Architecture decision records (P2P-first)

Concise, stable pointers for contributors. Normative behavior remains in KERNEL_CONTRACT.md, the handbook, and the developer guide.

ADR	Topic	Status / primary implementation
0001 — Two-drive	Two-drive model and swarm-centric replication	Accepted — `packages/bare-os-booter/lib/vfs.js`, `swarm-disk.js`
0001 — Kernel subsystems	Booter vs image subsystem split	Accepted — `bare-os-capability-registry.js`, `bare-os-kernel-loader.js`, `bare-os-lifecycle-manager.js`; map in `kernel-subsystems.md`
0002	Deny-by-default seed RPC and HRPC bridges	Accepted — `bare-os-protocol/lib/seed-rpc-methods.js`, booter `ctx.bareOsHrpcRequest`
0003	POSIX-like facade without `fork` or host kernel ABI	Accepted — `bare-os-syscalls-proc-json.js`, `POSIX_DECLARED_PROFILE.md`
0004	`kernel.ext.d` trust, semver `provides`, and pins	Accepted — `kernel/lib/init/fragments/30-init-kernel-extensions.js`, booter resolver
0005	Guest `/proc` vs host logging and metrics	Accepted — `bare-os-host-booter-log.js`, `packages/bare-os-seeder/lib/host-logger.mjs`