siderolabs/talos ? reverse-engineered prompt

Build me a modern, minimal Linux OS for running Kubernetes, with a strong focus on security and predictability. It should be immutable, manage everything through an API instead of a shell, and use mutual TLS for all admin access. I want it to feel like a production ready system that boots cleanly, handles Kubernetes nodes reliably, and supports atomic updates without configuration drift.

Please make it easy to deploy and operate, with clear commands or API flows for setup, upgrades, and basic cluster management. If anything important depends on current Kubernetes or Linux behavior, look up the latest docs online before you implement it. Keep the system small, hardened, and practical for real world use, not a general purpose desktop distro. Also include enough documentation so someone can understand how to get started, manage it, and troubleshoot common issues.