B5 syscall boundary: error taxonomy (T-020) + EL0→EL1 SVC dispatch (T-021)#34

Merged

cemililik merged 12 commits into

mainfrom

t-021-syscall-dispatch

May 29, 2026

Commits on May 29, 2026

docs(adr): propose ADR-0030/0031 — syscall ABI + initial syscall set

cemililik
and
claude
committed
docs(adr): accept ADR-0030/0031 after careful re-read + maintainer review

cemililik
and
claude
committed
feat(ipc): split IpcError::InvalidCapability into three typed variants

cemililik
and
claude
committed
feat(cap): redact Capability and CapObject Debug to hide object identity

cemililik
and
claude
committed
test(ipc): pin StaleHandle + WrongObjectKind on ipc_cancel_recv

cemililik
and
claude
committed
docs(roadmap): T-020 In Review; narrow B5 acceptance to current-EL proxy

cemililik
and
claude
committed
test(ipc): make wrong-kind tests actually prove kind-before-rights

cemililik
and
claude
committed
feat(syscalls): EL0→EL1 SVC dispatch — trampoline, panic-free dispatcher, copy-user

cemililik
and
claude
committed
test(syscalls): T-021 review-round follow-up — dispatch tests + compile-time payload guard

cemililik
and
claude
committed
docs(roadmap): record PR #34 (combined T-020 + T-021 B5 review)

cemililik
and
claude
committed
fix(syscalls): T-021 review-round 2 — overlap-safe copy-user + scope/guard fixes

cemililik
and
claude
committed
audit(syscalls): correct UNSAFE-2026-0030 amendment — disjointness is the soundness basis

cemililik
and
claude
committed