Userland Operations
The Service Plane handles all untrusted logic, sessions, and multi-tenant applications. Unlike standard container engines, OS.1 runs these workloads entirely without ambient authority. Rights are dynamically leased via capability tokens, minimizing blast radiuses in the event of compromise.
X11 & WM
Rootless Xorg and Xwayland environments managed by a custom Erlang window manager (ctwm + OTP) for minimal overhead.
% X11 Rootless WM Init
init_wm() ->
x11:start_link([{display, ":0"}]),
wm:register_hook(on_map_request, fun map_handler/1).
CHAT & MQTT
Highly scalable messaging protocols terminating inside the Application Plane for user-space consumption.