feat(booter): POSIX/P2P roadmap — profile 1.0.14, ctx 1.50.0, docs & tests

- Sync declared POSIX profile, compliance matrix, syscalls examples, dashboard
- Extend holepunch clone sync reporting; bump protomux/hyperswarm lock fixture schema
- Optional shell read builtin (BARE_OS_SHELL_READ_*); host env passthrough
- Expand bareOsGetconfSysconf / getconf; pathconf for acct/union/mirror
- Wasm optional bare_os_monotonic_ms; replication live snapshot hints schema
- Socket bridge SO_RCVBUF/SO_SNDBUF; mq priority + FIFO ordering + tests
- Extract cooperative fcntl lock helpers; FIFO waiter drain tests
- Peer admission audit helpers, rate limit + redaction tests; security_posture schema
- CI: verify-ctx requires CHANGELOG row, d.ts version mention, compatibility matrix
- Warm-cache microbench (vfs suite); boot budget / metrics cohesion (prior work)
- Handbook, KERNEL_CONTRACT, kernel-program, env appendix, README, users-manual, schemas

Kernel bundle + seeder rsync + coreutils build verified via npm test.

docs/schemas/README.md

@@ -10,5 +10,6 @@ Machine-readable contracts for boot policy, lifecycle telemetry, and kernel exte
 | [otel-bare-os-jsonl.schema.json](otel-bare-os-jsonl.schema.json) | OpenTelemetry JSONL mapping for Bare OS |
 | [kernel-extension-manifest.schema.json](kernel-extension-manifest.schema.json) | Extension drop-in manifests under **`kernel.ext.d`** |
 | [kernel-extensions.registry.schema.json](kernel-extensions.registry.schema.json) | Extension registry aggregation |
+| [bare-os-security-posture.schema.json](bare-os-security-posture.schema.json) | **`peerAdmission`** env pointers for optional NDJSON audit (**`/proc/bare_os/security_posture.json`**) |
 
 **Related:** [kernel-extensions.md](../reference/kernel-extensions.md) · [observability-contracts.md](../reference/observability-contracts.md) · [compatibility-matrix.md](../reference/compatibility-matrix.md) · [scripts/README.md](../../scripts/README.md) (verifiers that touch schema examples).

docs/schemas/bare-os-security-posture.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://bare-os.local/schemas/bare-os-security-posture.schema.json",
+  "title": "security_posture.json (subset)",
+  "description": "Non-secret snapshot from /proc/bare_os/security_posture.json — peerAdmission audit env pointers only.",
+  "type": "object",
+  "required": ["schema"],
+  "properties": {
+    "schema": { "type": "integer", "const": 4 },
+    "peerAdmission": {
+      "type": "object",
+      "properties": {
+        "schema": { "type": "integer" },
+        "allowlistConfigured": { "type": "boolean" },
+        "denylistConfigured": { "type": "boolean" },
+        "requireCapsConfigured": { "type": "boolean" },
+        "admissionAuditNdjsonEnv": {
+          "type": "string",
+          "const": "BARE_OS_PEER_ADMISSION_AUDIT_NDJSON"
+        },
+        "admissionAuditRateMsEnv": {
+          "type": "string",
+          "const": "BARE_OS_PEER_ADMISSION_AUDIT_RATE_MS"
+        },
+        "evaluator": { "type": "string" },
+        "admissionResultSchema": { "type": "integer" }
+      },
+      "additionalProperties": true
+    }
+  },
+  "additionalProperties": true
+}