Files
bare-operating-system/packages/bare-os-seeder/kernel/etc/bare-os/boot.policy.example.json
T
Raven Scott f13e2db689 feat(protocol)!: kernel capability wire v2 and ctx capability maps
Replace top-level seed/proc bits (bits, bits2, … bits11) with
kernelCapabilityWords (semantic camelCase keys), kernelCapabilityWireVersion,
and helpers in kernel-capability-wire.js. Bump bare-os-protocol to 0.9.0 and
BARE_OS_KERNEL_FEATURE_BITS_DOC to 15.

Booter: emit/consume v2 on bare_os.capabilities, /proc/bare_os_features, debug
proc, offline LKG seedCapabilityInfo; BARE_OS_SEED_CAP_STRICT walks semantic
keys. Guest ctx exposes frozen bareOsAdvertisedKernelCapabilityWords and
bareOsSeedKernelCapabilityWords; remove per-word bareOsAdvertisedKernelCapabilities*
and bareOsSeedCapability* (BARE_OS_CTX_API_VERSION 1.22.0).

Kernel boot policy (stock init.js + seeder copy) reads advertised/seed words
via those maps. Update bare-os-ctx.d.ts, CI verifiers, compatibility matrix,
capability-words docs, ADR 001, and changelogs.

Fix duplicate re-exports of EXTENDED_SEEDING_PLATFORM and RLIMITS_DELEGATES_SHELL
in bare-os-protocol/index.js (Pear/Bare duplicate export error).
2026-04-04 07:19:46 -04:00

52 lines
1.9 KiB
JSON

{
"skipPhases": [],
"denyBootPhases": [],
"minKernelCapabilitiesPrimary": 0,
"requireSeedCaps": 0,
"requireKernelCapabilitiesExtendedSeedingPlatform": 0,
"requireKernelCapabilitiesRlimitsDelegatesShell": 0,
"requireKernelCapabilitiesOfflineNetExtensions": 0,
"requireKernelCapabilitiesHostTransportDelegates": 0,
"requireKernelCapabilitiesReplicationOperatorSurface": 0,
"requireKernelCapabilitiesPearCorestoreHrpc": 0,
"requireKernelCapabilitiesBareRuntimeProtoMux": 0,
"requireKernelCapabilitiesBareModuleCryptoStaging": 0,
"requireKernelCapabilitiesPearInspectLoggerTls": 0,
"requireKernelCapabilitiesHypercorePackHrpcLifecycle": 0,
"requireBareBootMin": "0.0.0",
"denyBareRpcMethodPatterns": [],
"maxPearInspectDepth": 0,
"maxHrpcAllowlistDepth": 0,
"requireBareLoggerMin": "0.0.0",
"denyAutobaseDiscoveryChannels": [],
"requireBareTlsMin": "0.0.0",
"requireBarePackMin": "0.0.0",
"requireBareAddonPolicyMin": "0.0.0",
"extensionSignerPinsV3": {},
"extensionSignerPinsV4": {},
"offlineLkgRequirePearStamp": false,
"offlineLkgRequireHypercorePackHrpcLifecycle": false,
"bootPhasesRequireLifecycleMinSchema": 0,
"requireBareRuntimeMin": "0.0.0",
"denySeedRpcMethods": [],
"maxProtomuxChannelNameLength": 256,
"requireBooterSemver": "0.0.0",
"requireCtxApiMin": "0.0.0",
"requirePearRuntimeMin": "0.0.0",
"requireProtocolPackageMin": "0.0.0",
"denyKernelExtensionIds": [],
"denyCtxMethodPrefixes": [],
"maxKernelExtensionDepth": 8,
"gitPartialClonePolicy": "allow",
"kernelExtensionHashPins": {},
"offlineLkgIntegrityStrict": false,
"maxExecLineDepth": 48,
"denyEnvKeys": ["EXAMPLE_UNWANTED"],
"requireProcNodes": ["/proc/bare_os/features", "/proc/version"],
"allowedPearIpcChannels": [],
"denyVfsPrefixes": [],
"denyExecLineBuiltins": [],
"allowedCtxMethods": [],
"maxInitdRestartsPerUnit": 8
}