Skip to content

QuantumOS v0.4.0

Choose a tag to compare

@github-actions github-actions released this 11 Jul 12:45
Immutable release. Only release title and notes can be modified.
487e463

The agent-native arc completed and battle-tested. PRs #151#183.

Added

  • Quantum stack (epics #148/#149/#150, PRs #151#155): qsv, an exact Gaussian-integer
    quantum state-vector citizen (zero rounding, digest-vs-host-mirror CI gate); a capability-gated
    kernel QPU job broker (SYS_QPU, opaque circuits only, per-manifest qsub quota); a COM2
    quantum-submit transport over the attested bridge; a host gateway dispatching
    PennyLane lightning.qubit / lightning.gpu (cuQuantum) / CUDA-Q / qBraid real QPUs, all
    cross-oracled against the exact engine (≤1e-9).
  • Agent society arc (PRs #171#179): the end-to-end agent-native showcase (agentdemo boot
    token) — an orchestrator citizen delegates narrowed field capabilities to sub-agents it spawns
    itself over spawn-time parent↔child IPC channels; content-consensus digests verified per
    kernel-vouched sender; division-of-labor private field workspaces; a society of
    societies
    — two kernels exchanging verified society results over the field-sync wire; the
    ring-3 roster refactored to kernel/src/citizens.c.
  • CI gates: qsh singleton-IPC-cap invariant (#176), disk upgrade path — frozen audit-ledger
    home survives field growth (#183), qseed-handoff smoke incl. the errno-collision gate (#168).

Fixed

  • Adversarial bug-hunt campaign (PRs #156#167): ~31 real bugs across quantum, networking,
    trust-core, process/memory, and lifecycle code — 0 false positives across 8 hunts. Highlights:
    closed a ring-3 → whole-OS DoS in syscall copy-in/out (#158#160, COPYGUARD gate); DNS answers
    bound to their query (on-link poisoning, #162); spawn error paths reclaim address spaces (#164);
    argv buffer cleared between spawns (#165).

Changed

  • Performance: amortized-O(1) frame allocator via a search rover (#169); capability read-lookups
    bounded by a high-water mark (#170).
  • Dead code deleted per the unwired-optionality rule: the never-wired shared-memory region
    subsystem (#180) and the orphaned duplicate ipc.h (#181).