Skip to content

docs(rivet): DD-OS-DELIVERY-001 — cosign-signed OCI gust:os component delivery contract (gale#223) - #225

Merged
avrabe merged 1 commit into
mainfrom
docs/dd-os-delivery-oci
Jul 23, 2026
Merged

docs(rivet): DD-OS-DELIVERY-001 — cosign-signed OCI gust:os component delivery contract (gale#223)#225
avrabe merged 1 commit into
mainfrom
docs/dd-os-delivery-oci

Conversation

@avrabe

@avrabe avrabe commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Lands the design decision approved on gale#223: gale's consumable cut for the downstream per-core fusion contract (jess#167 / jess DD-026) is a cosign-signed OCI wasm component that exports gust:os (the fused gale-nano runtime), with residual imports = exactly gust:hal.

Decision (DD-OS-DELIVERY-001)

  • Delivery shape: cosign-signed OCI wasm component, not a release tarball of core modules + objects.
  • The component exports gust:os (the capability world flight components import); the scheduler primitives are resolved below gust:os by the composed executor and never exposed; the only post-composition residual is gust:hal (jess-satisfied per core).
  • Three-layer seam split, each party-owned: gust:os (gale) · data seams (jess-AADL) · gust:hal (jess native).
  • Grounded on v0.5.0 assets (verified this session): the .o is the 0-undef decision core; the .wasm is a core module carrying the 9-symbol env scheduler seam — neither is the consumable component.

Scope

refines SAC-BYOOS-LIBOS; related-to DD-OS-BUILD-001 / REQ-OS-RELEASE-001 / REQ-OS-SYSCALL-001. Build target (the fused component + OCI push) tracked in gale#224, bound to the v0.6 delivery cut. Both sides float-gated — record-and-align, not build-ahead.

rivet validatePASS (334 warnings; the one added warning is the standard "detailed design should have a unit-verification" note, which the gale#224 target closes).

🤖 Generated with Claude Code

…CI + wasm.directory gust:os component (gale#223)

Records the delivery-shape half of the downstream consumption contract
(gale#223): the natural externalisation of gust's OS-as-wasm-component-model —
gale delivers the fused gale-nano runtime as a cosign-signed wasm COMPONENT that
exports gust:os, resolving the scheduler seam internally, residual imports =
exactly gust:hal. GENERIC multi-consumer (jess#167/DD-026 is the first reference
consumer of many); published to BOTH a cosign-signed OCI registry (ghcr) AND
wasm.directory, matching the sibling flight component (relay's falcon-flight).
Grounded on v0.5.0 assets (.o = 0-undef decision core; .wasm = core module with
a 9-symbol env scheduler seam — neither is the consumable component). Three-layer
seam split: gust:os (gale) / data seams (jess-AADL) / gust:hal (jess native).
Build target tracked in gale#224.

rivet validate PASS. Refs: gale#223, gale#224, jess#167, gale#65.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@codecov

codecov Bot commented Jul 23, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@avrabe
avrabe merged commit d2dacde into main Jul 23, 2026
61 checks passed
@avrabe
avrabe deleted the docs/dd-os-delivery-oci branch July 23, 2026 22:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant