WIP: Align native mediator construction dependencies #2

Draft

erikinkinen wants to merge 15 commits from feature/posix-compat into main

pull from: feature/posix-compat

merge into: erix:main

erix:main

erix:feature/native-cli

erix:feature/phase-4-audit

erix:feature/dynlink

erix:feature/program-loader

erix:feature/e2fs-fat

erix:feature/block-devices

erix:feature/vfs

erix:feature/centralized-process-authority

Conversation 0 Commits 15 Files changed 8 +182 -41

erikinkinen commented 2026-09-15 10:04:45 +02:00

Owner

Copy link

Summary and rationale

Align the existing original dependency graph for root-capability-free mediator construction, preserve helper behavior and authority ceilings, and consolidate repeated roadmap notes.

Tracking and scope

Owning feature issue #1, Procd bootstrap and realm design. Signed original checkpoint: f4239deee4ac9ba96aaa49891d686275782e63d9. The native construction contract is tracked in Kernel issue 1.

Architecture, authority and failure behavior

Procd selects checked native operation 54 only for mediator staging, without a parent VSpace receipt. The native TCB retains backing; the child initially holds only its primary endpoint. Other roles retain ordinary construction and its existing receipt/drop sequence. A refusal never falls back to operation 32. Scratch absence cleanup, exact stage retirement, private endpoint-master custody, grant-only handoff and all ordinary mediator start gates remain in place.

The existing producer authenticates executable and grant receipts, retains the endpoint master and moves only the unique grant through Loaderd and Launchd. Numeric slots, roles, identifiers and generations remain descriptive. The helper revision updates add no routes, authority or dependencies.

Runtime-image adoption, authenticated grant return, guarded bootstrap routes, private execution, receiver readiness, configuration/seal, client I/O, fair retirement and both full guest build generations remain open. Whole-codebase semantic authority and private-item documentation audits remain incomplete.

Validation evidence

Caller-bound realm storage wire checkpoint — 18 September 2026: Signed revision 6799ecf6cacabaa3d6adc3807ac43224e07d08f1 is pushed. Exact 72-byte LCH1 version 3 replaces the obsolete version-2 codec. Explicit realm capacity includes zero to disable reservations. Checked job/stream/realm slot arithmetic preserves ordinary intake. Two new malformed/overflow controls and all four strict 80-test configurations pass. Coordinated Rootd and Integration adoption remains required before image acceptance. Formatting and Markdown checks pass. Original CI 153 and CI 154 passes; all four terminal logs are complete (66,024 bytes), without warnings. Actual admission dispatch, coordinated consumer VMs, runnable mediators and both full builds inside EriX remain separate open acceptance requirements.

Original supervisor wire checkpoint — 18 September 2026: Signed revision de9f676aeb4631fb7fb1a732134cd4e9345366ba is pushed. The coherent immutable dependency graph adopts the supervisor-aware materialization request. Local runtime policy is unchanged. Default/all development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 151 and CI 152 passes; all four terminal logs are complete (65,502 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Owned bootstrap wire checkpoint — 18 September 2026: Signed revision 07d009dd6af40155f001592fb5a3ca5d1eae10d3 is pushed. The coherent immutable dependency graph adopts the identity-only owned bootstrap request. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 149 and CI 150 passes; all four terminal logs are complete (65,482 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Explicit receiver admission checkpoint — 18 September 2026: Signed revision e271f23d0bd367806d749ad1b3011f7ee48dd70c is pushed. The coherent immutable dependency graph adopts explicit owned receiver request budgets. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 147 and CI 148 passes; all four terminal logs are complete (65,476 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Caller-local grant relocation checkpoint — 18 September 2026: Signed revision 7e85d209e3594794a6d555823e6f04b3ec5590a1 is pushed. The coherent immutable dependency graph adopts the caller-local grant relocation ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 145 and CI 146 passes; all four terminal logs are complete (65,506 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Returned-grant shared contract checkpoint — 18 September 2026: Signed revision 5d18cece2f79fc47525ede8082b28327ae08a066 is pushed. The coherent immutable dependency graph adopts the checked returned-grant bootstrap contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 143 and CI 144 passes; all four terminal logs are complete (65,538 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Generation-bound native cleanup checkpoint — 18 September 2026: Signed revision d193a3af986b25ca343df7eb647ca4731aac2d0b is pushed. The coherent immutable dependency graph adopts the checked generation-bound cleanup ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and rustdoc pass. Formatting and Markdown checks pass. Original CI 141 and CI 142 passes; all four terminal logs are complete (65,538 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Native terminal generation checkpoint — 17 September 2026: Signed revision 6c00a68d95e45c0bef7d994901d07754cf33e3f4 is pushed. The coherent immutable dependency graph now selects the generation-bearing operation 55 contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, freestanding builds, rustdoc, formatting and Markdown checks pass. Native producer/consumer migration, matching VM execution and full guest builds remain separate acceptance gates. Original automatic CI is being collected without retries.

Runtime dependency alignment — 15 September 2026

Signed 03fe59dca975b6caca0643304b7f71f9ae989bde aligns the existing dependency pins with the original signed library graph. This checkpoint changes Cargo selections and the roadmap; the repository's Rust implementation files are unchanged. The default/all-feature development/release matrix passes 78 tests in each feature/profile configuration, formatting, strict host/native Clippy, 4 native builds and private rustdoc, without warnings. Canonical documentation checks pass. Push/review CI 137/138 passes with complete classified logs and no warnings. Coherent product catalog adoption and product VM acceptance remain pending.

All 78 tests pass in the strict default/all development/release matrix, including host/native Clippy, native builds, private rustdoc, formatting and Markdown. Matching push/review CI passes with complete warning-free logs.

The previously accepted Kernel 6d2ca19c native fixture establishes the constructor object, root-absence and backing contract. This checkpoint adds producer transport controls; it does not claim a new Procd CPL3 VM, runtime-image adoption or runnable realm. Integration source and native VM inputs are unchanged. The manual is signed at Docs 8b30523f3d7e1c300f39e3418a8748dae10ec04f; all 45 tests, final warning-free rendering and CI 877/878 pass.

The source inventory covers 76 repositories and 2,972 code files below 1,000 lines, with direct missing_docs gates on 160 crate roots. Procd's materialization and test modules are now 863 and 711 lines, with creation and test transport in separately documented fragments. No new performance measurement or guest build is claimed.

Review checklist

• Preserve role-specific native authority and exact cleanup responsibilities.
• Pass applicable unit, native build, documentation and formatting checks.
• Publish signed canonical checkpoints and complete component CI.
• Complete the manual publication and CI.
• Complete runtime-image adoption, typed bootstrap, isolation and retirement.
• Complete whole-codebase audits and both full guest build generations.

Explicit install-grant library checkpoint — 19 September 2026: signed/pushed commit d3783662dc893fe2b0453d2bef0ff79c24aba96b. Original dependency pins now select the shared explicit grant-rights contract without mixed wire/capability revisions. The local API and authority policy are unchanged. Four host test matrices pass 80 tests each, alongside four native builds, strict host/native Clippy, formatting, private rustdoc and policy checks. Validation has no warnings. Original CI 155/156 passes with four complete hashed logs (66,000 bytes), zero warnings.

Coordinated actual consumers and matching native execution remain open under Kernel design 19. This dependency/wire checkpoint does not establish complete lifecycle acceptance or either full EriX build generation. Phase completion retains native external Rust/LLVM/runtime rebuilding as an independent requirement.

Acknowledged terminal consumer dependencies — 21 September 2026: signed commit 8110627a67238183b65873dc9d25b4bf51fdd8a7 aligns original shared revisions for repeatable terminal observation and exact acknowledgement under Kernel design 20. No local API or capability policy changes. Four strict 80-unit host configurations, four native builds, host/native Clippy, private rustdoc, formatting and dependency checks pass without warnings. Original CI 157, 158 passes; four complete logs total 66,030 bytes with verified hashes and zero warning candidates. Actual service consumer and coherent full VM adoption remain open in phase completion.

## Summary and rationale Align the existing original dependency graph for root-capability-free mediator construction, preserve helper behavior and authority ceilings, and consolidate repeated roadmap notes. ## Tracking and scope Owning feature issue #1, [Procd bootstrap](https://git.erikinkinen.fi/erix/procd/issues/1) and [realm design](https://git.erikinkinen.fi/erix/posixd/issues/1). Signed original checkpoint: `f4239deee4ac9ba96aaa49891d686275782e63d9`. The native construction contract is tracked in [Kernel issue 1](https://git.erikinkinen.fi/erix/kernel/issues/1). ## Architecture, authority and failure behavior Procd selects checked native operation 54 only for mediator staging, without a parent VSpace receipt. The native TCB retains backing; the child initially holds only its primary endpoint. Other roles retain ordinary construction and its existing receipt/drop sequence. A refusal never falls back to operation 32. Scratch absence cleanup, exact stage retirement, private endpoint-master custody, grant-only handoff and all ordinary mediator start gates remain in place. The existing producer authenticates executable and grant receipts, retains the endpoint master and moves only the unique grant through Loaderd and Launchd. Numeric slots, roles, identifiers and generations remain descriptive. The helper revision updates add no routes, authority or dependencies. Runtime-image adoption, authenticated grant return, guarded bootstrap routes, private execution, receiver readiness, configuration/seal, client I/O, fair retirement and both full guest build generations remain open. Whole-codebase semantic authority and private-item documentation audits remain incomplete. ## Validation evidence Caller-bound realm storage wire checkpoint — 18 September 2026: Signed revision `6799ecf6cacabaa3d6adc3807ac43224e07d08f1` is pushed. Exact 72-byte LCH1 version 3 replaces the obsolete version-2 codec. Explicit realm capacity includes zero to disable reservations. Checked job/stream/realm slot arithmetic preserves ordinary intake. Two new malformed/overflow controls and all four strict 80-test configurations pass. Coordinated Rootd and Integration adoption remains required before image acceptance. Formatting and Markdown checks pass. Original [CI 153](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/153) and [CI 154](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/154) passes; all four terminal logs are complete (66,024 bytes), without warnings. Actual admission dispatch, coordinated consumer VMs, runnable mediators and both full builds inside EriX remain separate open acceptance requirements. Original supervisor wire checkpoint — 18 September 2026: Signed revision `de9f676aeb4631fb7fb1a732134cd4e9345366ba` is pushed. The coherent immutable dependency graph adopts the supervisor-aware materialization request. Local runtime policy is unchanged. Default/all development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 151](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/151) and [CI 152](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/152) passes; all four terminal logs are complete (65,502 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Owned bootstrap wire checkpoint — 18 September 2026: Signed revision `07d009dd6af40155f001592fb5a3ca5d1eae10d3` is pushed. The coherent immutable dependency graph adopts the identity-only owned bootstrap request. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 149](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/149) and [CI 150](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/150) passes; all four terminal logs are complete (65,482 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Explicit receiver admission checkpoint — 18 September 2026: Signed revision `e271f23d0bd367806d749ad1b3011f7ee48dd70c` is pushed. The coherent immutable dependency graph adopts explicit owned receiver request budgets. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 147](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/147) and [CI 148](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/148) passes; all four terminal logs are complete (65,476 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Caller-local grant relocation checkpoint — 18 September 2026: Signed revision `7e85d209e3594794a6d555823e6f04b3ec5590a1` is pushed. The coherent immutable dependency graph adopts the caller-local grant relocation ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 145](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/145) and [CI 146](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/146) passes; all four terminal logs are complete (65,506 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Returned-grant shared contract checkpoint — 18 September 2026: Signed revision `5d18cece2f79fc47525ede8082b28327ae08a066` is pushed. The coherent immutable dependency graph adopts the checked returned-grant bootstrap contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 143](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/143) and [CI 144](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/144) passes; all four terminal logs are complete (65,538 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Generation-bound native cleanup checkpoint — 18 September 2026: Signed revision `d193a3af986b25ca343df7eb647ca4731aac2d0b` is pushed. The coherent immutable dependency graph adopts the checked generation-bound cleanup ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and rustdoc pass. Formatting and Markdown checks pass. Original [CI 141](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/141) and [CI 142](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/142) passes; all four terminal logs are complete (65,538 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Native terminal generation checkpoint — 17 September 2026: Signed revision `6c00a68d95e45c0bef7d994901d07754cf33e3f4` is pushed. The coherent immutable dependency graph now selects the generation-bearing operation 55 contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, freestanding builds, rustdoc, formatting and Markdown checks pass. Native producer/consumer migration, matching VM execution and full guest builds remain separate acceptance gates. Original automatic CI is being collected without retries. ### Runtime dependency alignment — 15 September 2026 Signed `03fe59dca975b6caca0643304b7f71f9ae989bde` aligns the existing dependency pins with the original signed library graph. This checkpoint changes Cargo selections and the roadmap; the repository's Rust implementation files are unchanged. The default/all-feature development/release matrix passes 78 tests in each feature/profile configuration, formatting, strict host/native Clippy, 4 native builds and private rustdoc, without warnings. Canonical documentation checks pass. Push/review CI 137/138 passes with complete classified logs and no warnings. Coherent product catalog adoption and product VM acceptance remain pending. All 78 tests pass in the strict default/all development/release matrix, including host/native Clippy, native builds, private rustdoc, formatting and Markdown. Matching push/review CI passes with complete warning-free logs. The previously accepted Kernel 6d2ca19c native fixture establishes the constructor object, root-absence and backing contract. This checkpoint adds producer transport controls; it does not claim a new Procd CPL3 VM, runtime-image adoption or runnable realm. Integration source and native VM inputs are unchanged. The manual is signed at Docs `8b30523f3d7e1c300f39e3418a8748dae10ec04f`; all 45 tests, final warning-free rendering and CI 877/878 pass. The source inventory covers 76 repositories and 2,972 code files below 1,000 lines, with direct missing_docs gates on 160 crate roots. Procd's materialization and test modules are now 863 and 711 lines, with creation and test transport in separately documented fragments. No new performance measurement or guest build is claimed. ## Review checklist - [x] Preserve role-specific native authority and exact cleanup responsibilities. - [x] Pass applicable unit, native build, documentation and formatting checks. - [x] Publish signed canonical checkpoints and complete component CI. - [x] Complete the manual publication and CI. - [ ] Complete runtime-image adoption, typed bootstrap, isolation and retirement. - [ ] Complete whole-codebase audits and both full guest build generations. Explicit install-grant library checkpoint — 19 September 2026: signed/pushed commit [d3783662dc893fe2b0453d2bef0ff79c24aba96b](https://git.erikinkinen.fi/erix/lib-bootstrap/commit/d3783662dc893fe2b0453d2bef0ff79c24aba96b). Original dependency pins now select the shared explicit grant-rights contract without mixed wire/capability revisions. The local API and authority policy are unchanged. Four host test matrices pass 80 tests each, alongside four native builds, strict host/native Clippy, formatting, private rustdoc and policy checks. Validation has no warnings. Original CI 155/156 passes with four complete hashed logs (66,000 bytes), zero warnings. Coordinated actual consumers and matching native execution remain open under [Kernel design 19](https://git.erikinkinen.fi/erix/kernel/issues/19). This dependency/wire checkpoint does not establish complete lifecycle acceptance or either full EriX build generation. [Phase completion](https://git.erikinkinen.fi/erix/integration/issues/65) retains native external Rust/LLVM/runtime rebuilding as an independent requirement. Acknowledged terminal consumer dependencies — 21 September 2026: signed commit [8110627a67238183b65873dc9d25b4bf51fdd8a7](https://git.erikinkinen.fi/erix/lib-bootstrap/commit/8110627a67238183b65873dc9d25b4bf51fdd8a7) aligns original shared revisions for repeatable terminal observation and exact acknowledgement under [Kernel design 20](https://git.erikinkinen.fi/erix/kernel/issues/20). No local API or capability policy changes. Four strict 80-unit host configurations, four native builds, host/native Clippy, private rustdoc, formatting and dependency checks pass without warnings. Original CI [157](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/157), [158](https://git.erikinkinen.fi/erix/lib-bootstrap/actions/runs/158) passes; four complete logs total 66,030 bytes with verified hashes and zero warning candidates. Actual service consumer and coherent full VM adoption remain open in [phase completion](https://git.erikinkinen.fi/erix/integration/issues/65).

erikinkinen added 1 commit 2026-09-15 10:04:45 +02:00

build: Align shared protocol dependency identity ... dad8efbc5c

Use the original signed process-bound IPC and capability ABI graph for
coordinated native consumers. Preserve existing helper behavior and authority
ceilings while avoiding incompatible IPC types across producer boundaries.

Default and all-feature development and release tests, strict Clippy,
freestanding builds, private rustdoc, formatting and Markdown checks pass.

erikinkinen added the

enhancement

security

docs

phase-6

refactor

labels 2026-09-15 10:07:25 +02:00

erikinkinen referenced this pull request 2026-09-15 10:21:18 +02:00

[FEATURE] Audit authority, code quality and documentation in lib-bootstrap #1

erikinkinen added 1 commit 2026-09-15 10:46:48 +02:00

build: Align staged mediator protocol dependencies ... 19df35d2b4

Pin the original signed shared IPC and capability contracts used by the
coordinated staged-mediator producers. Preserve helper behavior and authority
ceilings while keeping the complete transitive graph coherent.

Default/all development and release tests, strict host/native Clippy,
freestanding builds, private rustdoc, formatting and Markdown checks pass.

erikinkinen changed title from WIP: Align shared protocol dependencies for native consumers to WIP: Align staged mediator protocol dependencies 2026-09-15 10:56:26 +02:00

erikinkinen added 1 commit 2026-09-15 11:18:34 +02:00

build: Align staged mediator protocol dependencies ... 2abce4be1d

Pin the original signed shared IPC and capability contracts used by the
coordinated staged-mediator producers. Preserve helper behavior and authority
ceilings while keeping the complete transitive graph coherent.

Default/all development and release tests, strict host/native Clippy,
freestanding builds, private rustdoc, formatting and Markdown checks pass.

erikinkinen added 1 commit 2026-09-15 14:05:52 +02:00

build: Align shared dependencies for mediator construction ... f4239deee4

Select the original signed IPC and applicable capability ABI revisions needed
by root-capability-free mediator staging. Preserve helper behavior and authority
ceilings, and consolidate duplicate roadmap notes.

Pass strict default/all development/release host and native tests, Clippy,
builds, rustdoc and formatting against the original dependency objects.

erikinkinen changed title from WIP: Align staged mediator protocol dependencies to WIP: Align native mediator construction dependencies 2026-09-15 14:20:38 +02:00

erikinkinen added 1 commit 2026-09-15 15:41:36 +02:00

build: Align dependencies for coherent runtime adoption ... 03fe59dca9

Select the current original signed foundation commits in the existing Git
dependencies. Keep Rust implementation files unchanged and record the
separate product-image acceptance requirement in the roadmap.

The complete supported feature/profile matrix passes with formatting,
strict Clippy, unit tests, builds and private rustdoc. Product runtime
adoption remains pending the complete dependency graph.

erikinkinen added 1 commit 2026-09-17 22:02:51 +02:00

build: Adopt the generation-bearing terminal event contract ... 6c00a68d95

Select the coherent signed shared IPC dependency graph with operation 55.
Keep native producer and consumer migration explicit; identifiers in event
responses confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-17 23:09:00 +02:00

build: Adopt the generation-bound native cleanup contract ... d193a3af98

Select the coherent signed shared IPC dependency graph with operations 56 and 57.
Keep native producer and consumer migration explicit; descriptive identifiers in cleanup
requests confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen referenced this pull request 2026-09-17 23:45:56 +02:00

[BUG] Original Markdown CI job fails with an unavailable terminal log #3

erikinkinen added 1 commit 2026-09-18 00:38:39 +02:00

build: Adopt the returned-grant bootstrap custody contract ... 5d18cece2f

Select the coherent signed shared IPC dependency graph with Procd operation 0x432.
Keep native producer and consumer migration explicit; descriptive identifiers in cleanup
requests confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 01:55:16 +02:00

build: Adopt the caller-local grant relocation contract ... 7e85d209e3

Select the coherent signed shared IPC dependency graph with native syscall 0x54.
Keep native producer and consumer migration explicit; descriptive local slots in relocation
requests confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 02:34:46 +02:00

build: Adopt explicit owned receiver request budgets ... e271f23d0b

Select the coherent signed shared IPC dependency graph with explicit REGISTER budgets.
Keep native producer and consumer migration explicit; receiver byte and capability
limits confer no authority and precede native request custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 03:17:13 +02:00

build: Adopt owned realm bootstrap request identity ... 07d009dd6a

Select the coherent signed shared IPC dependency graph with the 16-byte bootstrap request.
Keep native producer and consumer migration explicit; request identities confer no authority.
Actual claimed origin and received grant custody remain consumer obligations.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 03:57:06 +02:00

build: Adopt original realm supervisor wire identity ... de9f676aeb

Select the coherent signed shared graph with the exact 64-byte materialization
begin body. Descriptive identity confers no authority; native caller attestation
and retained original child ownership remain service responsibilities.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
consumer VM and runnable realm acceptance remain separately required.

erikinkinen added 1 commit 2026-09-18 05:18:56 +02:00

feat: Budget retained realm admission storage explicitly ... 6799ecf6ca

Replace obsolete LCH1 version 2 with the exact 72-byte version 3 contract.
Require explicit realm record capacity, including zero to disable admission.
Checked slot geometry keeps job routes, streams, realm receipts and ordinary
intake disjoint. Select the coherent signed admission wire dependency graph.

Two new malformed/overflow controls and all four strict host/native matrices
pass tests, Clippy, builds, rustdoc, formatting and Markdown without warnings.
Rootd, Launchd and Integration consumers require coordinated adoption; storage
policy alone does not establish runtime realm or guest-build acceptance.

erikinkinen added 1 commit 2026-09-19 22:31:28 +02:00

build: Align explicit grant authority dependencies ... d3783662dc

Select the original signed shared revisions needed for coherent consumer
adoption of exact install grant authority. Preserve the existing local API
and capability policy while eliminating duplicate shared source revisions.

Strict host and native matrices, private rustdoc, Markdown and dependency
checks pass without warnings. Full native consumer acceptance remains open.

erikinkinen added 1 commit 2026-09-21 18:26:38 +02:00

build: Align acknowledged terminal accounting dependencies ... 8110627a67

Select original signed shared revisions for coherent service-consumer adoption
of retained CPU evidence and exact terminal acknowledgement. Preserve the local
API and capability policy without duplicate shared source revisions.

Four strict host and native configurations, private rustdoc, formatting,
Markdown and dependency checks pass without warnings. Consumer adoption and
full service acceptance remain open under Kernel #20.

erikinkinen referenced this pull request from erix/integration 2026-09-21 19:17:05 +02:00

[FEATURE] Track Phase 6 POSIX compatibility and full EriX self-hosting #65

All checks were successful

Hide checks

CI / markdown (push) Successful in 8s

Details

CI / markdown (pull_request) Successful in 8s

Details

CI / test (pull_request) Successful in 44s

Details

CI / test (push) Successful in 45s

Details

This pull request is marked as a work in progress.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin feature/posix-compat:feature/posix-compat

git switch feature/posix-compat

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff feature/posix-compat

git switch feature/posix-compat

git rebase main

git switch main

git merge --ff-only feature/posix-compat

git switch feature/posix-compat

git rebase main

git switch main

git merge --no-ff feature/posix-compat

git switch main

git merge --squash feature/posix-compat

git switch main

git merge --ff-only feature/posix-compat

git switch main

git merge feature/posix-compat

git push origin main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

  

bug

Something is not working

  

ci

  

docs

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

performance

Measured performance profiling, bottleneck analysis, and regression budgets.

  

phase-6

Phase 6: POSIX compatibility, full EriX self-hosting, and its required audits and validation.

  

question

More information is needed

  

refactor

Code cleanup, removal of obsolete paths, and structural improvements preserving behavior.

  

security

  

wontfix

This won't be fixed

No labels

bug

ci

docs

duplicate

enhancement

help wanted

invalid

performance

phase-6

question

refactor

security

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

erix/lib-bootstrap!2

No description provided.