SYSTEM / PUBLIC ENGINEERING RECORD
Building an operating system from the kernel upward.
Verified layers are machine-checked in QEMU and released. The AI layer is V0.11 work, verified on the development branch and shipped in v1.0.0. See /architecture.
ITISYOU OS is an experimental, pre-alpha research kernel. It is developed and verified exclusively inside QEMU with project-generated disposable disk images. Do not install it on physical hardware, point it at a real disk, or expect it to preserve data. There are no production builds.
Fields marked “—” have no verification evidence yet and are reported as absent rather than estimated.
MODULE / boot
MODULE / serial
MODULE / cpu
MODULE / memory-physical
MODULE / memory-virtual
MODULE / heap
MODULE / interrupts
MODULE / scheduler
MODULE / preemption
MODULE / vfs
MODULE / shell
MODULE / elf-loader
MODULE / ring3
MODULE / syscalls
MODULE / process
MODULE / process-isolation
MODULE / ipc
MODULE / pci
MODULE / block
MODULE / nvme
MODULE / filesystem
MODULE / graphics
MODULE / compositor
MODULE / gui-syscalls
MODULE / input-keyboard
MODULE / input-mouse
MODULE / desktop
MODULE / device-model
MODULE / pci-caps
MODULE / usb-uhci
MODULE / usb-hid
MODULE / input-unified
MODULE / audio-ac97
MODULE / devinfo-syscall
MODULE / capabilities
MODULE / fs-sandbox
MODULE / services
MODULE / app-model
MODULE / packages
MODULE / updates
MODULE / audit
MODULE / net-stack
MODULE / net-sockets
MODULE / net-tcp
MODULE / net-dhcp
MODULE / fs-write
MODULE / hardening
MODULE / usb-xhci
MODULE / irq-apic
MODULE / storage-second-driver
MODULE / test-harness
MODULE / pkg-signing
MODULE / acpi
MODULE / power-s5
MODULE / net-ipv6
MODULE / pkg-keys
MODULE / release-artifact
MODULE / proc-args
MODULE / fs-reclaim
MODULE / task-stack-guards
MODULE / always-on-sched
MODULE / process-tree
MODULE / userspace-init
MODULE / svc-report
MODULE / ring3-shell
MODULE / desktop-apps
MODULE / user-copy-hardening
MODULE / audit-integrity
MODULE / sys-view
MODULE / diag-model
MODULE / inference-service
MODULE / diag-agent
MODULE / proposals
MODULE / verified-actions
MODULE / output-escaping
MODULE / ipc-scoping
MODULE / sysfuzz
MODULE / decoder-fuzz
MODULE / cpu-containment
MODULE / soak-leak
MODULE / attack-surface-review
Statuses are read from at build time. “Implemented” and “Verified” are not interchangeable; anything not marked Verified should be assumed incomplete.
Each stage emits one machine-parseable serial marker — — asserted in order by the QEMU harness. Stage statuses below are the live module statuses, not a boot capture.
Linux is a mature, broad, production-proven kernel ecosystem — ITISYOU OS does not claim to be better than it, and is not a Linux distribution. It contains no Linux kernel code at runtime.
SECURITY PRINCIPLE 01
Released images before v1.0.0 contain no AI component. v1.0.0 ships the AI-native layer: the first agent runs this pipeline for two actions — it reads an approved view and files a proposal, the kernel checks it against its own facts, only the console approves, and the kernel executes, verifies and rolls back. See the security model.
A hang, panic, or missing marker can never pass. Absence of output is never success.
release-boot-test.ps1 OK — itisyou-os 1.0.0, init pid 1, pinned model, two-boot NVMe persistence, ping · two full-clean builds → identical digests · fault-contain-{bios,uefi} · sysfuzz-{none,default,agent}-bios · gui-quota-bios · cap-exhaust-bios · pkg-store-hostile-bios · docs/V1_SECURITY_REVIEW.md (37 findings) · check-consistency OK version=1.0.0 verification=verified · SHA256SUMS.txt on /download
line-atomic-bios · 250 dots + [ITISYOU:SVC] spoofed-split → [RING3-U:SVC] spoofed-split · ps path=/bin/spin-forever · control: the tail not kept → [ITISYOU:SVC] spoofed-split on the wire · ai-retry-bios · rollback_kill_refused … reason=not_an_instance under a compromised init · audit-tamper-save trail_checked status=TAMPERED reason=chain · ai-propose-bios --require-order · requirements OUT11-002, SEC11-002, AUDIT11-003