All pull requests

Pull requests

• The kernel is 6.18.54 with linux-hardened 6.18.54-hardened1

  #331·DevomB opened Oct 9, 2026Owner·

  ·

• The kernel job's log keeps the resolved kernel config, folded, so a fragment change can be read by its effect

  #330·DevomB opened Oct 9, 2026Owner·

  ·

• The decision records say how services log, which processes the allocator reaches, what a zone's network is, and the measured microcode and root sizes

  #329·DevomB opened Oct 9, 2026Owner·

  ·

• CI's kernel job checks the kernel tarball, the linux-hardened patch and the checker against sources.lock before it unpacks them

  #328·DevomB opened Oct 9, 2026Owner·

  ·

• The launcher suite checks from the host that a zone's pid 1 has its own ipc, uts and cgroup namespaces, as the architecture says

  #327·DevomB opened Oct 9, 2026Owner·

  ·

• A saved Wi-Fi network is joined by WPA2 or WPA3 as its passphrase allows, never by 802.1X, with protected management frames where offered

  #326·DevomB opened Oct 9, 2026Owner·

  ·

• The net zone's supplicant takes no DPP frames, which any radio in range could send it unassociated

  #325·DevomB opened Oct 9, 2026Owner·

  ·

• The threat model says a clock agreed back past the newest statement is reported

  #324·DevomB opened Oct 9, 2026Owner·

  ·

• The roadmap's update channel names the notice for a clock behind the newest statement

  #323·DevomB opened Oct 9, 2026Owner·

  ·

• The status table names the medium's no-network check and the clock-behind notice

  #322·DevomB opened Oct 9, 2026Owner·

  ·

• The time namespace's stated limit names every source of the machine's clock a zone reads

  #321·DevomB opened Oct 9, 2026Owner·

  ·

• The hardware list: what a listing says, who may vouch, and a check that holds each row to its report

  #207·DevomB opened Oct 2, 2026Owner·

  ·

• A hardware report from the USB medium, written only when asked

  #180·DevomB opened Oct 2, 2026Owner·

  ·