feat(storage): scoped grants (subtree, ro/rw), narrow-only, release revokes all holders; IPC KEEP_DELEGATE opt-in; shell cd/pwd, programs get ro cwd

2026-10-27 20:20:34 +01:00
parent c603a578c0
commit 1fc5a54f06
38 changed files with 1237 additions and 170 deletions
--- a/disk/readme.txt
+++ b/disk/readme.txt
@@ -2,6 +2,6 @@ Welcome to k-os.

 Every program here runs with only the capabilities it was given:
 this file reached your screen because the shell handed `cat` the
-terminal and the storage server, and nothing else.
+terminal and read-only access to this directory, and nothing else.

-Try:  ls        ls docs        cat docs/shell.txt
+Try:  ls        cd docs        cat shell.txt        cat ../readme.txt