Decisions (ADRs)

The live, governed ADR series for the Vinxi kernel. Fresh series — the prior (Reality-Kernel era) series is archived under docs/_archive/reality-kernel-era/adrs/ and is not canon.

• 0000 · Record architecture decisions
• 0001 · Lepton is the company, Vinxi is the kernel
• 0002 · Six verbs, five planes, ports, adapters, services
• 0003 · Rust kernel; async at I/O seams only
• 0004 · SQLx + explicit migrations, no ORM
• 0005 · Drivers speak verbs, never tables
• 0006 · Everything external is a governed Resource
• 0007 · Lean profile is the honest first build
• 0008 · Greenfield kernel; legacy SmartInventory is a connector
• 0009 · Agents run code-mode over the generated SDK
• 0010 · Offline-ready invariants, build online-first
• 0011 · Statement-backing is opt-in; World serves ResolvedValue
• 0012 · Rich artifacts hang off the markdown spine
• 0013 · Syscall atomicity via idempotent replay, not transactions
• 0014 · Error model and observability — error type-URI spelling amended by 0033 (/sys/errors/… → /sys/meta/errors/…)
• 0015 · Series are traits with a temporality class; derivations and evidence pinning are declared
• 0016 · Obligation clocks are userland; the kernel owes durable timers only
• 0017 · Proposals — one governed advice record; autonomy is earned in bands
• 0018 · Credentials & secrets — a governed reference, a plaintext-blind kernel
• 0019 · Automation triggers & scheduling — patterns over two verbs, poll for the push-less
• 0020 · Multi-tenancy & isolation — Universe is the boundary, Realm is a namespace
• 0021 · Security & authorization — one acquire() at the seam, agents auth via the MCP standard
• 0022 · Standards interop lives at the edge — TMF SID/Open-API is the worked instance
• 0023 · Evidence sealing — opt-in third tier of statement-backing
• 0024 · Deployment is a factory — sites pull governed packages, config not forks
• 0025 · Faults are graph citizens — alarms and tickets are entities, RCA verdicts are epistemic links
• 0026 · Every ticket transition is an Act; machine actions are decided under declared authority
• 0027 · Fault correlation is a debounced, domain-scoped pure recompute of world state
• 0028 · QuerySpec is the wire surface; IR-2 stays kernel-internal — routing & doorway decisions superseded by 0033
• 0029 · CLI grammar — fixed kernel-verb surface, ontology-discovered nouns
• 0030 · Playbooks are packaged interpreted scripts against the Vinxi SDK
• 0031 · Entity types, not entity kinds — de-overloading ‘kind’
• 0032 · The document registry — apps, Surfaces, and packages are graph entities; install and publish are Acts
• 0033 · The kernel wire route surface — /sys/<verb>/<name>
• 0034 · Domain operations are reality-declared Acts, not kernel syscalls
• 0035 · Actions are privileged kernel primitives or normal userland programs
• 0036 · Functions are sandboxed userland code that composes privileged Actions
• 0037 · Processes are triggered userland programs — the continuous kinetic member
• 0038 · The transactional schema is extension-free

Not carried from the archived series: realms-as-namespaces, topology-via-CTEs, branch-early/scenario-deferred — those grounds are re-decided by the canon docs (see the reorganization spec §6).