Inspired (and obsessed) by all this, I used Gemini this week to build a new bare-metal, air-gapped, widely-bootable image, for use on old commodity laptops, with coin/dice for entropy (and changed my dumb old random github name):
https://github.com/bootlace-dev/subzero-keyosk
Please review, audit,...