Cohesix Documentation
Documentation View source

Cohesix

Root-task manifest schema (generated)

  • Authority identity: gateway_enforced; VM-verified caller identity: false.
  • Authority policy: AuthorityPolicy { production: false, delegated_rest: true, vm_verified_delegation: false, delegated_ticket_entries: 256, delegated_ticket_max_ttl_s: 3600, strict_queen_intents: true, legacy_queen_ctl: true, queen_dedupe_entries: 64, queen_intent_max_bytes: 2048, writer_epoch: 1, writer_epoch_required: false, execution_wal_required: true, gpu_frame_max_bytes: 8192, debug_memory: false, production_worker_ledger: false, production_driver_ledger: false, structured_quarantine: false, host_ai: false, production_failover: false }
  • Host tickets confer host authority; model/session roles confer no VM authority. Accepted task/driver bundles retain their owning milestone evidence. Production Worker/driver ledgers and structured quarantine require Milestone 28b.
  • meta.author: Lukas Bower
  • meta.purpose: Root-task manifest input for coh-rtc.
  • root_task.schema: 1.29
  • temporal_authority.root-control.virtio_operator_serial_io_bytes_per_turn: 64
  • root_task.affinity.enabled: true
  • root_task.affinity.max_cores: 4
  • root_task.affinity.authority_core: 0
  • root_task.affinity.ninedoor_cores: [1]
  • root_task.affinity.provider_cores: [2, 3]
  • root_task.affinity.worker_cores: [2, 3]
  • root_task.affinity.drivers.serial: 1
  • root_task.affinity.drivers.usb-local-seat: 1
  • root_task.affinity.drivers.hdmi-text: 1
  • root_task.affinity.drivers.bcmgenet-v5: 1
  • root_task.affinity.drivers.cyw43455: 3
  • root_task.affinity.drivers.rtl8139: 2
  • root_task.affinity.drivers.virtio-net: 3
  • root_task.affinity.drivers.sdio-host: 3
  • root_task.affinity.drivers.pcie-root: 2
  • root_task.driver_images.required: true
  • root_task.driver_images.images: 7
  • root_task.driver_images.pi4-serial-runtime: contract=serial hot_path=serial-console artifact=cohesix/bin/pi4-driver-serial root_context_required=false hardware_state_migrated=true
  • root_task.driver_images.pi4-usb-runtime: contract=usb-local-seat hot_path=usb-keyboard artifact=cohesix/bin/pi4-driver-usb root_context_required=false hardware_state_migrated=true
  • root_task.driver_images.pi4-hdmi-runtime: contract=hdmi-text hot_path=hdmi-text artifact=cohesix/bin/pi4-driver-hdmi root_context_required=false hardware_state_migrated=true
  • root_task.driver_images.pi4-genet-runtime: contract=bcmgenet-v5 hot_path=genet-nic artifact=cohesix/bin/pi4-driver-genet root_context_required=false hardware_state_migrated=true
  • root_task.driver_images.pi4-cyw43-runtime: contract=cyw43455 hot_path=cyw43-wifi artifact=cohesix/bin/pi4-driver-cyw43 root_context_required=false hardware_state_migrated=true
  • root_task.driver_images.pi4-sdio-runtime: contract=sdio-host hot_path=sdio-host artifact=cohesix/bin/pi4-driver-sdio root_context_required=false hardware_state_migrated=true
  • root_task.driver_images.pi4-pcie-runtime: contract=pcie-root hot_path=pcie-root artifact=cohesix/bin/pi4-driver-pcie root_context_required=false hardware_state_migrated=true
  • root_task.driver_images.irq.serial-console: irq=125 badge=126 handler_slot=4 notification_slot=3 trigger=level
  • root_task.driver_images.irq.sdio-host: irq=158 badge=159 handler_slot=4 notification_slot=3 trigger=level
  • root_task.driver_images.irq.sdio-host: irq=116 badge=512 handler_slot=5 notification_slot=3 trigger=level
  • root_task.driver_images.bus_link.cyw43-sdio: client=cyw43-wifi owner=sdio-host local_notifications=3:3 client_to_owner=notification:8 owner_to_client=notification:10 shared=4096+32768 link_epoch=1129927425 dpc_event=160+96 depth=4
  • profile.name: virt-aarch64
  • profile.kernel: true
  • event_pump.tick_ms: 5
  • secure9p.msize: 8192
  • secure9p.walk_depth: 8
  • secure9p.tags_per_session: 16
  • secure9p.batch_frames: 1
  • secure9p.short_write.policy: reject
  • ticket_limits.max_scopes: 8
  • ticket_limits.max_scope_path_len: 128
  • ticket_limits.max_scope_rate_per_s: 64
  • ticket_limits.bandwidth_bytes: 8388608
  • ticket_limits.cursor_resumes: 16
  • ticket_limits.cursor_advances: 256
  • cas.enable: true
  • cas.store.chunk_bytes: 128
  • cas.delta.enable: true
  • cas.signing.required: true
  • cas.signing.verification_key_path: resources/keys/cas_verification_key.hex
  • telemetry.ring_bytes_per_worker: 1024
  • telemetry.frame_schema: legacy-plaintext
  • telemetry.cursor.retain_on_boot: false
  • worker_runtime.implementation_epoch: 26
  • worker_runtime.cap_backed_authority: true
  • worker_runtime.notification_lifecycle: true
  • worker_runtime.scheduling.profile: mcs-passive
  • worker_runtime.scheduling.service_turn_budget: 64
  • worker_runtime.roles.worker-heartbeat: implemented=true ticket_scope=/worker telemetry=/shard/<label>/worker/<id>/telemetry
  • worker_runtime.roles.worker-gpu: implemented=true ticket_scope=/gpu telemetry=/shard/<label>/worker/<id>/telemetry
  • worker_runtime.roles.worker-bus: implemented=false ticket_scope=/bus telemetry=/shard/<label>/worker/<id>/telemetry
  • worker_runtime.roles.worker-lora: implemented=true ticket_scope=/worker telemetry=/shard/<label>/worker/<id>/telemetry
  • telemetry_ingest.max_segments_per_device: 4
  • telemetry_ingest.max_bytes_per_segment: 131072
  • telemetry_ingest.max_total_bytes_per_device: 524288
  • telemetry_ingest.max_reference_entries_per_segment: 1024
  • telemetry_ingest.max_reference_manifest_bytes_per_segment: 131072
  • telemetry_ingest.max_reference_bytes_per_segment: 1073741824
  • telemetry_ingest.eviction_policy: evict-oldest
  • lifecycle.initial_state: BOOTING
  • lifecycle.auto_transitions: BOOTING->ONLINE
  • control_plane.schedule.enable: true
  • control_plane.schedule.queue_max_entries: 256
  • control_plane.schedule.ctl_max_bytes: 8192
  • control_plane.lease.enable: true
  • control_plane.lease.active_max_entries: 256
  • control_plane.lease.preemptions_max_entries: 256
  • control_plane.lease.ctl_max_bytes: 8192
  • control_plane.export.enable: true
  • control_plane.export.ctl_max_bytes: 2048
  • observability.proc_9p.sessions: true
  • observability.proc_9p.outstanding: true
  • observability.proc_9p.short_writes: true
  • observability.proc_9p.sessions_bytes: 8192
  • observability.proc_9p.outstanding_bytes: 128
  • observability.proc_9p.short_writes_bytes: 128
  • observability.proc_9p_session.active: true
  • observability.proc_9p_session.state: true
  • observability.proc_9p_session.since_ms: true
  • observability.proc_9p_session.owner: true
  • observability.proc_9p_session.active_bytes: 128
  • observability.proc_9p_session.state_bytes: 64
  • observability.proc_9p_session.since_ms_bytes: 64
  • observability.proc_9p_session.owner_bytes: 96
  • observability.proc_ingest.p50_ms: true
  • observability.proc_ingest.p95_ms: true
  • observability.proc_ingest.backpressure: true
  • observability.proc_ingest.dropped: true
  • observability.proc_ingest.queued: true
  • observability.proc_ingest.watch: true
  • observability.proc_ingest.p50_ms_bytes: 64
  • observability.proc_ingest.p95_ms_bytes: 64
  • observability.proc_ingest.backpressure_bytes: 64
  • observability.proc_ingest.dropped_bytes: 64
  • observability.proc_ingest.queued_bytes: 64
  • observability.proc_ingest.watch_max_entries: 16
  • observability.proc_ingest.watch_line_bytes: 192
  • observability.proc_ingest.watch_min_interval_ms: 50
  • observability.proc_ingest.latency_samples: 32
  • observability.proc_ingest.latency_tolerance_ms: 5
  • observability.proc_ingest.counter_tolerance: 1
  • observability.proc_root.reachable: true
  • observability.proc_root.last_seen_ms: true
  • observability.proc_root.cut_reason: true
  • observability.proc_root.reachable_bytes: 32
  • observability.proc_root.last_seen_ms_bytes: 64
  • observability.proc_root.cut_reason_bytes: 64
  • observability.proc_pressure.busy: true
  • observability.proc_pressure.quota: true
  • observability.proc_pressure.cut: true
  • observability.proc_pressure.policy: true
  • observability.proc_pressure.busy_bytes: 64
  • observability.proc_pressure.quota_bytes: 64
  • observability.proc_pressure.cut_bytes: 64
  • observability.proc_pressure.policy_bytes: 64
  • observability.proc_schedule.summary: true
  • observability.proc_schedule.queue: true
  • observability.proc_schedule.summary_bytes: 128
  • observability.proc_schedule.queue_bytes: 256
  • observability.proc_lease.summary: true
  • observability.proc_lease.active: true
  • observability.proc_lease.preemptions: true
  • observability.proc_lease.summary_bytes: 160
  • observability.proc_lease.active_bytes: 256
  • observability.proc_lease.preemptions_bytes: 256
  • ui_providers.proc_9p.sessions: true
  • ui_providers.proc_9p.outstanding: true
  • ui_providers.proc_9p.short_writes: true
  • ui_providers.proc_ingest.p50_ms: true
  • ui_providers.proc_ingest.p95_ms: true
  • ui_providers.proc_ingest.backpressure: true
  • ui_providers.policy_preflight.req: false
  • ui_providers.policy_preflight.diff: false
  • ui_providers.updates.manifest: true
  • ui_providers.updates.status: true
  • client_policies.cohsh.pool.control_sessions: 2
  • client_policies.cohsh.pool.telemetry_sessions: 24
  • client_policies.cohsh.tail.poll_ms_default: 1000
  • client_policies.cohsh.tail.poll_ms_min: 250
  • client_policies.cohsh.tail.poll_ms_max: 10000
  • client_policies.cohsh.host_telemetry.nvidia_poll_ms: 1000
  • client_policies.cohsh.host_telemetry.systemd_poll_ms: 2000
  • client_policies.cohsh.host_telemetry.docker_poll_ms: 2000
  • client_policies.cohsh.host_telemetry.k8s_poll_ms: 5000
  • client_policies.coh.mount.root: /
  • client_policies.coh.mount.allowlist: /proc, /queen, /shard, /worker, /log, /gpu, /host
  • client_policies.coh.telemetry.root: /queen/telemetry
  • client_policies.coh.telemetry.max_devices: 32
  • client_policies.coh.telemetry.max_segments_per_device: 4
  • client_policies.coh.telemetry.max_bytes_per_segment: 131072
  • client_policies.coh.telemetry.max_total_bytes_per_device: 524288
  • client_policies.retry.max_attempts: 3
  • client_policies.retry.backoff_ms: 200
  • client_policies.retry.ceiling_ms: 2000
  • client_policies.retry.timeout_ms: 5000
  • client_policies.heartbeat.interval_ms: 15000
  • client_paths.queen_ctl: /queen/ctl
  • client_paths.queen_lifecycle_ctl: /queen/lifecycle/ctl
  • client_paths.queen_schedule_ctl: /queen/schedule/ctl
  • client_paths.queen_lease_ctl: /queen/lease/ctl
  • client_paths.queen_export_ctl: /queen/export/ctl
  • client_paths.policy_ctl: /policy/ctl
  • client_paths.log: /log/queen.log
  • swarmui.ticket_scope: per-ticket
  • swarmui.cache.enabled: false
  • swarmui.cache.max_bytes: 262144
  • swarmui.cache.ttl_s: 3600
  • swarmui.hive.frame_cap_fps: 30
  • swarmui.hive.step_ms: 16
  • swarmui.hive.lod_zoom_out: 0.7
  • swarmui.hive.lod_zoom_in: 1.25
  • swarmui.hive.lod_event_budget: 512
  • swarmui.hive.snapshot_max_events: 4096
  • swarmui.hive.overlay_lines: 3
  • swarmui.hive.detail_lines: 50
  • swarmui.hive.line_cap_bytes: 160
  • swarmui.hive.per_worker_bytes: 2048
  • swarmui.paths.telemetry_root: /worker
  • swarmui.paths.proc_ingest_root: /proc/ingest
  • swarmui.paths.worker_root: /shard
  • swarmui.paths.namespace_roots: /proc, /queen, /shard, /worker, /log, /gpu, /host, /policy, /actions, /audit, /replay
  • cache.kernel_ops: true
  • cache.dma_clean: true
  • cache.dma_invalidate: true
  • cache.unify_instructions: false
  • dma.protection_profile: none
  • features.net_console: true
  • features.serial_console: true
  • features.std_console: false
  • features.std_host_tools: false
  • hw.secure_boot: false
  • hw.no_nic: false
  • hw.network.enabled: false
  • hw.network.backend: auto
  • hw.network.mode: off
  • hw.network.interface: wired
  • hw.network.static_ipv4.ip: (unset)
  • hw.network.static_ipv4.prefix_len: 0
  • hw.network.static_ipv4.gateway: (unset)
  • hw.network.dhcp.discover_timeout_ms: 1000
  • hw.network.dhcp.request_timeout_ms: 1000
  • hw.network.dhcp.max_retries: 4
  • hw.attestation.required: false
  • hw.attestation.mode: disabled
  • hw.attestation.evidence_max_bytes: 8192
  • hw.local_seat.enabled: false
  • hw.local_seat.required: false
  • hw.local_seat.keyboard_device: usb-kbd0
  • hw.local_seat.display_device: hdmi0
  • hw.local_seat.line_bytes: 160
  • hw.local_seat.buffer_lines: 128
  • hw.devices: 0 entries
  • hw.devices[]: (none)
  • namespaces.role_isolation: true
  • sharding.enabled: true
  • sharding.shard_bits: 8
  • sharding.legacy_worker_alias: true
  • tickets: 5 entries
  • manifest.sha256: 0fd40c602c76806c30de6963765e4d4b4057716da238c1d6fc14d8fb20858f11

Namespace mounts (generated)

  • service logs → /log

Sharded worker namespace (generated)

  • sharding.enabled: true
  • sharding.shard_bits: 8
  • sharding.legacy_worker_alias: true
  • shard labels: 00..ff (count: 256)
  • canonical worker path: /shard/<label>/worker/<id>/telemetry
  • legacy alias: /worker/<id>/telemetry

Sidecars section (generated)

  • sidecars.modbus.enable: true
  • sidecars.modbus.mount_at: /bus
  • sidecars.modbus.adapters: id=modbus-main mount=modbus-main scope=modbus-main link=serial baud=19200 spool.max_entries=8 spool.max_bytes=512
  • sidecars.dnp3.enable: false
  • sidecars.dnp3.mount_at: /bus
  • sidecars.dnp3.adapters: (none)

Ecosystem section (generated)

  • ecosystem.host.enable: true
  • ecosystem.host.mount_at: /host
  • ecosystem.host.providers: systemd, k8s, docker, nvidia
  • ecosystem.host.snapshots: enable=true, max_bytes=8192, max_entries=64, max_value_bytes=1024, max_ttl_ms=30000; paths /host/snapshots/<provider>/<source>/{ctl,status,snapshot}.
  • Host snapshot publisher linux-reference: systemd, docker, k8s, nvidia, jetson, network.
  • Host snapshot publisher mac-controller: launchd, network, endpoint_compliance.
  • ecosystem.host.tickets.enable: true
  • ecosystem.host.tickets.request_schema: host-ticket/v1
  • ecosystem.host.tickets.result_schema: host-ticket-result/v1
  • ecosystem.host.tickets.max_line_bytes: 2048
  • ecosystem.host.tickets.action_allowlist: gpu.lease.grant, gpu.lease.renew, gpu.lease.release, gpu.workload.submit, gpu.workload.cancel, gpu.workload.observe, peft.export, peft.import, peft.activate, peft.rollback, peft.release, systemd.start, systemd.stop, systemd.restart, systemd.status-check, docker.restart, docker.stop, docker.status-check, k8s.cordon, k8s.drain, k8s.lease.sync, launchd.start, launchd.stop, launchd.restart, launchd.status-check, endpoint_compliance.observe
  • ecosystem.host.tickets.lifecycle: queued, claimed, running, succeeded, failed, expired
  • ecosystem.host.federation.enable: true
  • ecosystem.host.federation.local_hive: hive-a
  • ecosystem.host.federation.relay_queue_max_entries: 256
  • ecosystem.host.federation.relay_queue_max_bytes: 32768
  • ecosystem.host.federation.wal_max_entries: 1024
  • ecosystem.host.federation.wal_max_bytes: 524288
  • ecosystem.host.federation.relay_timeout_ms: 2000
  • ecosystem.host.federation.peers: hive-b -> http://127.0.0.1:8081 (auth_ref=COHESIX_RELAY_HIVE_B_TOKEN)
  • ecosystem.host.federation.peers: hive-c -> http://127.0.0.1:8082 (auth_ref=COHESIX_RELAY_HIVE_C_TOKEN)
  • ecosystem.host.federation.action_allowlist: gpu.lease.grant, gpu.lease.renew, gpu.lease.release, peft.export, peft.import, peft.activate, peft.rollback, systemd.start, systemd.stop, systemd.restart, systemd.status-check, docker.restart, docker.stop, docker.status-check, k8s.cordon, k8s.drain, k8s.lease.sync
  • /host namespace mounted at /host when enabled.
  • ecosystem.audit.enable: true
  • ecosystem.audit.journal_max_bytes: 8192
  • ecosystem.audit.decisions_max_bytes: 4096
  • ecosystem.audit.replay_enable: true
  • ecosystem.audit.replay_max_entries: 64
  • ecosystem.audit.replay_ctl_max_bytes: 1024
  • ecosystem.audit.replay_status_max_bytes: 1024
  • ecosystem.policy.enable: true
  • ecosystem.policy.queue_max_entries: 256
  • ecosystem.policy.queue_max_bytes: 8192
  • ecosystem.policy.ctl_max_bytes: 2048
  • ecosystem.policy.status_max_bytes: 512
  • ecosystem.policy.rules: queen-ctl → /queen/ctl
  • ecosystem.policy.rules: systemd-restart → /host/systemd/*/restart
  • ecosystem.models.enable: true
  • Nodes appear only when enabled.

Generated from configs/root_task.toml (sha256: 0fd40c602c76806c30de6963765e4d4b4057716da238c1d6fc14d8fb20858f11).