carlos / platform Public

Clone
git clone https://amadan.net/carlos/platform

Plain git — no account needed to clone.

Download

Download this file

1# Census overlay claim-merge-main-4 (claim-empty-cohort-done merged with main at abcdd577, which carries claims-on-gate-recover): the two branches both changed the root generation census. Three units re-pinned at their class (authority, E2) over the merged code, carrying both bases: journal-migrate's own child passes the root-task rule (census-ruling-claim-own-child, this branch) and a trusted task is rechecked against its proven image at observation points (PROPOSED-claims-on-gate-recover, main). internal/host's envelope re-pinned. No new read, class or task; the seal stands at main's.
2internal/host/rootgeneration_kernel_linux.go generationKernel.task authority E2 rev3=census-ruling-claim-own-child;identity=root generation census, uid 0;basis=merged: a non-root non-kernel task whose stat ppid equals the kernel's parent (set only by journal-migrate) passes the root-task rule untrusted with namespaces matched and every reference check and the start-time re-read applied (claim-own-child); a task the service lookup trusted is rechecked against the image it was trusted for at observation points, and a kernel with a lookup but no recheck refuses every trusted task (claims-on-gate-recover, PROPOSED); its reads are unchanged file:Readlink@1802 cabba743dce4e569a4c9d9d2d50ffcee7a03d6910652b47c990d485f9e4a77d1
3internal/host/rootgeneration_census_linux.go productionGenerationKernelCensus authority E2 rev3=census-ruling-claim-own-child;basis=merged: passes the context's census parent (generationCensusParent, zero unless journal-migrate set it) to the kernel, and builds each pass's lookup on the census deadline context and wires its recheck (claims-on-gate-recover, PROPOSED); no read of its own c61cbacaf09408d5e1f136a570f17509f163a0fbf2dd8dac47bbde0f5793f73a
4internal/host/rootgeneration_kernel_linux.go type generationKernel authority E2 rev3=census-ruling-claim-own-child;basis=merged: both fields, parent (the pid whose direct children pass the root-task rule untrusted; zero everywhere but journal-migrate) and recheck (rechecks a trusted task against its proven image at observation points, claims-on-gate-recover, PROPOSED); no read of its own c074cac718398a2698f47dd570165917718c97abb5aff8880f2bcf0b748d3999
5@coverage internal/host 99fcde5fe71fca32fc31369a5ae529e1fb5fbd9df4c6c6620ae3b4368ac36a3c
6