Raven Scott
15209b4837
- Add bare-os-hrpc-allowlist.js; wire stock bareOsHrpcRequest + bareOsHrpcAllowlistProbe; passthrough BARE_OS_HRPC_ALLOWLIST_JSON and operator env for snapshot/blind-relay/mirror/pear-doctor - Merge BARE_OS_CORESTORE_SNAPSHOT_WORKFLOW_JSON into bareOsReadSnapshotHintsJson (match proc) - Shell: pipefail runs all pipeline stages; aggregate first non-zero exit after assign prefixes - mv: stage renames via vfs.resolveLogical so temp files stay in writable destination dir - coreutils: POSIX-style split suffixes past zz; xargs doc for -P vs host subprocess - identity-session: stable Error.code for no-account / passphrase failures - Docs: KERNEL_CONTRACT, POSIX profile, handbook 5/7/9, kernel-extensions strict-boot table, env appendix, developer-guide + scripts README, protocol/booter CHANGELOGs; hrpc allowlist schema - Tests: hrpc allowlist, pear_doctor schema 2, split suffix, pipefail pipeline; fix PLACEHOLDER_BASELINE link Pretest: refreshed kernel bins, man.json, posix dashboard, bundle health, seeder parity
Published JSON Schemas (docs/schemas/)
Machine-readable contracts for boot policy, lifecycle telemetry, and kernel extension manifests. Guest and host code may emit or validate lines against these schemas; see developer-guide — Privacy, telemetry, and PII for scrubbing and non-secret posture.
| Schema file | Purpose |
|---|---|
| boot.policy.schema.json | Optional /etc/bare-os/boot.policy.json and related boot gating |
| boot-trace-line.schema.json | Structured boot trace / lifecycle NDJSON lines |
| telemetry-ndjson-record.schema.json | Guest/host NDJSON telemetry mirrors |
| otel-bare-os-jsonl.schema.json | OpenTelemetry JSONL mapping for Bare OS |
| kernel-extension-manifest.schema.json | Extension drop-in manifests under kernel.ext.d |
| kernel-extensions.registry.schema.json | Extension registry aggregation |
Related: kernel-extensions.md · observability-contracts.md · compatibility-matrix.md · scripts/README.md (verifiers that touch schema examples).