Invariants

Invariants (map, not the full text)

Canonical text: gistos-invariant-v1.0.2.md in Files / SVN.

This page is a map. If it disagrees with v1.0.2, the file wins.

Ruled

• Ruling 1 — rights on handles only
• Ruling 2 — endpoints named by kid; sink_class=proc vs device sinks
• Ruling 3 — T-int, T-ext, origin death; durable expiry persisted
• Binding test — hardware is a surface

Closed decisions worth naming

• CD-10 — nine failure names; eight have scars; QOS_REJECT is a documented non-scar (qos is a label)
• CD-16 — each op names its own bit
• CD-20 — delete names W. Durable + W on a handle naming that carrier. Same six bits.

Must-nots (short)

No silent payload logs without a right.
No mandatory cloud or cellular.
Kernel image and durable store usable with zero external names.

Not frozen here

Handle bit packing, fork policy, bootstrap story, event class, scheduler, drivers.