Replace top-level seed/proc bits (bits, bits2, … bits11) with kernelCapabilityWords (semantic camelCase keys), kernelCapabilityWireVersion, and helpers in kernel-capability-wire.js. Bump bare-os-protocol to 0.9.0 and BARE_OS_KERNEL_FEATURE_BITS_DOC to 15. Booter: emit/consume v2 on bare_os.capabilities, /proc/bare_os_features, debug proc, offline LKG seedCapabilityInfo; BARE_OS_SEED_CAP_STRICT walks semantic keys. Guest ctx exposes frozen bareOsAdvertisedKernelCapabilityWords and bareOsSeedKernelCapabilityWords; remove per-word bareOsAdvertisedKernelCapabilities* and bareOsSeedCapability* (BARE_OS_CTX_API_VERSION 1.22.0). Kernel boot policy (stock init.js + seeder copy) reads advertised/seed words via those maps. Update bare-os-ctx.d.ts, CI verifiers, compatibility matrix, capability-words docs, ADR 001, and changelogs. Fix duplicate re-exports of EXTENDED_SEEDING_PLATFORM and RLIMITS_DELEGATES_SHELL in bare-os-protocol/index.js (Pear/Bare duplicate export error).
52 lines
1.9 KiB
JSON
52 lines
1.9 KiB
JSON
{
|
|
"skipPhases": [],
|
|
"denyBootPhases": [],
|
|
"minKernelCapabilitiesPrimary": 0,
|
|
"requireSeedCaps": 0,
|
|
"requireKernelCapabilitiesExtendedSeedingPlatform": 0,
|
|
"requireKernelCapabilitiesRlimitsDelegatesShell": 0,
|
|
"requireKernelCapabilitiesOfflineNetExtensions": 0,
|
|
"requireKernelCapabilitiesHostTransportDelegates": 0,
|
|
"requireKernelCapabilitiesReplicationOperatorSurface": 0,
|
|
"requireKernelCapabilitiesPearCorestoreHrpc": 0,
|
|
"requireKernelCapabilitiesBareRuntimeProtoMux": 0,
|
|
"requireKernelCapabilitiesBareModuleCryptoStaging": 0,
|
|
"requireKernelCapabilitiesPearInspectLoggerTls": 0,
|
|
"requireKernelCapabilitiesHypercorePackHrpcLifecycle": 0,
|
|
"requireBareBootMin": "0.0.0",
|
|
"denyBareRpcMethodPatterns": [],
|
|
"maxPearInspectDepth": 0,
|
|
"maxHrpcAllowlistDepth": 0,
|
|
"requireBareLoggerMin": "0.0.0",
|
|
"denyAutobaseDiscoveryChannels": [],
|
|
"requireBareTlsMin": "0.0.0",
|
|
"requireBarePackMin": "0.0.0",
|
|
"requireBareAddonPolicyMin": "0.0.0",
|
|
"extensionSignerPinsV3": {},
|
|
"extensionSignerPinsV4": {},
|
|
"offlineLkgRequirePearStamp": false,
|
|
"offlineLkgRequireHypercorePackHrpcLifecycle": false,
|
|
"bootPhasesRequireLifecycleMinSchema": 0,
|
|
"requireBareRuntimeMin": "0.0.0",
|
|
"denySeedRpcMethods": [],
|
|
"maxProtomuxChannelNameLength": 256,
|
|
"requireBooterSemver": "0.0.0",
|
|
"requireCtxApiMin": "0.0.0",
|
|
"requirePearRuntimeMin": "0.0.0",
|
|
"requireProtocolPackageMin": "0.0.0",
|
|
"denyKernelExtensionIds": [],
|
|
"denyCtxMethodPrefixes": [],
|
|
"maxKernelExtensionDepth": 8,
|
|
"gitPartialClonePolicy": "allow",
|
|
"kernelExtensionHashPins": {},
|
|
"offlineLkgIntegrityStrict": false,
|
|
"maxExecLineDepth": 48,
|
|
"denyEnvKeys": ["EXAMPLE_UNWANTED"],
|
|
"requireProcNodes": ["/proc/bare_os/features", "/proc/version"],
|
|
"allowedPearIpcChannels": [],
|
|
"denyVfsPrefixes": [],
|
|
"denyExecLineBuiltins": [],
|
|
"allowedCtxMethods": [],
|
|
"maxInitdRestartsPerUnit": 8
|
|
}
|