feat: carry authored OS identity through realization

contracts/concept-authority/controlled-vocabularies-v1.json

@@ -762,6 +762,48 @@
         }
       }
     },
+    "os-distributions": {
+      "title": "Operating System Distributions and Product Lines",
+      "description": "Portable operating-system distribution or product-line identifiers shared by SDL and backend compatibility declarations.",
+      "kind": "vocabulary",
+      "governed_scopes": [
+        "nodes.os_distribution",
+        "capabilities.provisioner.operating_systems.distribution",
+        "runtime.snapshot.realization_observations.operating-system.distribution"
+      ],
+      "extension_policy": "governed-extension",
+      "extension_pattern": "^x-[a-z0-9]+(?:-[a-z0-9]+)*:[a-z0-9]+(?:-[a-z0-9]+)*$",
+      "terms": {
+        "ubuntu": {
+          "title": "Ubuntu",
+          "description": "Ubuntu Linux distribution."
+        },
+        "debian": {
+          "title": "Debian",
+          "description": "Debian GNU/Linux distribution."
+        },
+        "rocky-linux": {
+          "title": "Rocky Linux",
+          "description": "Rocky Linux distribution."
+        },
+        "red-hat-enterprise-linux": {
+          "title": "Red Hat Enterprise Linux",
+          "description": "Red Hat Enterprise Linux product line."
+        },
+        "windows-server": {
+          "title": "Windows Server",
+          "description": "Microsoft Windows Server product line."
+        },
+        "windows-client": {
+          "title": "Windows Client",
+          "description": "Microsoft Windows client product line."
+        },
+        "solaris": {
+          "title": "Solaris",
+          "description": "Oracle Solaris operating-system product line."
+        }
+      }
+    },
     "provisioner-node-architectures": {
       "title": "Provisioner Node CPU Architectures",
       "description": "Target-node CPU architecture vocabulary shared by SDL Node.architecture and provisioner capability declarations.",

contracts/fixtures/backend-manifest/backend-manifest-v2/valid/stub.json

@@ -153,6 +153,7 @@
         "other",
         "windows"
       ],
+      "operating_systems": [],
       "supported_node_architectures": [
         "aarch64",
         "x86_64"

contracts/fixtures/concept-authority/controlled-vocabularies-v1/valid/reference.json

@@ -762,6 +762,48 @@
         }
       }
     },
+    "os-distributions": {
+      "title": "Operating System Distributions and Product Lines",
+      "description": "Portable operating-system distribution or product-line identifiers shared by SDL and backend compatibility declarations.",
+      "kind": "vocabulary",
+      "governed_scopes": [
+        "nodes.os_distribution",
+        "capabilities.provisioner.operating_systems.distribution",
+        "runtime.snapshot.realization_observations.operating-system.distribution"
+      ],
+      "extension_policy": "governed-extension",
+      "extension_pattern": "^x-[a-z0-9]+(?:-[a-z0-9]+)*:[a-z0-9]+(?:-[a-z0-9]+)*$",
+      "terms": {
+        "ubuntu": {
+          "title": "Ubuntu",
+          "description": "Ubuntu Linux distribution."
+        },
+        "debian": {
+          "title": "Debian",
+          "description": "Debian GNU/Linux distribution."
+        },
+        "rocky-linux": {
+          "title": "Rocky Linux",
+          "description": "Rocky Linux distribution."
+        },
+        "red-hat-enterprise-linux": {
+          "title": "Red Hat Enterprise Linux",
+          "description": "Red Hat Enterprise Linux product line."
+        },
+        "windows-server": {
+          "title": "Windows Server",
+          "description": "Microsoft Windows Server product line."
+        },
+        "windows-client": {
+          "title": "Windows Client",
+          "description": "Microsoft Windows client product line."
+        },
+        "solaris": {
+          "title": "Solaris",
+          "description": "Oracle Solaris operating-system product line."
+        }
+      }
+    },
     "provisioner-node-architectures": {
       "title": "Provisioner Node CPU Architectures",
       "description": "Target-node CPU architecture vocabulary shared by SDL Node.architecture and provisioner capability declarations.",

contracts/fixtures/realization-envelope/realization-envelope-v1/valid/generic.json

@@ -12,12 +12,13 @@
   },
   "configuration": {
     "mode": "generic",
-    "configuration_digest": "sha256:af14a9757a7b80bedab5cea712f60d2a05ee1d3406fbb7c71e196eaca4746c15",
+    "configuration_digest": "sha256:cf7e5b0d28c25293d254c463a23958f66f92776579872fce8abbeb1227347b4b",
     "architecture": "x86_64",
     "image_policy": "local-qcow2",
     "network_policy": "libvirt-managed",
     "supported_node_types": ["switch", "compute"],
     "supported_os_families": ["linux"],
+    "operating_systems": [],
     "supported_content_types": ["file"],
     "supported_account_features": ["auth_method", "disabled", "groups", "home", "shell"],
     "supported_domain_profiles": [],
@@ -27,6 +28,7 @@
   },
   "concerns": [
     {"concern": "compute-substrate", "disposition": "realized", "observation_strength": "daemon-observed", "mechanism": "virtual-machine", "transformations": []},
+    {"concern": "operating-system", "disposition": "unsupported", "observation_strength": "none", "mechanism": null, "transformations": []},
     {"concern": "topology", "disposition": "realized", "observation_strength": "driver-reported", "mechanism": "libvirt-domain-network", "transformations": []},
     {"concern": "architecture", "disposition": "realized", "observation_strength": "driver-reported", "mechanism": "qemu-x86_64-domain", "transformations": []},
     {"concern": "image", "disposition": "realized", "observation_strength": "driver-reported", "mechanism": "qcow2-disk-attachment", "transformations": []},
@@ -38,5 +40,5 @@
     {"concern": "service", "disposition": "unsupported", "observation_strength": "none", "mechanism": null, "transformations": []},
     {"concern": "acl", "disposition": "realized", "observation_strength": "driver-reported", "mechanism": "libvirt-nwfilter", "transformations": []}
   ],
-  "digest": "sha256:0a4ff252cde4d85a1f0ddc896a82d10679b805723df55d0042b9932a61d037e7"
+  "digest": "sha256:1c768fa96dda900757ca48a66ddd741c62dbd5bd86e1356e75e3cc559ece92e0"
 }

contracts/realization-envelopes/libvirt-qemu/generic-v1.json

@@ -12,12 +12,13 @@
   },
   "configuration": {
     "mode": "generic",
-    "configuration_digest": "sha256:af14a9757a7b80bedab5cea712f60d2a05ee1d3406fbb7c71e196eaca4746c15",
+    "configuration_digest": "sha256:cf7e5b0d28c25293d254c463a23958f66f92776579872fce8abbeb1227347b4b",
     "architecture": "x86_64",
     "image_policy": "local-qcow2",
     "network_policy": "libvirt-managed",
     "supported_node_types": ["switch", "compute"],
     "supported_os_families": ["linux"],
+    "operating_systems": [],
     "supported_content_types": ["file"],
     "supported_account_features": ["auth_method", "disabled", "groups", "home", "shell"],
     "supported_domain_profiles": [],
@@ -27,6 +28,7 @@
   },
   "concerns": [
     {"concern": "compute-substrate", "disposition": "realized", "observation_strength": "daemon-observed", "mechanism": "virtual-machine", "transformations": []},
+    {"concern": "operating-system", "disposition": "unsupported", "observation_strength": "none", "mechanism": null, "transformations": []},
     {"concern": "topology", "disposition": "realized", "observation_strength": "driver-reported", "mechanism": "libvirt-domain-network", "transformations": []},
     {"concern": "architecture", "disposition": "realized", "observation_strength": "driver-reported", "mechanism": "qemu-x86_64-domain", "transformations": []},
     {"concern": "image", "disposition": "realized", "observation_strength": "driver-reported", "mechanism": "qcow2-disk-attachment", "transformations": []},
@@ -38,5 +40,5 @@
     {"concern": "service", "disposition": "unsupported", "observation_strength": "none", "mechanism": null, "transformations": []},
     {"concern": "acl", "disposition": "realized", "observation_strength": "driver-reported", "mechanism": "libvirt-nwfilter", "transformations": []}
   ],
-  "digest": "sha256:0a4ff252cde4d85a1f0ddc896a82d10679b805723df55d0042b9932a61d037e7"
+  "digest": "sha256:1c768fa96dda900757ca48a66ddd741c62dbd5bd86e1356e75e3cc559ece92e0"
 }

contracts/realization-envelopes/libvirt-qemu/guest-certified-appliance-v1.json

@@ -22,6 +22,7 @@
     "supported_os_families": [
       "linux"
     ],
+    "operating_systems": [],
     "supported_content_types": [
       "file"
     ],
@@ -41,7 +42,7 @@
       "minimum": 1,
       "maximum": 2
     },
-    "configuration_digest": "sha256:bc4987adb1c0a8b179ff3953649bea10347d9662a756c7193f21081084f1ddcb"
+    "configuration_digest": "sha256:bc773acad54a27a26f63ddaae96d7c8b0f8d37226dc19815fc146fa092884dbf"
   },
   "concerns": [
     {
@@ -51,6 +52,13 @@
       "mechanism": "virtual-machine",
       "transformations": []
     },
+    {
+      "concern": "operating-system",
+      "disposition": "unsupported",
+      "observation_strength": "none",
+      "mechanism": null,
+      "transformations": []
+    },
     {
       "concern": "topology",
       "disposition": "realized",
@@ -122,5 +130,5 @@
       "transformations": []
     }
   ],
-  "digest": "sha256:dbb1aff11bd4666561a2823f8d8d6da449af2332976fcc5d301da14fdb4c84d2"
+  "digest": "sha256:39becb940224f84350d4c16bfa0c2159e5aae3478004265b0cb675423c339aba"
 }

contracts/realization-envelopes/libvirt-qemu/techvault-appliance-v1.json

@@ -12,12 +12,13 @@
   },
   "configuration": {
     "mode": "techvault-appliance",
-    "configuration_digest": "sha256:6a502f097764f96394a465833f421ccaad21bb5bb94860db8b831722d4febe74",
+    "configuration_digest": "sha256:c90445ed25f95a37dc28a2b9fc33053aa9febd532a350187cf9722408e14bbca",
     "architecture": "x86_64",
     "image_policy": "generated-initramfs-appliance",
     "network_policy": "generated-appliance-network",
     "supported_node_types": ["switch", "compute"],
     "supported_os_families": ["linux"],
+    "operating_systems": [],
     "supported_content_types": [],
     "supported_account_features": [],
     "supported_domain_profiles": [],
@@ -27,6 +28,7 @@
   },
   "concerns": [
     {"concern": "compute-substrate", "disposition": "realized", "observation_strength": "daemon-observed", "mechanism": "virtual-machine", "transformations": []},
+    {"concern": "operating-system", "disposition": "unsupported", "observation_strength": "none", "mechanism": null, "transformations": []},
     {"concern": "topology", "disposition": "realized", "observation_strength": "daemon-observed", "mechanism": "libvirt-domain-network-readback", "transformations": []},
     {"concern": "architecture", "disposition": "realized", "observation_strength": "daemon-observed", "mechanism": "libvirt-domain-xml-readback", "transformations": []},
     {"concern": "image", "disposition": "realized", "observation_strength": "daemon-observed", "mechanism": "generated-initramfs-attachment-readback", "transformations": []},
@@ -38,5 +40,5 @@
     {"concern": "service", "disposition": "unsupported", "observation_strength": "none", "mechanism": null, "transformations": []},
     {"concern": "acl", "disposition": "unsupported", "observation_strength": "none", "mechanism": null, "transformations": []}
   ],
-  "digest": "sha256:8876bb4288509288260aa39bc47a5f0aa8c10087a709fcf5f2d5565450b4d548"
+  "digest": "sha256:a0b7164802d10fe929c1cf1115c969eaaf69041ce497ccce6d289f44ac36fe05"
 }

contracts/realization-envelopes/reference-emulation/in-process-v1.json

@@ -12,12 +12,13 @@
   },
   "configuration": {
     "mode": "in-process-emulation",
-    "configuration_digest": "sha256:aaea24e0dbc889cb03080115b2bd68c5c33a005d882400adfd4cd935cd710b17",
+    "configuration_digest": "sha256:6ebdcb05bec9d9691110df0ce23c1b660936b4565415ab254026dffc8040a57a",
     "architecture": "x86_64",
     "image_policy": "descriptor-only",
     "network_policy": "in-process-emulation",
     "supported_node_types": ["switch", "compute"],
     "supported_os_families": ["linux", "windows", "macos", "freebsd", "other"],
+    "operating_systems": [],
     "supported_content_types": ["file", "dataset", "directory"],
     "supported_account_features": ["auth_method", "disabled", "groups", "home", "mail", "shell"],
     "supported_domain_profiles": [],
@@ -27,6 +28,7 @@
   },
   "concerns": [
     {"concern": "compute-substrate", "disposition": "realized", "observation_strength": "driver-reported", "mechanism": "x-openrae:in-process-emulation", "transformations": []},
+    {"concern": "operating-system", "disposition": "unsupported", "observation_strength": "none", "mechanism": null, "transformations": []},
     {"concern": "topology", "disposition": "realized", "observation_strength": "driver-reported", "mechanism": "in-process-ledger", "transformations": []},
     {"concern": "architecture", "disposition": "descriptor-only", "observation_strength": "driver-reported", "mechanism": "portable-descriptor", "transformations": []},
     {"concern": "image", "disposition": "descriptor-only", "observation_strength": "driver-reported", "mechanism": "portable-descriptor", "transformations": []},
@@ -38,5 +40,5 @@
     {"concern": "service", "disposition": "descriptor-only", "observation_strength": "driver-reported", "mechanism": "portable-descriptor", "transformations": []},
     {"concern": "acl", "disposition": "descriptor-only", "observation_strength": "driver-reported", "mechanism": "portable-descriptor", "transformations": []}
   ],
-  "digest": "sha256:7e7b4e907437562cb5fbee20527a41a69da90d84da72d52db616fe707410b5ea"
+  "digest": "sha256:c1b809119bdce795c368dd4e04a67a9d3e7e5a1e52e49d860d2f8eb07b0869a5"
 }

contracts/realization-envelopes/reference-emulation/oci-container-v1.json

@@ -12,12 +12,13 @@
   },
   "configuration": {
     "mode": "oci-container",
-    "configuration_digest": "sha256:bedcd981f7c28030e5ae6b845ead667727a75c995d45f81a84ff0d1a0922b851",
+    "configuration_digest": "sha256:5af65c08e8530288ba7d471d69a3e6856dc4bac783aa0beb80f1c1b3eff09d23",
     "architecture": "x86_64",
     "image_policy": "operator-trusted-oci-image",
     "network_policy": "oci-runtime-managed",
     "supported_node_types": ["switch", "compute"],
     "supported_os_families": ["linux"],
+    "operating_systems": [],
     "supported_content_types": ["file", "dataset", "directory"],
     "supported_account_features": ["auth_method", "disabled", "groups", "home", "mail", "shell"],
     "supported_domain_profiles": [],
@@ -27,6 +28,7 @@
   },
   "concerns": [
     {"concern": "compute-substrate", "disposition": "realized", "observation_strength": "daemon-observed", "mechanism": "operating-system-container", "transformations": []},
+    {"concern": "operating-system", "disposition": "unsupported", "observation_strength": "none", "mechanism": null, "transformations": []},
     {"concern": "topology", "disposition": "realized", "observation_strength": "daemon-observed", "mechanism": "oci-daemon-inspect", "transformations": []},
     {"concern": "architecture", "disposition": "descriptor-only", "observation_strength": "driver-reported", "mechanism": "portable-descriptor", "transformations": []},
     {"concern": "image", "disposition": "realized", "observation_strength": "daemon-observed", "mechanism": "oci-daemon-inspect", "transformations": []},
@@ -38,5 +40,5 @@
     {"concern": "service", "disposition": "descriptor-only", "observation_strength": "driver-reported", "mechanism": "portable-descriptor", "transformations": []},
     {"concern": "acl", "disposition": "unsupported", "observation_strength": "none", "mechanism": null, "transformations": []}
   ],
-  "digest": "sha256:62f5cf073d4fa35f323be024c9e16e195a0bf8aad2f1067e4f2863fa200029a0"
+  "digest": "sha256:e62aa8c27ec68ce7384c559d27e75b5cc6253335e552b139e6a37c9c91321b76"
 }

contracts/schema-publication/entries/backend-manifest-v2.json

@@ -2,9 +2,9 @@
   "contract_id": "backend-manifest-v2",
   "schema_path": "contracts/schemas/backend-manifest/backend-manifest-v2.json",
   "stability": "draft",
-  "content_hash": "7a0b8682ca0dee26b1df767a1c0e86bd2b0dc6d8125dc6ef67aeab3367a7d2ef",
+  "content_hash": "45a269d3dd15d4c864ae210d1bfa258412b0e33a8a542eedfc16fa9fc26913c6",
   "last_change": {
-    "summary": "Added typed process-resource-limit apparatus domains for issue #1066, including portable resource terms, process/subtree scope, finite bounds, and unlimited-value support.",
-    "content_hash": "7a0b8682ca0dee26b1df767a1c0e86bd2b0dc6d8125dc6ef67aeab3367a7d2ef"
+    "summary": "Added coupled operating-system family, distribution, and bounded release capability rows for issue #1077.",
+    "content_hash": "45a269d3dd15d4c864ae210d1bfa258412b0e33a8a542eedfc16fa9fc26913c6"
   }
 }

contracts/schema-publication/entries/instantiated-scenario-snapshot-v1.json

@@ -2,9 +2,9 @@
   "contract_id": "instantiated-scenario-snapshot-v1",
   "schema_path": "contracts/schemas/sdl/instantiated-scenario-snapshot-v1.json",
   "stability": "draft",
-  "content_hash": "0b4f45eca295ce8a3b3113b4dc208267d1d32fa4bf644f8ee912ef8f307c6c84",
+  "content_hash": "3e60ed2a2878f49d0aa3db325c82f2e61b5b2caa2be204298b31099d950dcc93",
   "last_change": {
-    "summary": "Separated compute resource kind from substrate constraints and preserved exact legacy virtual-machine intent during historical v1 snapshot migration for issue #1076.",
-    "content_hash": "0b4f45eca295ce8a3b3113b4dc208267d1d32fa4bf644f8ee912ef8f307c6c84"
+    "summary": "Separated governed operating-system distribution from release-only version values for issue #1077.",
+    "content_hash": "3e60ed2a2878f49d0aa3db325c82f2e61b5b2caa2be204298b31099d950dcc93"
   }
 }

contracts/schema-publication/entries/instantiated-scenario-v1.json

@@ -2,9 +2,9 @@
   "contract_id": "instantiated-scenario-v1",
   "schema_path": "contracts/schemas/sdl/instantiated-scenario-v1.json",
   "stability": "draft",
-  "content_hash": "e0b0ff3c896785ff8932cef60beb48e47e193a4856bb0f6eb5fac50c1bf51f92",
+  "content_hash": "d3f83594bc9f7dfbe05e6c2ad522e6e0d3c099b563a07a3cf955a8a62e7eef62",
   "last_change": {
-    "summary": "Added canonical compute node kind and portable compute-substrate constraint provenance for issue #1076.",
-    "content_hash": "e0b0ff3c896785ff8932cef60beb48e47e193a4856bb0f6eb5fac50c1bf51f92"
+    "summary": "Added governed operating-system distribution identity and release-only version constraints for issue #1077.",
+    "content_hash": "d3f83594bc9f7dfbe05e6c2ad522e6e0d3c099b563a07a3cf955a8a62e7eef62"
   }
 }

contracts/schema-publication/entries/realization-envelope-v1.json

@@ -2,9 +2,9 @@
   "contract_id": "realization-envelope-v1",
   "schema_path": "contracts/schemas/realization-envelope/realization-envelope-v1.json",
   "stability": "draft",
-  "content_hash": "ee120d70afef4ebbd3e63a3a9b39e966986f4cf7a42cf30339848c78de003396",
+  "content_hash": "d8c49ab8d6c0db23a53e4d6808470e85c0839d5092386d5978e419af708dc464",
   "last_change": {
-    "summary": "Added governed compute-substrate claims and observation capability binding to selected material configurations for issue #1076.",
-    "content_hash": "ee120d70afef4ebbd3e63a3a9b39e966986f4cf7a42cf30339848c78de003396"
+    "summary": "Added coupled operating-system compatibility rows and an explicit operating-system realization concern for issue #1077.",
+    "content_hash": "d8c49ab8d6c0db23a53e4d6808470e85c0839d5092386d5978e419af708dc464"
   }
 }

contracts/schema-publication/entries/runtime-snapshot-v1.json

@@ -2,9 +2,9 @@
   "contract_id": "runtime-snapshot-v1",
   "schema_path": "contracts/schemas/snapshots/runtime-snapshot-v1.json",
   "stability": "draft",
-  "content_hash": "cdb549ce727995c8e14775096bfc927e34fb22a639b83a85be5f115069d11073",
+  "content_hash": "4388410c8e7536fef3f1251b7649b7d2cefef3764bf9da31d221430c92935879",
   "last_change": {
-    "summary": "Added value-bearing compute-substrate observations bound to operation, envelope, configuration, observer, and sequence for issue #1076.",
-    "content_hash": "cdb549ce727995c8e14775096bfc927e34fb22a639b83a85be5f115069d11073"
+    "summary": "Added typed guest-observed operating-system identity bound to operation, envelope, configuration, observer, and sequence for issue #1077.",
+    "content_hash": "4388410c8e7536fef3f1251b7649b7d2cefef3764bf9da31d221430c92935879"
   }
 }

contracts/schema-publication/entries/scenario-satisfiability-evidence-v1.json

@@ -2,9 +2,9 @@
   "contract_id": "scenario-satisfiability-evidence-v1",
   "schema_path": "contracts/schemas/satisfiability/scenario-satisfiability-evidence-v1.json",
   "stability": "draft",
-  "content_hash": "56a173d2383a9f277f5aa7351bf207ab96c2728d63077f7e5fbce6b5dc727267",
+  "content_hash": "617becb282057789766c4c77967e0241ae64adab788ba491b7fa910678f3b953",
   "last_change": {
-    "summary": "Propagated canonical compute kind and compute-substrate provenance through instantiated satisfiability witnesses for issue #1076.",
-    "content_hash": "56a173d2383a9f277f5aa7351bf207ab96c2728d63077f7e5fbce6b5dc727267"
+    "summary": "Propagated governed operating-system distribution and release identity through satisfiability witnesses for issue #1077.",
+    "content_hash": "617becb282057789766c4c77967e0241ae64adab788ba491b7fa910678f3b953"
   }
 }