ABI: Land the ABI 43 batch on current main - #1264

Merged

brandonpayton merged 135 commits into

mainfrom

abi43-final-20260813

Aug 17, 2026

Commits on Aug 17, 2026

Fork: Make replay activation state safe
brandonpayton
committed
4efcab8
Host: Rebuild replay references in fresh workers
brandonpayton
committed
95fad1e
Packages: Bind replay artifacts and rollout to ABI 43
brandonpayton
committed
e0fe315
Host: Bound kernel scratch transfers
brandonpayton
committed
2a99670
Build: Make cached toolchain sysroots portable
brandonpayton
committed
2950040
Build: Materialize browser memory64 fixtures
brandonpayton
committed
bd2f8a2
Host: Complete kernel scratch ownership closure
brandonpayton
committed
9dac1cf
Host: Publish and validate kernel scratch atomically
brandonpayton
committed
d17028e
Host: Stop pumping relinquished TCP endpoints
brandonpayton
committed
2266566
Host: Run conformance on owned storage
brandonpayton
committed
9713f16
Host: Reject shadowed session seeds
brandonpayton
committed
9e78b6d
Host: Pin mutable executable bytes
brandonpayton
committed
4255846
Host: Reject saturated ordinary forks before cloning
brandonpayton
committed
077c844
Host: Retain exact shared memory aliases
brandonpayton
committed
3fbb512
Tests: Exercise fork admission through sealed authority
brandonpayton
committed
2de2bb8
Fork: Borrow replay workers across main and side modules
brandonpayton
committed
d18c1e5
Performance: Record affordable-fork design and replay evidence
brandonpayton
committed
d43c1cc
Host: Call fpcast-emulated pthread entries correctly
brandonpayton
committed
ca584ca
POSIX: Distinguish terminals from character devices
brandonpayton
committed
47b1d02
Host: Synthesize POSIX permissions for Windows mounts

mho22
authored and
brandonpayton
committed
3ce6274
Docs: Document fresh-worktree validation prerequisites
brandonpayton
committed
e4ffac7
Docs: Require purpose-prefixed PRs and commits
brandonpayton
committed
60df212
Browser: Restrict reclaim handling to WebKit
brandonpayton
committed
7846eb3
Performance: Avoid munmap mapping-vector churn
brandonpayton
committed
56f0753
Kernel: Reject late reaped-process syscalls
brandonpayton
committed
7a54409
Network: Deliver loopback UDP across processes

brandonpayton
and
claude
committed
36580fb
Kernel: Preserve descriptor identity through devfs aliases
brandonpayton
committed
3004c2b
SDK: Preserve executable linker input order
brandonpayton
committed
9ef2d3e
POSIX: Preserve directory streams when rewind fails
brandonpayton
committed
052be9c
Host: Reflect ABI 43 modules from admitted bytes
brandonpayton
committed
cb1e1b9
Host: Deliver caught signals before retrying waits
brandonpayton
committed
775903e
Host: Ignore debug names while patching thread modules
brandonpayton
committed
7145543
Host: Finalize readiness timeouts through the kernel
brandonpayton
committed
89c8e66
Host: Run Node service demos from shared dinit images
brandonpayton
committed
4f96190
CI: Repair xtask fixtures and gate xtask tests
brandonpayton
committed
aee3f51
CI: Gate the Rust workspace as one contract

brandonpayton
and
claude
committed
ac77fa9
Host: Reuse one bundled source worker entry

brandonpayton
and
claude
committed
78f7396
Browser: Add image-owned file ingest

brandonpayton
and
claude
committed
4912a30
Build: Update mkrootfs esbuild security release

dependabot[bot]
authored and
brandonpayton
committed
747307c
Build: Refresh minor and patch npm dependencies

dependabot[bot]
authored and
brandonpayton
committed
cae6ba2
Build: Adopt Node 26 type definitions

dependabot[bot]
authored and
brandonpayton
committed
0b21ee6
Threads: Move clear-TID metadata into Rust
brandonpayton
committed
4968cbc
IPC: Move shared-memory attachment identity into Rust
brandonpayton
committed
e20d8cc
Network: Move TCP listener selection into Rust
brandonpayton
committed
d100b9b
Timers: Move cleanup identity into Rust
brandonpayton
committed
f16d7b3
Procfs: Record generated process snapshot schema
brandonpayton
committed
a434031
Readiness: Generate wakeup and multiplexing metadata
brandonpayton
committed
c1b2322
VFS: Generate ABI-bound host metadata
brandonpayton
committed
d9d32de
Docs: Record the Rust and host ownership boundary
brandonpayton
committed
774eec5
Audio: Provide process-safe OSS PCM across both hosts
brandonpayton
committed
5d3317b
Browser: Expose machine-level PCM activation
brandonpayton
committed
cd984f7
Packages: Validate portable OSS consumers
brandonpayton
committed
78b64f1
ABI: Establish the pre-vfork ABI 43 foundation
brandonpayton
committed
eebf350
Vfork: Complete ABI 43 transaction readiness
brandonpayton
committed
7a677e1
Homebrew: Bind ABI-aware finalizer and launcher fixtures
brandonpayton
committed
9a6c775
Vfork: Define and measure the production mechanism
brandonpayton
committed
f144751
Homebrew: Complete validated archive materialization
brandonpayton
committed
691b5ed
VFS: Default executable mounts to nosuid
brandonpayton
committed
0f33598
Homebrew: Isolate privileged product programs
brandonpayton
committed
7d0a707
POSIX: Make process credentials authoritative
brandonpayton
committed
195b3c8
ABI: Bind and launch exact prepared exec targets
brandonpayton
committed
c2acfda
POSIX: Order spawn credentials before file actions
brandonpayton
committed
88702dc
Libc: Enter secure startup for set-ID images
brandonpayton
committed
c40f1a3
VFS: Resolve create metadata from the parent route
brandonpayton
committed
ddbab68
VFS: Preserve set-ID metadata semantics
brandonpayton
committed
4cf93f1
PTY: Preserve slave ownership and mode
brandonpayton
committed
91d6be9
Docs: Clarify poll interruption semantics
brandonpayton
committed
8abe5ef
POSIX: Preserve and restart signal-interrupted waits
brandonpayton
committed
e904c9d
POSIX: Add real login and sudo-lite programs
brandonpayton
committed
0c7c218
Browser: Supervise real login sessions per terminal
brandonpayton
committed
86e10bc
Homebrew: Compose CI-owned ABI 43 login staging
brandonpayton
committed
a9b709a
ABI: Complete vfork readiness integration
brandonpayton
committed
6144a4e
Build: Pin native xtask archive tools
brandonpayton
committed
6e4a37b
Host: Initialize Node VFS rootfs mounts
brandonpayton
committed
9ba276a
Host: Use reentrant Node pipe protocol
brandonpayton
committed
c2b572c
Homebrew: Parse original bottle descriptors
brandonpayton
committed
a272497
Homebrew: Declare embedded ABI 43 login roots
brandonpayton
committed
dc6f73d
Homebrew: Derive flat-shell checks from the active ABI
brandonpayton
committed
6939a38
Packages: Refresh ABI 43 program identities
brandonpayton
committed
9248ecb
Homebrew: Restore staging candidate ABI option
brandonpayton
committed
e518ec9
Homebrew: Reconcile ABI 43 integration fixtures
brandonpayton
committed
9797c0a
Homebrew: Refresh final native compatibility drift
brandonpayton
committed
e5bcac2
ABI: Integrate current main with the ABI 43 batch
brandonpayton
committed
cbd148e
CI: Repair the ABI 43 suite contract fixture
brandonpayton
committed
6254851
CI: Initialize musl for product inventory tests
brandonpayton
committed
25e9475
CI: Close ABI 43 product contract drift
brandonpayton
committed
e61878b
Homebrew: Preserve the lightweight ABI 43 shell
brandonpayton
committed
7b81eeb
Homebrew: Make Formulae authoritative for bottle sources
brandonpayton
committed
c6c8342
[Products] Match lazy repository inventory
brandonpayton
committed
cb860f3
Homebrew: Isolate colliding native tool links
brandonpayton
committed
56357e6
Homebrew: Bind candidate dependency provenance roots
brandonpayton
committed
02eaa22
Homebrew: Seal candidate tap checkouts
brandonpayton
committed
3b1680f
Homebrew: Refresh the reviewed native lock
brandonpayton
committed
8198822
Homebrew: Preserve candidate Formula test checker
brandonpayton
committed
4b4127b
Packages: Admit secure-exec ABI import
brandonpayton
committed
042fec9
Homebrew: Isolate candidate bottle metadata
brandonpayton
committed
455c3fe
Packages: Refresh ABI 43 program projection
brandonpayton
committed
4467498
[ABI] Preserve keg identity after bottling
brandonpayton
committed
b81889e
[ABI] Accept the exact candidate Brew launcher
brandonpayton
committed
1e1c95e
Homebrew: Preserve candidate bottle rebuilds
brandonpayton
committed
b0cdde5
Homebrew: Register original bottles as schema 6
brandonpayton
committed
aa8e09e
Homebrew: Clone candidate taps with public modes
brandonpayton
committed
b4b55a1
Packages: Refresh ABI 43 program identities
brandonpayton
committed
b385984
[ABI] Unblock candidate bottle publication
brandonpayton
committed
156ef54
[ABI] Repair candidate Formula test inputs
brandonpayton
committed
5b8e504
[ABI] Validate first-wave candidate outputs
brandonpayton
committed
90be7d6
[ABI] Refresh exact package projections
brandonpayton
committed
f433d14
[ABI] Bind candidate recipe platform tools
brandonpayton
committed
63d3728
[ABI] Normalize candidate bottle URL filenames
brandonpayton
committed
1e2b243
Homebrew: Rebuild candidates without legacy bottles
brandonpayton
committed
6b04112
Homebrew: Seal the explicit runner helper
brandonpayton
committed
7a80d12
Homebrew: Verify qualified candidate bottle metadata
brandonpayton
committed
3411284
Homebrew: Refresh the exact native compatibility lock
brandonpayton
committed
5b6f006
[ABI] Normalize candidate metadata for force-pour verification
brandonpayton
committed
f1d883c
[ABI] Fix first-wave platform build failures
brandonpayton
committed
1289611
[CI] Stop automatic legacy Homebrew compatibility proof
brandonpayton
committed
a4966e0
[Build] Refresh package identities for host append policy
brandonpayton
committed
fdb8cb0
[Homebrew] Pour authenticated candidate bytes directly
brandonpayton
committed
e330819
[Homebrew] Trust audited tap mounts during verification
brandonpayton
committed
6dc8816
[Homebrew] Keep candidate tests within socket limits
brandonpayton
committed
4dd2ae4
[Homebrew] Isolate browser cache from Formula identity
brandonpayton
committed
9b7844f
[Homebrew] Preserve prepared Chromium across Formula tests
brandonpayton
committed
acca7c2
[Homebrew] Project Chromium into Formula test realms
brandonpayton
committed
b8cf706
[Homebrew] Project Chromium through Formula cache
brandonpayton
committed
8f46de6
[ABI] Design candidate dependency materialization
brandonpayton
committed
20b3f97
[ABI] Build against candidate dependency bottles
brandonpayton
committed
07f6852
[ABI] Assert dependency cache filenames
brandonpayton
committed
6ac7091
[CI] Keep publisher integration out of PR staging
brandonpayton
committed
c66ccdb
[ABI] Export PHP side-module ABI identity
brandonpayton
committed
66468b6
Host: Preserve worker output process identity
brandonpayton
committed
d6b3814
CI: Keep exact ABI validation artifact-independent
brandonpayton
committed
7d01b32
Homebrew: Authorize the protected staging builder
brandonpayton
committed
ae23d0d
Host: Carry secure-exec state through exec commit
brandonpayton
committed
bfd0697
[actually] Host: Carry exec retirement through commit
brandonpayton
committed
90638c0
ABI: Refresh rebased source projections
brandonpayton
committed
c218d35