POSIX / synthetic syscalls

- Bump /proc/bare_os/syscalls.json to schema 7; socketMsgSurface (sendmsg/recvmsg ENOTSUP)
- POSIX profile 1.0.8; align syscalls.example.json, declared profile, compatibility matrix
- Bridged SOCK_DGRAM recv/recvfrom with bounded queue + poll/select readiness env knobs
- process_table.json schema 7; fdModel.processTableSchema and matrix/dashboard sync
- posix-conformance-matrix bareOsSyscallOps includes recvfrom

P2P / protocol / replication
- Optional Protomux bare-os-app-v1 (BARE_OS_PROTOMUX_APP_CHANNEL)
- Replication: guestReplicationPlan (BARE_OS_REPLICATION_PLAN_JSON), sync_window parallelismHint
- Blind-relay swarm protomuxBackpressure (BARE_OS_SWARM_PROTOMUX_BACKPRESSURE_COUNT)
- Remove bareOsProcBlindPeerRelayHintsStub; strict peer allowlist (BARE_OS_PEER_ALLOWLIST_STRICT)
- Kernel multisig gate before kernel.ext.d; Pear updater integrationHints + audit env docs

Tooling / tests / hygiene
- Default holepunch clone drift in pretest; document BARE_OS_HOLEPUNCH_DRIFT_CHECK=0
- Widen bare holepunch catalog overrides; Mermaid architecture in docs hub + README link
- Fix tests: corestore_snapshot proc schema 2, posixXsh schema 2, awk-engine export strip in xcu sweep
- pear-updater-bridge: shared integration hints; identity-session import order
- Handbook ch.3/7/9 + environment appendix updates; scripts README drift script behavior

kernel/etc/bare-os/syscalls.example.json

@@ -1,9 +1,9 @@
 {
-  "schemaVersion": 6,
-  "ctxApiVersion": "1.41.0",
+  "schemaVersion": 7,
+  "ctxApiVersion": "1.42.0",
   "posixProfile": {
     "id": "bare-os-posix-like",
-    "version": "1.0.6"
+    "version": "1.0.8"
   },
   "ops": ["readFile", "writeFile", "socket"],
   "opsDetail": [
@@ -27,9 +27,14 @@
     }
   ],
   "posixXsh": {
+    "schema": 2,
+    "note": "POSIX.1 XSH-style names; socket bridge may implement SOCK_DGRAM recv/recvfrom when BARE_OS_POSIX_SOCKET_FD_BRIDGE.",
+    "namesCsv": "open,close,read,write,readv,writev,getsockopt,setsockopt,lseek,pipe,dup,dup2,fcntl,poll,select,umask,socket,bind,listen,accept,connect,send,recv,recvfrom,shutdown"
+  },
+  "socketMsgSurface": {
     "schema": 1,
-    "note": "POSIX.1 XSH-style names; socket family are ctx.bareOsSyscall ops returning ENOSYS-shaped results.",
-    "namesCsv": "open,close,read,write,readv,writev,getsockopt,setsockopt,lseek,pipe,dup,dup2,fcntl,poll,select,umask,socket,bind,listen,accept,connect,send,recv,shutdown"
+    "sendmsg": { "defaultErrno": "ENOTSUP" },
+    "recvmsg": { "defaultErrno": "ENOTSUP" }
   },
   "errnoHints": {
     "ENOENT": 2,
@@ -42,7 +47,7 @@
     "stdio": [0, 1, 2],
     "register": "ctx.bareOsRegisterLogicalFd",
     "processTablePath": "/proc/bare_os/process_table.json",
-    "processTableSchema": 6
+    "processTableSchema": 7
   },
   "signalModel": {
     "schema": 1,