WIP: Align signed runtime dependencies #2

Draft

erikinkinen wants to merge 11 commits from feature/posix-compat into main

pull from: feature/posix-compat

merge into: erix:main

erix:main

erix:feature/native-cli

erix:feature/phase-4-audit

erix:feature/dynlink

erix:feature/block-devices

erix:feature/vfs

Conversation 0 Commits 11 Files changed 2 +58 -1

erikinkinen commented 2026-09-15 15:29:12 +02:00

Owner

Copy link

Summary and rationale

Align the existing immutable dependency selections for coordinated runtime adoption. Only Cargo selections and the applicable roadmap change; this repository's Rust implementation files remain unchanged.

Tracking and scope

Tracks #1 and the coordinated source adoption at erix/integration#1. This review remains WIP while the full runtime graph and product-image validation are incomplete.

Architecture, authority and failure behavior

Preserve original signed Git objects and full commit selectors. No new dependency, API declaration, capability grant or runtime fallback is introduced by this update. The complete adopted graph still needs actual product VM validation.

Validation evidence

Caller-bound realm storage wire checkpoint — 18 September 2026: Signed revision 7433d8eba7b071da64519b16df813e8af6638bfd is pushed. The coherent immutable graph adopts caller-bound realm messages and, where used, explicit version-3 deployment storage. Local authority and runtime policy are unchanged. Default/all development and release tests, strict host/native Clippy, freestanding builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 43 and CI 44 passes; all four terminal logs are complete (43,830 bytes), without warnings. Actual admission dispatch, coordinated consumer VMs, runnable mediators and both full builds inside EriX remain separate open acceptance requirements.

Original supervisor wire checkpoint — 18 September 2026: Signed revision 81898aa46d8b1d4e25131607a7515831858066c3 is pushed. The coherent immutable dependency graph adopts the supervisor-aware materialization request. Local runtime policy is unchanged. Default/all development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 41 and CI 42 passes; all four terminal logs are complete (43,852 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Owned bootstrap wire checkpoint — 18 September 2026: Signed revision cd9feadb72fffe6261c9fc61c7036031e4204fb0 is pushed. The coherent immutable dependency graph adopts the identity-only owned bootstrap request. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 39 and CI 40 passes; all four terminal logs are complete (43,832 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Explicit receiver admission checkpoint — 18 September 2026: Signed revision c0894b261041d50aecaa750b81077e42d7001f72 is pushed. The coherent immutable dependency graph adopts explicit owned receiver request budgets. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 37 and CI 38 passes; all four terminal logs are complete (43,822 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Caller-local grant relocation checkpoint — 18 September 2026: Signed revision 6503c3a959656f1755f517810a24ebab41e81fde is pushed. The coherent immutable dependency graph adopts the caller-local grant relocation ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 35 and CI 36 passes; all four terminal logs are complete (43,850 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Returned-grant shared contract checkpoint — 18 September 2026: Signed revision edace7b98081afa46e087391d5ce8f52fce4bf3f is pushed. The coherent immutable dependency graph adopts the checked returned-grant bootstrap contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 33 and CI 34 passes; all four terminal logs are complete (43,874 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Generation-bound native cleanup checkpoint — 18 September 2026: Signed revision 4e3c2504151ec265eb3db6362231fe22ba088092 is pushed. The coherent immutable dependency graph adopts the checked generation-bound cleanup ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and rustdoc pass. Formatting and Markdown checks pass. Original CI 31 and CI 32 passes; all four terminal logs are complete (43,876 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Native terminal generation checkpoint — 17 September 2026: Signed revision 12259cc6a9eafd479248d45d8000bcaa0367d2a7 is pushed. The coherent immutable dependency graph now selects the generation-bearing operation 55 contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, freestanding builds, rustdoc, formatting and Markdown checks pass. Native producer/consumer migration, matching VM execution and full guest builds remain separate acceptance gates. Original automatic CI is being collected without retries.

Signed d81abd049c566b1b9c9aaf732a7868861ff2db45 aligns existing dependency pins with the original foundation commits for coherent runtime adoption. This update changes Cargo selections and the roadmap; Rust implementation files in this repository are unchanged. All default/all-feature development/release configurations pass 22 tests each, strict host/native Clippy, formatting, four native builds and private rustdoc without warnings. Final canonical documentation checks pass. Push/review CI 27/28 passes with complete classified logs and no final warnings. The product catalog remains unchanged; this update does not establish a new runtime VM, authority-lifecycle closure, performance result or guest build.

Review checklist

• Original dependency commits and signed source publication verified.
• Complete supported local matrix and final documentation checks pass.
• Rust implementation files remain unchanged in this update.
• Complete classified push/review CI with no final warnings.
• Complete coherent product catalog and runtime-image validation.

Explicit install-grant library checkpoint — 19 September 2026: signed/pushed commit de5a6567fb8250e3ac9040fb23462e14b3ec3790. Original dependency pins now select the shared explicit grant-rights contract without mixed wire/capability revisions. The local API and authority policy are unchanged. Four host test matrices pass 22 tests each, alongside four native builds, strict host/native Clippy, formatting, private rustdoc and policy checks. Validation has no warnings. Original CI 45/46 passes with four complete hashed logs (43,822 bytes), zero warnings.

Coordinated actual consumers and matching native execution remain open under Kernel design 19. This dependency/wire checkpoint does not establish complete lifecycle acceptance or either full EriX build generation. Phase completion retains native external Rust/LLVM/runtime rebuilding as an independent requirement.

Acknowledged terminal consumer dependencies — 21 September 2026: signed commit 40fcbe0d568c54288b44c0c30034406279533168 aligns original shared revisions for repeatable terminal observation and exact acknowledgement under Kernel design 20. No local API or capability policy changes. Four strict 22-unit host configurations, four native builds, host/native Clippy, private rustdoc, formatting and dependency checks pass without warnings. Original CI 47, 48 passes; four complete logs total 43,852 bytes with verified hashes and zero warning candidates. Actual service consumer and coherent full VM adoption remain open in phase completion.

## Summary and rationale Align the existing immutable dependency selections for coordinated runtime adoption. Only Cargo selections and the applicable roadmap change; this repository's Rust implementation files remain unchanged. ## Tracking and scope Tracks https://git.erikinkinen.fi/erix/lib-block/issues/1 and the coordinated source adoption at https://git.erikinkinen.fi/erix/integration/issues/1. This review remains WIP while the full runtime graph and product-image validation are incomplete. ## Architecture, authority and failure behavior Preserve original signed Git objects and full commit selectors. No new dependency, API declaration, capability grant or runtime fallback is introduced by this update. The complete adopted graph still needs actual product VM validation. ## Validation evidence Caller-bound realm storage wire checkpoint — 18 September 2026: Signed revision `7433d8eba7b071da64519b16df813e8af6638bfd` is pushed. The coherent immutable graph adopts caller-bound realm messages and, where used, explicit version-3 deployment storage. Local authority and runtime policy are unchanged. Default/all development and release tests, strict host/native Clippy, freestanding builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 43](https://git.erikinkinen.fi/erix/lib-block/actions/runs/43) and [CI 44](https://git.erikinkinen.fi/erix/lib-block/actions/runs/44) passes; all four terminal logs are complete (43,830 bytes), without warnings. Actual admission dispatch, coordinated consumer VMs, runnable mediators and both full builds inside EriX remain separate open acceptance requirements. Original supervisor wire checkpoint — 18 September 2026: Signed revision `81898aa46d8b1d4e25131607a7515831858066c3` is pushed. The coherent immutable dependency graph adopts the supervisor-aware materialization request. Local runtime policy is unchanged. Default/all development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 41](https://git.erikinkinen.fi/erix/lib-block/actions/runs/41) and [CI 42](https://git.erikinkinen.fi/erix/lib-block/actions/runs/42) passes; all four terminal logs are complete (43,852 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Owned bootstrap wire checkpoint — 18 September 2026: Signed revision `cd9feadb72fffe6261c9fc61c7036031e4204fb0` is pushed. The coherent immutable dependency graph adopts the identity-only owned bootstrap request. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 39](https://git.erikinkinen.fi/erix/lib-block/actions/runs/39) and [CI 40](https://git.erikinkinen.fi/erix/lib-block/actions/runs/40) passes; all four terminal logs are complete (43,832 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Explicit receiver admission checkpoint — 18 September 2026: Signed revision `c0894b261041d50aecaa750b81077e42d7001f72` is pushed. The coherent immutable dependency graph adopts explicit owned receiver request budgets. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 37](https://git.erikinkinen.fi/erix/lib-block/actions/runs/37) and [CI 38](https://git.erikinkinen.fi/erix/lib-block/actions/runs/38) passes; all four terminal logs are complete (43,822 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Caller-local grant relocation checkpoint — 18 September 2026: Signed revision `6503c3a959656f1755f517810a24ebab41e81fde` is pushed. The coherent immutable dependency graph adopts the caller-local grant relocation ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 35](https://git.erikinkinen.fi/erix/lib-block/actions/runs/35) and [CI 36](https://git.erikinkinen.fi/erix/lib-block/actions/runs/36) passes; all four terminal logs are complete (43,850 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Returned-grant shared contract checkpoint — 18 September 2026: Signed revision `edace7b98081afa46e087391d5ce8f52fce4bf3f` is pushed. The coherent immutable dependency graph adopts the checked returned-grant bootstrap contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 33](https://git.erikinkinen.fi/erix/lib-block/actions/runs/33) and [CI 34](https://git.erikinkinen.fi/erix/lib-block/actions/runs/34) passes; all four terminal logs are complete (43,874 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Generation-bound native cleanup checkpoint — 18 September 2026: Signed revision `4e3c2504151ec265eb3db6362231fe22ba088092` is pushed. The coherent immutable dependency graph adopts the checked generation-bound cleanup ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and rustdoc pass. Formatting and Markdown checks pass. Original [CI 31](https://git.erikinkinen.fi/erix/lib-block/actions/runs/31) and [CI 32](https://git.erikinkinen.fi/erix/lib-block/actions/runs/32) passes; all four terminal logs are complete (43,876 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Native terminal generation checkpoint — 17 September 2026: Signed revision `12259cc6a9eafd479248d45d8000bcaa0367d2a7` is pushed. The coherent immutable dependency graph now selects the generation-bearing operation 55 contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, freestanding builds, rustdoc, formatting and Markdown checks pass. Native producer/consumer migration, matching VM execution and full guest builds remain separate acceptance gates. Original automatic CI is being collected without retries. Signed `d81abd049c566b1b9c9aaf732a7868861ff2db45` aligns existing dependency pins with the original foundation commits for coherent runtime adoption. This update changes Cargo selections and the roadmap; Rust implementation files in this repository are unchanged. All default/all-feature development/release configurations pass 22 tests each, strict host/native Clippy, formatting, four native builds and private rustdoc without warnings. Final canonical documentation checks pass. Push/review CI 27/28 passes with complete classified logs and no final warnings. The product catalog remains unchanged; this update does not establish a new runtime VM, authority-lifecycle closure, performance result or guest build. ## Review checklist - [x] Original dependency commits and signed source publication verified. - [x] Complete supported local matrix and final documentation checks pass. - [x] Rust implementation files remain unchanged in this update. - [x] Complete classified push/review CI with no final warnings. - [ ] Complete coherent product catalog and runtime-image validation. Explicit install-grant library checkpoint — 19 September 2026: signed/pushed commit [de5a6567fb8250e3ac9040fb23462e14b3ec3790](https://git.erikinkinen.fi/erix/lib-block/commit/de5a6567fb8250e3ac9040fb23462e14b3ec3790). Original dependency pins now select the shared explicit grant-rights contract without mixed wire/capability revisions. The local API and authority policy are unchanged. Four host test matrices pass 22 tests each, alongside four native builds, strict host/native Clippy, formatting, private rustdoc and policy checks. Validation has no warnings. Original CI 45/46 passes with four complete hashed logs (43,822 bytes), zero warnings. Coordinated actual consumers and matching native execution remain open under [Kernel design 19](https://git.erikinkinen.fi/erix/kernel/issues/19). This dependency/wire checkpoint does not establish complete lifecycle acceptance or either full EriX build generation. [Phase completion](https://git.erikinkinen.fi/erix/integration/issues/65) retains native external Rust/LLVM/runtime rebuilding as an independent requirement. Acknowledged terminal consumer dependencies — 21 September 2026: signed commit [40fcbe0d568c54288b44c0c30034406279533168](https://git.erikinkinen.fi/erix/lib-block/commit/40fcbe0d568c54288b44c0c30034406279533168) aligns original shared revisions for repeatable terminal observation and exact acknowledgement under [Kernel design 20](https://git.erikinkinen.fi/erix/kernel/issues/20). No local API or capability policy changes. Four strict 22-unit host configurations, four native builds, host/native Clippy, private rustdoc, formatting and dependency checks pass without warnings. Original CI [47](https://git.erikinkinen.fi/erix/lib-block/actions/runs/47), [48](https://git.erikinkinen.fi/erix/lib-block/actions/runs/48) passes; four complete logs total 43,852 bytes with verified hashes and zero warning candidates. Actual service consumer and coherent full VM adoption remain open in [phase completion](https://git.erikinkinen.fi/erix/integration/issues/65).

erikinkinen added 1 commit 2026-09-15 15:29:12 +02:00

build: Align dependencies for coherent runtime adoption ... d81abd049c

Select the current original signed foundation commits in the existing Git
dependencies. Keep Rust implementation files unchanged and record the
separate product-image acceptance requirement in the roadmap.

The complete supported feature/profile matrix passes with formatting,
strict Clippy, unit tests, builds and private rustdoc. Product runtime
adoption remains pending the complete dependency graph.

erikinkinen added the

enhancement

docs

phase-6

labels 2026-09-15 15:29:14 +02:00

erikinkinen referenced this pull request 2026-09-15 15:29:18 +02:00

[FEATURE] Audit authority, code quality and documentation in lib-block #1

erikinkinen added 1 commit 2026-09-17 22:05:39 +02:00

build: Adopt the generation-bearing terminal event contract ... 12259cc6a9

Select the coherent signed shared IPC dependency graph with operation 55.
Keep native producer and consumer migration explicit; identifiers in event
responses confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-17 23:20:47 +02:00

build: Adopt the generation-bound native cleanup contract ... 4e3c250415

Select the coherent signed shared IPC dependency graph with operations 56 and 57.
Keep native producer and consumer migration explicit; descriptive identifiers in cleanup
requests confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 00:41:29 +02:00

build: Adopt the returned-grant bootstrap custody contract ... edace7b980

Select the coherent signed shared IPC dependency graph with Procd operation 0x432.
Keep native producer and consumer migration explicit; descriptive identifiers in cleanup
requests confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 01:58:02 +02:00

build: Adopt the caller-local grant relocation contract ... 6503c3a959

Select the coherent signed shared IPC dependency graph with native syscall 0x54.
Keep native producer and consumer migration explicit; descriptive local slots in relocation
requests confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 02:37:43 +02:00

build: Adopt explicit owned receiver request budgets ... c0894b2610

Select the coherent signed shared IPC dependency graph with explicit REGISTER budgets.
Keep native producer and consumer migration explicit; receiver byte and capability
limits confer no authority and precede native request custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 03:20:03 +02:00

build: Adopt owned realm bootstrap request identity ... cd9feadb72

Select the coherent signed shared IPC dependency graph with the 16-byte bootstrap request.
Keep native producer and consumer migration explicit; request identities confer no authority.
Actual claimed origin and received grant custody remain consumer obligations.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 03:59:54 +02:00

build: Adopt original realm supervisor wire identity ... 81898aa46d

Select the coherent signed shared graph with the exact 64-byte materialization
begin body. Descriptive identity confers no authority; native caller attestation
and retained original child ownership remain service responsibilities.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
consumer VM and runnable realm acceptance remain separately required.

erikinkinen added 1 commit 2026-09-18 05:22:50 +02:00

build: Adopt caller-bound realm admission contracts ... 7433d8eba7

Select the coherent signed shared graph with exact realm admission messages.
Reservation carries no claimed caller identity. Complete generational handles
and selectors confer no authority; native caller validation and original child
ownership remain service responsibilities.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
consumer VM and runnable realm acceptance remain separately required.

erikinkinen added 1 commit 2026-09-19 22:31:34 +02:00

build: Align explicit grant authority dependencies ... de5a6567fb

Select the original signed shared revisions needed for coherent consumer
adoption of exact install grant authority. Preserve the existing local API
and capability policy while eliminating duplicate shared source revisions.

Strict host and native matrices, private rustdoc, Markdown and dependency
checks pass without warnings. Full native consumer acceptance remains open.

erikinkinen added 1 commit 2026-09-21 18:27:12 +02:00

build: Align acknowledged terminal accounting dependencies ... 40fcbe0d56

Select original signed shared revisions for coherent service-consumer adoption
of retained CPU evidence and exact terminal acknowledgement. Preserve the local
API and capability policy without duplicate shared source revisions.

Four strict host and native configurations, private rustdoc, formatting,
Markdown and dependency checks pass without warnings. Consumer adoption and
full service acceptance remain open under Kernel #20.

erikinkinen referenced this pull request from erix/integration 2026-09-21 19:17:05 +02:00

[FEATURE] Track Phase 6 POSIX compatibility and full EriX self-hosting #65

All checks were successful

Hide checks

CI / markdown (push) Successful in 7s

Details

CI / markdown (pull_request) Successful in 8s

Details

CI / test (pull_request) Successful in 37s

Details

CI / test (push) Successful in 37s

Details

This pull request is marked as a work in progress.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin feature/posix-compat:feature/posix-compat

git switch feature/posix-compat

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff feature/posix-compat

git switch feature/posix-compat

git rebase main

git switch main

git merge --ff-only feature/posix-compat

git switch feature/posix-compat

git rebase main

git switch main

git merge --no-ff feature/posix-compat

git switch main

git merge --squash feature/posix-compat

git switch main

git merge --ff-only feature/posix-compat

git switch main

git merge feature/posix-compat

git push origin main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

  

bug

Something is not working

  

ci

  

docs

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

performance

Measured performance profiling, bottleneck analysis, and regression budgets.

  

phase-6

Phase 6: POSIX compatibility, full EriX self-hosting, and its required audits and validation.

  

question

More information is needed

  

refactor

Code cleanup, removal of obsolete paths, and structural improvements preserving behavior.

  

security

  

wontfix

This won't be fixed

No labels

bug

ci

docs

duplicate

enhancement

help wanted

invalid

performance

phase-6

question

refactor

security

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

erix/lib-block!2

No description provided.