Verified structure

Architecture

PythOS keeps the privileged core narrow. PythCore owns firmware handoff, memory, interrupts, scheduling, IPC, capabilities, syscalls, and controlled hardware primitives. Policy and user-facing behavior move outward into isolated services.

Hardware
-> UEFI firmware
-> PythOS UEFI loader
-> PythCore native executive
-> capability-gated ring-3 services
-> PythTIG graph packages and typed service syscalls
-> typed task environments, typed objects, object locators, tool objects, and projections

Boot Chain

UEFI loads BOOTX64.EFI, which validates and jumps into the PythCore ELF with explicit boot metadata.

Authority Model

Kernel-owned capability handles gate privileged operations, including storage and syscall-mediated object-shell behavior.

Object Storage

Typed object records carry stable IDs, schema versions, relationships, revisions, provenance, and persisted workspace state.

PythTIG

Accepted graph packages run through shared verification, bounded ring-3 execution, native backend comparison, and service-admission gates.

Object Locators

ADR 0069 chooses capability-scoped locator namespaces over POSIX paths; ADR 0070 records the resolver ABI, and ADR 0072 records adversarial denial evidence.

Hardware Backends

The public milestone includes QEMU-backed virtio-blk, AHCI, and SDHCI/eMMC paths, plus target-specific physical SDHCI/eMMC evidence.