feat(booter): harden guest vs user isolation and POSIX/P2P parity

Browse Source

- Guest-safe legacy personal-root migration with state file and env gates
- VFS guest deny for sensitive /.bare paths; warm-cache clear on identity switch
- Optional acct/<hash>/ personal layout, guest scrub, vault exclude alignment
- Shell session reset + errexit; fish history reload hook; replication metric
- Audit NDJSON for migration/scrub; structured booter logging paths
- Bump POSIX profile; getconf keys; syscall/socket contract + handbook/docs pass
- Booter tests (Bare vs Node split for identity-session); release-checklist audit hook

...

This commit is contained in:

Raven Scott

2026-04-05 03:16:33 -04:00

parent 6a4790591d

commit 4af98ef97b

45 changed files with 1139 additions and 450 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

kernel/share/man/man.json

+1 -1

File diff suppressed because one or more lines are too long