Hardware Discovery & BMC Validation

PXE/iPXE boot into a full hardware inventory with SMART pre-flight checks and BMC certificate validation.

A discovery agent (running inside the PXE-booted initrd image) inventories CPU, memory, disks, NICs, and TPM presence, then opens an outbound gRPC-mTLS control tunnel back to api-manager — it never accepts inbound connections.
Every disk gets a SMART health check before it is trusted for a role.
The BMC/iLO certificate is validated rather than blindly trusted; a mismatch is flagged, not silently accepted.
Findings are auto-tagged onto the node (for example gpu:nvidia, cpu:vendor:intel, tpm:2.0) so Biomes with hardware requirements can only be scheduled where they will actually work.