3 Commits

Author	SHA1	Message	Date
Gabriel Kaszewski	154599e3af	feat(kernel): derivation-tree revocation, region caps ... - caps record parent (mint/delegate/ipc), CapRef w/ pid+slot gens - Revoke = delete subtree, keep self; drop/death re-parents children - CreateRegion/MapRegion; mapping lives only as long as its cap - drop Permission::Revoke + object-wide revoke - mint any cap (badge only ep/ntfn), process caps delegable - kani: descendants == subtree; model-based fuzz vs spec	2026-10-26 20:41:03 +01:00
Gabriel Kaszewski	d43421e33e	feat(kernel): object lifetimes via slot generations ... - SlotGenerations per table, never wraps, retires exhausted slots - caps to dead/reused process, endpoint, region rejected - endpoints owned, die w/ owner, waiters woken w/ error - DropCap syscall + libkos wrapper - irq table bounds-checked, routes dropped w/ thread - self-kill terminates caller, exit_thread full cleanup - sched run_now: switch to named thread, not queue head - lifetime tests, fuzz kills/recreates, kani gen proofs	2026-10-26 19:54:23 +01:00
Gabriel Kaszewski	06b51b6712	Implement domain and endpoint modules with capability management, message passing, and scheduling features	2026-10-17 23:09:21 +02:00