FerrumOS v0.1.1 — Heliox and World Model Release Hardening

FerrumOS v0.1.1 is a release-hardening update focused on Heliox, the learned
world-model safety path, Ring-3 scheduling, command reliability, and
reproducible builds.

Highlights

• Reprograms the PIT to 1 kHz and preserves real-time scheduler, sleep, quota,
  network, audio, and confirmation durations through a shared tick period.
• Keeps keyboard interrupts serviceable during long console, serial, and
  userspace writes, eliminating the command corruption found under concurrent
  Ring-3 output.
• Preserves the intended 8.2-second Pointing/voice fusion window, so phrases
  such as "open this" resolve to the pointed window after capture and
  transcription.
• Runs the real packaged stories15M-q8.bin checkpoint and tokenizer for local
  inference; synthetic fixtures remain isolated to deterministic tests.
• Packages and validates both learned world-model transition weights and the
  learned encoder while keeping deterministic safety fields and rule fallback.

Kernel and runtime fixes

• Removes thousands of unnecessary TLB invalidations while loading a new,
  inactive userspace address space, making Heliox daemon startup consistent.
• Preserves genuine blocked syscall state so destructive-operation confirmation
  gates default-deny after their real five-second timeout.
• Separates physical confirmation input from agent-injected keys.
• Drains queued shell input per turn and releases synthetic QEMU keys before
  sending the next character.
• Keeps shell, dashboard, desktop, init, and Heliox daemon tasks fairly
  interleaved; scheduler-trace builds verify real CPU turns rather than log-only
  liveness.
• Removes release-build warnings and adds PS/2 command-ACK diagnostics.

Heliox and world model

• Validates the full JSON-RPC surface, setup flow, assistant panel, camera and
  gestures, voice/STT, HUD, multimodal fusion, local inference, and
  kernel-upgrade confirmation path.
• Confirms benign world-model actions remain allowed, dangerous config deletion
  is blocked at risk 0.90, experiences are persisted, and the learned
  transition/encoder artifacts load successfully.
• Uses clocked silent HDA input for deterministic voice tests and dynamic host
  ports so local Heliox services cannot be mistaken for the QEMU guest.
• Updates the offline self-evolution test to the current llama2.c model and
  tokenizer format instead of the retired toy.gguf fixture.

Filesystem, apps, and commands

• Verifies accounts and capability changes, package install/remove/run,
  overwrite semantics, touch/stat, mmap demand paging, TCP/networking,
  VirtIO-GPU, core apps, desktop shell, and app-owned windows.
• Adds scripts/verify_all_audits.mjs, which sequentially runs the fast
  command sweep and exhaustive catalog audit.
• Removes duplicate /heliox/world creation during appliance packaging.

Verification

• Warning-free kernel and userland build.
• 86/86 command-sweep cases passed.
• 65/65 exhaustive command catalog cases returned their prompt with no unknown
  command, page fault, protection fault, or panic signature.
• All 38 feature-specific QEMU verifiers passed sequentially.
• Real appliance verification passed for both local-model and TLS cloud tiers.
• Real model, rule world model, learned world model, and kernel-grade autonomy
  safety paths passed end to end.

Build reproducibility

• Pins the Rust nightly toolchain and LLVM 22.1.7 used by CI.
• Tracks required model fixtures, compatibility headers, and the SMP trampoline
  input.
• Hardens the vendored ring build used by bare-metal TLS.

Full diff: v0.1.0...v0.1.1