Documentation

State format, boot chain, evidence limits, and build paths for Spec 1.

Graph-driven OS

Profiles, quartet mapping, export sidecars, pure-graph product rules.

State format

Line-oriented numos.state: record types V C A P U R X, field contracts, content hash.

Boot chain

Bootstrap acquire/verify/exec; offline initramfs layout; phase walk; steady state.

What is proven

Test inventory, recorded QEMU observation, open gates, residuals.

Principles

Enforced commitments (truthfulness, privacy, subsidiarity, stewardship).

Whitepaper

Design rationale: graph as system of record, fail-closed verification.

Algoblocker enterprise

privacy-workstation profile + shared receipt hash. No hosted ISO.

Skills

Local and Cloudflare build skills; QEMU verify-boot protocol.

Schemas

type	role
`OSUnit`	`exec`, kind, requires/after, restart, arch mask, optional resource envelope
`BootPhase`	ordinal, required units, `on_failure`
`Capability`	node advertisement (arch, cores, ram, degraded, ops present in state)
`HealthPredicate`	probe, interval, threshold, local_action, on_fire
`ArchTarget`	`uname -m` aliases, zig triple, floor variant name
`DistroProfile`	self-init / fleet / privacy-workstation composition
`FloorProvider`	numos-floor URL, sha256, applets, license
`KernelProvider`	third-party kernel URL/kind for ISO media (ASEC residuals named)

boot/lib/arch_table.sh is generated from ArchTarget seed data. Drift is a test failure.

Unit derivation

Infra units are seeded. Op units are derived from the ops registry at export time (U op-*). Registry change ⇒ unit set change; the C hash makes that visible.

Spec 1 limit: op units are exported but not required by any phase, and numctl run-op is a dispatch edge (not an interpreter). Join records local outcome (disabled/joined/failed) and writes capability to disk; it does not start op work or implement a full coordinator.

Published surfaces

URL	content
`/artifacts/manifest.txt`	name, sha256, size per artifact
`/artifacts/bootstrap.sh`	POSIX bootstrap
`/artifacts/numinit.sh`	shell init
`/artifacts/arch_table.sh`	generated arch table
`/artifacts/numctl`	floor control (identity/join/capability)
`/data/numos.state`	default exported state
`/boot`	host installer (no silent PID 1 replace)
`/skills/`	agent build skills (local + Cloudflare)
`/AGENTS.md`	multi-agent honesty protocol
`/index.json`	machine-readable project index

curl -fsSL https://numericalos.com/boot | sh
# optional: --dry-run · --prefix=DIR · --take-pid1 (prints instructions only)

Building images

Local Linux: numericalos-build-initramfs / numericalos-build-iso
Windows / no WSL: numericalos-build-iso-cf (Cloudflare Sandbox + R2; scaffold in-repo under deploy/cloudflare-iso-builder/)
Boot claim: only after numericalos-verify-boot on a downloaded artifact under QEMU

Not shipped as the primary product

Kernel or package manager (third-party kernels may be paired at build time)
Prebuilt OS disk images as the default download (skills / CF builder produce them on demand)
Default PID 1 takeover on a live host
Static per-arch numinit binaries (resolution tested; publish is Spec 3)