| TUI dashboard | Two-tier tabs, Assurance (doctor/migrate-plan), fix-plan preview — zyvor.dev/guestkit |
| Web Image Vault | OSS zyvor-ui: inventory tabs, Assurance, Profiles, Files browse |
| File explorer | guestkit explore (+ web Browse files) |
| Interactive shell | REPL mode |
| Security profiles | Security, compliance, migration profiles |
| Migration assurance | Doctor, migrate-plan, fleet, policy, forensic diff |
| QEMU / VirtIO runtime | Assured `guestkit-qemu plan |
| VM lifecycle | Lab guestkit vm; production run/network/TTL → FluxVM |
| Industry use cases | Real-world scenarios, PM/TA view, Zyvor product stack |
| Fix plans | Offline patch workflow |
| Export formats | JSON, YAML, HTML, PDF |
| Python bindings | pip install zyvor-guestkit (v1.2.5). Import stays guestkit. Includes inject_json and live-fix helpers. |
| h2kvm integration | Convert/deploy pipeline with h2kvm |
| Handoff / quarantine | Passport → h2kvmctl job, fleet quarantine, virtctl plugin |
| VM migration | End-to-end migration handoff |
| KubeVirt + Zeus OS | In-cluster boot inspect API (pure Rust, not legacy appliance tooling) |
| Replace virtctl guestfs | virtctl-guestkit guestfs on a PVC — GuestKit, not libguestfs |
| Guest agent | In-guest agent + host guestkit qga / agent-call |
| Guest Control Fabric | Transport ladder, airgap QGA install, Agent Doctor, capability contract |
| Dump virsh | Command map: QGA / inspect / doctor replace virsh; lifecycle stays virtctl/Machina |
| img / firstboot / virtio-win | qemu-img wrapper, domain disk parse, virtio-win plan, first-boot gate |
| Rescue / SBOM CI | Rescue dry-run Action, sbom-diff, forensic-diff SBOM attach |
| Cloud profiles / Rego | AWS/Azure/GCP/OpenStack policy packs + policy rego |
| Cloud-init datasource | Offline Ec2/Azure/GCE/NoCloud pin + seed |
| Cutover bundle | gate + sysprep/SELinux/BitLocker + cloud-profile/rego + virtctl resolve |
| SELinux / sysprep / BitLocker | Offline relabel, Windows generalize prep, recovery-key escrow |
