WIP: Align native mediator construction dependencies #2

Draft

erikinkinen wants to merge 15 commits from feature/posix-compat into main

pull from: feature/posix-compat

merge into: erix:main

erix:main

erix:feature/native-cli

erix:feature/phase-4-audit

erix:feature/dynlink

erix:feature/centralized-process-authority

Conversation 0 Commits 15 Files changed 2 +59 -2

erikinkinen commented 2026-09-15 10:07:26 +02:00

Owner

Copy link

Summary and rationale

Align the existing original dependency graph for root-capability-free mediator construction, preserve helper behavior and authority ceilings, and consolidate repeated roadmap notes.

Tracking and scope

Owning feature issue #1, Procd bootstrap and realm design. Signed original checkpoint: 23dc5b0ad8040827d6f9e189e69b3d2a824024bc. The native construction contract is tracked in Kernel issue 1.

Architecture, authority and failure behavior

Procd selects checked native operation 54 only for mediator staging, without a parent VSpace receipt. The native TCB retains backing; the child initially holds only its primary endpoint. Other roles retain ordinary construction and its existing receipt/drop sequence. A refusal never falls back to operation 32. Scratch absence cleanup, exact stage retirement, private endpoint-master custody, grant-only handoff and all ordinary mediator start gates remain in place.

The existing producer authenticates executable and grant receipts, retains the endpoint master and moves only the unique grant through Loaderd and Launchd. Numeric slots, roles, identifiers and generations remain descriptive. The helper revision updates add no routes, authority or dependencies.

Runtime-image adoption, authenticated grant return, guarded bootstrap routes, private execution, receiver readiness, configuration/seal, client I/O, fair retirement and both full guest build generations remain open. Whole-codebase semantic authority and private-item documentation audits remain incomplete.

Validation evidence

Caller-bound realm storage wire checkpoint — 18 September 2026: Signed revision 8cc4f986797ce38abfd30736d66ae5b887b8923d is pushed. The coherent immutable graph adopts caller-bound realm messages and, where used, explicit version-3 deployment storage. Local authority and runtime policy are unchanged. Default/all development and release tests, strict host/native Clippy, freestanding builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 56 and CI 57 passes; all four terminal logs are complete (47,690 bytes), without warnings. Actual admission dispatch, coordinated consumer VMs, runnable mediators and both full builds inside EriX remain separate open acceptance requirements.

Original supervisor wire checkpoint — 18 September 2026: Signed revision bb46dad2ae906c40b6df9496b743ed80d5c220a8 is pushed. The coherent immutable dependency graph adopts the supervisor-aware materialization request. Local runtime policy is unchanged. Default/all development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 54 and CI 55 passes; all four terminal logs are complete (47,714 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Owned bootstrap wire checkpoint — 18 September 2026: Signed revision f3ef622f803b7945e15b633c203374c57eb599d6 is pushed. The coherent immutable dependency graph adopts the identity-only owned bootstrap request. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 52 and CI 53 passes; all four terminal logs are complete (47,692 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Explicit receiver admission checkpoint — 18 September 2026: Signed revision 2182459e2d05bdca3f088ff63b736bdffc48b4d8 is pushed. The coherent immutable dependency graph adopts explicit owned receiver request budgets. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 50 and CI 51 passes; all four terminal logs are complete (47,684 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Caller-local grant relocation checkpoint — 18 September 2026: Signed revision 7a7484206fb289f27694b4cf48046a61115e7eb7 is pushed. The coherent immutable dependency graph adopts the caller-local grant relocation ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 48 and CI 49 passes; all four terminal logs are complete (47,718 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Returned-grant shared contract checkpoint — 18 September 2026: Signed revision a78daeaae940c75d5639ef4b0e330e6b05056efc is pushed. The coherent immutable dependency graph adopts the checked returned-grant bootstrap contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 46 and CI 47 passes; all four terminal logs are complete (47,749 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Generation-bound native cleanup checkpoint — 18 September 2026: Signed revision f7fb2bc55d4bf1a288968e20a7e716108648005f is pushed. The coherent immutable dependency graph adopts the checked generation-bound cleanup ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and rustdoc pass. Formatting and Markdown checks pass. Original CI 44 and CI 45 passes; all four terminal logs are complete (47,748 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Native terminal generation checkpoint — 17 September 2026: Signed revision 86b3d4cf83ee50dcb81979f9188b34c889808dae is pushed. The coherent immutable dependency graph now selects the generation-bearing operation 55 contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, freestanding builds, rustdoc, formatting and Markdown checks pass. Native producer/consumer migration, matching VM execution and full guest builds remain separate acceptance gates. Original automatic CI is being collected without retries.

Runtime dependency alignment — 15 September 2026

Signed 7cc6dc5b4bf071990eb2f655571f0106895a644e aligns the existing dependency pins with the original signed library graph. This checkpoint changes Cargo selections and the roadmap; the repository's Rust implementation files are unchanged. The default/all-feature development/release matrix passes 4 tests in each feature/profile configuration, formatting, strict host/native Clippy, 4 native builds and private rustdoc, without warnings. Canonical documentation checks pass. Push/review CI 40/41 passes with complete classified logs and no warnings. Coherent product catalog adoption and product VM acceptance remain pending.

All 4 tests pass in the strict default/all development/release matrix, including host/native Clippy, native builds, private rustdoc, formatting and Markdown. Matching push/review CI passes with complete warning-free logs.

The previously accepted Kernel 6d2ca19c native fixture establishes the constructor object, root-absence and backing contract. This checkpoint adds producer transport controls; it does not claim a new Procd CPL3 VM, runtime-image adoption or runnable realm. Integration source and native VM inputs are unchanged. The manual is signed at Docs 8b30523f3d7e1c300f39e3418a8748dae10ec04f; all 45 tests, final warning-free rendering and CI 877/878 pass.

The source inventory covers 76 repositories and 2,972 code files below 1,000 lines, with direct missing_docs gates on 160 crate roots. Procd's materialization and test modules are now 863 and 711 lines, with creation and test transport in separately documented fragments. No new performance measurement or guest build is claimed.

Review checklist

• Preserve role-specific native authority and exact cleanup responsibilities.
• Pass applicable unit, native build, documentation and formatting checks.
• Publish signed canonical checkpoints and complete component CI.
• Complete the manual publication and CI.
• Complete runtime-image adoption, typed bootstrap, isolation and retirement.
• Complete whole-codebase audits and both full guest build generations.

Explicit install-grant library checkpoint — 19 September 2026: signed/pushed commit 8c2010e293281e2796bd6a7331097067729620dd. Original dependency pins now select the shared explicit grant-rights contract without mixed wire/capability revisions. The local API and authority policy are unchanged. Four host test matrices pass 4 tests each, alongside four native builds, strict host/native Clippy, formatting, private rustdoc and policy checks. Validation has no warnings. Original CI 58/59 passes with four complete hashed logs (47,686 bytes), zero warnings.

Coordinated actual consumers and matching native execution remain open under Kernel design 19. This dependency/wire checkpoint does not establish complete lifecycle acceptance or either full EriX build generation. Phase completion retains native external Rust/LLVM/runtime rebuilding as an independent requirement.

Acknowledged terminal consumer dependencies — 21 September 2026: signed commit 09a9de168bd85fb5a117b055961fe919f23debd4 aligns original shared revisions for repeatable terminal observation and exact acknowledgement under Kernel design 20. No local API or capability policy changes. Four strict 4-unit host configurations, four native builds, host/native Clippy, private rustdoc, formatting and dependency checks pass without warnings. Original CI 60, 61 passes; four complete logs total 47,716 bytes with verified hashes and zero warning candidates. Actual service consumer and coherent full VM adoption remain open in phase completion.

## Summary and rationale Align the existing original dependency graph for root-capability-free mediator construction, preserve helper behavior and authority ceilings, and consolidate repeated roadmap notes. ## Tracking and scope Owning feature issue #1, [Procd bootstrap](https://git.erikinkinen.fi/erix/procd/issues/1) and [realm design](https://git.erikinkinen.fi/erix/posixd/issues/1). Signed original checkpoint: `23dc5b0ad8040827d6f9e189e69b3d2a824024bc`. The native construction contract is tracked in [Kernel issue 1](https://git.erikinkinen.fi/erix/kernel/issues/1). ## Architecture, authority and failure behavior Procd selects checked native operation 54 only for mediator staging, without a parent VSpace receipt. The native TCB retains backing; the child initially holds only its primary endpoint. Other roles retain ordinary construction and its existing receipt/drop sequence. A refusal never falls back to operation 32. Scratch absence cleanup, exact stage retirement, private endpoint-master custody, grant-only handoff and all ordinary mediator start gates remain in place. The existing producer authenticates executable and grant receipts, retains the endpoint master and moves only the unique grant through Loaderd and Launchd. Numeric slots, roles, identifiers and generations remain descriptive. The helper revision updates add no routes, authority or dependencies. Runtime-image adoption, authenticated grant return, guarded bootstrap routes, private execution, receiver readiness, configuration/seal, client I/O, fair retirement and both full guest build generations remain open. Whole-codebase semantic authority and private-item documentation audits remain incomplete. ## Validation evidence Caller-bound realm storage wire checkpoint — 18 September 2026: Signed revision `8cc4f986797ce38abfd30736d66ae5b887b8923d` is pushed. The coherent immutable graph adopts caller-bound realm messages and, where used, explicit version-3 deployment storage. Local authority and runtime policy are unchanged. Default/all development and release tests, strict host/native Clippy, freestanding builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 56](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/56) and [CI 57](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/57) passes; all four terminal logs are complete (47,690 bytes), without warnings. Actual admission dispatch, coordinated consumer VMs, runnable mediators and both full builds inside EriX remain separate open acceptance requirements. Original supervisor wire checkpoint — 18 September 2026: Signed revision `bb46dad2ae906c40b6df9496b743ed80d5c220a8` is pushed. The coherent immutable dependency graph adopts the supervisor-aware materialization request. Local runtime policy is unchanged. Default/all development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 54](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/54) and [CI 55](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/55) passes; all four terminal logs are complete (47,714 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Owned bootstrap wire checkpoint — 18 September 2026: Signed revision `f3ef622f803b7945e15b633c203374c57eb599d6` is pushed. The coherent immutable dependency graph adopts the identity-only owned bootstrap request. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 52](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/52) and [CI 53](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/53) passes; all four terminal logs are complete (47,692 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Explicit receiver admission checkpoint — 18 September 2026: Signed revision `2182459e2d05bdca3f088ff63b736bdffc48b4d8` is pushed. The coherent immutable dependency graph adopts explicit owned receiver request budgets. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 50](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/50) and [CI 51](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/51) passes; all four terminal logs are complete (47,684 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Caller-local grant relocation checkpoint — 18 September 2026: Signed revision `7a7484206fb289f27694b4cf48046a61115e7eb7` is pushed. The coherent immutable dependency graph adopts the caller-local grant relocation ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 48](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/48) and [CI 49](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/49) passes; all four terminal logs are complete (47,718 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Returned-grant shared contract checkpoint — 18 September 2026: Signed revision `a78daeaae940c75d5639ef4b0e330e6b05056efc` is pushed. The coherent immutable dependency graph adopts the checked returned-grant bootstrap contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 46](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/46) and [CI 47](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/47) passes; all four terminal logs are complete (47,749 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Generation-bound native cleanup checkpoint — 18 September 2026: Signed revision `f7fb2bc55d4bf1a288968e20a7e716108648005f` is pushed. The coherent immutable dependency graph adopts the checked generation-bound cleanup ABI. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, native builds and rustdoc pass. Formatting and Markdown checks pass. Original [CI 44](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/44) and [CI 45](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/45) passes; all four terminal logs are complete (47,748 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. Native terminal generation checkpoint — 17 September 2026: Signed revision `86b3d4cf83ee50dcb81979f9188b34c889808dae` is pushed. The coherent immutable dependency graph now selects the generation-bearing operation 55 contract. Local runtime policy is unchanged. Default/all-feature development and release units, strict host/native Clippy, freestanding builds, rustdoc, formatting and Markdown checks pass. Native producer/consumer migration, matching VM execution and full guest builds remain separate acceptance gates. Original automatic CI is being collected without retries. ### Runtime dependency alignment — 15 September 2026 Signed `7cc6dc5b4bf071990eb2f655571f0106895a644e` aligns the existing dependency pins with the original signed library graph. This checkpoint changes Cargo selections and the roadmap; the repository's Rust implementation files are unchanged. The default/all-feature development/release matrix passes 4 tests in each feature/profile configuration, formatting, strict host/native Clippy, 4 native builds and private rustdoc, without warnings. Canonical documentation checks pass. Push/review CI 40/41 passes with complete classified logs and no warnings. Coherent product catalog adoption and product VM acceptance remain pending. All 4 tests pass in the strict default/all development/release matrix, including host/native Clippy, native builds, private rustdoc, formatting and Markdown. Matching push/review CI passes with complete warning-free logs. The previously accepted Kernel 6d2ca19c native fixture establishes the constructor object, root-absence and backing contract. This checkpoint adds producer transport controls; it does not claim a new Procd CPL3 VM, runtime-image adoption or runnable realm. Integration source and native VM inputs are unchanged. The manual is signed at Docs `8b30523f3d7e1c300f39e3418a8748dae10ec04f`; all 45 tests, final warning-free rendering and CI 877/878 pass. The source inventory covers 76 repositories and 2,972 code files below 1,000 lines, with direct missing_docs gates on 160 crate roots. Procd's materialization and test modules are now 863 and 711 lines, with creation and test transport in separately documented fragments. No new performance measurement or guest build is claimed. ## Review checklist - [x] Preserve role-specific native authority and exact cleanup responsibilities. - [x] Pass applicable unit, native build, documentation and formatting checks. - [x] Publish signed canonical checkpoints and complete component CI. - [x] Complete the manual publication and CI. - [ ] Complete runtime-image adoption, typed bootstrap, isolation and retirement. - [ ] Complete whole-codebase audits and both full guest build generations. Explicit install-grant library checkpoint — 19 September 2026: signed/pushed commit [8c2010e293281e2796bd6a7331097067729620dd](https://git.erikinkinen.fi/erix/lib-interrupt/commit/8c2010e293281e2796bd6a7331097067729620dd). Original dependency pins now select the shared explicit grant-rights contract without mixed wire/capability revisions. The local API and authority policy are unchanged. Four host test matrices pass 4 tests each, alongside four native builds, strict host/native Clippy, formatting, private rustdoc and policy checks. Validation has no warnings. Original CI 58/59 passes with four complete hashed logs (47,686 bytes), zero warnings. Coordinated actual consumers and matching native execution remain open under [Kernel design 19](https://git.erikinkinen.fi/erix/kernel/issues/19). This dependency/wire checkpoint does not establish complete lifecycle acceptance or either full EriX build generation. [Phase completion](https://git.erikinkinen.fi/erix/integration/issues/65) retains native external Rust/LLVM/runtime rebuilding as an independent requirement. Acknowledged terminal consumer dependencies — 21 September 2026: signed commit [09a9de168bd85fb5a117b055961fe919f23debd4](https://git.erikinkinen.fi/erix/lib-interrupt/commit/09a9de168bd85fb5a117b055961fe919f23debd4) aligns original shared revisions for repeatable terminal observation and exact acknowledgement under [Kernel design 20](https://git.erikinkinen.fi/erix/kernel/issues/20). No local API or capability policy changes. Four strict 4-unit host configurations, four native builds, host/native Clippy, private rustdoc, formatting and dependency checks pass without warnings. Original CI [60](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/60), [61](https://git.erikinkinen.fi/erix/lib-interrupt/actions/runs/61) passes; four complete logs total 47,716 bytes with verified hashes and zero warning candidates. Actual service consumer and coherent full VM adoption remain open in [phase completion](https://git.erikinkinen.fi/erix/integration/issues/65).

erikinkinen added 1 commit 2026-09-15 10:07:26 +02:00

build: Align shared protocol dependency identity ... e835b3ab20

Use the original signed process-bound IPC and capability ABI graph for
coordinated native consumers. Preserve existing helper behavior and authority
ceilings while avoiding incompatible IPC types across producer boundaries.

Default and all-feature development and release tests, strict Clippy,
freestanding builds, private rustdoc, formatting and Markdown checks pass.

erikinkinen added the

enhancement

security

docs

phase-6

refactor

labels 2026-09-15 10:07:26 +02:00

erikinkinen referenced this pull request 2026-09-15 10:21:18 +02:00

[FEATURE] Audit authority, code quality and documentation in lib-interrupt #1

erikinkinen added 1 commit 2026-09-15 10:47:21 +02:00

build: Align staged mediator protocol dependencies ... c1f1af886c

Pin the original signed shared IPC and capability contracts used by the
coordinated staged-mediator producers. Preserve helper behavior and authority
ceilings while keeping the complete transitive graph coherent.

Default/all development and release tests, strict host/native Clippy,
freestanding builds, private rustdoc, formatting and Markdown checks pass.

erikinkinen changed title from WIP: Align shared protocol dependencies for native consumers to WIP: Align staged mediator protocol dependencies 2026-09-15 10:56:27 +02:00

erikinkinen added 1 commit 2026-09-15 11:19:13 +02:00

build: Align staged mediator protocol dependencies ... 8fa4c7d9a4

Pin the original signed shared IPC and capability contracts used by the
coordinated staged-mediator producers. Preserve helper behavior and authority
ceilings while keeping the complete transitive graph coherent.

Default/all development and release tests, strict host/native Clippy,
freestanding builds, private rustdoc, formatting and Markdown checks pass.

erikinkinen added 1 commit 2026-09-15 14:05:53 +02:00

build: Align shared dependencies for mediator construction ... 23dc5b0ad8

Select the original signed IPC and applicable capability ABI revisions needed
by root-capability-free mediator staging. Preserve helper behavior and authority
ceilings, and consolidate duplicate roadmap notes.

Pass strict default/all development/release host and native tests, Clippy,
builds, rustdoc and formatting against the original dependency objects.

erikinkinen changed title from WIP: Align staged mediator protocol dependencies to WIP: Align native mediator construction dependencies 2026-09-15 14:20:39 +02:00

erikinkinen added 1 commit 2026-09-15 15:41:37 +02:00

build: Align dependencies for coherent runtime adoption ... 7cc6dc5b4b

Select the current original signed foundation commits in the existing Git
dependencies. Keep Rust implementation files unchanged and record the
separate product-image acceptance requirement in the roadmap.

The complete supported feature/profile matrix passes with formatting,
strict Clippy, unit tests, builds and private rustdoc. Product runtime
adoption remains pending the complete dependency graph.

erikinkinen added 1 commit 2026-09-17 22:03:22 +02:00

build: Adopt the generation-bearing terminal event contract ... 86b3d4cf83

Select the coherent signed shared IPC dependency graph with operation 55.
Keep native producer and consumer migration explicit; identifiers in event
responses confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-17 23:08:47 +02:00

build: Adopt the generation-bound native cleanup contract ... f7fb2bc55d

Select the coherent signed shared IPC dependency graph with operations 56 and 57.
Keep native producer and consumer migration explicit; descriptive identifiers in cleanup
requests confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 00:39:12 +02:00

build: Adopt the returned-grant bootstrap custody contract ... a78daeaae9

Select the coherent signed shared IPC dependency graph with Procd operation 0x432.
Keep native producer and consumer migration explicit; descriptive identifiers in cleanup
requests confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 01:55:49 +02:00

build: Adopt the caller-local grant relocation contract ... 7a7484206f

Select the coherent signed shared IPC dependency graph with native syscall 0x54.
Keep native producer and consumer migration explicit; descriptive local slots in relocation
requests confer no authority and do not replace actual endpoint custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 02:35:19 +02:00

build: Adopt explicit owned receiver request budgets ... 2182459e2d

Select the coherent signed shared IPC dependency graph with explicit REGISTER budgets.
Keep native producer and consumer migration explicit; receiver byte and capability
limits confer no authority and precede native request custody.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 03:17:47 +02:00

build: Adopt owned realm bootstrap request identity ... f3ef622f80

Select the coherent signed shared IPC dependency graph with the 16-byte bootstrap request.
Keep native producer and consumer migration explicit; request identities confer no authority.
Actual claimed origin and received grant custody remain consumer obligations.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
VM and runnable realm acceptance remains separately required.

erikinkinen added 1 commit 2026-09-18 03:57:39 +02:00

build: Adopt original realm supervisor wire identity ... bb46dad2ae

Select the coherent signed shared graph with the exact 64-byte materialization
begin body. Descriptive identity confers no authority; native caller attestation
and retained original child ownership remain service responsibilities.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
consumer VM and runnable realm acceptance remain separately required.

erikinkinen added 1 commit 2026-09-18 05:20:35 +02:00

build: Adopt caller-bound realm admission contracts ... 8cc4f98679

Select the coherent signed shared graph with exact realm admission messages.
Reservation carries no claimed caller identity. Complete generational handles
and selectors confer no authority; native caller validation and original child
ownership remain service responsibilities.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
consumer VM and runnable realm acceptance remain separately required.

erikinkinen added 1 commit 2026-09-19 22:31:28 +02:00

build: Align explicit grant authority dependencies ... 8c2010e293

Select the original signed shared revisions needed for coherent consumer
adoption of exact install grant authority. Preserve the existing local API
and capability policy while eliminating duplicate shared source revisions.

Strict host and native matrices, private rustdoc, Markdown and dependency
checks pass without warnings. Full native consumer acceptance remains open.

erikinkinen added 1 commit 2026-09-21 18:27:46 +02:00

build: Align acknowledged terminal accounting dependencies ... 09a9de168b

Select original signed shared revisions for coherent service-consumer adoption
of retained CPU evidence and exact terminal acknowledgement. Preserve the local
API and capability policy without duplicate shared source revisions.

Four strict host and native configurations, private rustdoc, formatting,
Markdown and dependency checks pass without warnings. Consumer adoption and
full service acceptance remain open under Kernel #20.

erikinkinen referenced this pull request from erix/integration 2026-09-21 19:17:05 +02:00

[FEATURE] Track Phase 6 POSIX compatibility and full EriX self-hosting #65

All checks were successful

Hide checks

CI / markdown (pull_request) Successful in 7s

Details

CI / markdown (push) Successful in 8s

Details

CI / test (pull_request) Successful in 35s

Details

CI / test (push) Successful in 38s

Details

This pull request is marked as a work in progress.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin feature/posix-compat:feature/posix-compat

git switch feature/posix-compat

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff feature/posix-compat

git switch feature/posix-compat

git rebase main

git switch main

git merge --ff-only feature/posix-compat

git switch feature/posix-compat

git rebase main

git switch main

git merge --no-ff feature/posix-compat

git switch main

git merge --squash feature/posix-compat

git switch main

git merge --ff-only feature/posix-compat

git switch main

git merge feature/posix-compat

git push origin main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

  

bug

Something is not working

  

ci

  

docs

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

performance

Measured performance profiling, bottleneck analysis, and regression budgets.

  

phase-6

Phase 6: POSIX compatibility, full EriX self-hosting, and its required audits and validation.

  

question

More information is needed

  

refactor

Code cleanup, removal of obsolete paths, and structural improvements preserving behavior.

  

security

  

wontfix

This won't be fixed

No labels

bug

ci

docs

duplicate

enhancement

help wanted

invalid

performance

phase-6

question

refactor

security

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

erix/lib-interrupt!2

No description provided.