OXYGENHUB

Changes up to # 2d025bbf9842 +5 touching docs/m0.md · 8

See as swimlanes (independent work side by side)

2d025bbf98423dd14c0d740d93c592f3c74ea359debb49b52dc1ba880e041311+67634e22f48ffde9f562114e69c213c79ba9813b1e8a0c2a191659b0f6cefc2c+b647ab72d51eb28e49f7a940ebb677d88bffe6789f143259c51b2877a0249786+c140d0d8bc9c4713fd772c602238a1a8ae23ff9cfafba23d947ed6f5d0f18715+e0010a74135bc15e27ac6f101380448002b4337b93b99089f18d3a693ace6694+f3b4fdeb2bc21583e58191fb9ea2314236f472de8d70333cbe2f8e45ee167b43 has 6 heads. The graph shows their union; heads are marked.
Register runners with a token; describe them in claims
Andy McCall ·
✔ f98a8f7881e0
Job artifacts: output declarations, extraction and upload
Andy McCall ·
✔ a67b97e9a717
Runners sign their receipts
Andy McCall ·
✔ 47c1d64dec8a
Sandbox env, and an image's own environment
Andy McCall ·
✔ a72abeeedd78
Guest /dev/fd links; jobs are told what they build
Andy McCall ·
✔ c4285535b03a
Build image for Rust and Node jobs (images/rust: toolchain, rustfmt, clippy, Node 24, vendored crates, offline cargo); flow-init finds the program in the job's PATH (glibc's execvpe used PID 1's own); network "loopback" in M0
Andy McCall ·
✔ eb5c4db673e5
Ephemeral scratch mounts in M0: ephemeral://tmpfs and ephemeral://disk (a sparse disk per job), checked targets and sizes, in the canonical job and the receipt; flow-init mounts them for the job's user; make deploy-runner
Andy McCall ·
✔ fc10d9e80383
OxygenFlow M0: pipeline parser and canonical job graph, receipts, the runner API types, flow-init, the Firecracker tier, flow check, run, rootfs import and runner
Andy McCall ·
✔ e0918b887850