrades follows the merged view, the node's ONE
// source (docs/milestone-pure-apt.md, owner ruling 2026-09-05: the distro
// keeps itself updated from its archive; cluster choreography stays on the
// site side). Both lanes carry Origin/Label Scutarius, so a node on
// adam-testing follows its own lane. unattended-upgrades' stock Debian
// patterns stay in 50unattended-upgrades and match nothing here.
// This file is inert until the unattended-upgrades package is installed
// (d-i asks: pkgsel/update-policy, default "install automatically").
Unattended-Upgrade::Origins-Pattern {
        "origin=Scutarius,label=Scutarius";
};
// A kernel or GPU-stack update needs a reboot; the distro never reboots a
// machine on its own. Draining and coordinated reboots are site business.
Unattended-Upgrade::Automatic-Reboot "false";
// Purge what the upgrade made unnecessary, keep the cache small.
Unattended-Upgrade::Remove-Unused-Dependencies "true";
