appReadyTimeout property

Duration appReadyTimeout
final

Maximum time we'll wait for the host's Sankofa.deploy.notifyAppReady() call before assuming the new patch boot-looped and triggering a rollback. Mirrors the same timer in the Rust updater's notify_app_ready_timeout field.

Defaults to 10 seconds — long enough for any reasonable app to finish the cold-start path, short enough that crash-looping users recover quickly.

Implementation

final Duration appReadyTimeout;