Context
The kernel charter, threat model, ADRs, evidence matrix, and support policy (M0, merged) specify a bare-metal capability microkernel. This issue tracks the first executable proof of those design intentions: a freestanding x86_64-unknown-none kernel that boots under UEFI/QEMU and demonstrates the security and AI-native properties the charter commits to, each checked by a machine-readable serial-event harness rather than asserted in prose.
Scope
An isolated kernel/ Cargo workspace (not built by core CI, no production dependency) covering:
- Boot + memory (M1): UEFI -> ring 0, fixed-pool frame allocator, fallible heap, W^X audited from the live page tables, negative-first self-tests.
- Isolation + capabilities (M2): ring-3 protection domains, per-domain page tables, the ADR-K2 capability table, tick-quota preemption and full reclamation.
- IPC + authority (M3): bounded endpoints, capability transfer by derivation with monotonic rights-shrink (ADR-K3), generation and scoped-subtree revocation (ADR-K4).
- Legibility ABI v0 (M4): the kernel emits its own object tables as typed, versioned relations, with a snapshot==fold(deltas) drift check.
- Audit chain (M5, ADR-K7): ring-0 total order + BLAKE3 rolling root; a user-space verifier reconstructs and signs the chain and proves tamper-evidence.
Out of scope (tracked separately)
The freestanding component host (Wasmtime/Pulley), driver domains, the Realm as a conformance workload, the composition/tensor-logic reasoner, graphics, and the dock. Also deferred within the kernel: fault-endpoint supervisor delivery (ADR-K5), incremental revocation reclamation, and deterministic image builds.
Verification
cd kernel && cargo run -p ktest boots the image under QEMU and asserts the full serial-event sequence; exit code 33 on success.
Context
The kernel charter, threat model, ADRs, evidence matrix, and support policy (M0, merged) specify a bare-metal capability microkernel. This issue tracks the first executable proof of those design intentions: a freestanding
x86_64-unknown-nonekernel that boots under UEFI/QEMU and demonstrates the security and AI-native properties the charter commits to, each checked by a machine-readable serial-event harness rather than asserted in prose.Scope
An isolated
kernel/Cargo workspace (not built by core CI, no production dependency) covering:Out of scope (tracked separately)
The freestanding component host (Wasmtime/Pulley), driver domains, the Realm as a conformance workload, the composition/tensor-logic reasoner, graphics, and the dock. Also deferred within the kernel: fault-endpoint supervisor delivery (ADR-K5), incremental revocation reclamation, and deterministic image builds.
Verification
cd kernel && cargo run -p ktestboots the image under QEMU and asserts the full serial-event sequence; exit code 33 on success.