chore(prose): scrub AI-speak / hedge tells from MiOS-authored files

Targeted edits, no semantic changes:

* automation/08-system-files-overlay.sh: "robust against" -> "resists"
* automation/11-hardware.sh: "fails gracefully in no-GPU builds"
   -> "no-op in no-GPU builds"
* automation/21-moby-engine.sh: "so we can map users" -> passive voice
* automation/lib/agreements-banner.{sh,ps1}: "as a matter of declared
   policy" -> "as declared policy"
* INDEX.md: "clearly namespaced" -> "namespaced"
* tools/lib/quote-mios.py: "extensions / names we'll happily touch"
   -> "extensions / names this script touches"
* usr/bin/mios-ai: "under the hood" -> "internally"; "thin opinionated
   wrapper" -> "thin wrapper"
* usr/lib/greenboot/check/required.d/15-composefs-verity.sh:
   - "we should definitely log it" -> "log it"
   - "but we can verify that some core files have verity bits"
     -> "this verifies a few core-binary verity bits"
* usr/lib/sysctl.d/90-mios-le9uo.conf: "(BORE scheduler synergy)"
   -> "(BORE-scheduler-friendly)"
* usr/libexec/mios/mios-dashboard.sh: "so we can center as a block"
   -> "to center it as a block"

Vendored upstream files (dracut, NetworkManager, repart.d) and
domain terms (Anaconda kickstart, nvidia-smi utilization.gpu) left
intact.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: Kabuki94

INDEX.md

@@ -16,7 +16,7 @@ All system agents target the local proxy at `http://localhost:8080/v1`,
 served by the `mios-ai.container` Quadlet (LocalAI runtime). The
 endpoints below follow the OpenAI public API spec
 (<https://platform.openai.com/docs/api-reference>) verb-for-verb;
-`x-mios.*` rows are MiOS extensions, clearly namespaced so strict
+`x-mios.*` rows are MiOS extensions, namespaced so strict
 OpenAI clients can ignore them.
 
 | Path | Method | Served by | Spec |

automation/08-system-files-overlay.sh

@@ -74,7 +74,7 @@ fi
 # and ends up in /etc/wsl.conf -- WSL2's parser then reports
 # "Expected ' ' or '\n' in /etc/wsl.conf:N" at the line just past the
 # last LF. Strip CR bytes and any UTF-8 BOM here before installing so
-# the build is robust against the working-tree state on the host.
+# the build resists the working-tree state on the host.
 if [[ -f "${CTX}/etc/wsl.conf" ]]; then
     tmp_wsl=$(mktemp)
     # Drop UTF-8 BOM (0xEF 0xBB 0xBF) on the first line, strip CR bytes

automation/11-hardware.sh

@@ -75,7 +75,7 @@ if [[ $NVIDIA_PRESENT -eq 0 ]]; then
     echo "[11-hardware]       sudo akmods --force --kernels \$(uname -r)"
 fi
 
-# Regenerate CDI spec if nvidia-ctk is available (fails gracefully in no-GPU builds)
+# Regenerate CDI spec if nvidia-ctk is available (no-op in no-GPU builds)
 if command -v nvidia-ctk &>/dev/null; then
     nvidia-ctk cdi generate --output=/etc/cdi/nvidia.yaml 2>/dev/null || true
     echo "[11-hardware] NVIDIA CDI spec generated (build-time; runtime refresh handled by nvidia-cdi-refresh.path)"

automation/21-moby-engine.sh

@@ -16,5 +16,5 @@ install_packages "moby"
 # Enable the Docker socket to ensure it's available on boot
 systemctl enable docker.socket
 
-# Ensure the docker group exists so we can map users to it later via sysusers
+# Ensure the docker group exists so users can be mapped to it later via sysusers
 groupadd -r docker 2>/dev/null || true

automation/lib/agreements-banner.ps1

@@ -146,7 +146,7 @@ To stop, choose No thanks. The script exits without making changes
 (exit code 78, EX_CONFIG). Re-run any time you want to reconsider.
 
 For unattended / CI invocation, set ``$env:MIOS_AGREEMENT_ACK = 'accepted'``
-in the environment to bypass this prompt as a matter of declared policy.
+in the environment to bypass this prompt as declared policy.
 
 ================================================================================
 "@

automation/lib/agreements-banner.sh

@@ -154,7 +154,7 @@ To stop, choose No thanks. The script exits without making changes
 (exit code 78, EX_CONFIG). Re-run any time you want to reconsider.
 
 For unattended / CI invocation, set MIOS_AGREEMENT_ACK=accepted in
-the environment to bypass this prompt as a matter of declared policy.
+the environment to bypass this prompt as declared policy.
 
 ================================================================================
 EOF

tools/lib/quote-mios.py

@@ -37,7 +37,7 @@
 PATTERN = re.compile(rf"(?<!['\w\"/\\]){_LIT}(?![-./\\\w'\"])")
 REPLACE = f"'{_LIT}'"
 
-# File extensions / names we'll happily touch. Anything else is skipped.
+# File extensions / names this script touches. Anything else is skipped.
 ALLOW_EXT = {
     ".md", ".sh", ".ps1", ".py", ".toml", ".conf", ".service",
     ".target", ".container", ".preset", ".txt", ".rules", ".cfg",

usr/bin/mios-ai

@@ -30,7 +30,7 @@
 # unified AI endpoint (mios.toml [ai].endpoint, LocalAI :8080 by
 # default). Picking `mios` as the default tracks whatever mios.toml
 # says without the operator having to know whether their host is
-# running LocalAI or Ollama under the hood.
+# running LocalAI or Ollama internally.
 set -euo pipefail
 
 usage() {
@@ -49,7 +49,7 @@ while (( $# > 0 )); do
         --)                shift; PROMPT_ARGS+=("$@"); break ;;
         -*)                # Anything else (e.g. -f file.py, --no-stream)
                            # passes through to aichat unchanged. This
-                           # keeps mios-ai a thin opinionated wrapper
+                           # keeps mios-ai a thin wrapper
                            # rather than a re-implementation of every
                            # aichat flag.
                            PROMPT_ARGS+=("$1"); shift ;;

usr/lib/greenboot/check/required.d/15-composefs-verity.sh

@@ -16,13 +16,13 @@ if mount | grep "type composefs" >/dev/null; then
 else
     echo "[greenboot] ERROR: composefs requested but not active"
     # Note: we don't exit 1 here yet because it might be the first boot
-    # but we should definitely log it.
+    # but log it.
 fi
 
 # 3. Quick integrity sample (if composefs-info is present)
 if command -v composefs-info >/dev/null; then
     # We can't easily find the .cfs image path at runtime without parsing 
-    # ostree metadata, but we can verify that some core files have verity bits.
+    # ostree metadata, this verifies a few core-binary verity bits.
     if fsverity digest /usr/bin/bash >/dev/null 2>&1; then
         echo "[greenboot] SUCCESS: fsverity is active on /usr/bin/bash"
     else

usr/lib/sysctl.d/90-mios-le9uo.conf

@@ -7,7 +7,7 @@ vm.watermark_scale_factor = 200
 vm.watermark_boost_factor = 15000
 vm.min_free_kbytes = 1048576
 
-# Tuning specifically for interactive workloads (BORE scheduler synergy).
+# Tuning specifically for interactive workloads (BORE-scheduler-friendly).
 # These keys only exist on BORE / le9uo-patched kernels; on vanilla and WSL2
 # kernels they don't and systemd-sysctl logs noise. Prefix with "-" so a
 # missing key is silently ignored. See sysctl.d(5).