33e1c849d1
feat(kernel): ipc cap transfer drops Delegate; one owner per irq line, freed when owner dies
2026-10-27 14:42:28 +01:00
bafc18a5f8
feat(kernel): SystemControl cap for halt, board device table + boot caps to init, RegionAddress syscall, idle loop services irqs
2026-10-26 23:59:57 +01:00
130a82f50d
feat(kernel): shared ABI decoder+proofs, no-panic gate, syscall storm, kani on shrunk kernel
2026-10-26 23:44:09 +01:00
76f10ff1f1
feat(kernel): seL4-style IPC, notifications, status ABI
...
- badges + Mint, Call/Reply/ReplyRecv w/ gen-checked reply slot
- cap transfer (1/msg, copy, needs Delegate, rechecked at delivery)
- notifications: signal/wait/poll/bind, irq -> notification routing
- WaitAny/WaitForInterrupt removed; a0=status, ErrorCode
- libkos: single ecall primitive, compat wrappers + typed new api
- fix: trap return clobbered user t0 on every trap
- fix: wait queues FIFO, delegate keeps badge, fault cap checked
- docs/ipc.md spec, ipc tests, ipc fuzz, kani ntfn + waitqueue
2026-10-26 20:27:38 +01:00
d43421e33e
feat(kernel): object lifetimes via slot generations
...
- SlotGenerations per table, never wraps, retires exhausted slots
- caps to dead/reused process, endpoint, region rejected
- endpoints owned, die w/ owner, waiters woken w/ error
- DropCap syscall + libkos wrapper
- irq table bounds-checked, routes dropped w/ thread
- self-kill terminates caller, exit_thread full cleanup
- sched run_now: switch to named thread, not queue head
- lifetime tests, fuzz kills/recreates, kani gen proofs
2026-10-26 19:54:23 +01:00
e931485ca7
fix: sched round-robin, cap slot OOB panic, clippy, make ci
...
- RunList -> intrusive FIFO, no starvation, no silent drop
- cap table sized to CapSlot range (kani caught OOB panic)
- snake food color test uses const
- kani cfg lint, RUST_MIN_STACK for big kernel struct in tests
2026-10-26 19:08:30 +01:00
8dd36e7d6d
refactor(domain): move irq tests to separate file, fix MemoryRegion import in platform
2026-10-17 23:54:16 +02:00
