security(core): harden user memory access, runtime CPU controls, and low-level fault containment#11

Open

minto-dane wants to merge 18 commits intotas0dev:devfrom

Commits on Apr 9, 2026

observability(core): add append-only audit log infrastructure
minto-dane
committed
security(core): enable runtime CPU hardening controls
minto-dane
committed
security(core): move user memory access to page-table-walk primitives
minto-dane
committed
security(core): harden fs, exec, and pipe user-buffer handling
minto-dane
committed
security(core): update process and signal syscalls for hardened usercopy
minto-dane
committed
reliability(core): add audit-backed containment for low-level runtime faults
minto-dane
committed

Commits on Apr 10, 2026