Capability Broker
The System Admin BEAM acts as the Control Plane, serving as the sole broker of capabilities in OS.1. It implements the Chimera layer, managing terminal assignations, namespace sandboxing, virtual networks, and CI/CD operations without possessing any direct access to long-term keys.
OS & CD
Core system services orchestrating cluster, names, mounts, and continuous deployment reliability.
% Deploy Unikernel
deploy(Manifest) ->
case abac:check(Manifest, admin) of
ok -> vmm:start_vm(Manifest);
_ -> {error, denied}
end.
NET & VPN
Management of `nftables` firewall rules and virtual L2/L3 private network topologies directly from Erlang.
LAND
Strict Landlock MAC sandboxing and capability restrictions mapped to Application Plane processes.