This commit is contained in:
@@ -0,0 +1,22 @@
|
||||
# Phase 1.0AO: offline worker supervisor model
|
||||
|
||||
Status: `HOST_PREEMPTION_OWNERSHIP_MODEL_COMPLETE_TARGET_FEASIBILITY_UNPROVEN`
|
||||
|
||||
Date: 2026-07-29
|
||||
|
||||
The capability-free architecture isolates the potentially blocking copy and
|
||||
temporary credentials in a one-shot worker. The persistent supervisor changes
|
||||
no credentials. It accepts only a result bound to the exact worker identity,
|
||||
exact requested byte count and zero restoration-failure bits.
|
||||
|
||||
A deadline terminates and reaps the worker. Once copy start is attempted, every
|
||||
deadline, malformed/wrong-identity result, partial copy, restoration failure or
|
||||
ambiguous start additionally terminates and reaps the child. Any terminal
|
||||
cleanup failure is a hard error. The supervisor performs no retry and never
|
||||
automatically restarts a worker or service.
|
||||
|
||||
This model does not prove that PS5 userland can create and uniquely identify
|
||||
such a worker, preempt one blocked inside the relevant syscall, or return a
|
||||
bounded authenticated result. It contains no process, signal, clock, IPC,
|
||||
network or target interface. A source-feasibility audit is required before
|
||||
target code can be considered.
|
||||
Reference in New Issue
Block a user