Raven Scott
551d68ac6c
NDJSON audit + rate limit; env passthrough and handbook/appendix/docs - /proc/bare_os/security_posture.json schema 4: vaultCryptoPrimitives, bareCryptoReportedVersion, expanded peerAdmission - /proc/bare_os_features: pearIpcConservativeAdvertisement (names only) - Syscall select returns pollClock with timeout; coreutils test -u/-g/-k - Host env: BARE_OS_CTX_BARE_SUBPROCESS_SPAWN, BARE_OS_REPLICATION_PEER_PRIORITY_JSON, peer audit keys - Placeholder scan: rename expandCmdsubstEmbedded; sendmsg wording - Docs: vault threat model, preface Mermaid, protocol/changelog, posix matrix, holepunch clone audit refresh, developer-guide/kernel-program Wasm - ctx.d.ts + gen-ctx-client-helper; booter CHANGELOG maintenance notes
Published JSON Schemas (docs/schemas/)
Machine-readable contracts for boot policy, lifecycle telemetry, and kernel extension manifests. Guest and host code may emit or validate lines against these schemas; see developer-guide — Privacy, telemetry, and PII for scrubbing and non-secret posture.
| Schema file | Purpose |
|---|---|
| boot.policy.schema.json | Optional /etc/bare-os/boot.policy.json and related boot gating |
| boot-trace-line.schema.json | Structured boot trace / lifecycle NDJSON lines |
| telemetry-ndjson-record.schema.json | Guest/host NDJSON telemetry mirrors |
| otel-bare-os-jsonl.schema.json | OpenTelemetry JSONL mapping for Bare OS |
| kernel-extension-manifest.schema.json | Extension drop-in manifests under kernel.ext.d |
| kernel-extensions.registry.schema.json | Extension registry aggregation |
Related: kernel-extensions.md · observability-contracts.md · compatibility-matrix.md · scripts/README.md (verifiers that touch schema examples).