refactor(ocap-kernel): branded kernel identifiers with runtime validation#917

Merged

rekmarks merged 26 commits into

mainfrom

rekm/branded-kernel-identifiers

Apr 7, 2026

Commits on Apr 3, 2026

feat(ocap-kernel): add branded string types for kernel identifiers

rekmarks
and
claude
committed
refactor(ocap-kernel): tighten branded type boundaries, remove interior insistX() calls
rekmarks
committed
refactor(ocap-kernel): remove public kv from KernelStore API
rekmarks
committed
refactor(ocap-kernel): split Message into KernelMessage and EndpointMessage
rekmarks
committed
refactor(ocap-kernel): add runtime validation for branded types at store and trust boundaries

rekmarks
and
claude
committed
refactor(ocap-kernel): add KernelOneResolution type for kernel-space promise resolutions

rekmarks
and
claude
committed
fix(ocap-kernel): remove premature ERef validation from coerceEndpointMessage

rekmarks
and
claude
committed
refactor(ocap-kernel): remove redundant runtime validation, tighten OCAP URL and kslot signatures
rekmarks
committed
refactor(ocap-kernel): tighten kslot and makeStandinPromise to accept KRef
rekmarks
committed
refactor(ocap-kernel): add KernelSyscallObject type, remove casts from VatSyscall
rekmarks
committed
fix(ocap-kernel): handle 'kernel' owner in getOwner to avoid EndpointId validation failure
rekmarks
committed
fix(ocap-kernel): fix build errors from getOwner return type and missing imports
rekmarks
committed
refactor(ocap-kernel): remove dead kslot branches, widen initKernelObject to accept 'kernel' owner
rekmarks
committed
fix(kernel-test): use database.kernelKVStore instead of removed kernelStore.kv

rekmarks
and
claude
committed

Commits on Apr 4, 2026

Commits on Apr 6, 2026

Commits on Apr 7, 2026

Merge branch 'main' into rekm/branded-kernel-identifiers
rekmarks
committed