Public Documentation Drafts
Status: sanitized public-copy staging area. This is not publication approval, release approval, artifact publication approval, security certification, or a claim that any page is live on a public website.
These drafts are meant to become Good Ancestors / GitHub public documentation after review. They avoid local hostnames, private paths, live job IDs, raw logs, and operational commands unless those details are already approved for public release.
Draft Pages
docs/public/polymeros-design.md: product and security architecture.docs/public/build-and-release-evidence.md: evidence categories, gates, and
non-claims.
docs/public/architecture-preview.html: scrubbed visual architecture
preview for local review. Publication still requires static or vendored diagram assets.
docs/public/diagram-export-manifest.md: planned static diagram assets and
publication gates.
Claim Rule
Each public claim must map to one of:
- a reviewed evidence packet listed in
docs/polymeros-review-claim-map.md; - an explicit future gate;
- a design goal phrased as unproven work.
Do not turn an internal running-job status into public evidence until a pass or failure packet is recorded and reviewed.
Publication Blockers
- native Apple live artifact postbuild gates have passed, but runtime proof
remains approval-gated;
- selected sandboxed amd64 checks include recorded integration, installer, and
a KVM-backed Wayland check pass, but /dev/kvm daemon-sandbox access is current-boot proof and the persistent ACL policy remains pending;
- QEMU-L1 refreshed proof reaches L1
/dev/kvmand Cloud Hypervisor API
startup, but app VM EROFS root mounting is pending a rebuilt 16K image;
- VM catalog publication-ready count remains zero;
- a signed development dm-verity rootfs candidate exists, but strict
artifact/catalog review, approved artifact URL, release signing policy, and publication approval remain blocked;
- TamaGo Phase 1 local QEMU boot and attestation marker evidence exists, but
production launch, catalog promotion, publication, USB Armory flash, and hardware-root validation remain blocked;
- Mermaid diagram sources are staged, but SVG asset rendering and publication
review are still pending.
Public Claim Map
| Public claim | Review source | Stronger claim gate |
|---|---|---|
| PolymerOS architecture is a design draft. | Internal claim map: product architecture row. | External review and release packet. |
| Selected amd64 sandboxed checks have recorded passes. | Internal claim map: amd64 build/runtime rows. | Persistent KVM ACL policy, broader runtime coverage beyond the passed KVM-backed Wayland check, and release review. |
| Native Apple live artifact postbuild gates have passed. | Internal claim map: native Apple rows. | Explicit runtime approval and recorded runtime packet. |
| QEMU-L1 refreshed proof reaches nested KVM and Cloud Hypervisor API startup, but app VM root mount proof is pending. | Internal claim map: QEMU live-test row. | Rebuilt EROFS-enabled 16K image, passing disk rung, then strict device-rung refresh. |
| Monomer direct-boot runtime evidence exists. | Internal claim map: service VM / Monomer row. | Strict artifact/catalog review, approved artifact URL, release signing policy, and publication approval. |
| TamaGo Phase 1 local QEMU boot and attestation marker evidence exists. | Internal claim map: TamaGo Phase 1 row. | Catalog promotion, release signing policy, publication approval, USB Armory flash, and hardware-root validation. |
| covalent bonds and temporary bonds have planning schemas. | Internal claim map: security model rows. | Audited runtime verification and activation path. |
| VM catalog publication is blocked. | Internal claim map: publication row. | Strict artifact manifest, signatures, and human approval. |