ooo, that auto rollback sounds really cool-- got any idea how that's done? I assume it's handled by checking for eg. a dirty-fs-flag just before the initfs boots the real system, but what if there's breakage in userspace (eg. the login manager) or in the initramfs itself?