Claims boundary

Status

PythOS publishes the strongest checked-in claim it can support and names what is deliberately outside the current boundary.

Area Verified now Not claimed
Boot UEFI loader, PythCore entry, QEMU serial marker oracle, framebuffer completion. Generic firmware compatibility across arbitrary PCs.
User boundary Ring-3 execution, separate address spaces, syscall ABI, copy-in/copy-out checks, capability gates. Full hostile multi-user security or broad application ecosystem support.
Objects Persistent typed/versioned objects, relationships, revision history, workspace snapshot restoration, and capability-scoped object-locator resolution with adversarial denial evidence. POSIX filesystem identity or package-management surface.
PythTIG ADR 0064/0065/0068 graph-package architecture, frozen package ABI, verifier/runtime/compiler/native-backend/Task Steward evidence, and Phase 7 cutover/cross-target line merged to main. Later PythTIG phases, PythCore parsing of source text or prompts, AI authority, self-hosting, CPython compatibility, or cryptographic package signing.
Current phase boundary Phase 13 is complete through ADR 0073 and PYTHOS:CORE:PHASE_13_COMPLETE. Phase 13.5, persistent Pyth sessions, Kai/Waking, networking, updates, hardware expansion, SMP, or later PythTIG phases.
Storage QEMU virtio-blk, QEMU polling AHCI, QEMU SDHCI/eMMC, and target-specific physical O2 Micro SDHCI/eMMC evidence. DMA/ADMA, interrupts, hotplug, partitions, filesystems, or safe writes on other machines.
Physical interaction Physical framebuffer acceptance panel, boot cinematic capture, and five-page evidence-terminal capture on the disposable O2 Micro target. Physical interactive object-shell input through the laptop keyboard or trackpad, or a general desktop distribution claim.
Evidence terminal main contains the implementation and QEMU acceptance harness. Physical capture reports count 00000139 (hexadecimal = 313 decimal markers), drop 00000000, and CRC 176F4C6E across five pages; two separate physical boots reproduced the same header. Replacement for COM1 serial, a trusted persistent log store, bit-identical physical/QEMU transcripts, collision-proof identity from CRC-32 alone, or proof that every named marker is production-complete.

The physical stream legitimately differs from the QEMU stream where hardware discovery, audio fallback, and existing persistent-storage state select different marker branches. The reconstructed physical stream contains 313 markers and recomputes to CRC 176F4C6E. See the 2026-08-08 validation record.