Topics Index

This page is generated from document front matter fields during mdbook builds:

status
description
topics

Quick Orientation

Backlog — Detailed task decompositions.
Benchmarks — Current benchmark policy and results.
Build, Boot, and Test — Build, ISO, QEMU, host-test commands.
Capability-Based and Microkernel Operating Systems Survey — Design consequences pulled from the survey.
capOS Agentic Development Experiment — Longitudinal study design for using capOS development sessions, subagents, reviews, and recap tooling as an agentic software-engineering experiment.
capOS Repository Harness Engineering — Repository-local harness engineering for making capOS legible, checkable, and safer for long-running coding agents.
Changelog — Historical milestone reports.
Current Design Authority — Current-design authority map and proposal lifecycle rule for keeping implemented behavior out of archival proposal records.
Current Status — What works, what is partial.
Design Risks and Open Questions — Consolidated index of long-horizon design risks.
Host-Side SDKs — Host-side capOS SDKs: released registry clients, their trust boundaries, and the separately identified source-tree build-identity APIs and proofs.
Introduction — Top-level documentation site entry.
Proof Marker Sets — Declarative QEMU proof marker sets, the shared asserter, and the proof registry.
Proposal Index — Proposal status table.
Repository Agent Harness — A compact routing map for repository state, design authority, workflow gates, concurrency, and review.
Repository Map — Source-tree subsystem index.
Research and Design Gaps — Research/design gap triage backlog.
Roadmap — Long-term architectural plan and milestone history.
What capOS Is — One-page system model.

Capabilities, IPC, and Authority

ABI Evolution Policy — Compatibility policy for capOS schema and ring ABIs.
Authority Accounting — Authority accounting rules for capability transfer and resource charges.
Cap’n Proto Error Handling — Prior-art on capnp-rpc error semantics.
Capability Model — Core capability object model, cap tables, schema interface IDs, grants, receiver metadata, and transfer.
Capability Ring — Shared-memory capability ring ABI, dispatch paths, and completion semantics.
Capability-Infrastructure Cluster — Decomposition of the near-term capability-infrastructure cluster: matured proposals and Stage 6 remainder that share the schema serial surface.
Cloudflare, Cap’n Proto, Workers RPC, and Cap’n Web — Cloudflare Workers, workerd, Durable Objects, Workers RPC, Cap’n Web, and Cloudflare’s production use of Cap’n Proto/KJ.
Crash Recovery and Supervision — Unplanned-failure detection, stale-cap propagation, structured crash records, watchdog liveness, and bounded restart policy for capOS services.
Debug and Trace Authority — Capability-scoped debug session attach, read-only cap-table inspection, ring-trace replay, and sampler authority without ambient process inspection.
Delegated Subject Context — Future delegated-subject and act-on-behalf-of capability model.
Error Handling — Current error model for capability ring CQE status, CapException payloads, endpoint RETURN exceptions, and ordinary schema result unions.
Error Handling — Transport and application error model for capability calls and CQE results.
Executable Images and Service Launch Authority — Capability-native executable identity, package ingestion, role-specific launch authority, service deployment, and migration away from manifest-builtin binaries.
Genode — Genode OS Framework: capability-based component model, session routing, VFS plugin architecture, POSIX compatibility, and Sculpt OS – with lessons for capOS.
Host-Side SDKs — Host-side capOS SDKs: released registry clients, their trust boundaries, and the separately identified source-tree build-identity APIs and proofs.
IPC and Endpoints — Endpoint IPC, capability transfer, direct handoff, and shared-memory data paths.
Memory Authority Model — Memory authority, residency classes, mapping consistency, OOM boundaries, and proof obligations.
OS Error Handling — Cross-OS error-model comparison.
Rejected: Cap’n Proto SQE Envelope — Rationale for keeping ring SQEs fixed-layout instead of Cap’n Proto envelopes.
Rejected: Endpoint Badges as Service Identity — Post-mortem of the rejected seL4-style endpoint badge service identity model.
Remote Session CapSet Clients — Remote host app model for authenticated capOS sessions, broker-issued CapSet views, and typed capability calls over Cap’n Proto RPC.
Resource Accounting and Quotas — Resource profiles, quota ledgers, donation, reservation, and fail-closed accounting semantics.
Resource Governance — System-wide contract for structural limits, quotas, reservation, admission, backpressure, fairness, and resource donation.
Schema Registry — A SchemaRegistry capability that serves Cap’n Proto reflection metadata – interface IDs, method names and ordinals, parameter/result layouts, and doc comments – at runtime, as the machine-readable twin of the System Manual.
Service Architecture — Capability-based service composition, authority-at-spawn, exports, and service graph policy.
Service Object Identity Migration — Superseded large-chunk migration plan for service object identity, retained as historical context after the active direction changed to session-bound invocation context.
Session Context — Current session-bound invocation context, endpoint caller-session metadata, disclosure, transfer-scope, and liveness rules.
Session-Bound Invocation Context — Implementation plan for one-session-per-process invocation context and session-keyed shared services.
Session-Bound Invocation Context — Session-bound invocation context and privacy-aware disclosure model replacing service-object identity migration.
Shared Mapping Identity and Object Pins — Identity and lifetime contract for MemoryObject-backed mappings and future shared park words.
Spritely, OCapN, and CapTP — Spritely, OCapN, CapTP, netlayers, locators, Syrup, promise pipelining, handoffs, and capability-network lessons for capOS.
Stage 6 Capability Semantics — Stage 6 capability work.
Standard App Capabilities — Per-app AppData storage, a user-mediated powerbox/file-picker grant, and attenuated capability sharing as standard app-facing capabilities.
Superseded: Service Object Capabilities — Superseded service-minted object capability model that was replaced by session-bound invocation context.
System Info Capability — SystemInfo capability for MOTD, hostname, deterministic build identity, and shell bundle integration.
System Manual Capability — A built-in man-pages analog: the Manual capability serves Unix-style reference pages, schema-derived interface manuals, and a man-shaped reference corpus through the shell, the self-served web UI, and a typed capnp API.
Time and Clock Authority — Capability-native wall-clock authority with provenance labeling, clock discipline, and trusted timestamps for audit and TLS.
Userspace Authority Broker — Userspace shell-bundle broker and lifecycle-control authority model.
Zircon — Fuchsia Zircon kernel: handle-based capability model, channels, VMARs/VMOs, async ports, and FIDL – with lessons for capOS capability dispatch, IPC, and memory design.

Boot, Manifests, and Init

Boot Flow — Kernel boot, manifest handoff, init launch, and QEMU boot-proof flow.
Boot to Shell — Login, setup, session, credential, and broker path from boot into the native shell.
Cloud Image Import and Serial-Console Boot — Cloud provider disk-image import and serial-console-boot notes.
Cloud Metadata — Cloud metadata and config-drive bootstrap through scoped configuration capabilities.
Configuration — How operators extend the default capOS boot manifest with a gitignored system.local.cue overlay and convert CUE-authored data to specified Cap’n Proto schemas.
Hardware, Boot, and Storage — Hardware bring-up backlog.
Installable System — Ordered implementation track turning the installable-system proposal into work grounded in the landed BlockDevice/filesystem/Store/writable-persistence/disk-image contracts.
Installable System — Design for an installed, persistent capOS that boots from disk and keeps mutable system configuration across reboots, composed with the immutable boot manifest.
Manifest and Service Startup — Manifest encoding, service graph validation, bootstrap grants, and init-side spawning.
Run Targets, Init Mandate, and Default-Run Integration — Run-target governance.
Stateful Task and Job Graphs — Durable stateful task and job graphs for init orchestration, package builds, operator work, and notebook-style run stories without creating a god object.
System Configuration and Operator Extensibility — Layered CUE configuration model for operator boot-manifest overlays, host-user injection, and per-user toolchain caches.

Process Model, Threading, and Scheduling

Completion Rings And Threaded Runtimes — Io_uring-style transports under threaded runtimes.
Crash Recovery and Supervision — Unplanned-failure detection, stale-cap propagation, structured crash records, watchdog liveness, and bounded restart policy for capOS services.
Direct IPC Timing Evidence — 2026-07-27 — Raw and summarized evidence for the 2026-07-27 direct-IPC handoff timing record.
Executable Images and Service Launch Authority — Capability-native executable identity, package ingestion, role-specific launch authority, service deployment, and migration away from manifest-builtin binaries.
Future Scheduler Architecture — Survey of modern scheduler algorithms and architectures for capOS scheduler evolution.
HPC Parallel Patterns — HPC benchmark and programming-model grounding for generic parallel processing patterns.
HPC Parallel Processing Patterns — Generic single-node and multi-node parallel processing patterns for HPC-style benchmark coverage.
In-Process Threading — In-process thread lifecycle, scheduler references, ThreadControl, and ParkSpace integration.
Linux Sandboxes and Virtualization for Workloads — Linux sandbox, container, gVisor, KVM, microVM, and CPU-isolation prior art for generic Linux workload execution.
NO_HZ, SQPOLL, and Realtime Scheduling — Linux NO_HZ, io_uring SQPOLL, CPU isolation, PREEMPT_RT, SCHED_DEADLINE, and seL4 MCS grounding for capOS timer and realtime design.
Out-of-Kernel Scheduling — Prior art survey on kernel versus userspace CPU scheduling policy split, with capOS design implications.
Park Authority — ParkSpace wait/wake authority, ABI, and shared park-word constraints.
Process Model — Process isolation, ELF loading, bootstrap ABI, lifecycle, and spawn authority.
Rejected: Sleep(INF) Process Termination — Rationale for explicit process termination instead of infinite-sleep lifecycle semantics.
Ring v2 For Full SMP — Per-thread ring, completion routing, SQPOLL ownership, and full-SMP transport model.
Scheduler Evolution — Detailed task decomposition for future capOS scheduler evolution.
Scheduler Evolution — Layered scheduler evolution from bootstrap round-robin to per-CPU fair scheduling, scheduling contexts, CPU leases, and user-space policy.
Scheduling — Preemption, run queues, blocking waits, timer wakeups, and SMP scheduler proof points.
Shared Mapping Identity and Object Pins — Identity and lifetime contract for MemoryObject-backed mappings and future shared park words.
SMP — Per-CPU state, AP startup, scheduler ownership, TLB shootdown, and multi-core roadmap.
SMP Phase C — SMP backlog.
Tickless and Realtime Scheduling — Tickless idle, SQPOLL nohz CPU isolation, request deadlines, scheduling contexts, and realtime islands.
x2APIC And APIC Virtualization — Primary-source grounding for xAPIC/x2APIC backend selection and APIC virtualization constraints.

Memory and Resource Accounting

Cloud DMA Provider Evidence Inventory — Official AWS/Azure/GCP device-surface facts, an evidence-matrix schema, a live guest-probe checklist, and classification rules for the cloud DMA backend decision.
Cloud Driver Foundation Gap Analysis — Gap analysis between the existing userspace virtio driver foundation and the blocked cloud NIC/storage driver tasks: what is already proven, the narrow per-task remaining work, and the superseded live-NIC runnable-now claim.
Device Manager Refactor — Refactor direction for separating the kernel device authority ledger from QEMU proof scaffolding.
DMA Assurance Model — Assurance model for DMA authority, backend selection, and proof obligations.
DMA Isolation — DMA isolation model for device memory, IOMMU policy, and capability-scoped hardware access.
DMA User-Space Driver Isolation — DMA, user-space driver, vIOMMU, and no-IOMMU bounce-buffer design consequences for capOS device authority.
Go VirtualMemory Contract — VirtualMemory cap contract for Go.
IOMMU Remapping Grounding — Primary-source grounding for Intel VT-d (landed under cfg(qemu)), AMD-Vi, and QEMU IOMMU remapping work.
Memory Authority Model — Memory authority model backlog.
Memory Authority Model — Memory authority, residency classes, mapping consistency, OOM boundaries, and proof obligations.
Memory Management — Physical frames, address spaces, user buffers, MemoryObject, and VirtualMemory contracts.
NVMe Model B Doorbell DMA Validator — Conditional DMA-address ownership model for the userspace NVMe storage provider: provider-written queue-base and PRP/SGL addresses require a non-host-physical device-visible namespace; no-IOMMU GCP planning must use brokered bounce address publication instead.
OOM Handling and Swap — Memory-pressure, OOM, anonymous-memory budgeting, and optional encrypted swap policy.
Resource Accounting and Quotas — Resource profiles, quota ledgers, donation, reservation, and fail-closed accounting semantics.
Resource Governance — System-wide contract for structural limits, quotas, reservation, admission, backpressure, fairness, and resource donation.
Shared Mapping Identity and Object Pins — Identity and lifetime contract for MemoryObject-backed mappings and future shared park words.
virtio-rng — Provenance map for the in-tree virtio-rng entropy device - spec basis, implemented wire-format subset, and its role as a QEMU-only DDF metadata and IOMMU-remapping hardware-DMA proof fixture (no userspace-facing capability, not a production driver).

Userspace Runtime, Languages, and Binaries

Browser Capability and Agent Web Sessions — Browser profiles, cap-native document engines, visual browsing, and agent/shell browser sessions as capability-scoped services.
Browser Engines, Document Engines, and Agent Browsers — Browser engine portability, cap-native document-engine options, and agent-browser patterns for capOS browser capabilities.
Browser/WASM — Browser-hosted capOS experiment using WebAssembly and worker-per-process isolation.
capOS SDK and Dual Transport — capOS front-door SDK crate with a transport abstraction for in-system and remote clients, plus crate-namespace publication.
capos-service — Userspace service framework (Rust crate capos-service) for lifecycle, endpoint loops, readiness, shutdown, metrics, context, and resource hooks.
Cloudflare, Cap’n Proto, Workers RPC, and Cap’n Web — Cloudflare Workers, workerd, Durable Objects, Workers RPC, Cap’n Web, and Cloudflare’s production use of Cap’n Proto/KJ.
Executable Images and Service Launch Authority — Capability-native executable identity, package ingestion, role-specific launch authority, service deployment, and migration away from manifest-builtin binaries.
Go Runtime — Go runtime plan for GOOS=capos, memory growth, TLS, scheduling, and networking.
Host-Side SDKs — Host-side capOS SDKs: released registry clients, their trust boundaries, and the separately identified source-tree build-identity APIs and proofs.
IX-on-capOS Hosting — IX as a package corpus, content-addressed build/store model, and a capability-native build-service surface for capOS.
Language Support Status and Plans — Current and planned programming-language support on capOS.
Linux Sandboxes and Virtualization for Workloads — Linux sandbox, container, gVisor, KVM, microVM, and CPU-isolation prior art for generic Linux workload execution.
LLVM Target — Custom LLVM target triple requirements: kernel on x86_64-unknown-none, userspace on x86_64-unknown-capos; calling conventions, TLS, relocations, and Go/C runtime porting.
Lua Scripting — Capability-scoped Lua runner with curated libraries and explicit grants.
POSIX Adapter — POSIX compatibility adapter (libcapos-posix) over the libcapos C-ABI substrate, with smallest-deps POSIX shell and DNS resolver as the first ports.
POSIX Adapter Dash Port — POSIX adapter Phase P1.4 (dash port) backlog – libcapos-posix file/dir/stdio/env/printf surface, dash vendoring + per-call-site patch, and the test-posix-shell-smoke harness.
Runtime, Networking, and Shell — Runtime/network/shell backlog.
Scientific Agent-Lab Software Stack — Scientific computing, solver, proof-assistant, notebook, and reproducible-package prior art for a capOS-hosted LLM research lab.
Scientific Standard Package and Agent Lab Capabilities — Scientific standard package and agent-lab capability services for CAS, solvers, proof assistants, notebooks, and reproducible research environments.
Userspace Binaries — Native userspace binary model, capos-rt authority handling, language runtimes, and compatibility adapters.
Userspace Runtime — capos-rt entry ABI, heap, CapSet lookup, ring client, and typed userspace capability clients.
WASI Host Adapter — WASI host adapter as a userspace process whose imports are backed by typed capOS capabilities. Phase W.1 host-runtime scaffold landed 2026-05-05 19:12 UTC; Phase W.2 sub-slice 1 (wasm-host binary + empty-instantiation smoke + userspace-image budget bump) landed 2026-05-06 20:19 UTC; Phase W.2 sub-slice 2 (Preview 1 stdout-only imports plus probe-driven nosys=52 proof) landed 2026-05-07 08:03 UTC; Phase W.2 sub-slice 3 (Rust hello, wasi smoke + manifest-payload load path) landed 2026-05-07 09:36 UTC; Phase W.2 sub-slice 4 (C hello, wasi smoke) landed 2026-05-07 10:53 UTC and closes Phase W.2; Phase W.3 (per-instance CapSet plumbing + LaunchParameters bounded-text argv grant + wasi-cli-args smoke) landed 2026-05-07 18:25 UTC; Phase W.4 (random_get production-ready against the kernel EntropySource cap + wasi-random granted/ungranted smokes) landed 2026-05-07 20:09 UTC. The Phase W.4 clock_time_get(CLOCKID_REALTIME) deferral closed 2026-07-15 12:26 UTC: REALTIME reads UTC through the manifest-granted kernel WallClock cap (CapSet slot clock) and stays fail-closed ERRNO_NOSYS without entering the kernel when ungranted, proven by the make test-wasi-clock / make test-wasi-clock-ungranted granted/refusal smokes; WallClock is a fixed-boot-base UTC source so timestamps are plausible but not cross-reboot comparable. The poll_oneoff deferral closed 2026-07-15 13:15 UTC: monotonic clock subscriptions block a single Timer.sleep until the earliest deadline and fire one clock event per elapsed subscription, proven by make test-wasi-poll; realtime clock and fd-readiness subscriptions fail closed ERRNO_NOTSUP (fd readiness stays blocked on W.6). The poll_oneoff realtime gap closed 2026-07-15 15:27 UTC: CLOCKID_REALTIME clock subscriptions are now serviced over the manifest-granted WallClock cap (both clocks advance from the same kernel timebase, so a single monotonic Timer.sleep covers a mixed deadline set), proven by make test-wasi-poll-realtime; a realtime subscription with no WallClock grant stays fail-closed ERRNO_NOTSUP without entering the kernel, proven by make test-wasi-poll-realtime-ungranted. Only fd-readiness subscriptions remain fail-closed, blocked on W.6. A 2026-05-13 compatibility-import smoke promotes authority-free Preview 1 imports (clock_res_get(MONOTONIC), sched_yield, and stdio fd metadata/seek behavior); a 2026-05-13 bounded environment grant reflects initConfig.init.wasiEnv through environ_get / environ_sizes_get, with make wasi-env-negative-check covering count, per-entry, total-byte, and interior-NUL rejection; the refusal smoke (make test-wasi-preview1-refusals) proves nine representative blocked filesystem/socket imports fail closed with ERRNO_NOSYS = 52 (extended 2026-05-13 21:15 UTC to cover fd_pread, fd_pwrite, path_create_directory, sock_shutdown in addition to the original five). Open Questions §1 (per-instance vs per-process) and §3 (poll_oneoff semantics) resolved 2026-05-13 16:46 UTC; §6 (environ_get source) and §7 (args_get source) reclassified as resolved by Phase W.3 with the bounded manifest-text grants. W.5 (filesystem) closed 2026-05-17 05:42 UTC: the wasm-host installs the manifest-granted root Directory cap (CapSet slot root) as a single Preview 1 preopen at fd 3 (/preopen-0) and implements path_open, fd_read, fd_write, fd_seek, fd_close, fd_filestat_get, fd_prestat_get, and fd_prestat_dir_name against the kernel Directory / File cap interface in capos-wasm/src/wasi/fs.rs (POSIX P1.4 Slice 4 resolver shape); fd_readdir over the preopen Directory.list landed 2026-05-24 08:44 UTC; fd_tell (host-side position read) and fd_filestat_set_size (over File.truncate) landed 2026-05-24 09:34 UTC, completing the File-cap method triad with no schema change; path_create_directory and path_remove_directory (over Directory.mkdir/remove, same preopen sandbox, no schema change) landed 2026-05-24 10:09 UTC; fd_pread and fd_pwrite landed 2026-05-30 14:49 UTC as positional I/O over the host File cap (no schema change – File.read/File.write already carry an explicit offset), using the WASI-supplied offset and leaving the fd’s stream position untouched (the positional-I/O invariant). path_filestat_get and path_unlink_file landed 2026-05-30 as path-resolved metadata/removal over the host File.stat / Directory.remove caps (no schema change). The QEMU-local path_rename proof landed 2026-07-16 00:47 UTC over the existing disk-backed writable Directory.rename @6, with same-directory success and fail-closed cross-fd, cross-directory, missing-source, occupied-destination, and preopen-escape evidence; path_filestat_set_times and the symlink/link family remain fail-closed. The make test-wasi-fs smoke (system-wasi-fs.cue, demos/wasi-fs/, tools/qemu-wasi-fs-smoke.sh) completes a full path_open(CREAT+TRUNC) / fd_write / fd_close / re-open / fd_filestat_get / fd_seek / fd_read round trip, asserts the preopen sandbox refuses absolute paths and .. segments with ERRNO_NOTCAPABLE = 76, proves the positional fd_pwrite/fd_pread round trip leaves the offset unchanged plus the negative-offset and stdio refusals, and stats smoke.txt by path (size 4, regular-file type) before unlinking it; the existing make test-wasi-preview1-refusals smoke continues to pass with W.5-split errnos (path_open / fd_prestat_get / fd_read / path_create_directory / fd_pread / fd_pwrite / path_filestat_get / path_unlink_file now return ERRNO_BADF = 8 against an absent preopen, only the socket imports stay at ERRNO_NOSYS = 52). Store / Namespace integration remains deferred. W.6 (sockets) remains blocked on the userspace network stack. W.7 (Component Model) and W.8 (TinyGo / Go-on-WASI CUE evaluator) remain blocked on the std-userspace decision.

Shells and Interactive Surfaces

Boot to Shell — Login, setup, session, credential, and broker path from boot into the native shell.
Browser Capability and Agent Web Sessions — Browser profiles, cap-native document engines, visual browsing, and agent/shell browser sessions as capability-scoped services.
Browser Engines, Document Engines, and Agent Browsers — Browser engine portability, cap-native document-engine options, and agent-browser patterns for capOS browser capabilities.
capOS-Hosted Agent Swarms — capOS-hosted OpenClaw-like personal agents, agent swarms, harness controls, memory, retrieval, and research agenda.
Chat As Multimedia Substrate — Chat as unified text/audio/video multimedia transport across human, agent, and service participants, with listener-cap delivery and a clean WebRTC mapping.
Default User Avatar — Deterministic default user avatar derived from a stable account identifier, with explicit user override.
Interactive Command Surfaces — Structured command-session model for native interactive applications over typed invocations.
Language Models and Agent Runtime — Language-model, embedder, agent-runner, and browser-agent capability interfaces.
Realtime Voice Agent Shell — Realtime audio agent shell model across browser media, provider sessions, and brokered tools.
Remote Session CapSet Clients — Remote host app model for authenticated capOS sessions, broker-issued CapSet views, and typed capability calls over Cap’n Proto RPC.
Schema Registry — A SchemaRegistry capability that serves Cap’n Proto reflection metadata – interface IDs, method names and ordinals, parameter/result layouts, and doc comments – at runtime, as the machine-readable twin of the System Manual.
Shell — Native, agent-oriented, and POSIX shell models over explicit capability grants.
SSH Shell Gateway — SSH terminal gateway design preserving TerminalSession and broker-issued shell boundaries.
Stateful Task and Job Graphs — Durable stateful task and job graphs for init orchestration, package builds, operator work, and notebook-style run stories without creating a god object.
System Info Capability — SystemInfo capability for MOTD, hostname, deterministic build identity, and shell bundle integration.
System Manual Capability — A built-in man-pages analog: the Manual capability serves Unix-style reference pages, schema-derived interface manuals, and a man-shaped reference corpus through the shell, the self-served web UI, and a typed capnp API.
Telnet over TLS Shell — Optional TLS-protected Telnet TerminalSession gateway with client certificates and credential fallback.

Networking

Azure MANA — Provenance map for the Azure MANA NIC / GDMA wire logic - spec basis, implemented host-conformance wire-format subset, and capOS authority mapping.
Browser Capability and Agent Web Sessions — Browser profiles, cap-native document engines, visual browsing, and agent/shell browser sessions as capability-scoped services.
capOS SDK and Dual Transport — capOS front-door SDK crate with a transport abstraction for in-system and remote clients, plus crate-namespace publication.
capos-service — Userspace service framework (Rust crate capos-service) for lifecycle, endpoint loops, readiness, shutdown, metrics, context, and resource hooks.
Chat As Multimedia Substrate — Chat as unified text/audio/video multimedia transport across human, agent, and service participants, with listener-cap delivery and a clean WebRTC mapping.
Cloud DMA Provider Evidence Inventory — Official AWS/Azure/GCP device-surface facts, an evidence-matrix schema, a live guest-probe checklist, and classification rules for the cloud DMA backend decision.
Cloudflare, Cap’n Proto, Workers RPC, and Cap’n Web — Cloudflare Workers, workerd, Durable Objects, Workers RPC, Cap’n Web, and Cloudflare’s production use of Cap’n Proto/KJ.
GCE gVNIC — Provenance map for the GCE gVNIC (Google Virtual Ethernet) NIC - spec basis from the public gVNIC docs and the GVE Linux driver, the wire-format subset capOS exercises today, and the bounded Nic-cap adaptation proof. capOS has live-GCE inventory, admin-queue/register, raw-frame GQI/QPL TX/RX, and typed Nic-adaptation proofs, but no reusable gVNIC provider service or host conformance suite yet.
Google Drive Storage Backend — Use a Google-authenticated user’s Drive as a capOS storage backend behind the standard storage caps, via a browser-transport near-term path and a native OAuth2/HTTP/TLS backend later.
Network Usability and Post-smoltcp — Network usability, resolver, diagnostics, and post-smoltcp backlog.
Network-Reachable Datapath Scope Decision — Scope decision recording that the real-GCE-boot milestone’s reachable-network-stack requirement means raw-frame TX/RX (Option A), not L4 sockets, grounded in what the billable cloudboot harness actually gates on.
Networking — Network capability architecture from virtio-net smoke to TCP sockets and terminal handoff.
Phase C Userspace NIC Driver Relocation — Phase C design for relocating the virtio-net driver into userspace: the cap-surface delta, the inline-Data Nic ABI (matching the networking-proposal draft), the writable selected-write common-config window (an extension of the accepted notify-doorbell discipline; slice 1 landed 2026-06-02 20:30 UTC at c9518b2d), the userspace-vring slice that reuses the landed production DMA isolation (bounce policy + dma_backend probe + IOMMU IOVA-export), the sustained-receive Nic ABI design used by the multi-frame TCP path, the selected serve-from-userspace 7c-ii(b) socket-authority proof, and retirement of the non-qemu legacy kernel socket grant path.
Pingora — Proxy/server framework as a userspace runtime case study.
Remote Session CapSet Client — Remote session CapSet client backlog.
Remote Session CapSet Clients — Remote host app model for authenticated capOS sessions, broker-issued CapSet views, and typed capability calls over Cap’n Proto RPC.
Spritely, OCapN, and CapTP — Spritely, OCapN, CapTP, netlayers, locators, Syrup, promise pipelining, handoffs, and capability-network lessons for capOS.
SSH Shell Gateway — SSH terminal gateway design preserving TerminalSession and broker-issued shell boundaries.
Telnet over TLS Shell — Optional TLS-protected Telnet TerminalSession gateway with client certificates and credential fallback.
virtio-net — Provenance map for the in-tree modern virtio-net PCI NIC - spec basis, implemented wire-format subset, and capOS authority binding.

Storage, Persistence, and Naming

Cloud DMA Provider Evidence Inventory — Official AWS/Azure/GCP device-surface facts, an evidence-matrix schema, a live guest-probe checklist, and classification rules for the cloud DMA backend decision.
Google Drive Storage Backend — Use a Google-authenticated user’s Drive as a capOS storage backend behind the standard storage caps, via a browser-transport near-term path and a native OAuth2/HTTP/TLS backend later.
Hardware Audit Log Persistence — Durable, tamper-evident persistence and admission policy for the hardware audit log.
Hardware, Boot, and Storage — Hardware bring-up backlog.
Installable System — Ordered implementation track turning the installable-system proposal into work grounded in the landed BlockDevice/filesystem/Store/writable-persistence/disk-image contracts.
Installable System — Design for an installed, persistent capOS that boots from disk and keeps mutable system configuration across reboots, composed with the immutable boot manifest.
IX-on-capOS Hosting — IX as a package corpus, content-addressed build/store model, and a capability-native build-service surface for capOS.
Self-Hosted Task Backend — Decomposition for self-hosting the multi-agent development task backend (the loopyard successor) as capOS-native capability services.
Standard App Capabilities — Per-app AppData storage, a user-mediated powerbox/file-picker grant, and attenuated capability sharing as standard app-facing capabilities.
Stateful Task and Job Graphs — Durable stateful task and job graphs for init orchestration, package builds, operator work, and notebook-style run stories without creating a god object.
Storage and Naming — Capability-native storage, namespaces, boot packages, volumes, and persistence model.
Virtio-9p Host Directory Passthrough — QEMU-hosted virtio-9p host-directory passthrough serving read-only and opt-in writable Directory/File capabilities for dev-loop payload injection, artifact export, and a host-inspectable task-backend persistence shortcut.
Volume Encryption — Encryption-at-rest model for system and user volumes with recovery and KMS options.

Identity, Policy, and User Accounts

Configuration — How operators extend the default capOS boot manifest with a gitignored system.local.cue overlay and convert CUE-authored data to specified Cap’n Proto schemas.
Default User Avatar — Deterministic default user avatar derived from a stable account identifier, with explicit user override.
Delegated Subject Context — Future delegated-subject and act-on-behalf-of capability model.
Formal MAC/MIC — Formal mandatory access and integrity model for future policy and proof work.
Google Drive Storage Backend — Use a Google-authenticated user’s Drive as a capOS storage backend behind the standard storage caps, via a browser-transport near-term path and a native OAuth2/HTTP/TLS backend later.
Local Users, Storage, and Policy — Identity/local-user backlog.
OIDC and OAuth2 — Federated login, OAuth2 clients, token capabilities, JWKS, DPoP, and broker integration.
Rejected: Endpoint Badges as Service Identity — Post-mortem of the rejected seL4-style endpoint badge service identity model.
Remote Session CapSet Client — Remote session CapSet client backlog.
Remote Session CapSet Clients — Remote host app model for authenticated capOS sessions, broker-issued CapSet views, and typed capability calls over Cap’n Proto RPC.
Service Object Identity Migration — Superseded large-chunk migration plan for service object identity, retained as historical context after the active direction changed to session-bound invocation context.
Session Context — Current session-bound invocation context, endpoint caller-session metadata, disclosure, transfer-scope, and liveness rules.
Session-Bound Invocation Context — Implementation plan for one-session-per-process invocation context and session-keyed shared services.
Session-Bound Invocation Context — Session-bound invocation context and privacy-aware disclosure model replacing service-object identity migration.
Standard App Capabilities — Per-app AppData storage, a user-mediated powerbox/file-picker grant, and attenuated capability sharing as standard app-facing capabilities.
System Configuration and Operator Extensibility — Layered CUE configuration model for operator boot-manifest overlays, host-user injection, and per-user toolchain caches.
User Identity and Policy — User, session, profile, RBAC/ABAC/MAC, and policy-layer model for capability grants.

Cryptography, Certificates, and Trust

Certificates / TLS — Bounded implementation slice chain for the certificates/TLS track, from vendored verifier crates to a capOS-terminated Web UI endpoint.
Certificates and TLS — Capability-native X.509, trust store, ACME, pinning, and TLS configuration model.
Cryptography and Key Management — Capability model for keys, signing, encryption, vaults, entropy, and cryptographic policy.
Google Drive Storage Backend — Use a Google-authenticated user’s Drive as a capOS storage backend behind the standard storage caps, via a browser-transport near-term path and a native OAuth2/HTTP/TLS backend later.
Hardware Audit Log Persistence — Durable, tamper-evident persistence and admission policy for the hardware audit log.
OIDC and OAuth2 — Federated login, OAuth2 clients, token capabilities, JWKS, DPoP, and broker integration.
Telnet over TLS Shell — Optional TLS-protected Telnet TerminalSession gateway with client certificates and credential fallback.
Time and Clock Authority — Capability-native wall-clock authority with provenance labeling, clock discipline, and trusted timestamps for audit and TLS.
Volume Encryption — Encryption-at-rest model for system and user volumes with recovery and KMS options.

Security and Verification

ABI Evolution Policy — Compatibility policy for capOS schema and ring ABIs.
AWS Nitro EBS (NVMe storage) — Provenance map for the AWS Nitro EBS NVMe storage shape - spec basis, the standard-NVMe wire subset it shares with docs/devices/nvme.md, and the capOS cloud-shape classification plus DMA-backend policy it binds onto.
Azure managed disk (NVMe storage) — Provenance map for the Azure managed-disk NVMe storage shape - spec basis, the standard-NVMe wire subset it shares with docs/devices/nvme.md, why the older-family virtio-scsi path is out of scope, and the capOS cloud-shape classification plus DMA-backend policy it binds onto.
Cloud DMA Provider Evidence Inventory — Official AWS/Azure/GCP device-surface facts, an evidence-matrix schema, a live guest-probe checklist, and classification rules for the cloud DMA backend decision.
Cloud Driver Foundation Gap Analysis — Gap analysis between the existing userspace virtio driver foundation and the blocked cloud NIC/storage driver tasks: what is already proven, the narrow per-task remaining work, and the superseded live-NIC runnable-now claim.
Debug and Trace Authority — Capability-scoped debug session attach, read-only cap-table inspection, ring-trace replay, and sampler authority without ambient process inspection.
Device Manager Refactor — Refactor direction for separating the kernel device authority ledger from QEMU proof scaffolding.
DMA Assurance Model — Assurance model for DMA authority, backend selection, and proof obligations.
DMA Isolation — DMA isolation model for device memory, IOMMU policy, and capability-scoped hardware access.
DMA User-Space Driver Isolation — DMA, user-space driver, vIOMMU, and no-IOMMU bounce-buffer design consequences for capOS device authority.
Error Handling — Current error model for capability ring CQE status, CapException payloads, endpoint RETURN exceptions, and ordinary schema result unions.
Formal MAC/MIC — Formal mandatory access and integrity model for future policy and proof work.
Full-Scope Review 2026-06-09 — Findings ledger and decomposition source for the 2026-06-09 full-scope review of the tree at 50e8eaba (review base bb776326e, 2026-05-23).
GCP Persistent Disk (storage) — Provenance map for the GCP Persistent Disk storage shape - virtio-scsi vs NVMe families, the standard-NVMe wire subset it shares with docs/devices/nvme.md, the capOS cloud-shape classification, the DMA-backend policy on no-IOMMU GCE shapes, the local production brokered NVMe provider chain, and the bounded live-GCE NVMe Persistent Disk read proof.
IOMMU Remapping Grounding — Primary-source grounding for Intel VT-d (landed under cfg(qemu)), AMD-Vi, and QEMU IOMMU remapping work.
Memory Authority Model — Memory authority model backlog.
Memory Authority Model — Memory authority, residency classes, mapping consistency, OOM boundaries, and proof obligations.
NVMe — Provenance map for the NVMe controller wire subset capOS touches - conditional Model B validator scan targets, the read-only userspace bind, the reset-only CC selected-write claim, the no-IOMMU manager-op controller enable and admin IDENTIFY verbs, the brokered admin and I/O queue pairs, the always-built probe-gated BlockDevice READ/WRITE/FLUSH data plane, one live-GCE Persistent Disk read proof, and the dedicated BlockDevice data-completion Interrupt route - with spec basis and capOS authority mapping.
NVMe Model B Doorbell DMA Validator — Conditional DMA-address ownership model for the userspace NVMe storage provider: provider-written queue-base and PRP/SGL addresses require a non-host-physical device-visible namespace; no-IOMMU GCP planning must use brokered bounce address publication instead.
Panic Surface Inventory — Panic/unwrap/expect inventory.
Public Release and Maintainer Boundaries — Public release posture, maintainer boundaries, issue intake, and repository hygiene gates.
Remote Session UI Security — Web-security hardening posture for the trusted local remote-session-ui bridge, the capOS-served Web UI, public-origin carry-over policy, and the Tauri desktop wrapper.
Repository Composition — Repository scope, sibling project split criteria, and cross-repository organization plan.
Resource Governance — System-wide contract for structural limits, quotas, reservation, admission, backpressure, fairness, and resource donation.
Security and Verification — Security/verification backlog.
Security and Verification — Security review vocabulary, trust-boundary checklist, and verification tracks for capOS.
Security Verification Track Registry — Manual reference for Security Verification Track labels.
Session Archive & Gantt Effort — A pipeline to collect, normalize, and archive per-task effort data from the run-telemetry log and agent session transcripts, enabling development timeline visualization and task-duration prediction.
Shared Mapping Identity and Object Pins — Identity and lifetime contract for MemoryObject-backed mappings and future shared park words.
Trust Boundaries — The reviewer’s authority-boundary inventory.
Trusted Build Inputs — Trusted toolchain inventory.
Verification Workflow — The verification gates used by capOS.
WebUI Protected Ingress Lanes — Distinct authority lanes for the capOS-served Web UI ingress: a public anonymous lane plus protected local-health/recovery and provider-health lanes selected by transport provenance, with per-lane charge/deadline/dispatch/release/overload invariants.

Services, Operations, and Monitoring

Benchmarks — Current benchmark policy and results.
Capability-Infrastructure Cluster — Decomposition of the near-term capability-infrastructure cluster: matured proposals and Stage 6 remainder that share the schema serial surface.
capos-service — Userspace service framework (Rust crate capos-service) for lifecycle, endpoint loops, readiness, shutdown, metrics, context, and resource hooks.
Claim C2 Ring Measurement Closure — 2026-08-02 — Raw and summarized evidence closing the three remaining Claim C2 ring measurements.
Claim C2 Ring Measurement Evidence — 2026-08-02 — Raw and summarized evidence for the 2026-08-02 Claim C2 ring measurement run.
Cloud Deployment — Cloud VM deployment plan covering hardware abstraction, storage, networking, and aarch64.
Cloud Metadata — Cloud metadata and config-drive bootstrap through scoped configuration capabilities.
Configuration — How operators extend the default capOS boot manifest with a gitignored system.local.cue overlay and convert CUE-authored data to specified Cap’n Proto schemas.
Crash Recovery and Supervision — Unplanned-failure detection, stale-cap propagation, structured crash records, watchdog liveness, and bounded restart policy for capOS services.
Debug and Trace Authority — Capability-scoped debug session attach, read-only cap-table inspection, ring-trace replay, and sampler authority without ambient process inspection.
Direct IPC Timing Evidence — 2026-07-27 — Raw and summarized evidence for the 2026-07-27 direct-IPC handoff timing record.
Executable Images and Service Launch Authority — Capability-native executable identity, package ingestion, role-specific launch authority, service deployment, and migration away from manifest-builtin binaries.
Hardware Audit Log Persistence — Durable, tamper-evident persistence and admission policy for the hardware audit log.
HPC Parallel Processing Patterns — Generic single-node and multi-node parallel processing patterns for HPC-style benchmark coverage.
Live Upgrade — Service replacement, capability retargeting, quiesce/resume, and in-flight call handling.
Rejected: Endpoint Badges as Service Identity — Post-mortem of the rejected seL4-style endpoint badge service identity model.
Resource Governance — System-wide contract for structural limits, quotas, reservation, admission, backpressure, fairness, and resource donation.
Scientific Standard Package and Agent Lab Capabilities — Scientific standard package and agent-lab capability services for CAS, solvers, proof assistants, notebooks, and reproducible research environments.
Self-Hosted Task Backend — Decomposition for self-hosting the multi-agent development task backend (the loopyard successor) as capOS-native capability services.
Service Architecture — Capability-based service composition, authority-at-spawn, exports, and service graph policy.
Session Context — Current session-bound invocation context, endpoint caller-session metadata, disclosure, transfer-scope, and liveness rules.
Session-Bound Invocation Context — Session-bound invocation context and privacy-aware disclosure model replacing service-object identity migration.
Stateful Task and Job Graphs — Durable stateful task and job graphs for init orchestration, package builds, operator work, and notebook-style run stories without creating a god object.
Superseded: Service Object Capabilities — Superseded service-minted object capability model that was replaced by session-bound invocation context.
System Configuration and Operator Extensibility — Layered CUE configuration model for operator boot-manifest overlays, host-user injection, and per-user toolchain caches.
System Monitoring — Capability-scoped logs, metrics, health checks, traces, crash records, and status views.
System Performance Benchmarks — Correctness-gated benchmark model for primitives, workloads, and user stories.
Time and Clock Authority — Capability-native wall-clock authority with provenance labeling, clock discipline, and trusted timestamps for audit and TLS.
Virtio-9p Host Directory Passthrough — QEMU-hosted virtio-9p host-directory passthrough serving read-only and opt-in writable Directory/File capabilities for dev-loop payload injection, artifact export, and a host-inspectable task-backend persistence shortcut.

AI, Agents, GPU, and Robotics

Browser Capability and Agent Web Sessions — Browser profiles, cap-native document engines, visual browsing, and agent/shell browser sessions as capability-scoped services.
Browser Engines, Document Engines, and Agent Browsers — Browser engine portability, cap-native document-engine options, and agent-browser patterns for capOS browser capabilities.
capOS Agentic Development Experiment — Longitudinal study design for using capOS development sessions, subagents, reviews, and recap tooling as an agentic software-engineering experiment.
capOS As A Robot Brain — Robotics service graph, actuator gateway, safety monitor, realtime island, and ROS bridge model.
capOS Repository Harness Engineering — Repository-local harness engineering for making capOS legible, checkable, and safer for long-running coding agents.
capOS-Hosted Agent Swarms — capOS-hosted OpenClaw-like personal agents, agent swarms, harness controls, memory, retrieval, and research agenda.
Chat As Multimedia Substrate — Chat as unified text/audio/video multimedia transport across human, agent, and service participants, with listener-cap delivery and a clean WebRTC mapping.
Deriving Task Conflict Domains — How task authors derive conflict domains from implementation, authority, proof, and record scope.
Enterprise Agent Game Showcase — Enterprise agent-management showcase through a capability-scoped business simulation game.
GPU Capability — Capability-oriented GPU access, driver isolation, memory sharing, and CUDA-style compute model.
Hosted Agent Harnesses — OpenClaw-like harnesses, swarms, memory/wiki systems, and agent orchestration research for capOS-hosted agents.
Language Models and Agent Runtime — Language-model, embedder, agent-runner, and browser-agent capability interfaces.
Linux Sandboxes and Virtualization for Workloads — Linux sandbox, container, gVisor, KVM, microVM, and CPU-isolation prior art for generic Linux workload execution.
Multimedia Pipeline Latency — Research note.
NO_HZ, SQPOLL, and Realtime Scheduling — Linux NO_HZ, io_uring SQPOLL, CPU isolation, PREEMPT_RT, SCHED_DEADLINE, and seL4 MCS grounding for capOS timer and realtime design.
Realtime Multimodal Agent APIs — Research note.
Realtime Voice Agent Shell — Realtime audio agent shell model across browser media, provider sessions, and brokered tools.
Repository Agent Harness — A compact routing map for repository state, design authority, workflow gates, concurrency, and review.
Robotics Realtime Control — Research note.
Scientific Agent-Lab Software Stack — Scientific computing, solver, proof-assistant, notebook, and reproducible-package prior art for a capOS-hosted LLM research lab.
Scientific Standard Package and Agent Lab Capabilities — Scientific standard package and agent-lab capability services for CAS, solvers, proof assistants, notebooks, and reproducible research environments.
Self-Hosted Task Backend — Decomposition for self-hosting the multi-agent development task backend (the loopyard successor) as capOS-native capability services.
Small LLM Survey — Model candidates for the on-ISO local LLM.
Tickless and Realtime Scheduling — Tickless idle, SQPOLL nohz CPU isolation, request deadlines, scheduling contexts, and realtime islands.

Demos, Onboarding, and Contributor Surfaces

Aurelian Frontier — Aurelian Frontier game-depth backlog.
Aurelian Frontier — Capability-native Aurelian Frontier game design, mission model, content pipeline, and QEMU proof slice.
Aurelian Frontier (proof slice) — Multi-process Aurelian Frontier smoke proof.
Contributor Quest Mechanics — Contributor reward mechanics layered on Aurelian Frontier without granting repository authority.
Enterprise Agent Game Showcase — Enterprise agent-management showcase through a capability-scoped business simulation game.
First Chat Demo — Smallest resident-service proof.
Game Mechanics Prior Art — Grounded mechanics research for Aurelian Frontier seasonal play, markets, construction, and tactical combat.
Paperclips Terminal Demo — Clean-room incremental terminal demo.
Paperclips Terminal Demo — Paperclips terminal demo backlog and content migration notes.
Shared-Service Demos — Demo backlog.

Build, Tooling, and Documentation Site

ABI Evolution Policy — Compatibility policy for capOS schema and ring ABIs.
Build, Boot, and Test — Build, ISO, QEMU, host-test commands.
capOS Agentic Development Experiment — Longitudinal study design for using capOS development sessions, subagents, reviews, and recap tooling as an agentic software-engineering experiment.
capOS Repository Harness Engineering — Repository-local harness engineering for making capOS legible, checkable, and safer for long-running coding agents.
Current Design Authority — Current-design authority map and proposal lifecycle rule for keeping implemented behavior out of archival proposal records.
Deriving Task Conflict Domains — How task authors derive conflict domains from implementation, authority, proof, and record scope.
Documentation Workflow — How the mdBook site and generated PDF manual are positioned and built.
mdBook Documentation Site — Documentation-site structure, metadata, status vocabulary, and curation workflow.
Proof Marker Sets — Declarative QEMU proof marker sets, the shared asserter, and the proof registry.
Repository Agent Harness — A compact routing map for repository state, design authority, workflow gates, concurrency, and review.
Repository Composition — Repository scope, sibling project split criteria, and cross-repository organization plan.
Repository Map — Source-tree subsystem index.
Schema Registry — A SchemaRegistry capability that serves Cap’n Proto reflection metadata – interface IDs, method names and ordinals, parameter/result layouts, and doc comments – at runtime, as the machine-readable twin of the System Manual.
System Manual Capability — A built-in man-pages analog: the Manual capability serves Unix-style reference pages, schema-derived interface manuals, and a man-shaped reference corpus through the shell, the self-served web UI, and a typed capnp API.
Trusted Build Inputs — Trusted toolchain inventory.
Workflow Gates Registry — Machine-readable workflow-gates registry: the single authority for gate definitions.

Research and Papers

Claim C2 Ring Measurement Closure — 2026-08-02 — Raw and summarized evidence closing the three remaining Claim C2 ring measurements.
Claim C2 Ring Measurement Evidence — 2026-08-02 — Raw and summarized evidence for the 2026-08-02 Claim C2 ring measurement run.
Crash Recovery and Supervision — Prior-art survey of crash recovery and supervision for the Crash Recovery proposal.
Debug, Trace, and Profiling Authority — Prior-art survey of debug/trace/profile authority for the Debug and Trace proposal.
Papers — Long-form research write-ups.
Research — Index of research deep-dive reports informing capOS design.
seL4 HAMR — Evaluation of seL4 HAMR (AADL/Slang/CAmkES) versus the capOS Cap’n Proto schema-as-contract model.
Time and Clock Authority — Prior-art survey of OS time/clock authority for the Time and Clock proposal.

Prior Art and Comparative OS Research

Capability-Based and Microkernel Operating Systems Survey — Design consequences pulled from the survey.
Cloudflare, Cap’n Proto, Workers RPC, and Cap’n Web — Cloudflare Workers, workerd, Durable Objects, Workers RPC, Cap’n Web, and Cloudflare’s production use of Cap’n Proto/KJ.
EROS, CapROS, Coyotos — Persistent capability-system lineage.
Future Scheduler Architecture — Survey of modern scheduler algorithms and architectures for capOS scheduler evolution.
Game Mechanics Prior Art — Grounded mechanics research for Aurelian Frontier seasonal play, markets, construction, and tactical combat.
Genode — Genode OS Framework: capability-based component model, session routing, VFS plugin architecture, POSIX compatibility, and Sculpt OS – with lessons for capOS.
HPC Parallel Patterns — HPC benchmark and programming-model grounding for generic parallel processing patterns.
Linux Sandboxes and Virtualization for Workloads — Linux sandbox, container, gVisor, KVM, microVM, and CPU-isolation prior art for generic Linux workload execution.
Out-of-Kernel Scheduling — Prior art survey on kernel versus userspace CPU scheduling policy split, with capOS design implications.
Plan 9 and Inferno — Plan 9 and Inferno: per-process namespaces, 9P protocol, file-server-as-service pattern, Dis VM, and Limbo concurrency — applied to capOS capability composition and IPC design.
Scientific Agent-Lab Software Stack — Scientific computing, solver, proof-assistant, notebook, and reproducible-package prior art for a capOS-hosted LLM research lab.
seL4 — Microkernel and capability reference.
Spritely, OCapN, and CapTP — Spritely, OCapN, CapTP, netlayers, locators, Syrup, promise pipelining, handoffs, and capability-network lessons for capOS.
Zircon — Fuchsia Zircon kernel: handle-based capability model, channels, VMARs/VMOs, async ports, and FIDL – with lessons for capOS capability dispatch, IPC, and memory design.

Stage Backlogs and Long-Form Planning

Aurelian Frontier — Aurelian Frontier game-depth backlog.
Capability-Infrastructure Cluster — Decomposition of the near-term capability-infrastructure cluster: matured proposals and Stage 6 remainder that share the schema serial surface.
capOS SDK and Dual Transport — capOS front-door SDK crate with a transport abstraction for in-system and remote clients, plus crate-namespace publication.
Certificates / TLS — Bounded implementation slice chain for the certificates/TLS track, from vendored verifier crates to a capOS-terminated Web UI endpoint.
Cloud Driver Foundation Gap Analysis — Gap analysis between the existing userspace virtio driver foundation and the blocked cloud NIC/storage driver tasks: what is already proven, the narrow per-task remaining work, and the superseded live-NIC runnable-now claim.
Cloud Image Import and Serial-Console Boot — Cloud provider disk-image import and serial-console-boot notes.
Device Manager Refactor — Refactor direction for separating the kernel device authority ledger from QEMU proof scaffolding.
Full-Scope Review 2026-06-09 — Findings ledger and decomposition source for the 2026-06-09 full-scope review of the tree at 50e8eaba (review base bb776326e, 2026-05-23).
Go VirtualMemory Contract — VirtualMemory cap contract for Go.
Hardware, Boot, and Storage — Hardware bring-up backlog.
Installable System — Ordered implementation track turning the installable-system proposal into work grounded in the landed BlockDevice/filesystem/Store/writable-persistence/disk-image contracts.
Local Users, Storage, and Policy — Identity/local-user backlog.
Network Usability and Post-smoltcp — Network usability, resolver, diagnostics, and post-smoltcp backlog.
NVMe Model B Doorbell DMA Validator — Conditional DMA-address ownership model for the userspace NVMe storage provider: provider-written queue-base and PRP/SGL addresses require a non-host-physical device-visible namespace; no-IOMMU GCP planning must use brokered bounce address publication instead.
Paperclips Terminal Demo — Paperclips terminal demo backlog and content migration notes.
POSIX Adapter Dash Port — POSIX adapter Phase P1.4 (dash port) backlog – libcapos-posix file/dir/stdio/env/printf surface, dash vendoring + per-call-site patch, and the test-posix-shell-smoke harness.
Proposal Group Archive — Archived proposal cluster.
Remote Session CapSet Client — Remote session CapSet client backlog.
Research and Design Gaps — Research/design gap triage backlog.
Run Targets, Init Mandate, and Default-Run Integration — Run-target governance.
Runtime, Networking, and Shell — Runtime/network/shell backlog.
Scheduler Evolution — Detailed task decomposition for future capOS scheduler evolution.
Security and Verification — Security/verification backlog.
Self-Hosted Task Backend — Decomposition for self-hosting the multi-agent development task backend (the loopyard successor) as capOS-native capability services.
Service Object Identity Migration — Superseded large-chunk migration plan for service object identity, retained as historical context after the active direction changed to session-bound invocation context.
Session Archive & Gantt Effort — A pipeline to collect, normalize, and archive per-task effort data from the run-telemetry log and agent session transcripts, enabling development timeline visualization and task-duration prediction.
Session-Bound Invocation Context — Implementation plan for one-session-per-process invocation context and session-keyed shared services.
Shared-Service Demos — Demo backlog.
SMP Phase C — SMP backlog.
Stage 6 Capability Semantics — Stage 6 capability work.
Virtio-9p Host Directory Passthrough — QEMU-hosted virtio-9p host-directory passthrough serving read-only and opt-in writable Directory/File capabilities for dev-loop payload injection, artifact export, and a host-inspectable task-backend persistence shortcut.

Capabilities And Security

POSIX fork/execve fd Inheritance — Target POSIX fork/execve full-fd-table inheritance for the recording shim, reconciled with the capability model, so unmodified POSIX software inherits stdio/cwd without bespoke per-app dup2 patches.

Hardware

Network-Reachable Datapath Scope Decision — Scope decision recording that the real-GCE-boot milestone’s reachable-network-stack requirement means raw-frame TX/RX (Option A), not L4 sockets, grounded in what the billable cloudboot harness actually gates on.
Phase C Userspace NIC Driver Relocation — Phase C design for relocating the virtio-net driver into userspace: the cap-surface delta, the inline-Data Nic ABI (matching the networking-proposal draft), the writable selected-write common-config window (an extension of the accepted notify-doorbell discipline; slice 1 landed 2026-06-02 20:30 UTC at c9518b2d), the userspace-vring slice that reuses the landed production DMA isolation (bounce policy + dma_backend probe + IOMMU IOVA-export), the sustained-receive Nic ABI design used by the multi-frame TCP path, the selected serve-from-userspace 7c-ii(b) socket-authority proof, and retirement of the non-qemu legacy kernel socket grant path.
Real-Filesystem Decision — Real-filesystem direction for capOS: a role-split between capnp-native managed state and read-only FAT32 for host-populated/interop images, with ext4-read deferred and FAT write rejected, grounded in the existing Directory/File/Store cap surface and the storage layouts already in tree.

Hardware And Drivers

ATAPI CD-ROM + ISO 9660 — Provenance map for the planned CD-ROM boot/install ATAPI PIO reader and read-only ISO 9660 driver - spec basis, implemented wire-format subset, and boot-only kernel-owned capOS mapping.
AWS Nitro EBS (NVMe storage) — Provenance map for the AWS Nitro EBS NVMe storage shape - spec basis, the standard-NVMe wire subset it shares with docs/devices/nvme.md, and the capOS cloud-shape classification plus DMA-backend policy it binds onto.
Azure MANA — Provenance map for the Azure MANA NIC / GDMA wire logic - spec basis, implemented host-conformance wire-format subset, and capOS authority mapping.
Azure managed disk (NVMe storage) — Provenance map for the Azure managed-disk NVMe storage shape - spec basis, the standard-NVMe wire subset it shares with docs/devices/nvme.md, why the older-family virtio-scsi path is out of scope, and the capOS cloud-shape classification plus DMA-backend policy it binds onto.
Device Driver Specifications — Per-device driver specs - cited authoritative spec, implemented wire-format subset, and capOS authority mapping.
Device Spec Template — Blank three-part device-spec template - copy to docs/devices/.md when starting a driver.
DMA User-Space Driver Isolation — DMA, user-space driver, vIOMMU, and no-IOMMU bounce-buffer design consequences for capOS device authority.
FAT32 (read-only backer) — Provenance map for the read-only FAT32 Directory/File backer over virtio-blk and NVMe - spec basis, the vendored fatfs read subset used, timestamp provenance limits, and the capOS cap mapping.
GCE gVNIC — Provenance map for the GCE gVNIC (Google Virtual Ethernet) NIC - spec basis from the public gVNIC docs and the GVE Linux driver, the wire-format subset capOS exercises today, and the bounded Nic-cap adaptation proof. capOS has live-GCE inventory, admin-queue/register, raw-frame GQI/QPL TX/RX, and typed Nic-adaptation proofs, but no reusable gVNIC provider service or host conformance suite yet.
GCP Persistent Disk (storage) — Provenance map for the GCP Persistent Disk storage shape - virtio-scsi vs NVMe families, the standard-NVMe wire subset it shares with docs/devices/nvme.md, the capOS cloud-shape classification, the DMA-backend policy on no-IOMMU GCE shapes, the local production brokered NVMe provider chain, and the bounded live-GCE NVMe Persistent Disk read proof.
NVMe — Provenance map for the NVMe controller wire subset capOS touches - conditional Model B validator scan targets, the read-only userspace bind, the reset-only CC selected-write claim, the no-IOMMU manager-op controller enable and admin IDENTIFY verbs, the brokered admin and I/O queue pairs, the always-built probe-gated BlockDevice READ/WRITE/FLUSH data plane, one live-GCE Persistent Disk read proof, and the dedicated BlockDevice data-completion Interrupt route - with spec basis and capOS authority mapping.
virtio-9p — Provenance map for the QEMU-fixture virtio-9p host-directory driver - spec basis, the implemented 9P2000.L read and write wire-format subsets, and the read-only and opt-in writable Directory/File capabilities it serves over the host share.
virtio-blk — Provenance map for the QEMU-fixture virtio-blk BlockDevice driver - spec basis, implemented wire-format subset, capOS authority binding, and why it is a qemu-gated fixture rather than the production storage route.
virtio-net — Provenance map for the in-tree modern virtio-net PCI NIC - spec basis, implemented wire-format subset, and capOS authority binding.
virtio-rng — Provenance map for the in-tree virtio-rng entropy device - spec basis, implemented wire-format subset, and its role as a QEMU-only DDF metadata and IOMMU-remapping hardware-DMA proof fixture (no userspace-facing capability, not a production driver).

Programming Languages And Runtimes

POSIX fork/execve fd Inheritance — Target POSIX fork/execve full-fd-table inheritance for the recording shim, reconciled with the capability model, so unmodified POSIX software inherits stdio/cwd without bespoke per-app dup2 patches.

Remote Session

Remote Session CapSet Clients — Remote host app model for authenticated capOS sessions, broker-issued CapSet views, and typed capability calls over Cap’n Proto RPC.
Remote Session UI Security — Web-security hardening posture for the trusted local remote-session-ui bridge, the capOS-served Web UI, public-origin carry-over policy, and the Tauri desktop wrapper.
Resource Governance — System-wide contract for structural limits, quotas, reservation, admission, backpressure, fairness, and resource donation.
WebUI Protected Ingress Lanes — Distinct authority lanes for the capOS-served Web UI ingress: a public anonymous lane plus protected local-health/recovery and provider-health lanes selected by transport provenance, with per-lane charge/deadline/dispatch/release/overload invariants.

Security

Phase C Userspace NIC Driver Relocation — Phase C design for relocating the virtio-net driver into userspace: the cap-surface delta, the inline-Data Nic ABI (matching the networking-proposal draft), the writable selected-write common-config window (an extension of the accepted notify-doorbell discipline; slice 1 landed 2026-06-02 20:30 UTC at c9518b2d), the userspace-vring slice that reuses the landed production DMA isolation (bounce policy + dma_backend probe + IOMMU IOVA-export), the sustained-receive Nic ABI design used by the multi-frame TCP path, the selected serve-from-userspace 7c-ii(b) socket-authority proof, and retirement of the non-qemu legacy kernel socket grant path.

Storage

FAT32 (read-only backer) — Provenance map for the read-only FAT32 Directory/File backer over virtio-blk and NVMe - spec basis, the vendored fatfs read subset used, timestamp provenance limits, and the capOS cap mapping.
Real-Filesystem Decision — Real-filesystem direction for capOS: a role-split between capnp-native managed state and read-only FAT32 for host-populated/interop images, with ext4-read deferred and FAT write rejected, grounded in the existing Directory/File/Store cap surface and the storage layouts already in tree.
virtio-9p — Provenance map for the QEMU-fixture virtio-9p host-directory driver - spec basis, the implemented 9P2000.L read and write wire-format subsets, and the read-only and opt-in writable Directory/File capabilities it serves over the host share.
virtio-blk — Provenance map for the QEMU-fixture virtio-blk BlockDevice driver - spec basis, implemented wire-format subset, capOS authority binding, and why it is a qemu-gated fixture rather than the production storage route.

Workflow

Containerised Build at a Canonical Path — Opt-in containerised compilation at a canonical path, so sccache shares first-party build output across capOS worktrees.

Keyboard shortcuts

capOS Documentation