JefeRust 1.1.0 — Xylem supervision reaches the Rust kernel

What ships

A narrow, fail-closed Xylem boundary

Bounded local workload supervision with task-group cleanup, restart, backoff, and breaker accounting.
Stateless desired=1 two-vessel reconciliation and residue-free reconvergence.
Strict frozen grant-v1 parsing and cryptographic verification through one privileged control seam.
JefeOS 1.1-compatible durable roster, placement, and revocation floors on two fixed NTFS mirrors.
Fail-closed Standby transitions on revoke, expiry, roster rotation, stale state, and commit races.
Bounded two-vessel real-panic recovery, plus compatible SSH exec waits, child cleanup, /dev/shm, and Xylem incarnation persistence.

Qualification

Exact bytes, exact evidence

Fresh detached clean build: PASS; the published files are the immutable run-492 artifacts.
Independent exact-ISO QEMU: PASS, 11/11 checks.
Hyper-V parity: PASS, 224 cases and zero failures.
Host accounting: PASS, 561 cases and zero failures or errors.
Xylem deterministic, Sprint 5, Sprint 6, Sprint 9, correctness, security, evidence-bundle, and cleanup gates: PASS.
Final accounting: 17 PASS, 0 FAIL, 2 NOT-RUN; zero confirmed HIGH release blockers.

Source commit 80e07d9b7468038e2e288e91f7efb2e1a0611d31
Source tree efa284fc9c17b42e64a1acd8528bd6d454607a7c
Annotated tag jeferust-1.1.0

Operational validation

The release workload remained healthy

The retained exact-product bot observation ran for 8,527 seconds with 30/30 READY samples, a stable process, advancing balanced heartbeats, and no panic, fatal error, reboot, process restart, or framebuffer failure.

Deliberately deferred

Compatibility without inflated claims

JefeRust 1.1.0 does not claim resource fencing, authenticated membership, quorum or partition safety, a stable service front door, fleet observability, stateful failover, consensus, generalized placement, or a supported functional GUI. Those remain coordinated post-1.1 work.

Downloads

Choose the ordinary release image

SMP0 ISO · default

11,438,080 bytes · bootable x86_64 ISO
This is the live-workload-qualified default image.

⬇ Download SMP0 ISO

SHA-256 c399001029387669a1d4766b74cda7517819203e47e1690f7d8165e55ff68343
checksum sidecar

SMP1 ISO · optional

11,458,560 bytes · bootable x86_64 ISO
Clean-build artifact; no SMP0 live-soak claim is transferred to it.

⬇ Download SMP1 ISO

SHA-256 6a3b68301bfb580898f28f718074565094c1c406b4be5cd943d0f601e3e819e0
checksum sidecar

The complete ordinary SMP0/SMP1 kernel and ISO bundle plus SHA256SUMS is available from the GitHub release and Forgejo release. The Sprint 6 diagnostic build is qualification-only and is not published.

Boot

Run the default image

qemu-system-x86_64 -cdrom jeferust-1.1.0.iso -m 1024

The ISO runs live; there is no installer. Hyper-V Generation 1 is also supported by the release path.