add some more patches for v0.1.1

Author: programmersd21

hyperion.config

@@ -260,6 +260,8 @@ CONFIG_SCHED_SMT=y
 CONFIG_SCHED_MC=y
 CONFIG_SCHED_MC_PRIO=y
 CONFIG_SCHED_CLUSTER=y
+# SCHED_CORE: Prevents SMT sibling starvation — measurable win on HyperThreaded CPUs
+CONFIG_SCHED_CORE=y
 
 # SCHED_AUTOGROUP: Groups interactive tasks by session
 # Shell/GUI feel much more responsive under compilation load
@@ -403,6 +405,9 @@ CONFIG_CPU_IDLE_GOV_MENU=y
 CONFIG_CPU_IDLE_GOV_TEO=y
 CONFIG_CPU_IDLE_GOV_HALTPOLL=y
 CONFIG_HALTPOLL_CPUIDLE=y
+# INTEL_IDLE: Native Intel C-state driver — required for C6/C8/C10 states
+# Without this Intel CPUs fall back to ACPI idle, missing deep sleep states
+CONFIG_INTEL_IDLE=y
 
 # ==============================================================
 # CPU FREQUENCY SCALING
@@ -524,6 +529,9 @@ CONFIG_ZSWAP_DEFAULT_ON=y
 CONFIG_ZSWAP_ZPOOL_DEFAULT_ZSMALLOC=y
 # CONFIG_ZSWAP_COMPRESSOR_DEFAULT_LZ4 is not set
 CONFIG_ZSWAP_COMPRESSOR_DEFAULT_ZSTD=y
+# ZSWAP_SHRINKER: Evicts cold zswap entries back to disk before pool saturates
+# Without this zswap silently fills up and stops accepting pages — causes stalls
+CONFIG_ZSWAP_SHRINKER_DEFAULT_ON=y
 
 # ZRAM: Compressed block device in RAM for swap
 CONFIG_ZRAM=m
@@ -533,6 +541,9 @@ CONFIG_ZRAM_DEF_COMP_ZSTD=y
 
 CONFIG_MEM_SOFT_DIRTY=y
 CONFIG_USERFAULTFD=y
+# PER_VMA_LOCK: Per-VMA mmap locking — reduces contention on multi-threaded workloads
+# Significant win for games, browsers, JVMs. Merged 6.7, well-tested.
+CONFIG_PER_VMA_LOCK=y
 
 # MGLRU: Multi-Generational LRU — Google's page reclaim algorithm
 # Merged in Linux 6.1; default in Android, ChromeOS, CachyOS
@@ -620,7 +631,8 @@ CONFIG_INET_AH=m
 CONFIG_INET_ESP=m
 CONFIG_INET_IPCOMP=m
 CONFIG_INET_TUNNEL=m
-CONFIG_INET_DIAG=m
+# Built-in (not module) — ss, nethogs, systemd-networkd call this constantly
+CONFIG_INET_DIAG=y
 CONFIG_INET_TCP_DIAG=m
 CONFIG_TCP_CONG_ADVANCED=y
 CONFIG_TCP_CONG_BIC=m
@@ -1240,6 +1252,8 @@ CONFIG_SATA_SIL=m
 CONFIG_BLK_DEV_NVME=y
 CONFIG_NVME_MULTIPATH=y
 CONFIG_NVME_HWMON=y
+# NVME_AUTH: NVMe in-band authentication — zero runtime cost when unused
+CONFIG_NVME_AUTH=y
 CONFIG_NVME_TCP=m
 CONFIG_NVME_TARGET=m
 CONFIG_NVME_TARGET_LOOP=m
@@ -1396,6 +1410,9 @@ CONFIG_SECURITY_NETWORK=y
 CONFIG_SECURITY_NETWORK_XFRM=y
 CONFIG_SECURITY_PATH=y
 CONFIG_HARDENED_USERCOPY=y
+# RANDOM_KMALLOC_CACHES: Randomises slab caches to defeat heap spray exploits
+# Zero runtime overhead. Merged 6.6.
+CONFIG_RANDOM_KMALLOC_CACHES=y
 CONFIG_FORTIFY_SOURCE=y
 CONFIG_SECURITY_APPARMOR=y
 CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1
@@ -1809,4 +1826,7 @@ CONFIG_PANIC_TIMEOUT=0
 # END — HYPERION KERNEL v0.1.1
 # Build: make -j$(nproc) LOCALVERSION="-Hyperion-0.1.1"
 # Author: Soumalya Das (2026)
+# Tweaks applied: SCHED_CORE, INTEL_IDLE, ZSWAP_SHRINKER,
+#                 PER_VMA_LOCK, INET_DIAG=y, NVME_AUTH,
+#                 RANDOM_KMALLOC_CACHES
 # ==============================================================