Fimeg/SouveraineOS
Watch
1
0
Fork
You've already forked SouveraineOS
 0
Code Releases Activity
No description
102 commits 1 branch 0 tags 2.4 MiB
  • Python 86.4%
  • C 8.4%
  • Shell 5.2%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Fimeg 0100fa34c8 viewtop: assess denial as the base; the lock model is the one thing we cannot take 
Our engine pins are already theirs. The embedder, the eleven-patch
DMSAA/external-texture series, KMS and the GBM atlas path are the
expensive parts and they are readable.

Their lock is a compositor-internal bool with PAM dlopened in-process
and no ext-session-lock served at all. It is invisible to logind and
sessiond, and it gates input against every caller including Annie.
viewtop serves the protocol; sessiond keeps the decision.

Also adds TASK-41 (attested producers), raised out of grip bring-up.
2026-07-28 13:41:37 -04:00
blueline squeekboard: retired — stevia (patched for Hyprland) is the OSK now 2026-07-21 09:09:20 -04:00
docs viewtop: assess denial as the base; the lock model is the one thing we cannot take 2026-07-28 13:41:37 -04:00
PAF PAF: bring the blueline architecture framework into SouveraineOS 2026-07-24 11:04:07 -04:00
STATE.md docs: state machine audit 2026-07-26; retire TASK-26 references 2026-07-26 07:28:27 -04:00

docs/README.md

SouveraineOS — docs

Two subjects live here, and the split is real:

  • this directory — the device. Session authority, lock, power, sensors, shell, packaging, hardware.
  • substrate/ — the agent. Consciousness, memory, sensorium, felt state, federation transport, TUI. Rescued 2026-07-26 out of a gitignored directory on a full disk; read its README before trusting anything in it.

The device — read in this order

Why. SESSION-AUTHORITY-DOCTRINE.md — §13 first (who owns the device), then §4 (never hold state the protocol owns), §9 (sensors are evidence), §10–11 (one authority).

What is built. DEVICE-STATE-MACHINE.md — the unified machine: the audit that found each bug, the evidence model, the error contract, prior art, source health, and the trail.

What is true of the hardware. LOCK-DPMS-LESSONS.md — ordering, the FTS controller, suspend, with receipts.

Contracts and status. SESSION-TRUST-ARCHITECTURE.md (the contract), TRUST-BOUNDARY-MATRIX.md (what is actually gated), SECURITY-AUDIT.md (P1–P7 and the threat register), souveraine-components/ (the authority binaries and their audit ladder).

Designs of record. STORAGE-ENCRYPTION.md, FEDERATION.md, session-authority-boot-order.md.

The shell and its apps. FIRST-CLASS-APPS.md (the nine requirements), SHELL-ECOSYSTEM.md (layer registry, manifests, guarded methods — the substrate doctrine §13's chaining needs), SETTINGS-AUTHORITY.md, AUDIO-PRIVACY.md, INTERFACE-ARCHITECTURE.md (intent), HOW-IT-WORKS.md (current wiring), REFERENCE-EXTRACTION.md (what to steal from whom), SETTINGS-APP-PLAN.md.

Work. tasks/README.md is the index. Single-session units, numbered. Fewer files, not more — a finding goes in the doc that owns the subject.

archive/ is superseded material kept as evidence. It is not authoritative and it is not deleted.

The rule that governs all of it

Where a doc and the code disagree, the code is right — fix one or the other in the same change, and never leave a third story.