Development record

abcd update's confirmation prints the replaced binary as 'replaced: sha256 <digest> — in no published release; it is the binary running this command, so it is abcd by construction'. The explanation after the digest is noise to the person reading it: they need to know what was replaced, not why abcd trusted it. Printed at internal/surface/cli/update.go:238 from the ownership proof's prose (internal/core/update/update.go:110).