{
  "catalog_status": "development_index",
  "publication_status": "not_published",
  "status_note": "This catalog includes designs, source configurations, and development test results. No VM downloads are available yet.",
  "vms": [
    {
      "id": "sel4-microkit-monomer",
      "name": "seL4 / Microkit Monomer",
      "summary": "A small seL4/Microkit test VM that booted and exchanged one read-only status message.",
      "description": "Built from pinned seL4 15.0.0 and Microkit 2.2.0 revisions and booted under QEMU/KVM: the VM reported its identity, answered one status request, and stopped itself. A development proof — it has not run on hardware, and there is nothing to download yet.",
      "category": "security",
      "kind": "runtime-proof",
      "development_state": "built",
      "publication_status": "not_published",
      "runtime_tier": "sel4-microkit research proof",
      "image": null,
      "recipe": "monomer/vms/sel4",
      "built_with_polymer": true,
      "nixpkgs_rev": null,
      "recipe_commit": "82b1a724b870e352e6c97b8104e7cc0feb8ca7a5",
      "bom": null,
      "sha256": null,
      "size_mb": null,
      "review": "reviewed",
      "trust": "untrusted",
      "signatures": [],
      "arch": "x86_64",
      "min_ram_mb": null,
      "min_disk_mb": null,
      "needs_gpu": false,
      "needs_usb": false,
      "evidence": "build-artifacts/evidence/2026/2026-07-11-sel4-monomer-x86_64-qemu-proof.md",
      "source_revisions": {
        "microkit": "27e7b6784664a5e62c11b49559995d266dece3c3",
        "sel4": "881de507fe528490dc5e570c7810a149bad5880f"
      },
      "search_terms": ["sel4", "microkit", "microkernel", "provider", "monomer", "runtime proof"]
    },
    {
      "id": "polymer-firefox-vm",
      "name": "Firefox AppVM",
      "summary": "A proposed Firefox VM that would discard browser state and isolate downloaded files.",
      "description": "The x86_64 VM definition is in the repository, but it has not been built or tested, and launching stays disabled until it is.",
      "category": "browser",
      "kind": "source-contract",
      "development_state": "planning",
      "publication_status": "not_published",
      "runtime_tier": "linux-full",
      "image": null,
      "recipe": "spectrum/vm/app/firefox.nix",
      "built_with_polymer": false,
      "nixpkgs_rev": null,
      "recipe_commit": null,
      "bom": null,
      "sha256": null,
      "size_mb": null,
      "review": "unreviewed",
      "trust": "untrusted",
      "signatures": [],
      "arch": "x86_64",
      "min_ram_mb": null,
      "min_disk_mb": null,
      "needs_gpu": false,
      "needs_usb": false,
      "search_terms": ["firefox", "browser", "web", "amnesiac", "network"]
    },
    {
      "id": "polymer-admin-ssh-vm",
      "name": "Admin SSH Introspection VM",
      "summary": "A proposed VM for temporary SSH-based inspection, with SSH disabled by default.",
      "description": "The VM definition ships with SSH, its network route, and key access all disabled. Turning any of them on requires a separately approved key, route, expiry time, and revocation plan. The VM itself has not been built yet.",
      "category": "security",
      "kind": "source-contract",
      "development_state": "planning",
      "publication_status": "not_published",
      "runtime_tier": "linux-full",
      "image": null,
      "recipe": "spectrum/vm/app/admin-ssh.nix",
      "built_with_polymer": false,
      "nixpkgs_rev": null,
      "recipe_commit": null,
      "bom": null,
      "sha256": null,
      "size_mb": null,
      "review": "unreviewed",
      "trust": "untrusted",
      "signatures": [],
      "arch": "x86_64",
      "min_ram_mb": null,
      "min_disk_mb": null,
      "needs_gpu": false,
      "needs_usb": false,
      "search_terms": ["ssh", "admin", "remote", "introspection", "default deny"]
    },
    {
      "id": "polymer-micromer-minimal-vm",
      "name": "Micromer Minimal Appliance",
      "summary": "Package and offline verification tools for a small Rust appliance.",
      "description": "The package format and its offline verification checks work against test data. A real appliance image, with a signature and launch configuration, has not been produced yet.",
      "category": "security",
      "kind": "package-contract",
      "development_state": "planning",
      "publication_status": "not_published",
      "runtime_tier": "micromer-minimal",
      "image": null,
      "recipe": "micromer/scripts/package-micromer-minimal.sh",
      "built_with_polymer": false,
      "nixpkgs_rev": null,
      "recipe_commit": null,
      "bom": null,
      "sha256": null,
      "size_mb": null,
      "review": "unreviewed",
      "trust": "untrusted",
      "signatures": [],
      "arch": "x86_64",
      "min_ram_mb": null,
      "min_disk_mb": null,
      "needs_gpu": false,
      "needs_usb": false,
      "search_terms": ["micromer", "minimal", "rust", "unikernel", "appliance", "offline store"]
    },
    {
      "id": "polymer-container-host-vm",
      "name": "Container Host VM",
      "summary": "A proposed Linux VM for running OCI containers with Podman.",
      "description": "The initial Nix configuration and manifest are in the repository. Until the VM passes its QEMU boot and Podman test, there is no image to publish.",
      "category": "dev",
      "kind": "source-contract",
      "development_state": "planning",
      "publication_status": "not_published",
      "runtime_tier": "linux-full",
      "image": null,
      "recipe": "spectrum/vm/app/container-host.nix",
      "built_with_polymer": false,
      "nixpkgs_rev": null,
      "recipe_commit": null,
      "bom": null,
      "sha256": null,
      "size_mb": null,
      "review": "unreviewed",
      "trust": "untrusted",
      "signatures": [],
      "arch": "x86_64",
      "min_ram_mb": null,
      "min_disk_mb": null,
      "needs_gpu": false,
      "needs_usb": false,
      "search_terms": ["container", "podman", "docker", "oci", "development"]
    },
    {
      "id": "ose-linux",
      "name": "OSE Linux Workstation",
      "summary": "An x86_64 NixOS workstation configuration for CAD/CAM, electronics, and fabrication.",
      "description": "The source configuration covers XFCE, VSCodium, Python/PyQt tooling, and the FreeCAD OSE workbenches. It has not been built as a PolymerOS VM yet, and GPU and USB passthrough for fabrication hardware still needs a design.",
      "category": "cad-cam",
      "kind": "source-scaffold",
      "development_state": "planning",
      "publication_status": "not_published",
      "runtime_tier": "linux-full",
      "image": null,
      "recipe": "guests/ose-workstation",
      "built_with_polymer": false,
      "nixpkgs_rev": null,
      "recipe_commit": null,
      "bom": null,
      "sha256": null,
      "size_mb": null,
      "review": "unreviewed",
      "trust": "untrusted",
      "signatures": [],
      "arch": "x86_64",
      "min_ram_mb": 8192,
      "min_disk_mb": 32768,
      "needs_gpu": true,
      "needs_usb": true,
      "search_terms": ["ose", "cad", "cam", "freecad", "cnc", "arduino", "fabrication"]
    },
    {
      "id": "disposable-dev",
      "name": "Disposable Dev VM",
      "summary": "A proposed disposable VM for builds, dependency experiments, and untrusted projects.",
      "description": "A placeholder: the role is planned, but no VM definition has been written yet.",
      "category": "dev",
      "kind": "recommended",
      "development_state": "planning",
      "publication_status": "not_published",
      "runtime_tier": "linux-full",
      "image": null,
      "recipe": null,
      "built_with_polymer": false,
      "nixpkgs_rev": null,
      "recipe_commit": null,
      "bom": null,
      "sha256": null,
      "size_mb": null,
      "review": "unreviewed",
      "trust": "untrusted",
      "signatures": [],
      "arch": "x86_64",
      "min_ram_mb": 4096,
      "min_disk_mb": 32768,
      "needs_gpu": false,
      "needs_usb": false,
      "search_terms": ["disposable", "developer", "compiler", "ephemeral", "untrusted"]
    },
    {
      "id": "privacy-workstation",
      "name": "Privacy Workstation VM",
      "summary": "A proposed VM that minimizes saved state for sensitive browsing and documents.",
      "description": "A design idea so far — no VM definition exists yet. Inspired by amnesiac systems like Tails, but built as a PolymerOS VM rather than a repackaged upstream image.",
      "category": "security",
      "kind": "recommended",
      "development_state": "planning",
      "publication_status": "not_published",
      "runtime_tier": "linux-full",
      "image": null,
      "recipe": null,
      "built_with_polymer": false,
      "nixpkgs_rev": null,
      "recipe_commit": null,
      "bom": null,
      "sha256": null,
      "size_mb": null,
      "review": "unreviewed",
      "trust": "untrusted",
      "signatures": [],
      "arch": "x86_64",
      "min_ram_mb": 2048,
      "min_disk_mb": 8192,
      "needs_gpu": false,
      "needs_usb": false,
      "search_terms": ["privacy", "amnesiac", "sensitive", "documents", "network separation"]
    }
  ]
}