WIP: Align signed runtime dependencies #2

Draft

erikinkinen wants to merge 4 commits from feature/posix-compat into main

pull from: feature/posix-compat

merge into: erix:main

erix:main

erix:feature/native-cli

erix:feature/phase-4-audit

erix:feature/dynlink

erix:feature/e2fs-fat

Conversation 0 Commits 4 Files changed 2 +24 -4

erikinkinen commented 2026-09-15 16:25:19 +02:00

Owner

Copy link

Summary and rationale

Align the existing immutable dependency selections for coordinated runtime adoption. This review changes Cargo selections and the applicable roadmap; the repository's Rust implementation files are unchanged.

Tracking and scope

Tracks #1 and erix/integration#1. This review remains WIP until the complete runtime graph and product-image validation are accepted.

Architecture, authority and failure behavior

Preserve original signed Git objects and full commit selectors. This update adds no dependency, API declaration, capability grant or runtime fallback. Actual product VM validation remains necessary for the complete adopted graph.

Validation evidence

Original coherent realm source CI acceptance — 18 September 2026: Signed 17472012f674101784d93b2f79266985feee40ea passes CI 39 and CI 38. All four terminal logs are complete (64,776 bytes), with zero final warnings. This closes the original CI observation recorded above. Coherent catalog publication, actual consumer VMs and full guest-build acceptance remain separate open requirements.

Coherent realm image service prerequisites — 18 September 2026: Signed 17472012f674101784d93b2f79266985feee40ea selects the original shared wire/startup dependency graph. Direct Rust implementation bytes are unchanged. All 6 default, all-feature and separate production development/release configurations pass 9 unit tests per configuration, strict host/native Clippy and freestanding linking with fatal linker warnings. Formatting, private-item rustdoc and Markdown pass, with zero warnings. Original push/PR CI is under observation. Matching catalog adoption and real consumer VMs remain requirements; complete realm and full in-guest build acceptance remain open.

Signed e56a4b5ce680a08ccc1e05f2ebe44d4bdfb0c0b2 aligns the existing dependency selections with the original signed runtime graph. This checkpoint changes Cargo selections and the roadmap; this repository's Rust implementation files are unchanged. Formatting, strict Clippy, private rustdoc and canonical documentation checks pass without warnings. Default/all-feature development/release tests pass 9 default / 9 all-feature tests. Independent production configurations also pass strict host/native Clippy and native builds: keyd-runtime: 9 development / 9 release tests. There are 6 supported native builds in total. Push/review CI 36/37 passes with complete classified logs and no final warnings. The product catalog, product VM acceptance and guest build remain pending.

Review checklist

• Original dependency commits and signed source publication verified.
• Supported local configurations and documentation checks pass.
• Complete classified push/review CI with no final warnings.
• Complete coherent product catalog and runtime-image validation.

Coherent dependency checkpoint — 20 September 2026: signed/pushed commit 2ccbaf0db7be9307b41987715585adbf4ff27469 aligns original shared dependency pins with the explicit installer-rights contract. Only the manifest and roadmap change; local implementation, APIs and authority policy are unchanged. Four strict 9-unit configurations, four native builds with the maintained linker layout, host/native Clippy, formatting, private rustdoc and dependency checks pass without warnings. Original CI 40/41 passes with four complete hashed logs (64,766 bytes), zero warning candidates.

Full catalog equality and actual consumer-image validation remain required under Integration regression 68. The broader work remains tracked by phase completion, including native external Rust/LLVM/runtime rebuilding and both complete EriX-in-EriX generations. This dependency checkpoint does not close full lifecycle, frame or self-hosting acceptance.

Acknowledged terminal service dependencies — 21 September 2026: signed b54cd4c764da5d27c91069c245d2f962fca47dff selects the original shared libraries for repeated terminal observation, exact acknowledgement and final CPU measurements under Kernel design 20. All 4 strict 9-test selected development/release feature configurations, warning-denied host/native builds with the maintained linker layout, host/native Clippy, private rustdoc, applicable doctests, formatting and dependency/Markdown checks pass. All authored code remains below 1,000 lines. Original CI 42, 43 passes; complete hashed logs total 64,808 bytes with zero warning candidates. Full service CPU/profiler VM acceptance and guest builds remain open in Phase 6 completion.

## Summary and rationale Align the existing immutable dependency selections for coordinated runtime adoption. This review changes Cargo selections and the applicable roadmap; the repository's Rust implementation files are unchanged. ## Tracking and scope Tracks https://git.erikinkinen.fi/erix/keyd/issues/1 and https://git.erikinkinen.fi/erix/integration/issues/1. This review remains WIP until the complete runtime graph and product-image validation are accepted. ## Architecture, authority and failure behavior Preserve original signed Git objects and full commit selectors. This update adds no dependency, API declaration, capability grant or runtime fallback. Actual product VM validation remains necessary for the complete adopted graph. ## Validation evidence Original coherent realm source CI acceptance — 18 September 2026: Signed `17472012f674101784d93b2f79266985feee40ea` passes [CI 39](https://git.erikinkinen.fi/erix/keyd/actions/runs/39) and [CI 38](https://git.erikinkinen.fi/erix/keyd/actions/runs/38). All four terminal logs are complete (64,776 bytes), with zero final warnings. This closes the original CI observation recorded above. Coherent catalog publication, actual consumer VMs and full guest-build acceptance remain separate open requirements. Coherent realm image service prerequisites — 18 September 2026: Signed `17472012f674101784d93b2f79266985feee40ea` selects the original shared wire/startup dependency graph. Direct Rust implementation bytes are unchanged. All 6 default, all-feature and separate production development/release configurations pass 9 unit tests per configuration, strict host/native Clippy and freestanding linking with fatal linker warnings. Formatting, private-item rustdoc and Markdown pass, with zero warnings. Original push/PR CI is under observation. Matching catalog adoption and real consumer VMs remain requirements; complete realm and full in-guest build acceptance remain open. Signed `e56a4b5ce680a08ccc1e05f2ebe44d4bdfb0c0b2` aligns the existing dependency selections with the original signed runtime graph. This checkpoint changes Cargo selections and the roadmap; this repository's Rust implementation files are unchanged. Formatting, strict Clippy, private rustdoc and canonical documentation checks pass without warnings. Default/all-feature development/release tests pass 9 default / 9 all-feature tests. Independent production configurations also pass strict host/native Clippy and native builds: `keyd-runtime`: 9 development / 9 release tests. There are 6 supported native builds in total. Push/review CI 36/37 passes with complete classified logs and no final warnings. The product catalog, product VM acceptance and guest build remain pending. ## Review checklist - [x] Original dependency commits and signed source publication verified. - [x] Supported local configurations and documentation checks pass. - [x] Complete classified push/review CI with no final warnings. - [ ] Complete coherent product catalog and runtime-image validation. Coherent dependency checkpoint — 20 September 2026: signed/pushed commit [2ccbaf0db7be9307b41987715585adbf4ff27469](https://git.erikinkinen.fi/erix/keyd/commit/2ccbaf0db7be9307b41987715585adbf4ff27469) aligns original shared dependency pins with the explicit installer-rights contract. Only the manifest and roadmap change; local implementation, APIs and authority policy are unchanged. Four strict 9-unit configurations, four native builds with the maintained linker layout, host/native Clippy, formatting, private rustdoc and dependency checks pass without warnings. Original CI 40/41 passes with four complete hashed logs (64,766 bytes), zero warning candidates. Full catalog equality and actual consumer-image validation remain required under [Integration regression 68](https://git.erikinkinen.fi/erix/integration/issues/68). The broader work remains tracked by [phase completion](https://git.erikinkinen.fi/erix/integration/issues/65), including native external Rust/LLVM/runtime rebuilding and both complete EriX-in-EriX generations. This dependency checkpoint does not close full lifecycle, frame or self-hosting acceptance. Acknowledged terminal service dependencies — 21 September 2026: signed [b54cd4c764da5d27c91069c245d2f962fca47dff](https://git.erikinkinen.fi/erix/keyd/commit/b54cd4c764da5d27c91069c245d2f962fca47dff) selects the original shared libraries for repeated terminal observation, exact acknowledgement and final CPU measurements under [Kernel design 20](https://git.erikinkinen.fi/erix/kernel/issues/20). All 4 strict 9-test selected development/release feature configurations, warning-denied host/native builds with the maintained linker layout, host/native Clippy, private rustdoc, applicable doctests, formatting and dependency/Markdown checks pass. All authored code remains below 1,000 lines. Original CI [42](https://git.erikinkinen.fi/erix/keyd/actions/runs/42), [43](https://git.erikinkinen.fi/erix/keyd/actions/runs/43) passes; complete hashed logs total 64,808 bytes with zero warning candidates. Full service CPU/profiler VM acceptance and guest builds remain open in [Phase 6 completion](https://git.erikinkinen.fi/erix/integration/issues/65).

erikinkinen added 1 commit 2026-09-15 16:25:19 +02:00

build: Align dependencies for coherent runtime adoption ... e56a4b5ce6

Select the current original signed foundation commits in the existing Git
dependencies. Keep Rust implementation files unchanged and record the
separate product-image acceptance requirement in the roadmap.

The complete supported feature/profile matrix passes with formatting,
strict Clippy, unit tests, builds and private rustdoc. Product runtime
adoption remains pending the complete dependency graph.

erikinkinen added the

enhancement

docs

phase-6

labels 2026-09-15 16:25:20 +02:00

erikinkinen referenced this pull request 2026-09-15 16:25:23 +02:00

[FEATURE] Audit authority, code quality and documentation in keyd #1

erikinkinen added 1 commit 2026-09-18 07:54:53 +02:00

build: Adopt coherent realm contract dependencies ... 17472012f6

Select original signed shared revisions so coordinated runtime images can
resolve one source identity for every dependency. Preserve the component
implementation and update the roadmap to keep consumer VM acceptance explicit.

Validate default and all-feature development/release tests, strict host/native
Clippy, freestanding builds, formatting and private-item rustdoc with warnings
denied. Full image and in-guest build acceptance remain separate requirements.

erikinkinen added 1 commit 2026-09-19 23:40:09 +02:00

build: Align the original installer authority graph ... 2ccbaf0db7

Select the signed shared dependency revisions required by the component
catalog. Preserve local runtime behavior and capability policy while removing
mixed wire and capability sources. Track complete graph validation in
Integration issue 68; full consumer VM acceptance remains open.

Four strict host test matrices and native builds, host/native Clippy,
private rustdoc, formatting and policy checks pass without warnings.

erikinkinen added 1 commit 2026-09-21 19:40:34 +02:00

build: Adopt acknowledged terminal accounting dependencies ... b54cd4c764

Select the original signed shared revisions for repeated terminal observation,
exact acknowledgement and retained final CPU measurements. Preserve the local
component implementation while keeping the complete transitive wire graph
consistent with Kernel design 20. Full service CPU/profiler VM acceptance and
Phase 6 self-hosting remain open in Integration issue 65.

All 4 strict host test matrices, host/native Clippy, warning-denied host/native
builds, private rustdoc, formatting and dependency/Markdown policies pass.

All checks were successful

Hide checks

CI / markdown (push) Successful in 6s

Details

CI / markdown (pull_request) Successful in 6s

Details

CI / test (push) Successful in 46s

Details

CI / test (pull_request) Successful in 46s

Details

This pull request is marked as a work in progress.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin feature/posix-compat:feature/posix-compat

git switch feature/posix-compat

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff feature/posix-compat

git switch feature/posix-compat

git rebase main

git switch main

git merge --ff-only feature/posix-compat

git switch feature/posix-compat

git rebase main

git switch main

git merge --no-ff feature/posix-compat

git switch main

git merge --squash feature/posix-compat

git switch main

git merge --ff-only feature/posix-compat

git switch main

git merge feature/posix-compat

git push origin main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

  

bug

Something is not working

  

ci

  

docs

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

performance

Measured performance profiling, bottleneck analysis, and regression budgets.

  

phase-6

Phase 6: POSIX compatibility, full EriX self-hosting, and its required audits and validation.

  

question

More information is needed

  

refactor

Code cleanup, removal of obsolete paths, and structural improvements preserving behavior.

  

security

  

wontfix

This won't be fixed

No labels

bug

ci

docs

duplicate

enhancement

help wanted

invalid

performance

phase-6

question

refactor

security

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

erix/keyd!2

No description provided.