feat(kernel): shared ABI decoder+proofs, no-panic gate, syscall storm, kani on shrunk kernel

crates/domain/src/thread/mod.rs

@@ -229,7 +229,7 @@ impl Thread {
     }
 }
 
-pub const MAX_THREADS: usize = 256;
+pub const MAX_THREADS: usize = if cfg!(kani) { 3 } else { 256 };
 
 pub struct ThreadTable {
     threads: [Option<Thread>; MAX_THREADS],
@@ -252,7 +252,10 @@ impl ThreadTable {
     }
 
     fn free_slot(&self) -> Option<usize> {
-        (0..MAX_THREADS).find(|&i| self.threads[i].is_none() && self.generations.is_usable(i))
+        self.threads
+            .iter()
+            .enumerate()
+            .position(|(i, t)| t.is_none() && self.generations.is_usable(i))
     }
 
     pub fn spawn(
@@ -265,7 +268,10 @@ impl ThreadTable {
         let idx = self.free_slot().ok_or(KernelError::TooManyThreads)?;
 
         let id = ThreadId::from_raw(idx as u16);
-        self.threads[idx] = Some(Thread::new(
+        *self
+            .threads
+            .get_mut(idx)
+            .ok_or(KernelError::TooManyThreads)? = Some(Thread::new(
             id,
             process,
             priority,
@@ -286,7 +292,10 @@ impl ThreadTable {
         let idx = self.free_slot().ok_or(KernelError::TooManyThreads)?;
 
         let id = ThreadId::from_raw(idx as u16);
-        self.threads[idx] = Some(Thread::with_context(
+        *self
+            .threads
+            .get_mut(idx)
+            .ok_or(KernelError::TooManyThreads)? = Some(Thread::with_context(
             id,
             process,
             priority,