.roadmap.hexa_os_kernel

# .roadmap.hexa_os_kernel mk2 — domain SSOT (owner perspective, origin=hexa-os)
# Header on next line; entries follow as one JSON object per line (mk2 schema).
{"type":"header","kind":"domain","name":"hexa_os_kernel","mk":2,"perspective":"owner","origin_repo":"hexa-os","provider_dependency":"hexa-lang:P7-9 fixpoint (runtime.c eradication, @nostd codegen, libc-less ELF emission) + 3-layer law enforcement wire-up (#38+#39+#29+#4) + ARM64/x86_64 codegen (P7-5 reported complete)","goal":"hexa-os kernel domain SSOT: HOS L1 5-rule (HOS1..HOS5) compliance scaffold + freestanding probe path preservation + future law_kernel module pair contract — kernel work is plan-only at this land (compute-bound on upstream)","required_conditions":[{"id":"kernel.cond.1","desc":"HOS1 freestanding compliance: every self/os/ .hexa file declares @nostd attr and links without libc","verifier":"hexa run tool/hos_lint.hexa --rule=HOS1 --root=self/os/","status":"unmet","evidence":[],"blocker_reason":"hexa-lang @nostd attr not yet wired (P7-9 fixpoint upstream)"},{"id":"kernel.cond.2","desc":"HOS2 no-.c-in-kernel-path: self/os/kernel.hexa subtree contains zero .c files (everything .hexa)","verifier":"find self/os -path '*kernel*' -name '*.c' returns empty","status":"met","evidence":["currently 1 .hexa file in self/os/ (probe), zero .c files anywhere in self/"],"blocker_reason":""},{"id":"kernel.cond.3","desc":"HOS3 law-kernel invariant: every syscall fn dispatches through law_check before performing real I/O","verifier":"grep -rE 'fn (sys_|syscall_)' self/ | xargs -I{} grep -L 'law_check' {} returns empty","status":"unmet","evidence":[],"blocker_reason":"no syscall fns implemented yet (probe is placeholder); law_check dispatcher requires hexa-lang 3-layer law enforcement wire-up (#38+#39+#29+#4)"},{"id":"kernel.cond.4","desc":"HOS4 single-address-space invariant: no user/kernel memory split; one address-space model maintained across all kernel fn boundaries","verifier":"grep -rE '(MMU_USER|RING3|user_space|kernel_space)' self/ returns empty","status":"met","evidence":["probe contains zero MMU/ring-distinction tokens"],"blocker_reason":""},{"id":"kernel.cond.5","desc":"HOS5 virtio-only (Stage 1): no physical hardware drivers; only virtio-blk and virtio-net allowed","verifier":"find self/ -name '*driver*.hexa' | xargs grep -L 'virtio' returns empty","status":"met","evidence":["zero driver .hexa files exist (vacuously satisfied)"],"blocker_reason":""},{"id":"kernel.cond.6","desc":"freestanding probe (self/os/_freestanding_probe.hexa, 31 LOC, sha256 94060f9b...) preserved byte-identical (additive-only mandate, raw 273)","verifier":"git diff --quiet self/os/_freestanding_probe.hexa","status":"met","evidence":["sha256 94060f9b8d22abb2815bda82a993a51de99752d96bcbc7ceaad094c71dccf6f2 unchanged from Apr 19 commit 256fffa baseline"],"blocker_reason":""},{"id":"kernel.cond.7","desc":"future law_kernel module pair (self/core/law_kernel/ + self/modules/law_kernel/) contract pre-registered (raw 270)","verifier":"test -f .roadmap.hexa_os_self_mk2_tuning && grep -q law_kernel .roadmap.hexa_os_self_mk2_tuning","status":"met","evidence":["sister roadmap .roadmap.hexa_os_self_mk2_tuning phase.3 declares law_kernel pair contract"],"blocker_reason":""}],"blockers":[{"id":"kernel.blk.1","desc":"upstream: hexa-lang P7-9 fixpoint not closed — @nostd codegen + libc-less ELF emission required to compile probe","type":"upstream","status":"blocked","eta":"","resolution_path":"hexa-lang:.roadmap p7_9_fixpoint cond.* met"},{"id":"kernel.blk.2","desc":"upstream: hexa-lang 3-layer law enforcement (#38+#39+#29+#4) — required for HOS3 law_check dispatch","type":"upstream","status":"blocked","eta":"","resolution_path":"hexa-lang stdlib+runtime+parser+hook patches landed verified"},{"id":"kernel.blk.3","desc":"local: linker script for kernel ELF emission not authored — depends on @nostd codegen output format","type":"local","status":"blocked_by_upstream","eta":"phase-2","resolution_path":"after kernel.blk.1 unblocks: author self/os/linker.ld"},{"id":"kernel.blk.4","desc":"local: ARM64 inline asm intrinsic (asm! macro) availability gate — required for syscall fn implementation","type":"upstream","status":"blocked","eta":"","resolution_path":"hexa-lang:.roadmap codegen ARM64 asm! macro RC met"}],"status":"active_plan_only","since":"2026-05-03"}
{"type":"phase","id":"phase.1","name":"Phase 1 — HOS L1 lint scaffold (additive only)","duration_estimate":"1 day","cost_estimate_usd":0,"deliverables":["author tool/hos_lint.hexa skeleton (HOS1..HOS5 verifier dispatch — selftest mode only, no actual rule fires until kernel code exists)","emit baseline lint report: 5/5 rules vacuously satisfied (cond.2,4,5 met; cond.1,3 unmet pending upstream)","cross-link to .roadmap.hexa_os_self_mk2_tuning phase.1 (lint baseline registration)"]}
{"type":"phase","id":"phase.2","name":"Phase 2 — first kernel module pair (raw 270 boot split, see .roadmap.hexa_os_boot)","duration_estimate":"3-5 days","cost_estimate_usd":0,"deliverables":["delegated to .roadmap.hexa_os_boot domain SSOT","this roadmap tracks HOS L1 compliance during boot module land (cond.1 + cond.5 verifier re-runs after pair lands)"]}
{"type":"phase","id":"phase.3","name":"Phase 3 — law_kernel module pair land (HOS3 satisfaction path)","duration_estimate":"1-2 weeks","cost_estimate_usd":0,"deliverables":["self/core/law_kernel/ (raw.json loader fn signatures + law_check trait skeleton, additive only)","self/modules/law_kernel/raw_loader.hexa (impl, depends on hexa-lang stdlib YAML/JSON)","golden test fixture: synthetic raw.json -> law_check pass/fail dispatch","wire to growth_bus event log skeleton (signatures only, no logging backend wired this phase)","HOS3 verifier (cond.3) re-run: expect first non-vacuous PASS"]}
{"type":"raw10_caveat","id":"caveat.1","note":"hexa-os kernel domain currently has 1 .hexa file (self/os/_freestanding_probe.hexa, 31 LOC skeleton). HOS L1 5-rule compliance is mostly vacuous (cond.2,4,5 met by absence). Real compliance proof requires phase.2 + phase.3 kernel code which is upstream-blocked."}
{"type":"raw10_caveat","id":"caveat.2","note":"HOS3 law_kernel invariant is the most architecturally consequential of the 5 rules — every syscall must dispatch through law_check. Cannot be tested until law_check trait is wired to hexa-lang 3-layer law enforcement (#38+#39+#29+#4 upstream)."}
{"type":"raw10_caveat","id":"caveat.3","note":"tool/hos_lint.hexa does not exist yet — phase.1 deliverable. The verifier columns in cond.1 + cond.3 reference a tool that will be authored, not a present capability."}
{"type":"raw10_caveat","id":"caveat.4","note":"raw 273 (additive-only) honored: this roadmap declares plans + verifiers, does not modify self/os/_freestanding_probe.hexa or any pre-existing file. cond.6 byte-identical guarantee is the firewall."}
{"type":"raw10_caveat","id":"caveat.5","note":"This roadmap is one of three sibling .roadmap.<domain> files for hexa-os mk2-rewrite (.roadmap.hexa_os_kernel + .roadmap.hexa_os_boot + .roadmap.hexa_os_design). Cross-references via cross_link field. Predecessor .roadmap.hexa_os_self_mk2_tuning remains the meta-domain SSOT."}
{"type":"raw10_caveat","id":"caveat.6","note":"BR-NO-USER-VERBATIM (raw 272) honored in this file: zero /Users/<name>/ paths and zero @-handles. Pre-existing project.hexa:17 violation flagged in sister roadmap, not touched here."}
{"type":"raw10_caveat","id":"caveat.7","note":"User deleted .own and .roadmap working-tree files NOT restored by this land (per session policy). This roadmap and its siblings comprise the mk2-rewrite path (rewrite, not restore — per user directive)."}
{"type":"cross_link","target":".roadmap.hexa_os_self_mk2_tuning","relation":"meta-parent — self mk2 tuning is the umbrella domain"}
{"type":"cross_link","target":".roadmap.hexa_os_boot","relation":"sibling — first concrete module pair, raw 270 first split"}
{"type":"cross_link","target":".roadmap.hexa_os_design","relation":"sibling — design phase docs (BRAINSTORM/DEPLOYMENT/HEXA_SERVE_V01/PERF_P99) organize SSOT"}