HestiaOS

Kernel v0.1 Freeze Candidate

Purpose

The kernel freeze defines a stable contract boundary for v0.1: what is locked, what is excluded, and what the freeze commits to maintaining.

This is a scope-control document, not a feature list. The freeze serves to establish a known-good reference point for evaluation and evidence generation.

Included in v0.1 Freeze

ComponentStatus
Stable DTO contractsFrozen
Single policy/decision authority pathFrozen
Structural invariants separated from policyFrozen
ExecutionCommit as side-effect boundaryFrozen
Runnable CEG Intent RegistryFrozen
Execution GateFrozen
Causal BridgeFrozen
Replayable DecisionTrace evidenceFrozen
Critical kernel tests greenVerified
Public boundary documentationPublished

Excluded from v0.1 Freeze

The following are explicitly excluded from the kernel v0.1 freeze:

  • Full MCP hardening refactor
  • OpenProject write integration
  • Vercel/web demo as runtime control plane
  • Plugin registry (next phase)
  • Edition builds
  • Model training infrastructure
  • New memory system
  • New architecture theory components

Excluding these is intentional. The freeze declares what is stable and under contract — not what is desirable or planned.

What the Freeze Means

  1. Stability: DTO contracts and structural invariants will not change within v0.1
  2. Evidence: Any evidence generated against the frozen kernel is reproducible
  3. Boundary: The separation between "in kernel" and "not in kernel" is explicit
  4. Audit: External reviewers can inspect the frozen boundary without chasing moving targets

What the Freeze Does Not Mean

  1. Development on excluded components stops — it continues outside the freeze boundary
  2. The kernel is feature-complete — it is scope-complete for v0.1
  3. All invariants are formally proven — they are structurally enforced and tested