mirror of
https://github.com/subhobhai943/SUB-OS.git
synced 2026-10-25 16:52:29 +00:00
subhobhai943andClaude Opus 4.8
a0cd95cdc9
Create docs/CONTRIBUTING.md (build/verify workflow, coding style, kernel gotchas, commit & PR conventions), docs/SECURITY.md (supported versions, private vulnerability reporting, documented caveats), and docs/ROADMAP.md (shipped in v1.0.0 plus near/mid/long-term plans). Add a Documentation and Contributing section to the README pointing at all four docs. Note: used the conventional CONTRIBUTING.md / SECURITY.md filenames (in docs/) so GitHub auto-detects them as community-health files. Co-Authored-By: Claude Opus 4.8 <[email protected]> Claude-Session: https://claude.ai/code/session_01Fh5z6V7nGPbHvqVG5p4CXX
88 lines
3.7 KiB
Markdown
88 lines
3.7 KiB
Markdown
<div align="center">
|
|
|
|
<img src="../assets/logo_SUB_OS.png" alt="SUB-OS logo" width="140" height="140" />
|
|
|
|
# SUB-OS Roadmap
|
|
|
|
</div>
|
|
|
|
Where SUB-OS is, and where it's going. This is a living document — priorities
|
|
shift as the kernel grows. For the fine-grained, per-session engineering backlog
|
|
see [`AUTODEV_ROADMAP.md`](AUTODEV_ROADMAP.md).
|
|
|
|
**Current release:** [`v1.0.0` — Titan](https://github.com/subhobhai943/SUB-OS/releases/tag/v1.0.0) (stable)
|
|
|
|
---
|
|
|
|
## ✅ Shipped in v1.0.0 (Titan)
|
|
|
|
- **Weave scheduler** — genuine per-architecture context switching with
|
|
behavioural priority lanes; cooperative **and** preemptive (timer-driven).
|
|
- **Concurrency core** — wait queues, completions, futexes, tiny RCU.
|
|
- **Memory management** — buddy PMM, slab allocator, per-process page tables,
|
|
page cache.
|
|
- **VFS** — ext2, FAT32, ramfs, procfs, sysfs, devfs.
|
|
- **Networking** — Ethernet/ARP/IPv4/UDP, full TCP (active + passive open),
|
|
DHCP, DNS, NetFilter; `sshd` and `httpd`.
|
|
- **TLS 1.3 client** — X25519, ChaCha20-Poly1305, HKDF key schedule (browses
|
|
HTTPS; see the [Security Policy](SECURITY.md) for the cert-verification caveat).
|
|
- **Image & compression codecs** — DEFLATE/zlib, PNG, BMP, baseline JPEG.
|
|
- **Graphical desktop (SUB-WT)** — 60 FPS compositor, window manager, Terminal,
|
|
Files, System & Network Monitor, a real web browser with inline images, and
|
|
more.
|
|
- **Multi-arch** — `x86_64`, `aarch64`, `armv8i`.
|
|
- **Linux-style build** — Kconfig TUI, Kbuild, per-arch defconfigs.
|
|
|
|
---
|
|
|
|
## 🔜 Near term (1.1.x)
|
|
|
|
- **Thread reaping / zombie cleanup.** Exited kernel threads currently leak their
|
|
16 KB stack + `task_t`. Add a reaper (a dead list drained by the idle thread).
|
|
- **Boot-test the ARM context switch.** Wire `weave_selftest()` into the
|
|
aarch64/armv8i boot paths and verify the AArch64/AArch32 `sub_ctx_switch`
|
|
frames under `qemu-system-aarch64` / `-arm`.
|
|
- **`fork`/`exec`/`wait` for ring-3 userland.** Build on the ELF64 loader and
|
|
per-process page tables so `sh` can spawn and reap real children.
|
|
- **TLS certificate verification.** Close the biggest documented security gap by
|
|
validating the server chain against a bundled trust store.
|
|
|
|
---
|
|
|
|
## 🌗 Mid term (1.x)
|
|
|
|
- **Capability-based IPC ("sub-ports").** Typed, capability-addressed message
|
|
endpoints distinct from the SysV msg/pipe/shm set already in `ipc/`.
|
|
- **SMP bring-up (x86_64).** AP boot trampoline, per-CPU run lanes, and per-CPU
|
|
Weave lanes with work-stealing.
|
|
- **Desktop maturity.** Compositor damage tracking, a richer file manager, a
|
|
text editor, and a settings panel over the toolkit widgets.
|
|
- **Storage & FS.** Write-back caching improvements, journaling groundwork, and
|
|
broader ext2 write coverage.
|
|
- **Exploit mitigations.** Enforce W^X on all mappings, add kernel stack
|
|
canaries, and begin ASLR groundwork.
|
|
|
|
---
|
|
|
|
## 🌒 Long term (exploratory)
|
|
|
|
- **Self-hosting toolchain path** — grow the userland toward building parts of
|
|
SUB-OS on SUB-OS.
|
|
- **A native SUB-Language userland** — first-class apps written in `.sb`.
|
|
- **Real hardware bring-up** — beyond QEMU, on at least one aarch64 board.
|
|
- **Networking depth** — IPv6, a TLS *server*, and a hardened, fuzzed stack.
|
|
- **Audio/graphics acceleration** — virtio-gpu 3D paths and a mixer.
|
|
|
|
---
|
|
|
|
## How priorities are chosen
|
|
|
|
Each development pass picks the single highest-value item achievable and
|
|
verifiable in one session, implements it, verifies it under QEMU, and refines
|
|
the backlog. Correctness and boot-tested verification always gate a feature
|
|
before it's called done. See [`CONTRIBUTING.md`](CONTRIBUTING.md) for the
|
|
verification discipline.
|
|
|
|
> Have an idea or want to pick something up? Open an issue or a discussion —
|
|
> contributions against any of the items above are very welcome.
|