- Bump bareOsCtxApiVersion to 1.46.0 and POSIX profile 1.0.10; sync syscalls example, process table, compatibility matrix, CHANGELOGs. - Socket FD bridge: passive SOCK_DGRAM bind/connect/send path, poll readiness; bareOsPosixPoll monotonic timeouts via bare-hrtime. - disk.os: replication_operator_sketch schema 2; cap-gated replication_operator_intent + audit; enrich protomux proc JSON. - VFS: route /.bare/** to personal drive; optional BARE_OS_PERSONAL_VAULT_INDEX_CACHE_MS readdir TTL cache. - Boot policy: p2pAdmission (peerAllowlistHex, hyperswarmBootstrap) in schema + kernel init merge into ctx.env when unset. - Coreutils/booter getconf: expand _SC_* coverage; shell wait -n under BARE_OS_SHELL_POSIX_MODE; seeder multisig verify → security_posture. - Tests: vfs /.bare routing; test.bare-smoke + test:bare; bench schema 2. - Docs: syscall-socket-contract, handbook/env/kernel-extensions, holepunch drift pretest note, vault threat model multisig section. - Drop hyperbee from bare-os-booter package.json dependencies (if that change is part of this commit).
Published JSON Schemas (docs/schemas/)
Machine-readable contracts for boot policy, lifecycle telemetry, and kernel extension manifests. Guest and host code may emit or validate lines against these schemas; see developer-guide — Privacy, telemetry, and PII for scrubbing and non-secret posture.
| Schema file | Purpose |
|---|---|
| boot.policy.schema.json | Optional /etc/bare-os/boot.policy.json and related boot gating |
| boot-trace-line.schema.json | Structured boot trace / lifecycle NDJSON lines |
| telemetry-ndjson-record.schema.json | Guest/host NDJSON telemetry mirrors |
| otel-bare-os-jsonl.schema.json | OpenTelemetry JSONL mapping for Bare OS |
| kernel-extension-manifest.schema.json | Extension drop-in manifests under kernel.ext.d |
| kernel-extensions.registry.schema.json | Extension registry aggregation |
Related: kernel-extensions.md · observability-contracts.md · compatibility-matrix.md · scripts/README.md (verifiers that touch schema examples).