Updates
This commit is contained in:
Raven Scott
@@ -25,7 +25,7 @@ This directory holds the split **file-by-file inventory** that used to live in t
|
||||
- **Bits, env, `/proc`, and `ctx` map** — [Kernel capabilities index](kernel-capabilities-index.md)
|
||||
- **Version alignment** — [Compatibility matrix](compatibility-matrix.md)
|
||||
- **Roadmap status** — [Feature roadmap status](feature-roadmap.md)
|
||||
- **Giant phase kernel program (100 items)** — [developer-guide/giant-phase-kernel-program.md](../../developer-guide/giant-phase-kernel-program.md)
|
||||
- **Kernel program (governed expansion)** — [developer-guide/kernel-program.md](../../developer-guide/kernel-program.md)
|
||||
- **Out of scope and tooling** (former §§15–16) — [Out of scope and tooling](out-of-scope-and-tooling.md)
|
||||
- **curl and wget (delegation, fetch stack, policy)** — [curl and wget](http-curl-and-wget.md)
|
||||
- **Published JSON Schemas** — [Published schemas: boot policy, telemetry, boot trace](../schemas/)
|
||||
|
||||
@@ -14,7 +14,7 @@ Single place to compare **protocol**, **booter `ctx` API**, **feature-bit docume
|
||||
|
||||
## Version artifacts
|
||||
|
||||
**`bareOsCtxApiVersion`** (current stock: **`1.23.0`**) — Defined in [`packages/bare-os-booter/lib/bare-os-ctx-api.js`](../../packages/bare-os-booter/lib/bare-os-ctx-api.js). This is the semver string for the documented **`ctx`** contract; bump it when stable guest-visible behavior changes.
|
||||
**`bareOsCtxApiVersion`** (current stock: **`1.25.0`**) — Defined in [`packages/bare-os-booter/lib/bare-os-ctx-api.js`](../../packages/bare-os-booter/lib/bare-os-ctx-api.js). This is the semver string for the documented **`ctx`** contract; bump it when stable guest-visible behavior changes.
|
||||
|
||||
**`BARE_OS_KERNEL_FEATURE_BITS_DOC`** (current stock: **`15`**) — Exported from [`packages/bare-os-protocol/lib/kernel-feature-bits.js`](../../packages/bare-os-protocol/lib/kernel-feature-bits.js). It versions the feature-bit documentation and related governance; keep it aligned with [`developer-guide/adr/001-kernel-feature-bits-governance.md`](../../developer-guide/adr/001-kernel-feature-bits-governance.md).
|
||||
|
||||
|
||||
@@ -27,11 +27,21 @@ The list below is one **bullet per variable** in the form **name — component
|
||||
- `BARE_OS_BOOT_SAFE_MODE` — Stock kernel — **`1`** / **`true`** skips **`rc.d`**, **`kernel.ext.d`**, **`onboot`** after boot policy merge.
|
||||
- `BARE_OS_BOOT_TRANSACTION_JOURNAL` — Stock kernel — **`1`**, **`true`**, or **`ndjson`** appends phase records to **`/run/bare-os/boot-transaction.ndjson`** when **`ctx.vfs`** supports it.
|
||||
- `BARE_OS_BOOT_CHECKPOINT` — Stock kernel — **`1`** / **`true`** writes **`/run/bare-os/boot-checkpoint.json`** after each completed boot phase.
|
||||
- `BARE_OS_GIANT_PHASE_PROGRAM_JSON` — Booter / **`/proc/bare_os/giant_phase_program.json`** — Optional JSON merged into the giant-phase program snapshot (non-secret).
|
||||
- `BARE_OS_BOOT_DRY_RUN` — Stock kernel — **`1`** / **`true`** parses boot snippets but skips trusted **`execLine`** and **`kernel.ext.d`** scripts.
|
||||
- `BARE_OS_BOOT_POLICY_PATH` — Stock kernel — Optional **`/etc/bare-os/…`** path for the primary **`boot.policy.json`** (default **`/etc/bare-os/boot.policy.json`**).
|
||||
- `BARE_OS_BOOT_ROLLBACK_APPLY` — Stock kernel — **`1`** merges skip phases from **`/run/bare-os/boot-rollback.marker`** when **`ctx.vfs`** can read it.
|
||||
- `BARE_OS_BOOT_BUNDLE_DIGEST_HEX` — Operator — Lowercase hex compared to policy **`requireBootBundleSha256Hex`** when set.
|
||||
- `BARE_OS_REQUIRE_CTX_API_MIN` — Stock kernel — Minimum **`ctx.bareOsCtxApiVersion`** semver; enforced when **`BARE_OS_BOOT_ABI_STRICT`** or strict boot policy applies.
|
||||
- `BARE_OS_BOOT_ABI_STRICT` — Stock kernel — **`1`** exits boot when ABI minimum is not met.
|
||||
- `BARE_OS_LOADER_AUDIT` — Booter — **`1`** appends kernel extension loads to **`/run/bare-os/loader-audit.ndjson`**.
|
||||
- `BARE_OS_DELEGATE_TRACE` — Session hint — Logged in **`/proc/bare_os/kernel_program.json`** **`hooks.delegateTrace`** when **`1`**.
|
||||
- `BARE_OS_DNS_PROFILE` — Operator — Coarse DNS stance (**`system`**, **`offline-cache`**, …) surfaced under **`operatorSketches.dnsProfile`** in **`/proc/bare_os/kernel_program.json`**.
|
||||
- `BARE_OS_KERNEL_PROGRAM_PROC_JSON` — Booter / **`/proc/bare_os/kernel_program.json`** — Optional JSON merged into the kernel program proc snapshot (non-secret).
|
||||
- `BARE_OS_GIANT_PHASE_PROGRAM_JSON` — Legacy alias for **`BARE_OS_KERNEL_PROGRAM_PROC_JSON`** (same merge semantics).
|
||||
- `MANWIDTH` — `/bin/man` — Wrap width for manual text (default `72`; minimum `40`)
|
||||
- `NO_COLOR` — `/bin/man` — If set, disable ANSI bold for section headings on a TTY
|
||||
|
||||
**Host → session passthrough** (booter copies into **`shellEnv`** when the host sets a non-empty value): `BARE_OS_PIPELINE_MAX_STAGES`, `BARE_OS_PIPELINE_MAX_BYTES`, `BARE_OS_PIPELINE_MAX_LINES`, `BARE_OS_SHELL_STREAMING`, `BARE_OS_SHELL_STREAMING_MULT`, `BARE_OS_SHELL_CMDSUBST`, `BARE_OS_SHELL_CMDSUBST_MAX_BYTES`, `BARE_OS_SHELL_PARAM_EXPANSION`, `BARE_OS_SHELL_PARAM_EXPANSION_V2`, `BARE_OS_ENV_DASH_S`, `BARE_OS_VFS_WATCH_PSEUDO`, `BARE_OS_VFS_WATCH_SWARM`, `BARE_OS_SHELL_LOCAL_DECLARE`, `BARE_OS_DIAGNOSTICS_SUBSCRIBE`, `BARE_OS_AUTOPASS_INVITE_URL`, `BARE_OS_BIN_WORKER_OFFLOAD`, `BARE_OS_BIN_WORKER_ALLOW`, `BARE_OS_BOOT_PROFILE`, `BARE_OS_ONBOOT`, `BARE_OS_BOOT_STRICT`, `BARE_OS_RC_D_SKIP`, `BARE_OS_BOOT_MINIMAL`, `BARE_OS_BOOT_SKIP`, `BARE_OS_BOOT_SAFE_MODE`, `BARE_OS_BOOT_TRANSACTION_JOURNAL`, `BARE_OS_BOOT_CHECKPOINT`, `BARE_OS_BOOT_TRACE`, `BARE_OS_GIANT_PHASE_PROGRAM_JSON`, `BARE_OS_KERNEL_SELFTEST`, `BARE_OS_SELFTEST_FORMAT`, `BARE_OS_AUDIT`, `BARE_OS_AUDIT_JSON`, `BARE_OS_AUDIT_REDACT`, `BARE_OS_IMAGE_DIGEST`, `BARE_OS_EXEC_MAX_DEPTH`, `BARE_OS_EXEC_LINE_BUDGET_MS`, `BARE_OS_IPC_MAX_BYTES`, `BARE_OS_IPC_CHANNEL_MAX_BYTES`, `BARE_OS_IPC_RPC_TOKEN`, `BARE_OS_IPC_FANOUT`, `BARE_OS_IPC_JSON_MAX_BYTES`, `BARE_OS_IPC_NAMESPACE`, `BARE_OS_VFS_WATCH`, `BARE_OS_VFS_UNION_PREFIXES`, `BARE_OS_VFS_UNION_WRITE_DENY`, `BARE_OS_VFS_BIN_CACHE`, `BARE_OS_BOOT_ALLOWLIST`, `BARE_OS_BOOT_MANIFEST`, `BARE_OS_BOOT_MANIFEST_SIGN`, `BARE_OS_BOOT_MANIFEST_PUBKEY_HEX`, `BARE_OS_BOOT_POLICY`, `BARE_OS_BOOT_POLICY_STRICT`, `BARE_OS_LAZY_PERSONAL_DRIVE`, `BARE_OS_SYSTEM_REVISION_ID`, `BARE_OS_SYSTEM_REVISION_PENDING`, `BARE_OS_SYSTEM_SLOT`, `BARE_OS_DELEGATE_ALLOW`, `BARE_OS_DELEGATE_MAX_PER_MIN`, `BARE_OS_DELEGATE_MAX_CONCURRENT`, `BARE_OS_DELEGATE_GIT_MAX_PER_MIN`, `BARE_OS_DELEGATE_CURL_MAX_PER_MIN`, `BARE_OS_DELEGATE_WGET_MAX_PER_MIN`, `BARE_OS_DELEGATE_SYSTEMCTL_MAX_PER_MIN`, `BARE_OS_DELEGATE_GIT_MAX_CONCURRENT`, `BARE_OS_DELEGATE_CURL_MAX_CONCURRENT`, `BARE_OS_DELEGATE_WGET_MAX_CONCURRENT`, `BARE_OS_DELEGATE_SYSTEMCTL_MAX_CONCURRENT`, `BARE_OS_DELEGATE_AUDIT_ONLY`, `BARE_OS_DNS_ALLOWLIST`, `BARE_OS_KERNEL_HOT_RELOAD`, `BARE_OS_SANDBOX_SCRIPT`, `BARE_OS_SANDBOX_WORKER`, `BARE_OS_INITD_MAX_PARALLEL`, `BARE_OS_INITD_JOURNAL_MAX_LINES`, `BARE_OS_URANDOM_CRYPTO`, `BARE_OS_TELEMETRY_NDJSON`, `BARE_OS_TELEMETRY_OTEL_JSONL`, `BARE_OS_PROC_POLL_MS`, `BARE_OS_SEED_RPC_HANDSHAKE`, `BARE_OS_SEED_CAP_STRICT`, `BARE_OS_SEED_CAP_FAIL`, `BARE_OS_OFFLINE_LKG_BOOT`, `BARE_OS_LKG_SYSTEM_KEY_HEX`, `BARE_OS_HOST_STORAGE_JSON`, `BARE_OS_BOOT_POLICY_DENY_EXEC_LINE_BUILTINS`, `BARE_OS_BOOT_POLICY_ALLOWED_CTX_METHODS`, `BARE_OS_SUBPROCESS_BRIDGE_JOBS_JSON`, `BARE_OS_IPC_AUDIT`, `BARE_OS_HTTP_ALLOWLIST`, `BARE_OS_HTTP_DENYLIST`, `BARE_OS_TLS_PIN_SHA256`, `BARE_OS_BARE_MODULES`, `BARE_OS_BARE_DRIVE_BUNDLES`, `BARE_OS_PEAR_CHANNEL`, `BARE_OS_PEAR_RELEASE`, `PEAR_CHANNEL`, `BARE_OS_FIND_EXEC_MAX`, `BARE_OS_YES_MAX_LINES`, `BARE_OS_SHUF_MAX_LINES`, `BARE_OS_SPLIT_MAX_FILES`, `BARE_OS_NPROC`, `BARE_OS_BLIND_BOOTSTRAP_URL`, `BARE_OS_BLIND_BOOTSTRAP_JSON`, `BARE_OS_MIRROR_READ_KEY`, `BARE_OS_PEAR_TRUST_JSON`, `BARE_OS_HOST_BUNDLE_EVALUATE`, **`TERM`**, **`COLORTERM`**.
|
||||
**Host → session passthrough** (booter copies into **`shellEnv`** when the host sets a non-empty value): `BARE_OS_PIPELINE_MAX_STAGES`, `BARE_OS_PIPELINE_MAX_BYTES`, `BARE_OS_PIPELINE_MAX_LINES`, `BARE_OS_SHELL_STREAMING`, `BARE_OS_SHELL_STREAMING_MULT`, `BARE_OS_SHELL_CMDSUBST`, `BARE_OS_SHELL_CMDSUBST_MAX_BYTES`, `BARE_OS_SHELL_PARAM_EXPANSION`, `BARE_OS_SHELL_PARAM_EXPANSION_V2`, `BARE_OS_ENV_DASH_S`, `BARE_OS_VFS_WATCH_PSEUDO`, `BARE_OS_VFS_WATCH_SWARM`, `BARE_OS_SHELL_LOCAL_DECLARE`, `BARE_OS_DIAGNOSTICS_SUBSCRIBE`, `BARE_OS_AUTOPASS_INVITE_URL`, `BARE_OS_BIN_WORKER_OFFLOAD`, `BARE_OS_BIN_WORKER_ALLOW`, `BARE_OS_BOOT_PROFILE`, `BARE_OS_ONBOOT`, `BARE_OS_BOOT_STRICT`, `BARE_OS_RC_D_SKIP`, `BARE_OS_BOOT_MINIMAL`, `BARE_OS_BOOT_SKIP`, `BARE_OS_BOOT_SAFE_MODE`, `BARE_OS_BOOT_TRANSACTION_JOURNAL`, `BARE_OS_BOOT_CHECKPOINT`, `BARE_OS_BOOT_DRY_RUN`, `BARE_OS_BOOT_POLICY_PATH`, `BARE_OS_BOOT_ROLLBACK_APPLY`, `BARE_OS_BOOT_BUNDLE_DIGEST_HEX`, `BARE_OS_REQUIRE_CTX_API_MIN`, `BARE_OS_BOOT_ABI_STRICT`, `BARE_OS_LOADER_AUDIT`, `BARE_OS_DELEGATE_TRACE`, `BARE_OS_DNS_PROFILE`, `BARE_OS_BOOT_TRACE`, `BARE_OS_KERNEL_PROGRAM_PROC_JSON`, `BARE_OS_GIANT_PHASE_PROGRAM_JSON`, `BARE_OS_KERNEL_SELFTEST`, `BARE_OS_SELFTEST_FORMAT`, `BARE_OS_AUDIT`, `BARE_OS_AUDIT_JSON`, `BARE_OS_AUDIT_REDACT`, `BARE_OS_IMAGE_DIGEST`, `BARE_OS_EXEC_MAX_DEPTH`, `BARE_OS_EXEC_LINE_BUDGET_MS`, `BARE_OS_IPC_MAX_BYTES`, `BARE_OS_IPC_CHANNEL_MAX_BYTES`, `BARE_OS_IPC_RPC_TOKEN`, `BARE_OS_IPC_FANOUT`, `BARE_OS_IPC_JSON_MAX_BYTES`, `BARE_OS_IPC_NAMESPACE`, `BARE_OS_VFS_WATCH`, `BARE_OS_VFS_UNION_PREFIXES`, `BARE_OS_VFS_UNION_WRITE_DENY`, `BARE_OS_VFS_BIN_CACHE`, `BARE_OS_BOOT_ALLOWLIST`, `BARE_OS_BOOT_MANIFEST`, `BARE_OS_BOOT_MANIFEST_SIGN`, `BARE_OS_BOOT_MANIFEST_PUBKEY_HEX`, `BARE_OS_BOOT_POLICY`, `BARE_OS_BOOT_POLICY_STRICT`, `BARE_OS_LAZY_PERSONAL_DRIVE`, `BARE_OS_SYSTEM_REVISION_ID`, `BARE_OS_SYSTEM_REVISION_PENDING`, `BARE_OS_SYSTEM_SLOT`, `BARE_OS_DELEGATE_ALLOW`, `BARE_OS_DELEGATE_MAX_PER_MIN`, `BARE_OS_DELEGATE_MAX_CONCURRENT`, `BARE_OS_DELEGATE_GIT_MAX_PER_MIN`, `BARE_OS_DELEGATE_CURL_MAX_PER_MIN`, `BARE_OS_DELEGATE_WGET_MAX_PER_MIN`, `BARE_OS_DELEGATE_SYSTEMCTL_MAX_PER_MIN`, `BARE_OS_DELEGATE_GIT_MAX_CONCURRENT`, `BARE_OS_DELEGATE_CURL_MAX_CONCURRENT`, `BARE_OS_DELEGATE_WGET_MAX_CONCURRENT`, `BARE_OS_DELEGATE_SYSTEMCTL_MAX_CONCURRENT`, `BARE_OS_DELEGATE_AUDIT_ONLY`, `BARE_OS_DNS_ALLOWLIST`, `BARE_OS_KERNEL_HOT_RELOAD`, `BARE_OS_SANDBOX_SCRIPT`, `BARE_OS_SANDBOX_WORKER`, `BARE_OS_INITD_MAX_PARALLEL`, `BARE_OS_INITD_JOURNAL_MAX_LINES`, `BARE_OS_URANDOM_CRYPTO`, `BARE_OS_TELEMETRY_NDJSON`, `BARE_OS_TELEMETRY_OTEL_JSONL`, `BARE_OS_PROC_POLL_MS`, `BARE_OS_SEED_RPC_HANDSHAKE`, `BARE_OS_SEED_CAP_STRICT`, `BARE_OS_SEED_CAP_FAIL`, `BARE_OS_OFFLINE_LKG_BOOT`, `BARE_OS_LKG_SYSTEM_KEY_HEX`, `BARE_OS_HOST_STORAGE_JSON`, `BARE_OS_BOOT_POLICY_DENY_EXEC_LINE_BUILTINS`, `BARE_OS_BOOT_POLICY_ALLOWED_CTX_METHODS`, `BARE_OS_SUBPROCESS_BRIDGE_JOBS_JSON`, `BARE_OS_IPC_AUDIT`, `BARE_OS_HTTP_ALLOWLIST`, `BARE_OS_HTTP_DENYLIST`, `BARE_OS_TLS_PIN_SHA256`, `BARE_OS_BARE_MODULES`, `BARE_OS_BARE_DRIVE_BUNDLES`, `BARE_OS_PEAR_CHANNEL`, `BARE_OS_PEAR_RELEASE`, `PEAR_CHANNEL`, `BARE_OS_FIND_EXEC_MAX`, `BARE_OS_YES_MAX_LINES`, `BARE_OS_SHUF_MAX_LINES`, `BARE_OS_SPLIT_MAX_FILES`, `BARE_OS_NPROC`, `BARE_OS_BLIND_BOOTSTRAP_URL`, `BARE_OS_BLIND_BOOTSTRAP_JSON`, `BARE_OS_MIRROR_READ_KEY`, `BARE_OS_PEAR_TRUST_JSON`, `BARE_OS_HOST_BUNDLE_EVALUATE`, **`TERM`**, **`COLORTERM`**.
|
||||
|
||||
- `BARE_OS_VFS_UNION_PREFIXES` — Booter / VFS — Comma-separated logical path prefixes where **`readFile`** may union system + overlay sources.
|
||||
- `BARE_OS_VFS_UNION_WRITE_DENY` — Booter / VFS — When **`1`** / **`true`**, block **`writeFile`** / **`unlink`** on paths under union read prefixes (read-only union overlay).
|
||||
|
||||
@@ -698,6 +698,114 @@ See also [kernel-extensions.md](kernel-extensions.md) and [package-bare-os-proto
|
||||
|
||||
---
|
||||
|
||||
## Giant phase kernel super-feature program (100 items)
|
||||
## Kernel program backlog — tranche A (100 items)
|
||||
|
||||
Single-phase mega-kernel expansion: governance in [developer-guide/giant-phase-kernel-program.md](../../developer-guide/giant-phase-kernel-program.md), stock kernel boot hooks (**`BARE_OS_BOOT_SAFE_MODE`**, **`BARE_OS_BOOT_TRANSACTION_JOURNAL`**, **`BARE_OS_BOOT_CHECKPOINT`**), **`kernel.ext.d`** ordering fields **`requires`** / **`after`** / **`before`**, **`/proc/bare_os/giant_phase_program.json`**, **`/bin/kernel-doctor`**, **`/bin/kernel-explain`**, scripts **`verify-giant-phase-doc.mjs`** + **`giant-phase-benchmark-harness.mjs`**. **`bareOsCtxApiVersion` `1.23.0`**: optional **`subsystems.kernel.giantPhase`** on **`bareOsPublishBootReady`** payloads.
|
||||
Governed kernel expansion: [developer-guide/kernel-program.md](../../developer-guide/kernel-program.md), stock kernel boot hooks (**`BARE_OS_BOOT_SAFE_MODE`**, **`BARE_OS_BOOT_TRANSACTION_JOURNAL`**, **`BARE_OS_BOOT_CHECKPOINT`**), **`kernel.ext.d`** ordering fields **`requires`** / **`after`** / **`before`**, **`/proc/bare_os/kernel_program.json`** (legacy **`giant_phase_program.json`**), **`/bin/kernel-doctor`**, **`/bin/kernel-explain`**, scripts **`verify-kernel-program-doc.mjs`** + **`kernel-program-benchmark-harness.mjs`**. **`bareOsCtxApiVersion` `1.25.0`**: optional **`subsystems.kernel.programProc`** on **`bareOsPublishBootReady`** payloads.
|
||||
|
||||
|
||||
## Kernel program backlog — tranche B (100 items)
|
||||
|
||||
Second tranche of the same governed program. Traceability: [developer-guide/kernel-program.md](../../developer-guide/kernel-program.md), **`/proc/bare_os/kernel_program.json`** schema **2**, `bareOsCtxApiVersion` **1.25.0**.
|
||||
|
||||
| # | Item | Status |
|
||||
| ---: | --- | --- |
|
||||
| 1 | Named boot stages in journal and boot.json | done |
|
||||
| 2 | Tiered boot.policy.json policyFallbackPaths merge | done |
|
||||
| 3 | Boot rollback marker /run + BARE_OS_BOOT_ROLLBACK_APPLY | done |
|
||||
| 4 | Boot bundle digest gate (policy + env hex) | done |
|
||||
| 5 | ABI negotiation BARE_OS_REQUIRE_CTX_API_MIN vs bareOsCtxApiVersion | done |
|
||||
| 6 | Initd admission hints from policy → env caps | done |
|
||||
| 7 | Boot dry-run BARE_OS_BOOT_DRY_RUN skips execLine/extensions | done |
|
||||
| 8 | kernel-boot-diff compares boot-checkpoint NDJSON | done |
|
||||
| 9 | kernel.d ConditionEnvironment guards (comment lines) | done |
|
||||
| 10 | boot.policy.schema extension keys + handbook boot doc | done |
|
||||
| 11 | Import map template for extensions (doc) | done |
|
||||
| 12 | bare_module_resolution.json refresh (existing proc) | done |
|
||||
| 13 | Dual-target manifest row policy bare-only|dual|host-delegate-only | done |
|
||||
| 14 | Lazy preload BARE_OS_BUNDLE_PRELOAD_LAZY_JSON merged hint | done |
|
||||
| 15 | Sandbox profile registry proc sketch env | done |
|
||||
| 16 | Resolution failure remediation codes (doc) | done |
|
||||
| 17 | Loader audit NDJSON cap-gated /run path | done |
|
||||
| 18 | Lockfile transitive allowlist env sketch | done |
|
||||
| 19 | kernel-manifest-validate /bin helper | done |
|
||||
| 20 | node-to-bare-modules dev guide cross-links | done |
|
||||
| 21 | Supervisor restart classes in initd units (always|on-failure|no) | done |
|
||||
| 22 | Session / job-control ids (document limits) | done |
|
||||
| 23 | Signal map /proc bare_signals_profile alignment | done |
|
||||
| 24 | Subprocess resource hints env for delegate | done |
|
||||
| 25 | structured_clone_budget_v2 proc sizes/drops | done |
|
||||
| 26 | /run/bare-os/services.json registry seed | done |
|
||||
| 27 | IPC RPC token BARE_OS_IPC_RPC_TOKEN (existing) | done |
|
||||
| 28 | CPU slice hints proc JSON env | done |
|
||||
| 29 | IPC read watchdog timeout env sketch | done |
|
||||
| 30 | initd docs in users-manual + kernel-extensions | done |
|
||||
| 31 | Cross-drive transactional copy (doc + policy pointer) | done |
|
||||
| 32 | Path ACL denyVfsPrefixes boot policy | done |
|
||||
| 33 | Mount namespace simulation (doc) | done |
|
||||
| 34 | vfs.watch debounce metrics_live coalesce env | done |
|
||||
| 35 | Content-addressed /bin cache proc hit/miss env | done |
|
||||
| 36 | kernel-fsck integrity walk stub | done |
|
||||
| 37 | home snapshot tar stream stub command | done |
|
||||
| 38 | Compression policy bare-zlib class env | done |
|
||||
| 39 | Advisory lock personal-drive subset (doc) | done |
|
||||
| 40 | POSIX appendix + troubleshooting VFS notes | done |
|
||||
| 41 | bare-net/dns/tcp delegate capability + proc sketch | done |
|
||||
| 42 | Egress policy v2 env JSON merge | done |
|
||||
| 43 | Listener registry proc stub | done |
|
||||
| 44 | DNS profile BARE_OS_DNS_PROFILE switch | done |
|
||||
| 45 | bare-tls session cache hint proc | done |
|
||||
| 46 | bare-http1 middleware hook doc | done |
|
||||
| 47 | bare-ws devtools channel sketch | done |
|
||||
| 48 | QoS tags net_qos_class reuse | done |
|
||||
| 49 | Chaos latency BARE_OS_DELEGATE_CHAOS_MS dev-only | done |
|
||||
| 50 | http-curl wget capability doc links | done |
|
||||
| 51 | Key broker bareOsAcquireKeyHandle opaque stub | done |
|
||||
| 52 | Keyring rotation schedule JSON env pointer | done |
|
||||
| 53 | Secret buffer policy safe_sodium_buffer doc | done |
|
||||
| 54 | Challenge-response execLine optional env | done |
|
||||
| 55 | Elevation sudo allowlist /etc path doc | done |
|
||||
| 56 | Config attestation hash proc env | done |
|
||||
| 57 | Audit chain prevHash field env | done |
|
||||
| 58 | Extension signing multi-signer pins policy vNext field | done |
|
||||
| 59 | Entropy health urandom policy proc | done |
|
||||
| 60 | Security ADR cross-links | done |
|
||||
| 61 | Event bus bareOsEmitKernelEvent subscribe | done |
|
||||
| 62 | ReadinessCommand initd subset readinessPath | done |
|
||||
| 63 | kernel-triage crash bundle manifest | done |
|
||||
| 64 | SLO wave11_operator_slo_v2 schema bump note | done |
|
||||
| 65 | Anomaly execLine spike telemetry field env | done |
|
||||
| 66 | Circuit breaker delegate failures env JSON | done |
|
||||
| 67 | Playbooks /etc/bare-os/playbooks.d trusted doc | done |
|
||||
| 68 | OTel resource attributes kernel env JSON | done |
|
||||
| 69 | Retention hints /var/log job env | done |
|
||||
| 70 | Telemetry schemas + ops manual updates | done |
|
||||
| 71 | A/B channel names bareOsSystemRevision extended env | done |
|
||||
| 72 | Signed component manifest triple env sketch | done |
|
||||
| 73 | kernel-preflight caps+policy check stub | done |
|
||||
| 74 | Partial /lib/bare refresh path doc | done |
|
||||
| 75 | Pear lockfile at booter boundary doc | done |
|
||||
| 76 | Rollback reason codes seed RPC adjunct doc | done |
|
||||
| 77 | kernel/migrations/*.js runner doc | done |
|
||||
| 78 | Selftest profile BARE_OS_KERNEL_SELFTEST=upgrade | done |
|
||||
| 79 | Provenance report JSON for support bundle | done |
|
||||
| 80 | compat matrix + release checklist kernel program | done |
|
||||
| 81 | kernel-doctor initd delegate module sections | done |
|
||||
| 82 | kernel-explain boot_policy_fail cap_mismatch codes | done |
|
||||
| 83 | Shell completion metadata from commands.mjs gen | done |
|
||||
| 84 | Profile env bundles /etc examples doc | done |
|
||||
| 85 | man see-also capability words (doc) | done |
|
||||
| 86 | Extension scaffold pear create doc | done |
|
||||
| 87 | Integration harness npm script pattern doc | done |
|
||||
| 88 | BARE_OS_DELEGATE_TRACE unified log format env | done |
|
||||
| 89 | Machine-readable capability map JSON proc | done |
|
||||
| 90 | Developer-guide cookbook pointer | done |
|
||||
| 91 | kernel-program-benchmark-harness boot timings | done |
|
||||
| 92 | VFS microbench script stub | done |
|
||||
| 93 | IPC ping-pong booter test augmentation | done |
|
||||
| 94 | Network mock bench DNS/TCP policy path | done |
|
||||
| 95 | bare-crypto microbench script host stub | done |
|
||||
| 96 | Compat verifier kernel program proc schema vs code | done |
|
||||
| 97 | Fuzz boot policy JSON harness | done |
|
||||
| 98 | Chaos safe-mode rollback integration test doc | done |
|
||||
| 99 | Release gate benchmark regression script | done |
|
||||
| 100 | Roadmap tranche B table + verify-kernel-program-roadmap-table.mjs CI | done |
|
||||
|
||||
@@ -12,6 +12,7 @@ Bare OS exposes **`curl`** and **`wget`** as familiar command names, but they ar
|
||||
- Online **`man curl`** / **`man wget`** — Merged manual DB: [`packages/bare-os-coreutils/man/pages/curl.json`](../../packages/bare-os-coreutils/man/pages/curl.json), [`wget.json`](../../packages/bare-os-coreutils/man/pages/wget.json); narrative in [Handbook ch. 10](../../handbook/10-manpages-and-online-help.md)
|
||||
- Security, allowlists, audit — [Developer guide — Security and trust](../../developer-guide/09-security-and-trust.md)
|
||||
- Environment variables (tables) — [Environment variables and POSIX appendix](environment-and-posix-appendix.md#14-environment-variables-complete-list)
|
||||
- Capability / proc map — [kernel-capabilities-index.md](./kernel-capabilities-index.md); kernel program net sketches — [kernel-extensions.md](./kernel-extensions.md) ( **`BARE_OS_NET_DELEGATE_SKETCH_JSON`** (legacy **`BARE_OS_GP2_NET_DELEGATE_SKETCH_JSON`**), **`BARE_OS_DNS_PROFILE`**, **`BARE_OS_DELEGATE_TRACE`** )
|
||||
|
||||
---
|
||||
|
||||
|
||||
@@ -20,7 +20,7 @@ Seed RPC **`bare_os.capabilities`** includes **`protocolPackageVersion`**, optio
|
||||
|
||||
**Wave 10 Pear/Bare bridge:** **`ctx.bareOsEmitPearDoctorHint`**, **`ctx.bareOsPearInspectProbe`**, **`ctx.bareOsEmitBareBootPhaseHint`**, **`ctx.bareOsBareRpcCapProbe`**, **`ctx.bareOsEmitPearStampPointer`**, **`ctx.bareOsRegisterBareLoggerTap`**, **`ctx.bareOsEmitAutobaseDiscoveryHint`**, **`ctx.bareOsEmitBlindPairingSketch`**, **`ctx.bareOsBareStreamBackpressureHint`**, **`ctx.bareOsPearTerminalCapsProbe`**; host env **`BARE_OS_PROBE_ID_PEAR_INSPECT_LOGGER_TLS`**, **`BARE_OS_BARE_RPC_PROBE_CLASS`**, **`BARE_OS_MTLS_PROXY_MAP_JSON`**, **`BARE_OS_THREAD_POOL_TELEMETRY_JSON`**, **`BARE_OS_HAPPY_EYEBALLS_V4_MODE`**, **`BARE_OS_BARE_BOOT_VERSION`**, **`BARE_OS_BARE_LOGGER_VERSION`**, **`BARE_OS_BARE_TLS_VERSION`**, **`BARE_OS_LIFECYCLE_SCHEMA_VERSION`** (injected); boot policy **v10** adds **`requireKernelCapabilitiesPearInspectLoggerTls`**, **`requireBareBootMin`**, **`denyBareRpcMethodPatterns`**, **`maxPearInspectDepth`**, **`requireBareLoggerMin`**, **`denyAutobaseDiscoveryChannels`**, **`requireBareTlsMin`**, **`extensionSignerPinsV3`**, **`offlineLkgRequirePearStamp`**, **`bootPhasesRequireLifecycleMinSchema`**, …
|
||||
|
||||
**Giant phase program (100-item mega kernel):** governance [developer-guide/giant-phase-kernel-program.md](../../developer-guide/giant-phase-kernel-program.md); **`BARE_OS_BOOT_SAFE_MODE`** (skip **`rc.d`**, **`kernel.ext.d`**, **`onboot`**); **`BARE_OS_BOOT_TRANSACTION_JOURNAL`** → **`/run/bare-os/boot-transaction.ndjson`**; **`BARE_OS_BOOT_CHECKPOINT`** → **`/run/bare-os/boot-checkpoint.json`**; **`kernel.ext.d`** may set **`requires`**, **`after`**, **`before`** for load ordering; **`/proc/bare_os/giant_phase_program.json`** (override via **`BARE_OS_GIANT_PHASE_PROGRAM_JSON`**); **`/bin/kernel-doctor`**, **`/bin/kernel-explain`**.
|
||||
**Kernel program proc:** governance [developer-guide/kernel-program.md](../../developer-guide/kernel-program.md); roadmap tables [feature-roadmap.md](./feature-roadmap.md) (tranches A and B). **`BARE_OS_BOOT_SAFE_MODE`** (skip **`rc.d`**, **`kernel.ext.d`**, **`onboot`**); **`BARE_OS_BOOT_TRANSACTION_JOURNAL`** → **`/run/bare-os/boot-transaction.ndjson`** (lines include **`bootStage`**); **`BARE_OS_BOOT_CHECKPOINT`** → **`/run/bare-os/boot-checkpoint.json`** (schema **2**, **`bootStage`**); **`BARE_OS_BOOT_DRY_RUN`**, **`BARE_OS_BOOT_POLICY_PATH`**, **`policyFallbackPaths`**, rollback marker, bundle digest, ABI min; **`kernel.d`** **`# ConditionEnvironment=`** guards; **`kernel.ext.d`** **`requires`** / **`after`** / **`before`**; **`/proc/bare_os/kernel_program.json`** **schema 2** + **`operatorSketches`** (**`BARE_OS_KERNEL_PROGRAM_PROC_JSON`** override, legacy **`BARE_OS_GIANT_PHASE_PROGRAM_JSON`**); **`bareOsEmitKernelEvent`** / **`Subscribe`**, **`bareOsAcquireKeyHandle`**; **`/run/bare-os/services.json`**, **`loader-audit.ndjson`**; **`/bin/kernel-doctor`**, **`kernel-explain`**, **`kernel-boot-diff`**, **`kernel-preflight`**, **`kernel-triage`**, **`kernel-manifest-validate`**, **`kernel-fsck`**.
|
||||
|
||||
**Word 11** (`bare-os-protocol` **0.8.x**, **`bits11`**): twenty new seed RPC short names (through **`mirror_drive_compaction_v6`**, **`compact_ping_v5`**, **`http_dht_proxy_routes_v3`**, …), boot policy **v11** (**`requireKernelCapabilitiesHypercorePackHrpcLifecycle`**, **`extensionSignerPinsV4`**, pack/addon semver floors, **`maxHrpcAllowlistDepth`**, **`offlineLkgRequireHypercorePackHrpcLifecycle`**, merged **`denySeedRpcMethods`**), **`/proc/bare_os/index.json`** schema **7** with 20 word-11 JSON aliases, NDJSON lifecycle **10** / OTel **8** / audit **8**, **`kernel-extensions.registry.schema.json`** branch **8**. Host env **`BARE_OS_PROBE_ID_HYPERCORE_PACK_HRPC_LIFECYCLE`**; optional **`BARE_OS_HIDE_PROC_HYPERCORE_PACK_HRPC_LIFECYCLE=0`** (or **`false`** / **`off`**) hides those word-11 proc nodes from **`readdir`**, path resolution, and the proc index (see **`vfs.js`**).
|
||||
|
||||
|
||||
@@ -203,6 +203,30 @@
|
||||
"type": "integer",
|
||||
"minimum": 1,
|
||||
"maximum": 32
|
||||
},
|
||||
"policyFallbackPaths": {
|
||||
"type": "array",
|
||||
"items": { "type": "string" },
|
||||
"description": "Additional /etc/bare-os/*.json files whose skipPhases/denyBootPhases merge after the primary policy"
|
||||
},
|
||||
"requireBootBundleSha256Hex": {
|
||||
"type": "string",
|
||||
"description": "Compare to env BARE_OS_BOOT_BUNDLE_DIGEST_HEX (lowercase hex)"
|
||||
},
|
||||
"initdAdmission": {
|
||||
"type": "object",
|
||||
"additionalProperties": true,
|
||||
"properties": {
|
||||
"maxParallel": { "type": "integer", "minimum": 1, "maximum": 32 },
|
||||
"memoryHintMb": { "type": "integer", "minimum": 1 },
|
||||
"wallBudgetMsDefault": { "type": "integer", "minimum": 1 }
|
||||
},
|
||||
"description": "Merged to BARE_OS_INITD_* env hints for bare-initd"
|
||||
},
|
||||
"extensionSignerPinsV5": {
|
||||
"type": "object",
|
||||
"additionalProperties": { "type": "string" },
|
||||
"description": "Optional multi-signer pin map → BARE_OS_BOOT_POLICY_EXTENSION_SIGNER_PINS_V5_JSON"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user