[Unit]
Description=Poll for approved KB proposals and apply them (kb-apply worker)

[Timer]
# Applies are rare and human-gated, so a slow poll is plenty. Matches the
# teleo-timer pattern (oneshot service + timer) rather than adding LISTEN/NOTIFY.
OnBootSec=3min
OnUnitActiveSec=5min
AccuracySec=30s
Persistent=true

[Install]
WantedBy=timers.target