WIP: Align staged mediator protocol dependencies #2

Draft
erikinkinen wants to merge 6 commits from feature/posix-compat into main
Owner

Summary and rationale

Align the original signed dependency graph for staged mediator producers while preserving helper behavior and authority ceilings.

Tracking and scope

Owning feature issue #1 and realm design. Signed checkpoint: 5430c214701eaab9b49a9dc84b829d557d842967. The corrected native slot collision is tracked in capability ABI issue 3.

Architecture, authority and failure behavior

The producer authenticates the actual executable and exact install-grant receipt. Procd owns the endpoint master; the mediator remains unstarted. Numeric operations, lifecycle classes, paths and slots confer no authority. The temporary endpoint uses slot 4 after native roots 1–3. Broader failure-path coverage and all typed startup gates remain open.

Actual grant-return provisioning, authenticated receiver readiness, configuration/seal, client I/O, fair retirement, whole-codebase authority/documentation closure and both complete guest build generations remain required. No runnable Posixd realm or guest-build acceptance is claimed.

Validation evidence

Caller-bound realm storage wire checkpoint — 18 September 2026: Signed revision 126e4430579cf86e69f94d2098f7d94986bfe999 is pushed. The coherent immutable graph adopts caller-bound realm messages and, where used, explicit version-3 deployment storage. Local authority and runtime policy are unchanged. Default/all development and release tests, strict host/native Clippy, freestanding builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 33 and CI 34 passes; all four terminal logs are complete (41,130 bytes), without warnings. Actual admission dispatch, coordinated consumer VMs, runnable mediators and both full builds inside EriX remain separate open acceptance requirements.

Original supervisor wire checkpoint — 18 September 2026: Signed revision e78049ccb14010db54b5cafd6bc2c985c360c8e7 is pushed. The coherent immutable dependency graph adopts the supervisor-aware materialization request. Local runtime policy is unchanged. Default/all development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original CI 31 and CI 32 passes; all four terminal logs are complete (41,152 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements.

Coordinated library dependency update — 15 September 2026

Signed 21d2cc80a86a21dd12ad02888c969437717bd6d2 aligns existing dependency pins with the original foundation commits for coherent runtime adoption. This update changes Cargo selections and the roadmap; Rust implementation files in this repository are unchanged. All default/all-feature development/release configurations pass 6 tests each, strict host/native Clippy, formatting, four native builds and private rustdoc without warnings. Final canonical documentation checks pass. Push/review CI 29/30 passes with complete classified logs and no final warnings. The product catalog remains unchanged; this update does not establish a new runtime VM, authority-lifecycle closure, performance result or guest build.

6 tests pass in the full default/all development/release matrix, with strict host/native Clippy, native builds, private rustdoc and formatting. Matching push/review CI passes with complete warning-free logs.

Formatting and applicable warning-denied builds pass. No new guest-performance result is claimed. Current inventory covers 76 repositories and 2958 code files below 1000 lines, with direct missing_docs gates on 158 Rust roots; semantic and private-item documentation closure remain open.

Review checklist

  • Document the concrete staging contract and exact custody.
  • Validate applicable unit, native, documentation and formatting checks.
  • Publish signed canonical source checkpoints with original dependency pins.
  • Complete every outstanding dependent CI and runtime acceptance gate.
  • Finish typed mediator startup, isolation and retirement.
  • Complete whole-codebase audits and both full guest build generations.

Explicit install-grant library checkpoint — 19 September 2026: signed/pushed commit 5225d7677784f257826e6679aef0d9b205238604. Original dependency pins now select the shared explicit grant-rights contract without mixed wire/capability revisions. The local API and authority policy are unchanged. Four host test matrices pass 6 tests each, alongside four native builds, strict host/native Clippy, formatting, private rustdoc and policy checks. Validation has no warnings. Original CI 35/36 passes with four complete hashed logs (41,122 bytes), zero warnings.

Coordinated actual consumers and matching native execution remain open under Kernel design 19. This dependency/wire checkpoint does not establish complete lifecycle acceptance or either full EriX build generation. Phase completion retains native external Rust/LLVM/runtime rebuilding as an independent requirement.

Acknowledged terminal consumer dependencies — 21 September 2026: signed commit 8d4c6299e0d35d745bc03dc51a75f82a570e3c7b aligns original shared revisions for repeatable terminal observation and exact acknowledgement under Kernel design 20. No local API or capability policy changes. Four strict 6-unit host configurations, four native builds, host/native Clippy, private rustdoc, formatting and dependency checks pass without warnings. Original CI 37, 38 passes; four complete logs total 41,152 bytes with verified hashes and zero warning candidates. Actual service consumer and coherent full VM adoption remain open in phase completion.

## Summary and rationale Align the original signed dependency graph for staged mediator producers while preserving helper behavior and authority ceilings. ## Tracking and scope Owning feature issue #1 and [realm design](https://git.erikinkinen.fi/erix/posixd/issues/1). Signed checkpoint: `5430c214701eaab9b49a9dc84b829d557d842967`. The corrected native slot collision is tracked in [capability ABI issue 3](https://git.erikinkinen.fi/erix/lib-capabi/issues/3). ## Architecture, authority and failure behavior The producer authenticates the actual executable and exact install-grant receipt. Procd owns the endpoint master; the mediator remains unstarted. Numeric operations, lifecycle classes, paths and slots confer no authority. The temporary endpoint uses slot 4 after native roots 1–3. Broader failure-path coverage and all typed startup gates remain open. Actual grant-return provisioning, authenticated receiver readiness, configuration/seal, client I/O, fair retirement, whole-codebase authority/documentation closure and both complete guest build generations remain required. No runnable Posixd realm or guest-build acceptance is claimed. ## Validation evidence Caller-bound realm storage wire checkpoint — 18 September 2026: Signed revision `126e4430579cf86e69f94d2098f7d94986bfe999` is pushed. The coherent immutable graph adopts caller-bound realm messages and, where used, explicit version-3 deployment storage. Local authority and runtime policy are unchanged. Default/all development and release tests, strict host/native Clippy, freestanding builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 33](https://git.erikinkinen.fi/erix/lib-vfs/actions/runs/33) and [CI 34](https://git.erikinkinen.fi/erix/lib-vfs/actions/runs/34) passes; all four terminal logs are complete (41,130 bytes), without warnings. Actual admission dispatch, coordinated consumer VMs, runnable mediators and both full builds inside EriX remain separate open acceptance requirements. Original supervisor wire checkpoint — 18 September 2026: Signed revision `e78049ccb14010db54b5cafd6bc2c985c360c8e7` is pushed. The coherent immutable dependency graph adopts the supervisor-aware materialization request. Local runtime policy is unchanged. Default/all development and release units, strict host/native Clippy, native builds and private-item rustdoc pass. Formatting and Markdown checks pass. Original [CI 31](https://git.erikinkinen.fi/erix/lib-vfs/actions/runs/31) and [CI 32](https://git.erikinkinen.fi/erix/lib-vfs/actions/runs/32) passes; all four terminal logs are complete (41,152 bytes), without warnings. Runnable mediator bootstrap, fair retirement and both complete builds inside EriX remain separate open acceptance requirements. ### Coordinated library dependency update — 15 September 2026 Signed `21d2cc80a86a21dd12ad02888c969437717bd6d2` aligns existing dependency pins with the original foundation commits for coherent runtime adoption. This update changes Cargo selections and the roadmap; Rust implementation files in this repository are unchanged. All default/all-feature development/release configurations pass 6 tests each, strict host/native Clippy, formatting, four native builds and private rustdoc without warnings. Final canonical documentation checks pass. Push/review CI 29/30 passes with complete classified logs and no final warnings. The product catalog remains unchanged; this update does not establish a new runtime VM, authority-lifecycle closure, performance result or guest build. 6 tests pass in the full default/all development/release matrix, with strict host/native Clippy, native builds, private rustdoc and formatting. Matching push/review CI passes with complete warning-free logs. Formatting and applicable warning-denied builds pass. No new guest-performance result is claimed. Current inventory covers 76 repositories and 2958 code files below 1000 lines, with direct missing_docs gates on 158 Rust roots; semantic and private-item documentation closure remain open. ## Review checklist - [x] Document the concrete staging contract and exact custody. - [x] Validate applicable unit, native, documentation and formatting checks. - [x] Publish signed canonical source checkpoints with original dependency pins. - [ ] Complete every outstanding dependent CI and runtime acceptance gate. - [ ] Finish typed mediator startup, isolation and retirement. - [ ] Complete whole-codebase audits and both full guest build generations. Explicit install-grant library checkpoint — 19 September 2026: signed/pushed commit [5225d7677784f257826e6679aef0d9b205238604](https://git.erikinkinen.fi/erix/lib-vfs/commit/5225d7677784f257826e6679aef0d9b205238604). Original dependency pins now select the shared explicit grant-rights contract without mixed wire/capability revisions. The local API and authority policy are unchanged. Four host test matrices pass 6 tests each, alongside four native builds, strict host/native Clippy, formatting, private rustdoc and policy checks. Validation has no warnings. Original CI 35/36 passes with four complete hashed logs (41,122 bytes), zero warnings. Coordinated actual consumers and matching native execution remain open under [Kernel design 19](https://git.erikinkinen.fi/erix/kernel/issues/19). This dependency/wire checkpoint does not establish complete lifecycle acceptance or either full EriX build generation. [Phase completion](https://git.erikinkinen.fi/erix/integration/issues/65) retains native external Rust/LLVM/runtime rebuilding as an independent requirement. Acknowledged terminal consumer dependencies — 21 September 2026: signed commit [8d4c6299e0d35d745bc03dc51a75f82a570e3c7b](https://git.erikinkinen.fi/erix/lib-vfs/commit/8d4c6299e0d35d745bc03dc51a75f82a570e3c7b) aligns original shared revisions for repeatable terminal observation and exact acknowledgement under [Kernel design 20](https://git.erikinkinen.fi/erix/kernel/issues/20). No local API or capability policy changes. Four strict 6-unit host configurations, four native builds, host/native Clippy, private rustdoc, formatting and dependency checks pass without warnings. Original CI [37](https://git.erikinkinen.fi/erix/lib-vfs/actions/runs/37), [38](https://git.erikinkinen.fi/erix/lib-vfs/actions/runs/38) passes; four complete logs total 41,152 bytes with verified hashes and zero warning candidates. Actual service consumer and coherent full VM adoption remain open in [phase completion](https://git.erikinkinen.fi/erix/integration/issues/65).
build: Align staged mediator protocol dependencies
All checks were successful
CI / markdown (push) Successful in 7s
CI / test (push) Successful in 33s
CI / markdown (pull_request) Successful in 9s
CI / test (pull_request) Successful in 36s
5430c21470
Pin the original signed shared IPC and capability contracts used by the
coordinated staged-mediator producers. Preserve helper behavior and authority
ceilings while keeping the complete transitive graph coherent.

Default/all development and release tests, strict host/native Clippy,
freestanding builds, private rustdoc, formatting and Markdown checks pass.
build: Align dependencies for coherent runtime adoption
All checks were successful
CI / markdown (push) Successful in 12s
CI / markdown (pull_request) Successful in 10s
CI / test (push) Successful in 54s
CI / test (pull_request) Successful in 59s
21d2cc80a8
Select the current original signed foundation commits in the existing Git
dependencies. Keep Rust implementation files unchanged and record the
separate product-image acceptance requirement in the roadmap.

The complete supported feature/profile matrix passes with formatting,
strict Clippy, unit tests, builds and private rustdoc. Product runtime
adoption remains pending the complete dependency graph.
build: Adopt original realm supervisor wire identity
All checks were successful
CI / markdown (pull_request) Successful in 6s
CI / markdown (push) Successful in 6s
CI / test (push) Successful in 32s
CI / test (pull_request) Successful in 32s
e78049ccb1
Select the coherent signed shared graph with the exact 64-byte materialization
begin body. Descriptive identity confers no authority; native caller attestation
and retained original child ownership remain service responsibilities.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
consumer VM and runnable realm acceptance remain separately required.
build: Adopt caller-bound realm admission contracts
All checks were successful
CI / markdown (push) Successful in 8s
CI / markdown (pull_request) Successful in 8s
CI / test (pull_request) Successful in 23s
CI / test (push) Successful in 24s
126e443057
Select the coherent signed shared graph with exact realm admission messages.
Reservation carries no claimed caller identity. Complete generational handles
and selectors confer no authority; native caller validation and original child
ownership remain service responsibilities.

Default/all-feature development and release tests, strict host/native Clippy,
freestanding builds, rustdoc, formatting and Markdown checks pass. Coordinated
consumer VM and runnable realm acceptance remain separately required.
build: Align explicit grant authority dependencies
All checks were successful
CI / markdown (push) Successful in 4s
CI / markdown (pull_request) Successful in 4s
CI / test (push) Successful in 21s
CI / test (pull_request) Successful in 22s
5225d76777
Select the original signed shared revisions needed for coherent consumer
adoption of exact install grant authority. Preserve the existing local API
and capability policy while eliminating duplicate shared source revisions.

Strict host and native matrices, private rustdoc, Markdown and dependency
checks pass without warnings. Full native consumer acceptance remains open.
build: Align acknowledged terminal accounting dependencies
All checks were successful
CI / markdown (push) Successful in 11s
CI / markdown (pull_request) Successful in 8s
CI / test (push) Successful in 49s
CI / test (pull_request) Successful in 46s
8d4c6299e0
Select original signed shared revisions for coherent service-consumer adoption
of retained CPU evidence and exact terminal acknowledgement. Preserve the local
API and capability policy without duplicate shared source revisions.

Four strict host and native configurations, private rustdoc, formatting,
Markdown and dependency checks pass without warnings. Consumer adoption and
full service acceptance remain open under Kernel #20.
All checks were successful
CI / markdown (push) Successful in 11s
CI / markdown (pull_request) Successful in 8s
CI / test (push) Successful in 49s
CI / test (pull_request) Successful in 46s
This pull request is marked as a work in progress.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin feature/posix-compat:feature/posix-compat
git switch feature/posix-compat

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff feature/posix-compat
git switch feature/posix-compat
git rebase main
git switch main
git merge --ff-only feature/posix-compat
git switch feature/posix-compat
git rebase main
git switch main
git merge --no-ff feature/posix-compat
git switch main
git merge --squash feature/posix-compat
git switch main
git merge --ff-only feature/posix-compat
git switch main
git merge feature/posix-compat
git push origin main
Sign in to join this conversation.
No description provided.