BONE/SEA S0-S1: native Rust read-only contract and deterministic host harness

[Deadbytes101]

BONE/SEA S0-S1 NATIVE CANDIDATE

BASE AUTHORITY

• PR base: nanokernel/n6-user-services
• exact N6 base: 93ea5ffb59ff31e87ab7fd5ecb5570c89b29ffee
• N6 nano SHA256: 581d1a6c59580fedca7fca97035449521231f9450ca4a3c2cf35d6ed07640855
• exact SHINESEA source: 3bc6343ecaeae27f0d01c6301cab01a0e77bfb96
• SHINESEA license identity: GPL-2.0-or-later

This PR intentionally does not target current main. Current main contains later deletions of bone.py, nano.py, nano6.py, and diagnose_n6_shared.py; merging this tested branch into that different tree would erase the proof surface used to establish the exact N6 authority.

NATIVE HOST DECISION

BONE/SEA S1 no longer uses Python.

Final native surface:

• tools/bone-sea/Cargo.toml
• tools/bone-sea/Cargo.lock
• tools/bone-sea/src/main.rs
• tools/bone-sea/src/sha256.rs
• docs/BONE_SEA_S1_NATIVE.md
• .github/workflows/bone-sea-native.yml

Removed from the final diff:

• sea.py
• tests/test_bone_sea_s1.py

Native package law:

• Rust 2021
• minimum Rust 1.80
• standard library only
• no third-party crate dependencies
• unsafe_code = forbid
• python_required = false

The executable invokes exact SHINESEA v1.0.0 as a separate process. It does not link the GPL SHINESEA core into the Apache-2.0 BONEBOX host executable.

S0-S1 CONTRACT

• actual SHINESEA core; no partial replacement parser
• read-only only
• 4096-byte logical block over eight complete 512-byte sectors
• volume at LBA 40 through 167
• 16 blocks / 65536 bytes
• allocator ceiling 262144 bytes
• write authority disabled
• nano.bin byte-identical
• no BONE/SEA runtime PASS claim
• no public combined-binary release claim

LOCKED S1 AUTHORITIES

• payload path: /BONESEA.TXT
• payload bytes: BONE/SEA S1 READ-ONLY PAYLOAD\n
• SHINESEA source tar SHA256: ea58c3164184ef6f30d20c88376c2aead04b6c706538c81ac6a15e9e0a08ec71
• image SHA256: 7c2f52f99de60097d16d89dab2f583450aba9727a3a456ad028dadd561c5dab1
• payload SHA256: 1c6959e34c21eebc43e220400ec1f7573446c962beebe3bdf2bbff512ebff6dd

OBSERVED WINDOWS NATIVE VALIDATION

Exact head:

8ae7a8131a4e1eefd40837573a3ce472111a81c9

Observed:

• native debug compile: PASS
• native unit contracts: 13 / 13 PASS
• native release compile: PASS
• native bone-sea.exe execution: PASS
• exact SHINESEA head: PASS
• source tar hash: exact
• image bytes: 65536
• image hash: exact
• payload hash: exact
• S1 DETERMINISM PASS
• BONE/SEA S1 VERIFY PASS
• write authority remained disabled
• no runtime PASS was emitted

RUNTIME BOUNDARY

No boot, root, supervisor, service, or nanokernel runtime source changed in this PR. The older Python N0-N6 proof tools remain frozen evidence infrastructure and are outside the new BONE/SEA command surface. Their native replacement requires a separate proof-parity migration.

MERGE LAW

S0-S1 is ready for review against exact N6 base. Merge is not performed automatically. Use squash merge if later authorized so the temporary Python implementation commits do not enter retained history. Integration into current main requires a separate merge-tree decision and fresh verification.

REPORTS ARE CLAIMS, NOT EVIDENCE.
NO COSTUME RIGOR.

[Deadbytes101]

OBSERVED WINDOWS EVIDENCE — EXACT PR HEAD

HEAD

• BONEBOX: 98ef279a650694a2d7a20f10aa8313c8da8dd50d
• SHINESEA: 3bc6343ecaeae27f0d01c6301cab01a0e77bfb96
• SHINESEA CLI: 1.0.0

HOST CONTRACT

• full Python suite: 207 / 207 PASS
• elapsed: 0.286s
• BONE/SEA S1 contract tests included in the full total

N6 PRESERVATION

• nano bytes: 1680
• nano mutable: 20
• N6-added mutable: 0
• nano SHA256: 581d1a6c59580fedca7fca97035449521231f9450ca4a3c2cf35d6ed07640855
• supervisor bytes: 2279
• root bytes: 14411 / 16384
• service bytes: 2123
• CPU-control bytes: 996 / 1024
• ring-0 stack: 512
• N6 image SHA256: a22860666af05b45bd66b862ca8f0bb760d17953794ed6232efdae264b4f46f2

OBSERVED MACHINE TERMINALS

• N6 SHARED BOUNDS PASS
• N5 prerequisite matrix: N5 QEMU proof PASS
• valid N6 path: N6 USER SERVICES PASS
• supervisor authority: N6 PIPELINE COMMIT PASS
• forged BFS6: rejected
• directory bounds: rejected
• forged BEX6: rejected
• payload bounds: rejected
• malformed shell command: rejected
• shared descriptor adversary: PASS
• service I/O rights adversary: PASS
• final terminal: N6 QEMU proof PASS

S1 DETERMINISTIC SHINESEA IMAGE

• BONE/SEA S1 VERIFY PASS
• S1 DETERMINISM PASS
• volume bytes: 65536
• image SHA256: 7c2f52f99de60097d16d89dab2f583450aba9727a3a456ad028dadd561c5dab1
• payload SHA256: 1c6959e34c21eebc43e220400ec1f7573446c962beebe3bdf2bbff512ebff6dd
• SHINESEA source tar SHA256: ea58c3164184ef6f30d20c88376c2aead04b6c706538c81ac6a15e9e0a08ec71
• write authority: disabled
• runtime PASS claim: not made

WORKTREE NOTE

The BONEBOX checkout contained only untracked local artifacts (__pycache__/, tests/__pycache__/, tools/__pycache__/, sc.local.png). The S1 harness contract rejects tracked modifications; SHINESEA was fully clean. No untracked artifact is part of this PR.

ADVERSARIAL JUDGMENT

The observed branch head satisfies the S0-S1 host evidence gate and preserves the exact N6 resident authority. The PR was retargeted to nanokernel/n6-user-services because current main deletes the proof tools and would create an untested merge result.

READY FOR REVIEW AGAINST EXACT N6 BASE.
NOT MERGED.
NO BONE/SEA RUNTIME PASS CLAIM.

REPORTS ARE CLAIMS, NOT EVIDENCE.
NO COSTUME RIGOR.

[Deadbytes101]

NATIVE MIGRATION CHECKPOINT

The BONE/SEA S1 Python surface has been removed from the final PR tree.

Current head:

8ae7a8131a4e1eefd40837573a3ce472111a81c9

Native authority:

• Rust 2021
• tools/bone-sea
• standard library only
• no third-party crates
• internal SHA256 implementation with known-vector tests
• unsafe_code = forbid
• python_required = false
• source/image/payload hashes locked to the previously observed deterministic bytes

The legacy N0-N6 Python proof tools remain frozen and outside the new BONE/SEA command surface. They are not deleted without a separate parity migration.

The previous Windows proof at 98ef279... is historical byte evidence only. It does not authorize the native source head.

Required exact-head commands:

cargo test --locked --manifest-path tools/bone-sea/Cargo.toml

cargo run --locked --release --manifest-path tools/bone-sea/Cargo.toml -- proof --shinesea D:\TECHNICAL\SHINESEA

Do not begin S2 runtime implementation and do not merge until the native compiler/test/proof transcript is observed.

Use squash merge after acceptance so the temporary Python S1 commits do not enter retained branch history.

REPORTS ARE CLAIMS, NOT EVIDENCE.
NO COSTUME RIGOR.

[Deadbytes101]

OBSERVED WINDOWS NATIVE S1 EVIDENCE

Exact BONEBOX head:

8ae7a8131a4e1eefd40837573a3ce472111a81c9

Native compile and unit contracts:

• bone-sea v0.1.0 compiled successfully on Windows
• 13 passed; 0 failed; 0 ignored
• release profile compiled successfully
• executed native bone-sea.exe; no Python entry point used

Observed deterministic proof:

• SHINESEA head: 3bc6343ecaeae27f0d01c6301cab01a0e77bfb96
• SHINESEA source tar SHA256: ea58c3164184ef6f30d20c88376c2aead04b6c706538c81ac6a15e9e0a08ec71
• image bytes: 65536
• image SHA256: 7c2f52f99de60097d16d89dab2f583450aba9727a3a456ad028dadd561c5dab1
• payload SHA256: 1c6959e34c21eebc43e220400ec1f7573446c962beebe3bdf2bbff512ebff6dd
• S1 DETERMINISM PASS
• BONE/SEA S1 VERIFY PASS
• write authority remained disabled
• no runtime PASS was claimed

Untracked local cache and image files were not part of the tracked branch and did not bypass the tracked-clean gate.

S1 DEFINE DONE is satisfied for the exact native head. This authorizes review of PR #33 against exact N6 base; it does not authorize merge into current main or any BONE/SEA runtime claim.

REPORTS ARE CLAIMS, NOT EVIDENCE.
NO COSTUME RIGOR.