0 Fork 0

mirror of https://github.com/subhobhai943/SUB-OS.git synced 2026-10-25 16:52:29 +00:00

Files

T

subhobhai943andClaude Opus 4.8 a0cd95cdc9 docs: add Contributing, Security, and Roadmap docs; link them from the README

Create docs/CONTRIBUTING.md (build/verify workflow, coding style, kernel
gotchas, commit & PR conventions), docs/SECURITY.md (supported versions,
private vulnerability reporting, documented caveats), and docs/ROADMAP.md
(shipped in v1.0.0 plus near/mid/long-term plans). Add a Documentation and
Contributing section to the README pointing at all four docs.

Note: used the conventional CONTRIBUTING.md / SECURITY.md filenames (in
docs/) so GitHub auto-detects them as community-health files.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Claude-Session: https://claude.ai/code/session_01Fh5z6V7nGPbHvqVG5p4CXX

2026-08-30 22:10:28 +05:30

3.7 KiB

Raw Permalink Blame History

SUB-OS Roadmap

Where SUB-OS is, and where it's going. This is a living document — priorities shift as the kernel grows. For the fine-grained, per-session engineering backlog see AUTODEV_ROADMAP.md.

Current release: v1.0.0 — Titan (stable)

✅ Shipped in v1.0.0 (Titan)

Weave scheduler — genuine per-architecture context switching with behavioural priority lanes; cooperative and preemptive (timer-driven).
Concurrency core — wait queues, completions, futexes, tiny RCU.
Memory management — buddy PMM, slab allocator, per-process page tables, page cache.
VFS — ext2, FAT32, ramfs, procfs, sysfs, devfs.
Networking — Ethernet/ARP/IPv4/UDP, full TCP (active + passive open), DHCP, DNS, NetFilter; sshd and httpd.
TLS 1.3 client — X25519, ChaCha20-Poly1305, HKDF key schedule (browses HTTPS; see the Security Policy for the cert-verification caveat).
Image & compression codecs — DEFLATE/zlib, PNG, BMP, baseline JPEG.
Graphical desktop (SUB-WT) — 60 FPS compositor, window manager, Terminal, Files, System & Network Monitor, a real web browser with inline images, and more.
Multi-arch — x86_64, aarch64, armv8i.
Linux-style build — Kconfig TUI, Kbuild, per-arch defconfigs.

🔜 Near term (1.1.x)

Thread reaping / zombie cleanup. Exited kernel threads currently leak their 16 KB stack + task_t. Add a reaper (a dead list drained by the idle thread).
Boot-test the ARM context switch. Wire weave_selftest() into the aarch64/armv8i boot paths and verify the AArch64/AArch32 sub_ctx_switch frames under qemu-system-aarch64 / -arm.
fork/exec/wait for ring-3 userland. Build on the ELF64 loader and per-process page tables so sh can spawn and reap real children.
TLS certificate verification. Close the biggest documented security gap by validating the server chain against a bundled trust store.

🌗 Mid term (1.x)

Capability-based IPC ("sub-ports"). Typed, capability-addressed message endpoints distinct from the SysV msg/pipe/shm set already in ipc/.
SMP bring-up (x86_64). AP boot trampoline, per-CPU run lanes, and per-CPU Weave lanes with work-stealing.
Desktop maturity. Compositor damage tracking, a richer file manager, a text editor, and a settings panel over the toolkit widgets.
Storage & FS. Write-back caching improvements, journaling groundwork, and broader ext2 write coverage.
Exploit mitigations. Enforce W^X on all mappings, add kernel stack canaries, and begin ASLR groundwork.

🌒 Long term (exploratory)

Self-hosting toolchain path — grow the userland toward building parts of SUB-OS on SUB-OS.
A native SUB-Language userland — first-class apps written in .sb.
Real hardware bring-up — beyond QEMU, on at least one aarch64 board.
Networking depth — IPv6, a TLS server, and a hardened, fuzzed stack.
Audio/graphics acceleration — virtio-gpu 3D paths and a mixer.

How priorities are chosen

Each development pass picks the single highest-value item achievable and verifiable in one session, implements it, verifies it under QEMU, and refines the backlog. Correctness and boot-tested verification always gate a feature before it's called done. See CONTRIBUTING.md for the verification discipline.

Have an idea or want to pick something up? Open an issue or a discussion — contributions against any of the items above are very welcome.

3.7 KiB Raw Permalink Blame History