1.1 KiB
Phase 1.0AO: offline worker supervisor model
Status: HOST_PREEMPTION_OWNERSHIP_MODEL_COMPLETE_TARGET_FEASIBILITY_UNPROVEN
Date: 2026-07-29
The capability-free architecture isolates the potentially blocking copy and temporary credentials in a one-shot worker. The persistent supervisor changes no credentials. It accepts only a result bound to the exact worker identity, exact requested byte count and zero restoration-failure bits.
A deadline terminates and reaps the worker. Once copy start is attempted, every deadline, malformed/wrong-identity result, partial copy, restoration failure or ambiguous start additionally terminates and reaps the child. Any terminal cleanup failure is a hard error. The supervisor performs no retry and never automatically restarts a worker or service.
This model does not prove that PS5 userland can create and uniquely identify such a worker, preempt one blocked inside the relevant syscall, or return a bounded authenticated result. It contains no process, signal, clock, IPC, network or target interface. A source-feasibility audit is required before target code can be considered.