ba1212361f
Commit the previously-untracked standard directories and catalog them in the
root README alongside proof:
- aac/ — communication cargo class: portable boards + a ten-level
offline-first cascade (Apache-2.0 code / CC-BY-4.0 spec).
- map/ — geospatial cargo class: range-requestable signed tilesets +
an F0–F4 fidelity cascade (Apache-2.0 code / CC-BY-4.0 spec).
- sandbox/— isolated, metered, attested execution across the heterogeneous
compute fabric (Apache-2.0 code / CC-BY-4.0 spec).
- jouleclaw-otel-authz, jouleclaw-trust — new jouleclaw reference crates.
Root README now lists aac, map, sandbox, and proof in the catalog, the tree,
and the contribution guide.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
506 lines
9.9 KiB
JSON
506 lines
9.9 KiB
JSON
[
|
|
{
|
|
"note": "cpu-only trusted → S0",
|
|
"grants": {
|
|
"compute": {
|
|
"devices": [
|
|
"Cpu"
|
|
],
|
|
"energy_budget_uj": 0,
|
|
"cpu_time_ms": 0,
|
|
"memory_bytes": 0
|
|
},
|
|
"storage": {
|
|
"read": [],
|
|
"write": [],
|
|
"delete": []
|
|
},
|
|
"network": {
|
|
"outbound": [],
|
|
"inbound": false
|
|
},
|
|
"kv": {
|
|
"read": false,
|
|
"write": false,
|
|
"prefixes": []
|
|
},
|
|
"host": {
|
|
"logging": false,
|
|
"clock": false,
|
|
"random": false,
|
|
"inference": false
|
|
},
|
|
"process": {
|
|
"exec": false,
|
|
"programs": [],
|
|
"max_processes": 0
|
|
},
|
|
"browser": {
|
|
"enabled": false,
|
|
"origins": [],
|
|
"headless": false
|
|
},
|
|
"display": {
|
|
"enabled": false,
|
|
"vnc": false,
|
|
"max_width": 0,
|
|
"max_height": 0
|
|
}
|
|
},
|
|
"trusted": true,
|
|
"multi_tenant": false,
|
|
"direct_device_assignment": false,
|
|
"confidential": false,
|
|
"sovereign": false,
|
|
"expect_tier": "S0"
|
|
},
|
|
{
|
|
"note": "cpu+net trusted → S1",
|
|
"grants": {
|
|
"compute": {
|
|
"devices": [
|
|
"Cpu"
|
|
],
|
|
"energy_budget_uj": 0,
|
|
"cpu_time_ms": 0,
|
|
"memory_bytes": 0
|
|
},
|
|
"storage": {
|
|
"read": [],
|
|
"write": [],
|
|
"delete": []
|
|
},
|
|
"network": {
|
|
"outbound": [
|
|
"h:1"
|
|
],
|
|
"inbound": false
|
|
},
|
|
"kv": {
|
|
"read": false,
|
|
"write": false,
|
|
"prefixes": []
|
|
},
|
|
"host": {
|
|
"logging": false,
|
|
"clock": false,
|
|
"random": false,
|
|
"inference": false
|
|
},
|
|
"process": {
|
|
"exec": false,
|
|
"programs": [],
|
|
"max_processes": 0
|
|
},
|
|
"browser": {
|
|
"enabled": false,
|
|
"origins": [],
|
|
"headless": false
|
|
},
|
|
"display": {
|
|
"enabled": false,
|
|
"vnc": false,
|
|
"max_width": 0,
|
|
"max_height": 0
|
|
}
|
|
},
|
|
"trusted": true,
|
|
"multi_tenant": false,
|
|
"direct_device_assignment": false,
|
|
"confidential": false,
|
|
"sovereign": false,
|
|
"expect_tier": "S1"
|
|
},
|
|
{
|
|
"note": "trusted process-exec → S2",
|
|
"grants": {
|
|
"compute": {
|
|
"devices": [
|
|
"Cpu"
|
|
],
|
|
"energy_budget_uj": 0,
|
|
"cpu_time_ms": 0,
|
|
"memory_bytes": 0
|
|
},
|
|
"storage": {
|
|
"read": [],
|
|
"write": [],
|
|
"delete": []
|
|
},
|
|
"network": {
|
|
"outbound": [],
|
|
"inbound": false
|
|
},
|
|
"kv": {
|
|
"read": false,
|
|
"write": false,
|
|
"prefixes": []
|
|
},
|
|
"host": {
|
|
"logging": false,
|
|
"clock": false,
|
|
"random": false,
|
|
"inference": false
|
|
},
|
|
"process": {
|
|
"exec": true,
|
|
"programs": [
|
|
"python"
|
|
],
|
|
"max_processes": 0
|
|
},
|
|
"browser": {
|
|
"enabled": false,
|
|
"origins": [],
|
|
"headless": false
|
|
},
|
|
"display": {
|
|
"enabled": false,
|
|
"vnc": false,
|
|
"max_width": 0,
|
|
"max_height": 0
|
|
}
|
|
},
|
|
"trusted": true,
|
|
"multi_tenant": false,
|
|
"direct_device_assignment": false,
|
|
"confidential": false,
|
|
"sovereign": false,
|
|
"expect_tier": "S2"
|
|
},
|
|
{
|
|
"note": "untrusted cpu → S2",
|
|
"grants": {
|
|
"compute": {
|
|
"devices": [
|
|
"Cpu"
|
|
],
|
|
"energy_budget_uj": 0,
|
|
"cpu_time_ms": 0,
|
|
"memory_bytes": 0
|
|
},
|
|
"storage": {
|
|
"read": [],
|
|
"write": [],
|
|
"delete": []
|
|
},
|
|
"network": {
|
|
"outbound": [],
|
|
"inbound": false
|
|
},
|
|
"kv": {
|
|
"read": false,
|
|
"write": false,
|
|
"prefixes": []
|
|
},
|
|
"host": {
|
|
"logging": false,
|
|
"clock": false,
|
|
"random": false,
|
|
"inference": false
|
|
},
|
|
"process": {
|
|
"exec": false,
|
|
"programs": [],
|
|
"max_processes": 0
|
|
},
|
|
"browser": {
|
|
"enabled": false,
|
|
"origins": [],
|
|
"headless": false
|
|
},
|
|
"display": {
|
|
"enabled": false,
|
|
"vnc": false,
|
|
"max_width": 0,
|
|
"max_height": 0
|
|
}
|
|
},
|
|
"trusted": false,
|
|
"multi_tenant": false,
|
|
"direct_device_assignment": false,
|
|
"confidential": false,
|
|
"sovereign": false,
|
|
"expect_tier": "S2"
|
|
},
|
|
{
|
|
"note": "accelerator brokered → S2",
|
|
"grants": {
|
|
"compute": {
|
|
"devices": [
|
|
"Cpu",
|
|
"Gpu"
|
|
],
|
|
"energy_budget_uj": 1,
|
|
"cpu_time_ms": 1,
|
|
"memory_bytes": 1
|
|
},
|
|
"storage": {
|
|
"read": [],
|
|
"write": [],
|
|
"delete": []
|
|
},
|
|
"network": {
|
|
"outbound": [],
|
|
"inbound": false
|
|
},
|
|
"kv": {
|
|
"read": false,
|
|
"write": false,
|
|
"prefixes": []
|
|
},
|
|
"host": {
|
|
"logging": false,
|
|
"clock": false,
|
|
"random": false,
|
|
"inference": false
|
|
},
|
|
"process": {
|
|
"exec": false,
|
|
"programs": [],
|
|
"max_processes": 0
|
|
},
|
|
"browser": {
|
|
"enabled": false,
|
|
"origins": [],
|
|
"headless": false
|
|
},
|
|
"display": {
|
|
"enabled": false,
|
|
"vnc": false,
|
|
"max_width": 0,
|
|
"max_height": 0
|
|
}
|
|
},
|
|
"trusted": true,
|
|
"multi_tenant": false,
|
|
"direct_device_assignment": false,
|
|
"confidential": false,
|
|
"sovereign": false,
|
|
"expect_tier": "S2"
|
|
},
|
|
{
|
|
"note": "multi-tenant accelerator → S3",
|
|
"grants": {
|
|
"compute": {
|
|
"devices": [
|
|
"Cpu",
|
|
"Gpu"
|
|
],
|
|
"energy_budget_uj": 1,
|
|
"cpu_time_ms": 1,
|
|
"memory_bytes": 1
|
|
},
|
|
"storage": {
|
|
"read": [],
|
|
"write": [],
|
|
"delete": []
|
|
},
|
|
"network": {
|
|
"outbound": [],
|
|
"inbound": false
|
|
},
|
|
"kv": {
|
|
"read": false,
|
|
"write": false,
|
|
"prefixes": []
|
|
},
|
|
"host": {
|
|
"logging": false,
|
|
"clock": false,
|
|
"random": false,
|
|
"inference": false
|
|
},
|
|
"process": {
|
|
"exec": false,
|
|
"programs": [],
|
|
"max_processes": 0
|
|
},
|
|
"browser": {
|
|
"enabled": false,
|
|
"origins": [],
|
|
"headless": false
|
|
},
|
|
"display": {
|
|
"enabled": false,
|
|
"vnc": false,
|
|
"max_width": 0,
|
|
"max_height": 0
|
|
}
|
|
},
|
|
"trusted": true,
|
|
"multi_tenant": true,
|
|
"direct_device_assignment": false,
|
|
"confidential": false,
|
|
"sovereign": false,
|
|
"expect_tier": "S3"
|
|
},
|
|
{
|
|
"note": "passthrough accelerator → S5",
|
|
"grants": {
|
|
"compute": {
|
|
"devices": [
|
|
"Cpu",
|
|
"Gpu"
|
|
],
|
|
"energy_budget_uj": 1,
|
|
"cpu_time_ms": 1,
|
|
"memory_bytes": 1
|
|
},
|
|
"storage": {
|
|
"read": [],
|
|
"write": [],
|
|
"delete": []
|
|
},
|
|
"network": {
|
|
"outbound": [],
|
|
"inbound": false
|
|
},
|
|
"kv": {
|
|
"read": false,
|
|
"write": false,
|
|
"prefixes": []
|
|
},
|
|
"host": {
|
|
"logging": false,
|
|
"clock": false,
|
|
"random": false,
|
|
"inference": false
|
|
},
|
|
"process": {
|
|
"exec": false,
|
|
"programs": [],
|
|
"max_processes": 0
|
|
},
|
|
"browser": {
|
|
"enabled": false,
|
|
"origins": [],
|
|
"headless": false
|
|
},
|
|
"display": {
|
|
"enabled": false,
|
|
"vnc": false,
|
|
"max_width": 0,
|
|
"max_height": 0
|
|
}
|
|
},
|
|
"trusted": true,
|
|
"multi_tenant": false,
|
|
"direct_device_assignment": true,
|
|
"confidential": false,
|
|
"sovereign": false,
|
|
"expect_tier": "S5"
|
|
},
|
|
{
|
|
"note": "confidential → S6",
|
|
"grants": {
|
|
"compute": {
|
|
"devices": [
|
|
"Cpu",
|
|
"Gpu"
|
|
],
|
|
"energy_budget_uj": 1,
|
|
"cpu_time_ms": 1,
|
|
"memory_bytes": 1
|
|
},
|
|
"storage": {
|
|
"read": [],
|
|
"write": [],
|
|
"delete": []
|
|
},
|
|
"network": {
|
|
"outbound": [],
|
|
"inbound": false
|
|
},
|
|
"kv": {
|
|
"read": false,
|
|
"write": false,
|
|
"prefixes": []
|
|
},
|
|
"host": {
|
|
"logging": false,
|
|
"clock": false,
|
|
"random": false,
|
|
"inference": false
|
|
},
|
|
"process": {
|
|
"exec": false,
|
|
"programs": [],
|
|
"max_processes": 0
|
|
},
|
|
"browser": {
|
|
"enabled": false,
|
|
"origins": [],
|
|
"headless": false
|
|
},
|
|
"display": {
|
|
"enabled": false,
|
|
"vnc": false,
|
|
"max_width": 0,
|
|
"max_height": 0
|
|
}
|
|
},
|
|
"trusted": true,
|
|
"multi_tenant": false,
|
|
"direct_device_assignment": true,
|
|
"confidential": true,
|
|
"sovereign": false,
|
|
"expect_tier": "S6"
|
|
},
|
|
{
|
|
"note": "sovereign → S7",
|
|
"grants": {
|
|
"compute": {
|
|
"devices": [
|
|
"Cpu",
|
|
"Gpu"
|
|
],
|
|
"energy_budget_uj": 1,
|
|
"cpu_time_ms": 1,
|
|
"memory_bytes": 1
|
|
},
|
|
"storage": {
|
|
"read": [],
|
|
"write": [],
|
|
"delete": []
|
|
},
|
|
"network": {
|
|
"outbound": [],
|
|
"inbound": false
|
|
},
|
|
"kv": {
|
|
"read": false,
|
|
"write": false,
|
|
"prefixes": []
|
|
},
|
|
"host": {
|
|
"logging": false,
|
|
"clock": false,
|
|
"random": false,
|
|
"inference": false
|
|
},
|
|
"process": {
|
|
"exec": false,
|
|
"programs": [],
|
|
"max_processes": 0
|
|
},
|
|
"browser": {
|
|
"enabled": false,
|
|
"origins": [],
|
|
"headless": false
|
|
},
|
|
"display": {
|
|
"enabled": false,
|
|
"vnc": false,
|
|
"max_width": 0,
|
|
"max_height": 0
|
|
}
|
|
},
|
|
"trusted": true,
|
|
"multi_tenant": false,
|
|
"direct_device_assignment": true,
|
|
"confidential": true,
|
|
"sovereign": true,
|
|
"expect_tier": "S7"
|
|
}
|
|
]
|