- HRPC: bare_os.search_local, route table/schema updates; ctx API 1.52.0 - VFS: optional path-capability enforcement; pathcap-verify coreutil - Replication/boot: warm-cache adaptive metrics, boot budget NDJSON v2 - Identity: savevault pre-snapshot host hint - POSIX: profile 1.0.16, socket connect timeout env, Wasm ctx API peek import - Security/ops: peer admission test, personal-drive path policy verifier in pretest - P2P UX: pkg-swarm-index; multisig rc.proposals/enabled gate + audit rows - Docs/scripts: README, handbook, env appendix, developer-guide, ctx helper sync - Examples: syscalls.example ctx version; seeder kernel rsync parity
12 lines
730 B
JSON
12 lines
730 B
JSON
{
|
|
"schema": 1,
|
|
"note": "Place approved JSON as /etc/bare-os/rc.proposals/enabled/<name>.json when BARE_OS_RC_PROPOSAL_MULTISIG_STRICT=1. pear.multisig.json must exist; each signaturesFrom entry must match a signer key in that file (case-insensitive); distinct count must be ≥ pear.quorum. Ed25519 / hyper-multisig verification of the proposal payload is a host or seeder step — the guest gate is policy alignment only.",
|
|
"proposalId": "example-2026-04-05",
|
|
"targetRcSnippet": "/etc/bare-os/rc.d/99-proposed.sh",
|
|
"payloadSha256Hex": "replace_with_sha256_of_script_bytes",
|
|
"signaturesFrom": [
|
|
"full_signer_public_key_hex_from_pear_multisig_json",
|
|
"second_signer_public_key_hex_from_pear_multisig_json"
|
|
]
|
|
}
|