NEURONIX OS v1.0.3 (Hardened Production Baseline & Qualified Release)

NEURONIX OS v1.0.3 (Hardened Production Baseline & Qualified Release)

Qualification Status: CERTIFIED PRODUCTION GRADE
Repository: https://github.com/adamriofc/NeuronixOS
Target Commit: 3bb3e0b968ff8ec5bb53f938d87aa1974ceab4ec
Pinned Nixpkgs Revision: 3ed67ec0a4d3c7ab4ae1f04f8ee8df07bfa506a2
Test Harness: 1,038 / 1,038 Assertions Passing (100% Green across 25 Master Suites, 19 Distro Suites, and 14 Standalone Gates)
Hypervisor & CI Verification: 100% Green on GitHub Actions CI Pipeline
Forensic Audit Score: 9.68 / 10

---

Highlights of Release v1.0.3:

1. Canonical Repository Identity & Zero Split-Brain:

   • Official repository URL updated to https://github.com/adamriofc/NeuronixOS.
   • main branch and release tag v1.0.3 are bit-identical at commit 3bb3e0b.
   • Single source of truth synchronized across version.nix, flake.lock, release.json, and data/test_manifest.json.

2. Unified Transactional Core for All System Mutations:

   • Both live switch (neuronix upgrade --switch) and staged boot updates (neuronix upgrade --staged) are strictly routed through neuronix_core.update (stage_system_update and apply_system_update).
   • All mutations are protected by exclusive OperationLock and logged in TransactionJournal.
   • Rollbacks (neuronix undo) strictly enforce and verify predecessor postconditions (new_gen == prev_gen - 1).

3. Discrete Systemd Health Checking & Auto-Rollback:

   • Health probes evaluate discrete states: HEALTHY, FAILED, UNKNOWN (probe timeout/exception), and UNSUPPORTED.
   • Any non-healthy state triggers fail-closed auto-rollback with empirical verification of restored generation.

4. 12 Latent Forensic Closures (P0, P1, P2):

   • Fail-closed upstream update verification querying genuine git ls-remote and GitHub API fallback (3s timeout) with zero hardcoded commit fallbacks.
   • Transaction journal root mutation integrity: /var/lib/neuronix required unconditionally for EUID 0; zero /tmp fallback under root; dangling transactions accurately marked ROLLED_BACK.
   • Dynamic doctor health model with 3-tier network connectivity (Route -> DNS -> HTTPS) and --share privacy-safe redaction.
   • CA certificate enrollment with explicit trust status reporting (TRUSTED vs INSTALLED_NOT_TRUSTED).
   • Battery sysfs multi-path candidate detection (charge_control_end_threshold, charge_control_limit_max, charge_stop_threshold).

5. Truthful Test Taxonomy (L4 Hybrid Engine vs L5 Real E2E):

   • gate_e2e_iso_install: Classified as L4_HYBRID_ENGINE covering 8 contract invariants.
   • gate_real_os_install_boot: Standalone L5_REAL_E2E gate with 10 assertions executing hardware-accelerated nested KVM verification, sparse 20 GiB QCOW2 disk allocation, hypervisor telemetry parsing, and multi-generation state progression.
   • Total repository test assertions: Exactly 1,038 verified assertions across 16 test harnesses.

6. Production Artifacts & Cryptographic Verification:

   • Official Live ISO: neuronix-os-1.0.3-x86_64.iso
   • RFC SHA-256 Checksums: SHA256SUMS with digital signature SHA256SUMS.sig
   • Single Source of Truth Test Manifest: data/test_manifest.json (validation_status: PASSING_ALL)
   • Complete Empirical Evidence Artifacts: dist/benchmark_results.json, dist/contract_e2e_evidence.json, dist/real_e2e_evidence.json, dist/real_os_boot_evidence.json, dist/multiarch_evidence.json, dist/reproducibility_evidence.json.