42 lines
1.6 KiB
TeX
42 lines
1.6 KiB
TeX
%% Vol II, Chapter 3 — ACL and Security Model
|
|
%% SOURCE: docs/working/architecture/03-architecture/word-acl/DESIGN.md
|
|
%% .claude/CLAUDE.md (Word-Level ACL System section)
|
|
%% capsules/ACL.4th, capsules/zuse.4th
|
|
|
|
\chapter{Word-Level ACL and Security}
|
|
\label{vol2:chap:acl}
|
|
|
|
%% TODO(bob): this chapter covers the kernel-context aspects of the ACL system.
|
|
%% The VM-level design is in Vol I Appendix B; this chapter focuses on the
|
|
%% kernel-side bridge (Phase 7: LithosAnanke parity) and future PKI (Phase 8).
|
|
|
|
\section{ACL System in Kernel Context}
|
|
\label{vol2:sec:acl:kernel}
|
|
|
|
%% TODO(bob): describe Phase 7 goals: port ACL.4th to kernel context,
|
|
%% three-arch acceptance tests.
|
|
|
|
\section{Two-Console Model}
|
|
\label{vol2:sec:acl:consoles}
|
|
|
|
%% SOURCE: docs/working/architecture/03-architecture/word-acl/DESIGN.md
|
|
%% TODO(bob): describe the two permanent console layers:
|
|
%% - emergency console (ok>) — fault handler active
|
|
%% - zuse console (zuse)ok>) — superuser authenticated
|
|
%% and how they interact with the EMERGENCY_CONSOLE_ENABLED build flag.
|
|
|
|
\section{Zuse Superuser}
|
|
\label{vol2:sec:acl:zuse}
|
|
|
|
%% SOURCE: capsules/zuse.4th, .claude/CLAUDE.md
|
|
%% TODO(bob): describe the zuse superuser bootstrap: defined in zuse.4th,
|
|
%% loaded by ACL.4th at boot. CA root placeholder in ACL.4th.
|
|
|
|
\section{Future: PKI and Ed25519 (Phase 8)}
|
|
\label{vol2:sec:acl:pki}
|
|
|
|
%% TODO(bob): describe Phase 8 goals: Ed25519 challenge-response authentication,
|
|
%% thumbdrive-based user minting by zuse.
|
|
%% NOTE: do NOT draft patent-adjacent claim text here.
|
|
%% %% TODO(bob): PATENT — do not draft claim text for Phase 8 without explicit dictation.
|