Fimeg/SouveraineOS
Watch
1
0
Fork
You've already forked SouveraineOS
 0
Code Releases Activity

task 53: shipped as a package, cold boot verified

Browse source
This commit is contained in:
Fimeg 2026-08-04 10:03:53 -04:00
commit 6b38f643bf
2 changed files with 15 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

17
docs/tasks/53-viewtop-audit-open.md
View file

@ -1,8 +1,10 @@
# TASK 53 — what an audit of the 2026-08-03 compositor work left open
**Status: the ten findings are fixed, pushed, and on the phone**
(`souveraine-viewtop 6446386`, installed 2026-08-04, greetd restarted, session
came back and locked). Created 2026-08-04 from an adversarial read of
**Status: the ten findings are fixed, pushed, and on the phone as a package**
(`souveraine-viewtop 0.1.0.r73.g64463867a7a6-1` = viewtop `6446386`, built on
archdev from `main`, `pacman -U`'d 2026-08-04, `pacman -Qkk` clean). It has
since **survived a cold boot** and `phone-triage.sh` is green on every check.
Created 2026-08-04 from an adversarial read of
`ba4bd03..c98f4c8` and `souveraine 266af98..914e48f`. **Repo:**
`souveraine-viewtop` unless noted.
@ -215,6 +217,15 @@ and with real clients:
- two windows tile on one workspace, closing each leaves the strip at 1 with no
phantom room, and the log is clean — zero warnings that are not smithay's own
two (`drm master`, `mode property blob`).
- and it survived a **cold boot**: `phone-triage.sh` green on all six sections,
`Class=user`, `LockedHint=yes`, lock-then-blank holding.
Method note for the next session: all of that was measured **while locked**,
over the control socket, with clients launched as
`XDG_RUNTIME_DIR=/run/user/1000 WAYLAND_DISPLAY=wayland-1 setsid kitty &`. They
map and tile behind the lock surface, disclosing nothing, because the scene
stays lock-only. `socat` is not installed on the phone; a four-line python
`AF_UNIX` client is the way in.
**Still owed, and it needs the PIN** — the 40 is the user's, so an agent cannot
open the session to check the rest:

2
docs/tasks/README.md
View file

@ -29,7 +29,7 @@ Four that are cheap relative to what they unblock:
| # | Task | What's left |
|---|------|-------------|
| 53 | [viewtop audit: what it left open](53-viewtop-audit-open.md) | All ten fixed and **on the phone** (`6446386`). Hardware found two more the gates did not — `delivered` reported true for a withheld contact, and a drift warning that fired on every normal close. What is left needs the PIN. |
| 53 | [viewtop audit: what it left open](53-viewtop-audit-open.md) | All ten fixed and **on the phone as a package** (`r73.g64463867a7a6`), survived a cold boot. Hardware found two more the gates did not — `delivered` reported true for a withheld contact, and a drift warning that fired on every normal close. What is left needs the PIN. |
| 43 | [viewtop: the Souveraine compositor](43-viewtop-compositor.md) | Runs on the phone. Next lane is the ext-session-lock admission gate. The two-client lock handoff is the thing not to get wrong. |
| 29 | [SouveraineOS Updater](29-souveraine-updater.md) | Ships and installs by `pacman -Syu`. **Read-only on device** until something runs a polkit agent — that is the shell's job. Also owns TASK-42's layer 2. |