{"id":44573136,"url":"https://github.com/doublegate/veridianos","last_synced_at":"2026-03-08T07:03:34.964Z","repository":{"id":297568780,"uuid":"997188126","full_name":"doublegate/VeridianOS","owner":"doublegate","description":"Veridian OS is a modern microkernel operating system (written entirely in Rust) -- emphasizing security, modularity, and performance.","archived":false,"fork":false,"pushed_at":"2026-03-06T08:10:02.000Z","size":32094,"stargazers_count":3,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-03-06T08:41:39.531Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/doublegate.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE-APACHE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"docs/AGENTS.md","dco":null,"cla":null}},"created_at":"2025-06-06T05:26:35.000Z","updated_at":"2026-03-06T08:10:07.000Z","dependencies_parsed_at":"2025-08-14T06:24:46.411Z","dependency_job_id":null,"html_url":"https://github.com/doublegate/VeridianOS","commit_stats":null,"previous_names":["doublegate/veridianos"],"tags_count":77,"template":false,"template_full_name":null,"purl":"pkg:github/doublegate/VeridianOS","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doublegate%2FVeridianOS","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doublegate%2FVeridianOS/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doublegate%2FVeridianOS/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doublegate%2FVeridianOS/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/doublegate","download_url":"https://codeload.github.com/doublegate/VeridianOS/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doublegate%2FVeridianOS/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30248560,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-08T05:41:50.788Z","status":"ssl_error","status_checked_at":"2026-03-08T05:41:39.075Z","response_time":56,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-02-14T03:57:27.426Z","updated_at":"2026-03-08T07:03:34.951Z","avatar_url":"https://github.com/doublegate.png","language":"Rust","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003c!-- markdownlint-disable MD033 --\u003e\n\n# VeridianOS\n\n\u003cdiv align=\"center\"\u003e\n\n\u003cimg src=\"images/VeridianOS_Logo-Only.png\" alt=\"VeridianOS Logo\" width=\"60%\" /\u003e\n\n## A research microkernel operating system built with Rust\n\n[![CI Status](https://github.com/doublegate/VeridianOS/workflows/CI/badge.svg)](https://github.com/doublegate/VeridianOS/actions)\n[![Coverage](https://codecov.io/gh/doublegate/VeridianOS/branch/main/graph/badge.svg)](https://codecov.io/gh/doublegate/VeridianOS)\n[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE-MIT)\n[![License: Apache 2.0](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE-APACHE)\n[![Discord](https://img.shields.io/discord/123456789?label=Discord\u0026logo=discord)](https://discord.gg/24KbHS4C)\n\n\u003c/div\u003e\n\n## Overview\n\n**VeridianOS** is a research operating system written in Rust, focused on **correctness, isolation, and explicit architectural invariants**. It is intended as **executable documentation of high-assurance systems design**, not as a production OS or a general-purpose hobby kernel.\n\nThe project explores how capability-oriented design, strong isolation boundaries, and disciplined use of unsafe code can be combined to produce systems that are _auditable, teachable, and resilient to failure_. VeridianOS features a capability-based security model, zero-copy IPC, and multi-architecture support with an emphasis on reliability and deterministic behavior.\n\n### Key Features\n\n- 🛡️ **Capability-based security** — Unforgeable tokens for all resource access\n- 🚀 **Microkernel architecture** — Minimal kernel with services in user space\n- 🦀 **Written in Rust** — Memory safety without garbage collection\n- ⚡ **High performance** — Lock-free algorithms, zero-copy IPC\n- 🔧 **Multi-architecture** — x86_64, AArch64, and RISC-V support\n- 🔒 **Security focused** — Mandatory access control, secure boot, hardware security\n- 📦 **Modern package management** — Source and binary package support\n- 🖥️ **Wayland compositor** — Modern display server with GPU acceleration, DMA-BUF, layer-shell\n- 🎨 **Desktop environment** — Application launcher, Alt-Tab, notifications, workspaces, screen lock\n- 🔊 **Multimedia** — Audio mixer, VirtIO-Sound, WAV playback, TGA/QOI image decoding, video framework\n- 🖧 **Virtualization** — Intel VMX hypervisor with VMCS/EPT, container namespaces, virtual device emulation\n- 🔐 **Security hardening** — KPTI shadow page tables, demand paging, COW fork, TPM probing, Dilithium ML-DSA-65\n\n---\n\n## Purpose\n\nVeridianOS exists to explore and demonstrate:\n\n- Capability-based system design with explicit authority boundaries\n- Strong isolation between kernel, drivers, services, and userland\n- Memory safety and ownership as architectural properties\n- Deterministic, inspectable system behavior\n- Long-horizon durability over short-term feature velocity\n\n---\n\n## Non-Goals\n\nVeridianOS intentionally does **not** aim to be:\n\n- A natively POSIX-based operating system (a POSIX compatibility layer is planned for future phases to support software porting, but native APIs remain capability-based)\n- A Linux replacement or distribution\n- A performance-first microbenchmark platform\n- A feature-complete general-purpose OS\n\nThese exclusions are deliberate and protect architectural clarity. Where future compatibility layers are mentioned (e.g., POSIX, Wayland), they will be implemented as user-space libraries that translate to native capability-based interfaces, never as kernel-level compromises.\n\n---\n\n## Threat Model (Bounded)\n\nVeridianOS assumes a single-machine environment with a trusted toolchain. It focuses on software isolation failures, authority misuse, and memory safety violations. Physical attacks, malicious firmware, and advanced side-channel attacks are out of scope by design.\n\n---\n\n## Core Architectural Invariants\n\nThe system is defined by explicit invariants governing authority, isolation, memory ownership, and unsafe code usage. These are normative and binding.\n\nSee [Invariants](docs/invariants.md) for the authoritative list.\n\n---\n\n## Architecture\n\nVeridianOS uses a microkernel architecture with the following key components:\n\n```text\n┌─────────────────────────────────────────────┐\n│              User Applications              │\n├─────────────────────────────────────────────┤\n│    System Services (VFS, Network, etc.)     │\n├─────────────────────────────────────────────┤\n│    User-Space Drivers (Block, Network)      │\n├─────────────────────────────────────────────┤\n│    Microkernel (Memory, Scheduling, IPC)    │\n└─────────────────────────────────────────────┘\n```\n\n---\n\n## Repository Structure\n\n```text\nkernel/        Trusted computing base\ndrivers/       Hardware interaction behind explicit privilege boundaries\nservices/      Capability-mediated system services\nuserland/      User processes, libc, libm, Rust std port, vpkg, test programs\nboot/          Bootloader and early initialization\ntargets/       Rust target JSON specs (kernel and user-space, all 3 architectures)\nscripts/       Build infrastructure (cross-toolchain, sysroot, rootfs, native GCC/make/ninja)\ntoolchain/     CRT files, sysroot headers, CMake/Meson cross-compilation configs\nports/         Port definitions for external software (binutils, gcc, make, ninja, etc.)\ndocs/          Canonical specifications\nexperiments/   Non-normative exploratory work\n```\n\n---\n\n## Project Status\n\n**Latest Release**: v0.16.2 (March 6, 2026) | **Releases Published**: 64 (v0.1.0 through v0.16.2)\n\n| Metric                 | Value                                           |\n| ---------------------- | ----------------------------------------------- |\n| Build                  | 0 errors, 0 warnings across all 3 architectures |\n| Boot Tests             | 29/29 (all architectures, Stage 6 BOOTOK)       |\n| Host-Target Unit Tests | 2,356/2,356 passing                             |\n| CI Pipeline            | 11/11 jobs passing (GitHub Actions + Codecov)   |\n\n### Architecture Support\n\n| Architecture | Build | Boot | Init Tests | Stage 6 | Stable Idle (30s) | Status                                       |\n| ------------ | ----- | ---- | ---------- | ------- | ----------------- | -------------------------------------------- |\n| x86_64       | ✅    | ✅   | 29/29      | ✅      | ✅ PASS           | **100% Functional** -- UEFI boot via OVMF    |\n| AArch64      | ✅    | ✅   | 29/29      | ✅      | ✅ PASS           | **100% Functional** -- Direct kernel loading |\n| RISC-V 64    | ✅    | ✅   | 29/29      | ✅      | ✅ PASS           | **100% Functional** -- OpenSBI boot          |\n\n### Development Phases\n\n| Phase | Description               | Status                 | Version | Date     |\n| ----- | ------------------------- | ---------------------- | ------- | -------- |\n| 0     | Foundation and Tooling    | **Complete**           | v0.1.0  | Jun 2025 |\n| 1     | Microkernel Core          | **Complete**           | v0.2.1  | Jun 2025 |\n| 2     | User Space Foundation     | **Complete**           | v0.3.2  | Feb 2026 |\n| 3     | Security Hardening        | **Complete**           | v0.3.2  | Feb 2026 |\n| 4     | Package Ecosystem         | **Complete**           | v0.4.0  | Feb 2026 |\n| 5     | Performance Optimization  | **COMPLETE (100%)**    | v0.16.2 | Mar 2026 |\n| 5.5   | Infrastructure Bridge     | **COMPLETE (100%)** | v0.5.13 | Feb 2026 |\n| 6     | Advanced Features and GUI | **~100% (desktop complete)** | v0.6.4  | Feb 2026 |\n| 6.5   | Rust Compiler + Bash Shell | **COMPLETE (100%)** | v0.7.0  | Feb 2026 |\n| 7     | Production Readiness     | **Complete (~100%)** | v0.10.6  | Mar 2026 |\n| 7.5   | Follow-On Enhancements   | **COMPLETE (100%)** | v0.16.0  | Mar 2026 |\n\nFor detailed release notes, see [Release History](docs/RELEASE-HISTORY.md).\n\n### What Is Built\n\nPhases 0 through 4 are complete. The kernel provides:\n\n- **IPC** -- Synchronous/asynchronous channels with zero-copy fast path (\u003c1us)\n- **Memory Management** -- Hybrid bitmap+buddy allocator, NUMA-aware, 4-level page tables\n- **Process Management** -- Full lifecycle with context switching on all architectures\n- **Scheduler** -- CFS with SMP support, load balancing, CPU affinity\n- **Capability System** -- 64-bit unforgeable tokens, two-level O(1) lookup, revocation, interrupt capabilities\n- **Interrupt Controllers** -- x86_64 APIC (Local + I/O), AArch64 GICv2, RISC-V PLIC with unified IRQ abstraction\n- **VFS** -- ramfs, devfs, procfs, blockfs with POSIX-style file operations\n- **Security** -- MAC, secure boot, TPM 2.0, ASLR, W^X, Spectre barriers, KPTI, post-quantum crypto\n- **Package Manager** -- DPLL SAT resolver, ports system, reproducible builds, Ed25519 signing\n- **Interactive Shell (vsh)** -- Bash/Fish-parity serial console shell with 24+ builtins, pipes, redirections, variable expansion, globbing, tab completion, job control, scripting (if/for/while/case), functions, aliases\n- **Framebuffer Display** -- 1280x800 text console via UEFI GOP framebuffer (x86_64) and ramfb (AArch64/RISC-V), ANSI color support, PS/2 keyboard input via controller polling, glyph cache, pixel ring buffer, write-combining (PAT) on x86_64\n- **Userland Bridge** -- Ring 0 to Ring 3 transitions with SYSCALL/SYSRET on x86_64, 35+ system calls (including clone, futex, arch_prctl, readlink, pipe2)\n- **Complete C Library** -- 19 source files, full stdio/stdlib/string/unistd, architecture-specific setjmp/longjmp, 50+ syscall wrappers, 25+ POSIX-compatible headers (network, system, POSIX, C standard), math library (ldexp, frexp, log, exp, sqrt, pow, fabs, floor, ceil, modf)\n- **Cross-Compilation Toolchain** -- binutils 2.43 + GCC 14.2 Stage 2 cross-compiler, sysroot with headers and CRT files, CMake/Meson toolchain files; static native GCC toolchain (gcc, cc1, as, ld, ar) via Canadian cross-compilation for on-target self-hosting\n- **Coreutils** -- 6 progressively complex POSIX utilities cross-compiled and verified on VeridianOS: echo, cat, wc, ls, sort, and pipeline_test (capstone fork/exec/pipe/waitpid exercise)\n- **BusyBox 1.36.1** -- 95 applets cross-compiled with ash shell support; EPIPE/BrokenPipe handling for multi-pipe commands (`yes | head -n 1`), float printf (`%f/%g/%e`) for `seq`, ash interactive mode (isatty/ENOTTY, sysconf, exec family, fnmatch/glob, tcgetpgrp), process lifecycle hardening for 213+ sequential execs (zombie reaping, MAX_PROCESSES=1024, fd leak detection), ARG_MAX enforcement (128KB), strftime (28 format specifiers), popen/pclose\n- **POSIX Regex Engine** -- 1291-line BRE/ERE regex library (`regex.h`/`regcomp`/`regexec`/`regfree`) with recursive backtracking NFA, supports `. * + ? ^ $ [...] | () {m,n}`, 12 POSIX character classes ([:alpha:], [:digit:], etc.), enables grep/sed/awk/find BusyBox applets\n- **Native Compilation** -- 208/208 BusyBox source files compiled and linked by GCC 14.2 running natively on VeridianOS; POSIX-compliant partial munmap (front trim, back trim, hole punch) for GCC ggc garbage collector; consolidated brk() heap mapping (O(1) per extension); 512MB kernel heap; 768MB per-process heap limit; 8MB user-space stack growth\n- **Persistent Storage** -- BlockFS filesystem with on-disk superblock, bitmap, inode table serialization; auto-detected at boot via magic number probe; sync/fsync support; `mkfs-blockfs` host tool for image creation\n- **Virtio-blk Driver** -- Block I/O with TAR rootfs loader for cross-compiled user-space binaries; virtio-MMIO transport on AArch64/RISC-V, PCI on x86_64\n- **Thread Support** -- clone() with CLONE_VM/CLONE_FS/CLONE_THREAD/CLONE_SETTLS, futex (WAIT/WAKE/REQUEUE/BITSET), POSIX pthread library (create/join/detach/mutex/cond/TLS)\n- **Signal Delivery** -- Full signal frames and trampolines on all three architectures (x86_64, AArch64, RISC-V) with sigreturn context restoration\n- **Symlink Support** -- Full readlink() implementation across BlockFS and RamFS with VFS-level dispatch\n- **Rust std Platform Port** -- `std::sys::veridian` platform module (15 files, ~7800 lines) implementing fs, io, process, thread, net, time, alloc, and synchronization primitives; LLVM 19 cross-compilation scripts; rustc/cargo build pipeline with self-hosting verification (Stage 0 -\u003e Stage 1 -\u003e Stage 2 consistency)\n- **Userland Shell (vsh)** -- Bash 5.3-compatible shell written in pure Rust (~10K lines), featuring lexer with heredocs and quoting, recursive descent parser with full AST, 8-stage POSIX word expansion (tilde, parameter, command substitution, arithmetic, field splitting, pathname, brace, quote removal), fork+exec pipelines with redirections, 49 builtins (POSIX + Bash extensions), job control (fg/bg/jobs/wait), readline with Emacs/vi modes and tab completion, startup file processing (~/.vshrc)\n- **Kernel Enhancements for Rust** -- 8GB memory scaling, epoll (create/ctl/wait with edge/level-triggered modes), enhanced PTY subsystem (openpty/grantpt/unlockpt), POSIX signal completions (sigprocmask, sigpending, sigsuspend), filesystem hardening (ftruncate, rename, fchmod, fchown, readdir improvements)\n- **GPU Driver Framework** -- VirtIO GPU driver with PCI discovery (vendor 0x1AF4, device 0x1050), split virtqueue ring, 2D resource management (create/attach/scanout/transfer/flush), framebuffer integration; vendor GPU framework stubs for Intel i915 (6 generations: Skylake through Meteor Lake), AMD amdgpu (4 generations: GCN5 through RDNA3), NVIDIA Nouveau (4 architectures: Pascal through Ada Lovelace) with PCI ID tables and MMIO register maps\n- **Advanced Wayland Protocols** -- Layer shell (background/bottom/top/overlay layers with anchor/margin/exclusive zone), idle inhibit manager, DMA-BUF protocol (zwp_linux_dmabuf_v1 with fourcc format codes and VirtIO GPU resource import), multi-output management with HiDPI scaling (1x/2x/3x) and horizontal/vertical arrangement, xdg-decoration server/client negotiation, XWayland socket infrastructure stub\n- **Wayland Client Library** -- `libwayland-client.a` user-space library (~1,400 lines C) with raw syscall interface, SHM pool management, surface lifecycle, event dispatch loop\n- **Desktop Environment** -- Application launcher with .desktop file parser and search grid, notification system with toast popups and urgency levels, system tray (CPU/memory monitors, clock), screen locker with password authentication and idle timeout, Alt-Tab application switcher with keyboard cycling, animation framework (9 easing functions, fixed-point 8.8 math), 4 virtual workspaces\n- **Window Manager Enhancements** -- Window placement heuristics (cascade/center/smart), snap-to-edge (left/right/maximize), tile layouts (horizontal/vertical/grid), server-side decorations with title bars and min/max/close buttons, compositing effects (3-pass box blur shadows, alpha blending, opacity)\n- **Desktop Applications** -- MIME database (31 types, magic byte detection, extension mapping), syntax highlighter (Rust/C/Shell with keyword/string/comment/number tokenization), system settings app (5 panels: display/network/users/appearance/about), image viewer (PPM P3/P6 and BMP 24/32-bit, nearest-neighbor zoom, pan)\n- **Dynamic Linker Completion** -- Multi-LOAD ELF fix with page-boundary segment handling, lazy PLT/GOT binding, ELF symbol versioning (DT_VERSYM/VERNEED/VERDEF), weak symbol resolution, LD_PRELOAD and LD_LIBRARY_PATH environment variable support, TLS support (PT_TLS, ARCH_SET_FS), DT_INIT_ARRAY/DT_FINI_ARRAY execution, RELRO protection\n- **Desktop IPC Services** -- 6 IPC endpoints (WM=1000, INPUT=1001, COMPOSITOR=1002, NOTIFICATION=1003, CLIPBOARD=1004, LAUNCHER=1005) with typed message dispatch\n- **Zero-Copy DMA Networking** -- DMA buffer pool with physical frame allocation below 4GB for 32-bit DMA compatibility, scatter-gather I/O with user page pinning (VAS page table walking for physical address translation), TCP zero-copy send with MSS segmentation, SendFile with scatter-gather path for large transfers (\u003e=64KB)\n- **Hardware NIC Driver** -- DMA descriptor rings (TX/RX, 256 entries each) with #[repr(C)] descriptors, E1000-compatible MMIO register offsets (TDT, RDT, TCTL, RCTL, STATUS, ICR, IMS), volatile MMIO read/write, ring allocation/deallocation from physical frame allocator, PCI class validation\n- **IPv6 Dual-Stack** -- Full IPv6 implementation (~2,145 lines across ipv6.rs + icmpv6.rs): header parsing/building, NDP cache with LRU eviction, Neighbor Discovery (NS/NA/RS/RA), SLAAC with EUI-64, ICMPv6 (Echo, Dest Unreachable, Packet Too Big, Time Exceeded), AF_INET6 sockets (Stream/Dgram/Raw), dual-stack configuration; shell commands: ping6, ndp, enhanced ifconfig/netstat\n- **Shell Command Substitution** -- 18 inline commands for $(command): echo, cat, pwd, uname, whoami, hostname, basename, dirname, printf, seq, wc, head, tail, date, expr, true/false, test/[, tr\n- **NVMe Admin Queue** -- Full controller reset + initialization sequence with NvmeSubmissionEntry/NvmeCompletionEntry structs, ASQ/ACQ allocation from physical frames, Identify Controller parsing (serial, model, firmware, MDTS)\n- **Audio Subsystem** -- Fixed-point 16.16 mixer (per-channel + master volume, saturation arithmetic), lock-free SPSC ring buffer transport, WAV parser (RIFF/WAVE, 8/16/24/32-bit PCM), output pipeline with underrun tracking, audio client API (create/play/pause/stop streams), VirtIO-Sound driver (PCI 0x1AF4:0x1059, PCM stream configuration), shell commands (play, volume), 8 audio syscall stubs (320-327)\n- **Video Framework** -- Pixel format abstraction (XRGB8888, ARGB8888, RGB888, RGB565, BGR888, Gray8), frame scaling (nearest-neighbor + bilinear with fixed-point 8.8 interpolation), BT.601 YUV/RGB color space conversion, alpha blending, TGA decoder (uncompressed + RLE, 24/32-bit), QOI decoder (full spec: index/diff/luma/run/rgb/rgba ops), media player with tick-based frame timing, image viewer TGA/QOI integration\n- **Security Hardening** -- KPTI shadow page tables (separate kernel/user L4 tables, CR3 switching on syscall entry/exit, Meltdown mitigation), demand paging (lazy anonymous page allocation via page fault handler, BackingType Anonymous/FileBacked), COW fork (cow_fork() with ref-counted CowEntry, copy-on-write fault resolution), TPM MMIO probing (0xFED40000, TPM_ACCESS/INTERFACE_ID), Dilithium ML-DSA-65 algebraic verification (FIPS 204, z-norm bounds checking)\n- **Performance Optimization** -- ACPI SRAT/SLIT NUMA topology parsing (per-node CPU/memory mapping, distance matrix), per-CPU ready queues with work-stealing (STEAL_THRESHOLD=2), run-queue instrumentation (RunQueueStats: enqueue/dequeue/max_length/wait_ticks), IPC message batching (IpcBatch 8-message accumulator), IOMMU DRHD parsing (DMAR structures, device scope iterator, identity domain)\n- **Hypervisor** -- Intel VMX (CR4.VMXE, VMXON/VMXOFF, VMCS allocation/load/clear, ~100 VMCS field encodings, VMLAUNCH/VMRESUME, exit handler dispatch), Extended Page Tables (4-level EPT, map/unmap with R/W/X, identity_map_range, EPTP generation), virtual device emulation (8250 UART, 8259A PIC, DeviceManager I/O port dispatch)\n- **Container Isolation** -- PID namespace (bidirectional host/container PID mapping), mount namespace (chroot-style isolation), network namespace (veth pairs), UTS namespace (per-container hostname), ContainerManager (create/start/stop/destroy lifecycle, ContainerState machine)\n\n### Self-Hosting Roadmap\n\nThe self-hosting effort follows a tiered plan to build VeridianOS toward compiling its own software natively:\n\n| Tier | Description                                                              | Status                                |\n| ---- | ------------------------------------------------------------------------ | ------------------------------------- |\n| 0    | Kernel infrastructure (syscalls, ELF loader, virtio-blk)                 | **Complete**                          |\n| 1    | C standard library (stdio, stdlib, string, unistd, math)                 | **Complete**                          |\n| 2    | Cross-compilation toolchain (binutils 2.43 + GCC 14.2)                   | **Complete**                          |\n| 3    | User-space execution (`/bin/minimal` verified, process lifecycle)        | **Complete**                          |\n| 4    | Sysroot and CRT files (crt0.S, crti.S, crtn.S, all 3 architectures)      | **Complete**                          |\n| 5    | Cross-compiled programs running on VeridianOS                            | **Complete**                          |\n| 6    | Thread support, signal delivery, virtio-MMIO, multi-LOAD ELF, native GCC | **Complete** (merged from test-codex) |\n| 7    | Full self-hosting (Rust std port, native GCC, make/ninja, vpkg)          | **Complete** (v0.5.0)                 |\n| 8    | Rust compiler port (std::sys::veridian, LLVM 19 cross-build, rustc/cargo) | **Complete** (v0.7.0)               |\n\nTier 6 was developed on the test-codex branch and merged to main with a comprehensive audit pass fixing 8 critical bugs. Tier 7 provides the complete self-hosting toolchain: T7-1 (Rust user-space target specs), T7-2 (Rust std platform port), T7-3 (static native GCC via Canadian cross-compilation), T7-4 (GNU Make + Ninja), and T7-5 (vpkg package manager). The native GCC toolchain (T7-3) uses CONFIG_SITE-based autoconf caching to solve endianness detection in Canadian cross builds (`build=linux, host=veridian, target=veridian`), producing statically-linked gcc, cc1, as, ld, ar, and related tools totaling ~91 MB.\n\n### Recent Kernel Updates (Tier 6 Self-Hosting)\n\n- Futex/threads: wait/wake/requeue validation, futex bitset filtering, CLONE_FS per-thread cwd/umask sharing, TLS-preserving clone/pthread trampoline, child-cleartid wake.\n- Virtio: AArch64/RISC-V virtio-mmio transport (replaces PCI-only); probing fails fast on feature negotiation errors; PCI gated to x86_64 only.\n- Filesystem/exec: BlockFS symlink/readlink works; ELF loader handles multi-LOAD binaries while retaining stack mappings; per-thread FS state wired through syscalls.\n- Signals: Full signal frame construction and sigreturn on AArch64 (x0-x30, NEON q0-q31) and RISC-V (x1-x31, f0-f31) with architecture-specific trampolines.\n- Tooling: LLVM triple patched for `-veridian`; rustup targets installed for x86_64/aarch64/riscv64; `arch_prctl` TLS wired on all arches.\n\n### What Comes Next\n\n- **Phase 7.5** -- Follow-on enhancements across 13 categories: TCP congestion control, ALSA-compatible audio, PNG/JPEG decoders, VirtIO GPU 3D, nested virtualization, OCI containers, KASLR, deadline scheduling, clipboard/drag-and-drop, io_uring, ext4/FAT32, QUIC/WireGuard/TLS 1.3, USB xHCI\n- **Phase 8** -- Next-generation features: web browser, advanced self-hosting (native rustc bootstrap), GPU-accelerated compositor, firewall/NAT, Kubernetes CRI/CNI/CSI, KVM API compatibility, LDAP/Kerberos, IDE with LSP, formal verification\n\n### Technical Notes\n\n**AArch64 FP/NEON fix**: LLVM emits NEON/SIMD instructions (`movi v0.2d`, `str q0`) for buffer zeroing on buffers \u003e= 16 bytes. Without CPACR_EL1.FPEN enabled, these instructions trap silently. Fixed by enabling FP/NEON in `boot.S` before entering Rust code.\n\n**UnsafeBumpAllocator on AArch64**: AArch64 uses the same lock-free bump allocator as RISC-V, with a simple load-store allocation path (no CAS) and direct atomic initialization with DSB SY/ISB memory barriers.\n\n**bare_lock::RwLock**: UnsafeCell-based single-threaded RwLock replacement for AArch64 bare metal, used in VFS filesystem modules to avoid `spin::RwLock` CAS spinlock hangs without proper exclusive monitor configuration.\n\n**AArch64 LLVM workaround**: AArch64 bypasses a critical LLVM loop-compilation bug by routing `print!`/`println!` through `DirectUartWriter`, which uses `uart_write_bytes_asm()` -- a pure assembly loop that LLVM cannot miscompile. The `kprintln!` macro provides an alternative path using `direct_print_str()` for literal-only output. See [README - LLVM Bug](kernel/src/arch/aarch64/README_LLVM_BUG.md) for details.\n\n### Maturity\n\nVeridianOS is an active research system. Phases 0 through 7 are architecturally stable with a functional graphical desktop, Rust compiler port, Bash-compatible userland shell, Intel VMX hypervisor, container isolation, and comprehensive security hardening. Phase 7.5 follow-on enhancements are 100% complete (80/80 items across 8 waves): filesystem (ext4/FAT32/tmpfs/inotify/flock/xattr), core security (KASLR/stack canaries/SMEP-SMAP/retpoline/audit/cap revocation), performance (EDF scheduling/cache-aware allocation/false sharing elimination/power management/PGO), hardware drivers (xHCI/mass storage/HID/Bluetooth HCI/AHCI-SATA/RTC), networking (TCP Reno+Cubic/SACK/DNS/VLAN/multicast/bonding), crypto and protocols (TLS 1.3/SSH/HTTP/NTP/QUIC/WireGuard/mDNS), audio (ALSA/USB Audio/HDMI/capture/Vorbis/MP3/RT scheduling), video (PNG/JPEG/GIF/AVI/frame rate conversion/subtitles), GPU acceleration (VirtIO GPU 3D/OpenGL ES 2.0/GEM-TTM/DRM KMS/vsync/hardware cursor), hypervisor (nested virt/passthrough/live migration/SMP/LAPIC/snapshots), containers (OCI/image format/cgroup mem+CPU/overlay FS/veth/seccomp BPF), desktop (clipboard/drag-and-drop/shortcuts/themes/TrueType fonts/CJK Unicode), and shell/userland (io_uring/ptrace/core dumps/user management/sudo-su/crontab). CI pipeline achieves full 11/11 job pass rate including Code Coverage. Phase 8 (next-generation features) is next.\n\nHistorical status is recorded in:\n\n- [`RELEASE-HISTORY.md`](docs/RELEASE-HISTORY.md) -- Detailed per-release notes\n- [`PROJECT-STATUS.md`](docs/status/PROJECT-STATUS.md)\n- [`PHASE2-STATUS-SUMMARY.md`](docs/status/PHASE2-STATUS-SUMMARY.md)\n- [`BOOTLOADER-UPGRADE-STATUS.md`](docs/status/BOOTLOADER-UPGRADE-STATUS.md)\n\nNormative truth lives in this README and `docs/`.\n\n---\n\n## Quick Start\n\n### Prerequisites\n\n- Rust nightly-2025-11-15 or later\n- QEMU 9.0+ (10.2+ recommended; for testing)\n- 8GB RAM (16GB recommended)\n- 20GB free disk space\n\n### Building and Running\n\n```bash\n# Clone the repository\ngit clone https://github.com/doublegate/VeridianOS.git\ncd VeridianOS\n\n# Install dependencies (Ubuntu/Debian)\n./scripts/install-deps.sh\n\n# Build all architectures\n./build-kernel.sh all dev      # Development build\n./build-kernel.sh all release  # Release build\n\n# Build a specific architecture\n./build-kernel.sh x86_64 dev\n./build-kernel.sh aarch64 release\n./build-kernel.sh riscv64 dev\n\n# Run in QEMU\njust run\n\n# Or build manually (x86_64 requires custom target)\ncargo build --target targets/x86_64-veridian.json \\\n    -p veridian-kernel \\\n    -Zbuild-std=core,compiler_builtins,alloc\n\n# Run in QEMU (x86_64 - UEFI boot, requires OVMF)\n# build-kernel.sh creates the UEFI disk image automatically\nqemu-system-x86_64 -enable-kvm \\\n    -drive if=pflash,format=raw,readonly=on,file=/usr/share/edk2/x64/OVMF.4m.fd \\\n    -drive id=disk0,if=none,format=raw,file=target/x86_64-veridian/debug/veridian-uefi.img \\\n    -device ide-hd,drive=disk0 \\\n    -serial stdio -display none -m 256M\n\n# Run in QEMU (AArch64)\nqemu-system-aarch64 -M virt -cpu cortex-a72 -m 256M \\\n    -kernel target/aarch64-unknown-none/debug/veridian-kernel \\\n    -serial stdio -display none\n\n# Run in QEMU (RISC-V)\nqemu-system-riscv64 -M virt -m 256M -bios default \\\n    -kernel target/riscv64gc-unknown-none-elf/debug/veridian-kernel \\\n    -serial stdio -display none\n```\n\n#### Persistent Storage (BlockFS)\n\n```bash\n# Build the cross-compiled BusyBox rootfs (first time only)\n./scripts/build-busybox-rootfs.sh all\n\n# Create a 256MB persistent BlockFS image populated from rootfs\n./scripts/build-busybox-rootfs.sh blockfs\n\n# Boot with persistent storage\n./scripts/run-veridian.sh --blockfs\n\n# Or manually:\nqemu-system-x86_64 -enable-kvm \\\n    -drive if=pflash,format=raw,readonly=on,file=/usr/share/edk2/x64/OVMF.4m.fd \\\n    -drive id=disk0,if=none,format=raw,file=target/x86_64-veridian/debug/veridian-uefi.img \\\n    -device ide-hd,drive=disk0 \\\n    -drive file=target/rootfs-blockfs.img,if=none,id=vd0,format=raw \\\n    -device virtio-blk-pci,drive=vd0 \\\n    -serial stdio -display none -m 2048M\n```\n\nFor detailed build instructions, see [BUILD-INSTRUCTIONS.md](docs/BUILD-INSTRUCTIONS.md).\n\n---\n\n## Supported Platforms\n\n### Architectures\n\n- **x86_64** — Full support (UEFI boot via bootloader 0.11.15)\n- **AArch64** — Full support (direct QEMU `-kernel` loading)\n- **RISC-V (RV64GC)** — Full support (direct QEMU `-kernel` loading via OpenSBI)\n\n### Minimum Requirements\n\n- 64-bit CPU with MMU\n- 256MB RAM (1.5GB for persistent storage / native compilation)\n- 1GB storage\n\n### Recommended Requirements\n\n- Multi-core CPU with virtualization support\n- 4GB+ RAM\n- NVMe storage\n\n---\n\n## Documentation\n\n- 📖 [Architecture Overview](docs/ARCHITECTURE-OVERVIEW.md) — System design and architecture\n- 🛠️ [Development Guide](docs/DEVELOPMENT-GUIDE.md) — Getting started with development\n- 📚 [API Reference](docs/API-REFERENCE.md) — System call and library APIs\n- 🧪 [Testing Strategy](docs/TESTING-STRATEGY.md) — Testing approach and guidelines\n- 🔍 [Troubleshooting](docs/TROUBLESHOOTING.md) — Common issues and solutions\n\n### Implementation Guides\n\n- 🗺️ [Implementation Roadmap](docs/IMPLEMENTATION-ROADMAP.md) — Detailed development plan\n- 🔄 [Software Porting Guide](docs/SOFTWARE-PORTING-GUIDE.md) — Porting Linux software to VeridianOS\n- 🔧 [Compiler Toolchain Guide](docs/COMPILER-TOOLCHAIN-GUIDE.md) — Native compiler integration strategy\n- 💾 [Persistent Storage Guide](docs/PERSISTENT-STORAGE.md) — BlockFS filesystem and disk image management\n- 🚀 [Future Development Insights](docs/FUTURE-DEVELOPMENT-INSIGHTS.md) — Analysis and recommendations\n- 🦀 [Rust Compiler Porting Guide](docs/RUST-COMPILER-PORTING.md) — Porting rustc to VeridianOS via LLVM 19 cross-compilation\n- 🐚 [vsh Shell Guide](docs/VSH-SHELL-GUIDE.md) — Bash-compatible userland shell usage and internals\n\n### Development Phases\n\nThe project follows a phased development approach:\n\n1. [Phase 0: Foundation](docs/00-PHASE-0-FOUNDATION.md) — Build system and tooling\n2. [Phase 1: Microkernel Core](docs/01-PHASE-1-MICROKERNEL-CORE.md) — Core kernel functionality\n3. [Phase 2: User Space Foundation](docs/02-PHASE-2-USER-SPACE-FOUNDATION.md) — Essential services\n4. [Phase 3: Security Hardening](docs/03-PHASE-3-SECURITY-HARDENING.md) — Security features\n5. [Phase 4: Package Ecosystem](docs/04-PHASE-4-PACKAGE-ECOSYSTEM.md) — Package management\n6. [Phase 5: Performance Optimization](docs/05-PHASE-5-PERFORMANCE-OPTIMIZATION.md) — Performance tuning\n7. [Phase 6: Advanced Features](docs/06-PHASE-6-ADVANCED-FEATURES.md) — GUI and advanced features\n8. [Phase 6.5 Completion Summary](docs/PHASE6.5-COMPLETION-SUMMARY.md) — Rust compiler port and Bash-in-Rust shell\n\nSee [PROJECT-STATUS.md](docs/PROJECT-STATUS.md) for detailed status information and [Master TODO](to-dos/MASTER_TODO.md) for task tracking.\n\n---\n\n## How to Read the Code\n\n1. [Invariants](docs/invariants.md) — Architectural invariants (start here)\n2. [Architecture](docs/architecture.md) — System architecture\n\nHelpful diagrams:\n\n- [Mermaid - Architecture Capability Flow](docs/diagrams/architecture-capability-flow.mmd)\n- [Mermaid - Kernal Entry Points](docs/diagrams/kernel-entry-points.mmd)\n\n1. [Kernel Entry Points](docs/kernel-entry-points.md) — Kernel entry points\n2. [Capability Flow](docs/capability-flow.md) — Capability flow into services and drivers\n\n---\n\n## Unsafe Code Policy\n\nUnsafe Rust is permitted only to enforce higher-level invariants and is strictly controlled.\n\nSee [Unsafe Policy](docs/unsafe-policy.md).\n\n---\n\n## Performance Targets\n\nVeridianOS is not a performance-first system, but targets reasonable latency for a research microkernel:\n\n**Phase 1 targets** (achieved):\n\n- IPC Latency: \u003c 5μs\n- Context Switch: \u003c 10μs\n- Microkernel Size: \u003c 15,000 lines of code\n\n**Phase 5 targets** (planned):\n\n- IPC Latency: \u003c 1μs\n- Memory Allocation: \u003c 1μs\n- System Call Overhead: \u003c 100ns\n- Support for 1000+ concurrent processes\n\nDesign properties that support these targets include lock-free data structures in critical paths, zero-copy IPC, NUMA-aware memory allocation, and sub-microsecond system call paths.\n\n---\n\n## Security\n\nSecurity is a fundamental design principle:\n\n- **Capability-based access control** — Fine-grained, unforgeable permissions\n- **Secure boot** — Full chain of trust verification\n- **Memory safety** — Rust's ownership guarantees plus runtime checks\n- **Mandatory access control** — SELinux-style policies\n- **Hardware security** — TPM, HSM, and TEE integration\n\n---\n\n## Technical Roadmap\n\n### Completed (2025-2026)\n\n- [x] **Phase 0**: Foundation and Tooling (v0.1.0, Jun 2025)\n- [x] **Phase 1**: Microkernel Core (v0.2.1, Jun 2025)\n- [x] **Phase 2**: User Space Foundation (v0.3.2, Feb 2026)\n- [x] **Phase 3**: Security Hardening (v0.3.2, Feb 2026)\n- [x] **Phase 4**: Package Ecosystem and Self-Hosting (v0.4.0, Feb 2026)\n- [x] **Self-Hosting Tiers 0-5**: Complete libc, cross-toolchain, user-space execution (v0.4.9, Feb 2026)\n- [x] **Self-Hosting Tier 6**: Thread support, signal delivery, virtio-MMIO, multi-LOAD ELF, LLVM triple, native GCC infrastructure (merged from test-codex, Feb 2026)\n- [x] **Self-Hosting Tier 7**: Full self-hosting toolchain -- Rust user-space targets, std port, static native GCC 14.2 via Canadian cross-compilation, GNU Make + Ninja, vpkg package manager (v0.5.0, Feb 2026)\n- [x] **Coreutils + Toolchain Validation**: 6 progressive POSIX coreutils (echo, cat, wc, ls, sort, pipeline_test) cross-compiled and verified on-target, pipe fd corruption fix, tri-arch clippy clean (v0.5.1, Feb 2026)\n- [x] **BusyBox Integration**: BusyBox 1.36.1 cross-compiled with 95 applets and ash shell, EPIPE handling, float printf, pipe improvements, Phase C native compilation infrastructure (384MB heap, sbrk hardening), POSIX BRE/ERE regex engine, CI target fix (v0.5.2, Feb 2026)\n- [x] **Phase 5 Sprint 1**: Scheduler context switch wiring, IPC blocking/wake + fast path, TODO(phase5) resolution across 56 items in 31 files, user-space /sbin/init process, dead_code audit reduction, native binary execution verification (v0.5.6, Feb 2026)\n- [x] **Phase 5.5 Infrastructure Bridge**: ACPI table parser, APIC timer 1000Hz preemptive scheduling, IPI/SMP, PCI/PCIe completion, DMA/IOMMU, POSIX shared memory, Unix domain sockets, lock-free RCU/hazard pointers, NVMe driver, VirtIO-Net, hardware PMU, 2MB huge pages, dynamic linker (v0.5.9-v0.5.13, Feb 2026)\n- [x] **Pre-Phase 6 Tech Debt Remediation**: 12 new syscalls (shm_open/unlink/truncate, socket create/bind/listen/connect/accept/send/recv/close/socketpair), PMU bootstrap wiring, RCU scheduler integration, NVMe PCI enumeration, IOMMU DMAR detection, dynamic linker segment copy fix, stale documentation correction (v0.6.0, Feb 2026)\n\n- [x] **Phase 6 Core (Waves 1-5)**: Graphical desktop with Wayland compositor (wire protocol, SHM buffers, surface compositing, XDG shell), PS/2 mouse driver, unified input events, TCP/IP network stack (VirtIO-Net, Ethernet, ARP, TCP state machine, DHCP client), 19 new syscalls (230-255), `startgui` desktop command, 5 network shell commands (v0.6.1, Feb 2026)\n- [x] **Phase 6 Completion**: Documentation sync (all Phase 6 references updated from ~5% to ~40%), AF_INET socket creation wired to net::socket, VirtIO-Net/E1000 device registry integration, UDP recv_from wired to socket buffer layer, all 43 TODO(phase6) markers resolved (4 wired + 39 reclassified to Phase 7), Phase 7 TODO roadmap generated (15 categories, ~93 items) (v0.6.2, Feb 2026)\n- [x] **Phase 6.5: Rust Compiler Port + Bash Shell**: Rust std::sys::veridian platform (15 files, ~7800 lines), LLVM 19 cross-compilation scripts, rustc/cargo build pipeline with self-hosting verification; vsh Bash-in-Rust shell (~10K lines, 49 builtins, job control, readline); kernel enhancements (8GB memory, epoll, PTY, signal completions); 700+ test cases, 3 documentation guides (v0.7.0, Feb 2026)\n- [x] **Phase 7 Waves 1-3: GPU + Wayland + Desktop**: VirtIO GPU driver (PCI discovery, virtqueue, 2D resources, scanout), vendor GPU stubs (i915/amdgpu/nouveau), Wayland extensions (layer-shell, idle-inhibit, DMA-BUF, multi-output, xdg-decoration, XWayland), libwayland-client library, desktop environment (launcher, notifications, systray, screen lock, Alt-Tab, animation, workspaces, decorations, compositing effects), applications (MIME database, syntax highlighting, settings, image viewer), dynamic linker completion (lazy PLT, symbol versioning, LD_PRELOAD, TLS) (v0.7.1, Feb 2026)\n- [x] **Phase 7 Wave 4: Advanced Networking**: Zero-copy DMA networking (buffer pool, scatter-gather, TCP segmentation), hardware NIC driver (DMA TX/RX rings, E1000 MMIO), IPv6 dual-stack (~2,145 lines, NDP/SLAAC/ICMPv6), shell command substitution (18 inline commands), NVMe admin queue, MIME dispatch (v0.8.0, Feb 2026)\n- [x] **Phase 7 Wave 5: Multimedia**: Audio subsystem (fixed-point 16.16 mixer, SPSC ring buffer, WAV parser, VirtIO-Sound driver, output pipeline, 8 syscalls), video framework (TGA/QOI decoders, bilinear scaling, media player) (v0.9.0, Feb 2026)\n- [x] **Phase 7 Wave 6: Virtualization + Security + Performance**: Intel VMX hypervisor (VMCS, EPT, virtual devices), container isolation (PID/mount/network/UTS namespaces), KPTI shadow page tables, demand paging, COW fork, TPM MMIO probing, Dilithium ML-DSA-65, NUMA SRAT/SLIT topology, per-CPU ready queues with work-stealing, IPC batching, IOMMU DRHD parsing, all 34 TODO(phase7) resolved (v0.10.0, Feb 2026)\n- [x] **Integration Audit**: Two-pass audit wiring 51 unreachable syscalls, AF_INET socket routing, VirtIO PCI driver probing, COW fork page fault handling, container namespace fork propagation, select() implementation, audio pipeline to VirtIO-Sound, scheduler work-stealing (v0.10.1, Feb 2026)\n- [x] **Desktop Render Loop Integration**: Wire all 8 Phase 7 desktop modules into compositing pipeline -- keyboard modifier tracking (Alt/Ctrl/Super), GUI mode key encoding (single-byte 0x80+ for arrows), hotkey detection (Alt+Tab, Ctrl+Alt+L, Ctrl+Alt+Arrows, Super), screen lock takeover, overlay rendering (app switcher, launcher, notifications), snap-to-edge, virtual workspace switching, system tray stats, animation framework (v0.10.2, Feb 2026)\n- [x] **Full Subsystem Integration -- CLI + GUI**: 17 new shell commands (lspci, lsusb, lsblk, vmstat, sched, slab, cap, mac, audit, tpm, sha256sum, blake3sum, ipcs, route, ss, winfo, lsns), dynamic GUI app framework (spawn/close/focus lifecycle), launcher dispatch with 7 apps, system monitor with live stats, window close buttons, 4 subsystem accessor APIs (v0.10.3, Feb 2026)\n- [x] **GUI Bug Fixes + VirtIO GPU Acceleration**: 5 GUI bug fixes (system monitor perf counters, settings app rendering, CMOS RTC real-time clock, taskbar focus switching, render loop performance), VirtIO GPU hardware-accelerated framebuffer blit path, CMOS RTC driver for wall-clock time (v0.10.4, Feb 2026)\n- [x] **9 GUI Bug Fixes -- Close Buttons, Right-Click, Interactivity, Navigation**: Close button overlays on all windows (static + dynamic closeable), right-click context actions (title bar close, desktop launcher toggle), settings/image viewer event dispatch (keyboard + mouse forwarding), file manager \"..\" parent entry + arrow key navigation, terminal welcome message, system monitor total_frames fix + frame counter, benchmark target relaxation, EST timezone offset (v0.10.5, Feb 2026)\n- [x] **CI Hardening -- Code Coverage + cfg Gate Fixes**: Fix Code Coverage job compilation failures (add `use alloc::vec;` to dilithium.rs and numa.rs test modules for host-target `vec!` macro access), gate DMA buffer pool test assertions on `target_os=\"none\"` (frame allocator unavailable on host), fix `get_heap_stats()` cfg gate mismatch (`target_arch=\"x86_64\"` -\u003e compound `target_os=\"none\"` gate); CI achieves 11/11 job pass rate with 998 host-target unit tests (v0.10.6, Mar 2026)\n\n- [x] **Phase 7.5**: Follow-on enhancements across 8 waves (80/80 items): filesystem (ext4/FAT32/tmpfs/inotify/flock/xattr), security (KASLR/canaries/SMEP-SMAP/retpoline), performance (EDF scheduling/cache-aware alloc/PGO), drivers (xHCI/AHCI-SATA/HID/Bluetooth), networking (TCP Reno+Cubic/SACK/DNS/VLAN/bonding), crypto (TLS 1.3/SSH/HTTP/NTP/QUIC/WireGuard), audio/video (ALSA/Vorbis/MP3/PNG/JPEG/GIF), GPU (VirtIO 3D/GLES2/DRM KMS), hypervisor (nested/passthrough/migration), containers (OCI/cgroups/seccomp), desktop (clipboard/DnD/shortcuts/themes/TrueType/CJK), shell (io_uring/ptrace/coredump/users/sudo/cron) (v0.11.0-v0.16.0, Mar 2026)\n- [x] **v0.16.1 Tech Debt Remediation**: 11 undocumented `static mut` converted to safe patterns (AtomicU8/spin::Mutex/UnsafeCell wrappers), PixelFormat consolidated from 4 to 1 definition, 5 oversized files split into submodules (19,663 lines reorganized), production `unwrap()` reduction, 125 new pkg/ tests (2,356 total), dead_code annotations reduced 321-\u003e193 (v0.16.1, Mar 2026)\n- [x] **v0.16.2 Phase 5 Completion + Phase 8 Wave 1 (partial)**: Phase 5 Performance Optimization brought to 100% (trace instrumentation 10/10, FrameFree+PageFault wired, validation criteria checked). Phase 8 Wave 1 Foundation \u0026 Self-Hosting: GDB remote serial protocol stub (`debug/gdb_stub.rs`, `debug/breakpoint.rs`), native git client object model (`devtools/git/objects.rs`, `deflate.rs`, `refs.rs`, `commands.rs`, `transport.rs`), build orchestrator with dependency topo-sort (`pkg/build_system.rs`, `pkg/build_package.rs`), LLVM 19 + rustc bootstrap portfiles (`pkg/ports/llvm.rs`, `pkg/ports/rustc_bootstrap.rs`), IDE text editor with gap buffer + LSP client (`devtools/ide/editor.rs`, `devtools/ide/lsp_client.rs`), CI runner (`devtools/ci/runner.rs`), profiler GUI with flame graph rendering (`devtools/profiler/gui.rs`) (v0.16.2, Mar 2026)\n\n### Upcoming\n\n- [ ] **Phase 8**: Next-generation features -- web browser, native rustc bootstrap, GPU-accelerated compositor, firewall/NAT, Kubernetes CRI/CNI/CSI, KVM API compatibility, LDAP/Kerberos, IDE with LSP, formal verification\n\nSee [Release History](docs/RELEASE-HISTORY.md) for detailed per-release notes.\n\n---\n\n## Contributing\n\nContributions are welcome. Please see the [Contributing Guide](CONTRIBUTING.md) for details on the code of conduct, development workflow, coding standards, and pull request process.\n\n---\n\n## Community\n\n- [Discord Server](https://discord.gg/24KbHS4C) — Real-time chat\n- [Issue Tracker](https://github.com/doublegate/VeridianOS/issues) — Bug reports and feature requests\n\n---\n\n## License\n\nVeridianOS is dual-licensed under:\n\n- MIT License ([LICENSE-MIT](LICENSE-MIT))\n- Apache License, Version 2.0 ([LICENSE-APACHE](LICENSE-APACHE))\n\nYou may choose either license for your use.\n\n---\n\n## Acknowledgments\n\nVeridianOS builds upon ideas from many excellent operating systems:\n\n- **seL4** — Formal verification and capability systems\n- **Redox OS** — Rust OS development practices\n- **Fuchsia** — Component-based architecture\n- **FreeBSD** — Driver framework inspiration\n- **Linux** — Hardware support reference\n\n---\n\n\u003cdiv align=\"center\"\u003e\n\n![Alt](https://repobeats.axiom.co/api/embed/1292141e5c9e3241d1afa584338f1dfdb278a269.svg \"Repobeats analytics image\")\n\n\u003cimg src=\"images/VeridianOS_Full-Logo.png\" alt=\"VeridianOS Full Banner\" width=\"60%\" /\u003e\n\n**Building the future of operating systems, one commit at a time.**\n\n\u003c/div\u003e\n\u003c!-- markdownlint-enable MD033 --\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdoublegate%2Fveridianos","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdoublegate%2Fveridianos","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdoublegate%2Fveridianos/lists"}