- Add first-party vs vendored rules to verify-banned-terminology; naming docs,

alias matrix, verify-naming-alias-matrix in pretest
- Canonical bareOsRegisterBootStepHook / Invoke / EmitBareBootStepHint with
  legacy *Phase* wrappers; typings, runtime caps, docs, CHANGELOG
- VFS: evaluateBareOsVfsPathPolicy; rename hypercore-pack proc locals; add
  /proc/bare_os/security_posture.json
- Stock kernel: invokeCtxBootHooks, boot txn journal transactionState, extension
  cycle extId diagnostics, boot snapshot schema 2 + provenance
- Offline LKG: BARE_OS_OFFLINE_LKG_ACTIVE / REASON env hints
- Protocol: BARE_OS_PROTOMUX_CHANNEL_SCHEMA_VERSION re-exported from channel.js
- Stubs: corestore suspend/resume register, swarm snapshot, extension resolver,
  initd state enum; shell split note; benchmark/SDK script placeholders
- Docs: ota-channels, conformance-dashboard, kernel-extensions specs index,
  data README; handbook/developer-guide/users-manual cross-links
- Sync packages/bare-os-seeder/kernel with kernel/init.js and STRUCTURE.md

docs/reference/kernel-extensions-capability-specs.md

@@ -0,0 +1,17 @@
+# Kernel extensions — capability specs (index)
+
+Short index for extension authors. The long-form inventory remains in **[kernel-extensions.md](kernel-extensions.md)**.
+
+## Sources of truth
+
+- **Feature bits and ctx methods** — `packages/bare-os-protocol/lib/kernel-feature-bits.js`, [kernel capabilities index](kernel-capabilities-index.md).
+- **Registry schema** — `docs/schemas/kernel-extensions.registry.schema.json`.
+- **Boot policy** — `docs/schemas/boot.policy.schema.json`.
+
+## Pear / Bare bridge (word 10)
+
+Documented in the main reference: doctor hints, inspect probes, Bare boot step hints, RPC probes, logger taps, discovery hints, etc.
+
+## Hypercore pack / HRPC lifecycle (word 11)
+
+Operator SLO and peer QoS sketches under `/proc/bare_os/` (stable legacy filenames); see `BARE_OS_PROC_FILE_TO_ID_HYPERCORE_PACK_HRPC_LIFECYCLE` in `packages/bare-os-booter/lib/vfs.js`.