feat(booter): harden guest vs user isolation and POSIX/P2P parity

- Guest-safe legacy personal-root migration with state file and env gates
- VFS guest deny for sensitive /.bare paths; warm-cache clear on identity switch
- Optional acct/<hash>/ personal layout, guest scrub, vault exclude alignment
- Shell session reset + errexit; fish history reload hook; replication metric
- Audit NDJSON for migration/scrub; structured booter logging paths
- Bump POSIX profile; getconf keys; syscall/socket contract + handbook/docs pass
- Booter tests (Bare vs Node split for identity-session); release-checklist audit hook

This commit is contained in:

Raven Scott

2026-04-05 03:16:33 -04:00

parent 6a4790591d

commit 4af98ef97b

45 changed files with 1139 additions and 450 deletions

									
										kernel/lib/bare/shell-completion.json
									
		+1
		-1
	
												View File
												
				@@ -1,6 +1,6 @@

				{

				  "schema": 1,

				  "atMs": 1775372096454,

				  "atMs": 1775373309737,

				  "commands": [

				    "arch",

				    "awk",