The text a5028e5e49e2, as Debian 13 (Trixie) shipped it.
Disk Image Dissection Policy
systemd.image-policy(7) on Linux now