Six new systems, each booted before it was offered
Ubuntu 26.04 and 22.04, Debian 13, AlmaLinux 10, Rocky Linux 10 and CentOS Stream 10 each booted and took an SSH login on real hardware first.
An operating system image is offered in KLYRN VM only after a machine built from it has booted on real hardware and accepted an SSH login. Six more have passed: Ubuntu 26.04, Ubuntu 22.04, Debian 13, AlmaLinux 10, Rocky Linux 10 and CentOS Stream 10.
What the proof found
AlmaLinux 10, Rocky Linux 10 and CentOS Stream 10 never came up on the default baseline CPU model; in 25 minutes none of them reached SSH. On the host's CPU model all three booted at once. The version 10 family needs a newer instruction-set level than the baseline model presents.
So the create wizard now switches to the host CPU model when one of these is chosen, and says why. The controller also refuses the combination that does not boot, so an API call cannot create a machine that will never start.
What verified means
Every official image carries a checksum read from its publisher, and a node discards a download that does not match it. That proves the bytes are the publisher's. It does not prove the image boots, which is why the boot test exists as a separate step.