23 lines
1.1 KiB
Markdown
23 lines
1.1 KiB
Markdown
# Phase 1.0AO: offline worker supervisor model
|
|
|
|
Status: `HOST_PREEMPTION_OWNERSHIP_MODEL_COMPLETE_TARGET_FEASIBILITY_UNPROVEN`
|
|
|
|
Date: 2026-07-29
|
|
|
|
The capability-free architecture isolates the potentially blocking copy and
|
|
temporary credentials in a one-shot worker. The persistent supervisor changes
|
|
no credentials. It accepts only a result bound to the exact worker identity,
|
|
exact requested byte count and zero restoration-failure bits.
|
|
|
|
A deadline terminates and reaps the worker. Once copy start is attempted, every
|
|
deadline, malformed/wrong-identity result, partial copy, restoration failure or
|
|
ambiguous start additionally terminates and reaps the child. Any terminal
|
|
cleanup failure is a hard error. The supervisor performs no retry and never
|
|
automatically restarts a worker or service.
|
|
|
|
This model does not prove that PS5 userland can create and uniquely identify
|
|
such a worker, preempt one blocked inside the relevant syscall, or return a
|
|
bounded authenticated result. It contains no process, signal, clock, IPC,
|
|
network or target interface. A source-feasibility audit is required before
|
|
target code can be considered.
|