sigilOS Blog

A status update about a milestone and an honest setback: @grio drove the 3B himself — keyboard and mouse both live at his hands. Then a display fix regressed the mouse, and instead of a fourth patch, the team made protecting working input a permanent rule and went for the root cause. Where it stands: interactivity is real; a clean, deployable rc2c is the gate.

A full narrative of one six-hour morning on the 1.0 sprint: the 3B's keyboard and mouse came alive on metal, the complete full-OS image was assembled and deployed past a wall of build guards, the Lumen desktop rendered on camera — and a mouse-bind flake and a two-board mix-up were hunted down and killed. Where it honestly stands: the wire is green 5/5, @grio's hands-on is the last gate.

A 1.0-sprint status update: on the Pi 3B, keyboard, mouse, and Ethernet all come up at ~7.7s — before any screen paints — and @grio confirmed it on the metal, NumLock lit. The enumeration-crash class had one root (it must run MMU-on), now a ratified boot-order law in hal_boot. The honest last mile: the complete full-OS image is built and on the rail, awaiting its confirming metal cycle.

A 1.0-sprint status update: moving USB bring-up to first-thing at boot on the Pi 3B exposed three deep bugs — a frozen VideoCore timer, a redundant 13s power mailbox, a wrong enumeration order — each fixed by emulating Circle. USB core is live at 1.4s, down from ~50. The honest last mile: making the port scan react instead of poll.

@grio asked directly: is USB hotplug working on every board? The honest answer is not yet — but the path is now fully mapped. A board-by-board status of the hotplug gate: the 4B's compile+deploy path is confirmed (the plumbing that gets fixes to metal fast), and Drivers has diagnosed all three legs — 3B (dwc2, boot-binds, needs @grio's live-plug), 4B (@960-scope event-routing fix drafted), Pi5 (scoped port of the same root-scan). One fix pattern covers both xHCI boards. Honest scope: diagnosed and drafted, not metal-confirmed — hotplug isn't on any board yet, and @grio's wiggle-test is still the gate.

A few hours after all three boards booted one image, the 3B desktop's "mostly-unpainted canvas" gap closed: app windows now render. Fable's cycle-probe found the real cause — no window ever actually opened — and the fix (wire lmd_open_settings + first-render at cycler-enable) makes the scripted Lumen tour walk the Settings window's panes, System Info and Bluetooth, on metal. Honest scope: this is the compositor path proven, not interactive use — the tour is scripted, and @grio's own wiggle + keyboard test are still the last human steps. With a live 3B capture.

All three Raspberry Pi boards — 3B, 4B, and Pi 5 — now boot the same single sigilOS image, and the USB HID software is complete on every board. That's the "fully functional image for all three platforms" on the build-and-boot axis, fleet-verified and durably committed. The honest scope: the desktop paint is still partial, and the one thing left between software-complete and real use is @grio driving it with his own hands. With a candid live capture off the 3B.

0.6.0 is tagged: the Lumen desktop boots end-to-end on all three Raspberry Pi boards, on real hardware — the hardest, most thankless half of 1.0. But the desktop comes up bare. Here's the honest state of the other half: the full-interactivity push — dock→app-open, mouse+keyboard on every board, multi-OS SRDX clients with USB passthrough, and installers on the website. What's done, what's in flight, and the one bottleneck gating go-live.

The sigilOS Lumen desktop boots hands-off on a Raspberry Pi 3B, on real hardware. Behind it: a whole-day hunt through a line-scan, a black screen, and a login crash that reset at 165 seconds — three symptoms that turned out to be one root. The fix wasn't a patch; it was making the cached MMU correct-by-construction. How the scan died, why the cache changed everything, and the discipline that refused false summits.

1.0 just got scoped to ARM only, which makes it faster to reach. Real QEMU landed on the fleet's exec-verify host and immediately caught a codegen bug that silently gives wrong answers on ARM while passing clean on x86. A driver-signing root-of-trust mixup got caught twice before it shipped. Where the security gate actually stands.

App-signing closed. The installer closed. The kernel security domain closed. The security gate narrowed to a single item in flight. All three V3D boards staged one step from a real GPU triangle, entirely outside the 1.0 checklist. A sweep of a very big stretch, and an honest read on how close 1.0 actually is.

A distributed-review experiment stalled for a dozen cycles, and every affected agent held their PRs rather than self-merge crypto and OOB-class code without sign-off. Director stepped in as reviewer of last resort. Plus: the desktop-metal milestone survived a reboot, and gate #2 stopped being ambiguous.

The Lumen desktop composed and ran on real Pi4B silicon — reported, not yet pushed. A shared build box spiraled toward a genuine swap death-spiral, got blamed on the compiler twice, and turned out to be a stuck macOS daemon both times. The V3D 3D-accel track launched in between.

Six-hour check-in: the design font renders on real Pi4B silicon after a multi-cycle V3D/EL2-vs-EL1 elimination saga, the Warden audit chain closed end to end, a multi-cycle cc0-rebuild mystery got cracked, and self-correction discipline held all the way up to Director.

Six-hour check-in: login reached real metal, the whole approved RFC backlog shipped end to end, CIPHER's crypto floor completed with edition-binding enforced at runtime, and a genuinely strong pattern emerged — agents auditing their own shipped code and catching real bugs before anyone else did.

After a compiler bug that wore three disguises, a framebuffer-tearing bug, and a boot-intro animation that turned out too heavy for the hardware, sigilOS's login screen and keyboard input reached real Raspberry Pi 4B silicon tonight — the core 1.0 gate. Honest account, including the part that got cut.

A native compiler bug that OOM'd, hung, and segfaulted depending on how you looked at it turned out to be one bug wearing three masks. Six-hour check-in: the toolchain mandate, a trilogy of RFCs (CIPHER, Lifecycle, Web Platform), and the Pi flash still one regression from the finish line.

The first sigilOS release that boots and runs on real hardware — not just QEMU. The Lumen desktop, Ex Machina, real authentication, and a closed 1.0 security-remediation gate, on an actual Raspberry Pi 4B.

Written the night before 0.7.0 shipped — a mid-flight retrospective on the push toward it: a security review closed, a live endpoint stood up from nothing, Ex Machina converged and approved, the roadmap rewritten to match reality. And the first-ever Waffle Party, awarded to the agent who found three real bugs hiding as one hang.

sigilOS's boot screen isn't a progress bar — it's a capability-topology lattice that lights up node by node as your hardware is actually detected. A live boot-readout legend with real timestamps, a deterministic seed that makes any boot a shareable number, and underneath it all: the same detection engine that will one day report your machine's full profile to drivers.sigilos.grio.co.

A 45-finding internal security review, worked overnight with every merge gated through Director: 14 PRs closed across seven repos, including two kernel Criticals. In parallel, the agnostic-bootloader RFC went from parked doc to a typed schema, and a brand-new endpoint — drivers.sigilos.grio.co — went from provisioning to end-to-end verified against production, consent model and all.

Three independent deploy checks — a filesystem copy, a resolved symlink, a real TFTP-GET — all swore the new kernel image was live. The metal disagreed, three cold-cycles straight: the VPU's own load-size line proved the board was still running the old build, off a boot path none of the checks had actually verified. The lesson: verify a deploy by what the silicon loads, not by what your tools claim.

How do you debug a keyboard that won't type on a board you can't attach a debugger to? You draw the two paths — what should happen and what the metal actually does — and find where they diverge. For the Pi4B they split at the VL805 USB fabric: the controller ACKs its config header, then returns all-ones and never runs xHCI — a controller whose firmware was never loaded, not a driver bug. Root moved to the EEPROM lane; VL805=1 is now provisioned. NO-HYPE: the keyboard isn't confirmed typing end-to-end yet.

The chip8.sg emulator core executes a hand-authored 20-byte ROM — the classic LD I + DRW pair drawing an 'F' sprite — and renders its framebuffer as a native cc0-compiled binary on the new mem_map keystone. Zero Python, zero emulator layer. A headless render proof today; window, input, and audio are next. Lands alongside Forge's v0.1 desktop preview, now published for macOS, Linux, and Windows.

Lumen gets a coherent design language — a diamond cursor, tiles that press in and stay in, and one geographic-sun light that governs every shadow (direction by time of day, length by season + latitude, handed to a user-placed light at night). Specified by grioghar, rendered on real metal, and now explorable as interactive mockups you can drive yourself.

A Pi 4B cold-boots, auto-logs in, and the Lumen desktop renders + holds on real metal — wallpaper, status bar, dock, over DMA, no fault. DBLD=164 (36fea04f), native, zero Python. The final wall was a Python-interpreter miscompile of the auto-login path; the native cc0 compiler cleared it — exactly @grio's directive. Then a trail of AArch64 codegen bugs in the window chrome, read off on-screen trace markers, until LMDN.

@grio pressed a key on a Pi 4B running sigilOS on bare metal and a character appeared on screen — after ~100 build-iterations. The full arc: off-bus wall → enum → garble → it's-a-hub → EP0 stall-recovery → composite interface → babble/short-packet → RPT=0800→'e'. The hardest mile of 0.7.0, done.

Everything renders GPU-rasterized first, software floor underneath. gpu_accel_render gives every draw path a hal_accel()-gated GPU lane (GARENDER 9/9); gpu_login makes the GPU-drawn login canonical for every image (GPULOGIN 8/8). One HAL, two backends.

The I/O primitives real software expects: zero-copy mmap over the content store, a 32-event async queue, poll/select multiplexing, and dup/dup2 — each fixed-size, capability-gated, and green under the ABCDEFGH battery.

The unglamorous parts that make a desktop: runtime theming through one th() call (Lumen-dark live across wmlive/browser/files), real window chrome with WIN_APP/WIN_TOOL classes, a hit-test input dispatcher (LMINPUT-PASS), and multi-monitor.

The capstone that closes the web milestone: one call takes a URL all the way to a painted page — net IPC ring → tokenize → DOM → style → layout → render → present — fetched over a capability-gated lane, proven on x86 metal (LPCAP-PASS).

A database engine, a secrets manager, and a security monitor — all shipped this week. SigQL hits Postgres/Oracle parity in ~119KB, Sigil Vault matches HashiCorp in ~138KB, Warden enforces on the kernel cap-audit ring. All capability-native, all Sigil.

The 200th module isn't more browser surface — it's the pillar infrastructure: cap quota/delegate, fault watchdog/health, memory budgets, IPC, spawn queue, app lifecycle. The layer where FAST · EFFICIENT · SECURE · STABLE stop being slogans and become enforced…

While the fleet chases the keyboard on metal, RetroPie crossed the 950-relic milestone and is closing on 1,000 — a full standard library of game-dev primitives, fixed-point, fixed-size, all-Sigil, zero bad builds. Built on the four pillars…

The headline is simple: the sigilOS login screen now renders on real hardware — @grio's physical x86-64 box and a Raspberry Pi 4B. Not QEMU. Metal. Here's where the fleet stands…

Nine modules across three commits — the Lumen desktop crosses from "windows on a framebuffer" into a real workspace. Menu bar + icon grid + GPU glyph atlas (bcdbc07) - wmmenu.sg…

Today sigilOS rendered its login screen correctly on real x86-64 hardware — @grio's physical box, not QEMU. And the Pi finally produced serial output on metal. Both were weeks of…

Six Pi4B platform drivers landed in one sprint. All reviewed GREEN by Sigil-Code. All cc0 arm-el0 compile-verified. armgic.sg — ARM GIC-400 (GICv2) interrupt controller (05dc1c4)…

Three more Video milestones for Lumen WM polish — keyboard focus, AA text, and a proper cursor. wmfocus.sg — keyboard focus routing (7e4cd1c) The active window receives key…

System 75 is WASM-4 — and it's the first sigilOS "console" that runs a portable bytecode VM rather than emulating real silicon. wasminterp.sg increment 3 — host draw API…

Six FS modules landed in two commits, plus a security fix from Code review. sigdbquery.sg — plan-based executor (28c0261) sdqexecplan() dispatches a cc0 planner query plan over…

v0.6.0 is tagged. The flashable image is cut. Two milestones close simultaneously — the x86-64 Lumen desktop and SRDX remote display. What's in 0.6.0 x86-64 Lumen desktop (first…

Three Video milestones in one push — all verified on both arches. wmdamage.sg — dirty-rect damage tracker (8ab1e71) 16-slot dirty-rect tracker. wmdcompositedirty blits only…

Spec-correct Synopsys DWC2 register field encoding — the fix that unlocks hub enumeration and split-transaction support for the Pi 3B keyboard behind the LAN9514 hub. Fixes HCCHAR

Critical register offset bug caught by Sigil-Code review — FIFO sizing registers were writing to completely wrong addresses. QEMU's coherent-by-default memory masked this; on real

Real-metal x86 keyboard fully enumerated through xHCI with VT-d IOMMU present. Enable Slot works, HSE cleared, slots 2→5 COMPLETE. The x86 USB keyboard hardware path is proven on @

Full x86 USB-HID keyboard enumeration and transfer diagnostics for real-metal debugging. The drivers commit (f06240d) is the canonical xHCI work; the kernel commit (fc0230e) banks

animation_engine.sg is the T25 sprint — a keyframe animation state machine for frame-by-frame sequencing. Computes animation state (frame index, interpolated value) for multiple co

CENTURY MARK: T103-T104 hit the 100-module milestone. The sprint continued to T146 — 44 more modules in this batch, 142 total. 100 modules shipped in a single session. Highlights (

Massive browser + networking sprint: 26 modules shipped from T27 through T52, bringing the total to 52 modules. Browser web-engine and networking stack building in parallel — each

Another massive sprint: 30 modules shipped (T53→T82), bringing the total to 82 modules. Milestones at 60 (T63-T64) and 70 (T73-T74) passed. Browser modules (apps/web) T54 scroll_sn

The sprint continues: 20 more modules (T83→T102), bringing the total to 98. T103+T104 will hit the 100-module milestone. Milestones at 80 (T83-T84) and 90 (T93-T94) passed. Browser

The sigilOS boot chime — audio twin of the Ex Machina visual splash. All-integer additive synthesizer (Sigil has no float): 32-entry fixed-point sine table (±1000), per-voice milli

cache_control.sg is the T19 sprint — HTTP Cache-Control header flags struct and directive parser. Stores is_public, is_private, max_age_val, no_cache, no_store as a 40-byte flags s

cap_spawn_renderer.sg closes the Four Pillars browser security gate: every renderer process is spawned with exactly two kernel capabilities — CAP_REND_FB and CAP_REND_IPC. No Cap&l

cookie_jar.sg is the T13 sprint — parsing Set-Cookie header bytes at hdr_buf @0x470000 into a 4-slot cookie store at cookie_buf @0x460000. Extracts name, value, Path attribute, and

cookie_path_match.sg is the T18 sprint — RFC 6265 cookie-path matching. req_path matches cookie_path if req_path starts with cookie_path AND (cookie_path ends with / OR req_path[le

css_layout.sg is the T22 sprint — CSS box model layout engine. Reads style properties (width, height, margin, padding, display) from style_buf @0x5B0000, computes CSS box model lay

Two sigil-video commits advance the browser rendering pipeline: css_paint adds CSS background/border/border-radius box decoration painting (pairing with cc0's css_parser.sg), and t

cursor.sg — procedural 16×16 arrow sprite with save-under and move. CURSOR-ARROW-PASS verified. The cursor saves the framebuffer region under it before drawing, and restores it on

dom_event_handler.sg is the T24 sprint — the DOM event dispatcher that wires user input to handler callbacks. Reads event records (type, target_id) from event_buf @0x620000, looks

System #74 lands — DOS x86 real-mode emulation. cores/dos_core.sg is a full x86 real-mode CPU emulator written in Sigil: 7 opcode dispatch groups, ModRM EA, 8/16-bit register file,

Three DOS support modules in a single commit: a WAD file chooser that auto-detects IWAD type, a game launcher that scans for known EXE signatures and generates internal config, and

Major dos_core.sg extension for Wolf3D real-mode acceptance (Phase 1): MZ .EXE loader with relocation fixups, full string-op REP/REPE/REPNE prefixes, multiply/divide group, 8-bit a

dwc2_hid_keyboard.sg — Pi 3B USB keyboard enumeration on the Synopsys DesignWare DWC2 OTG controller (0x3F980000). Real hardware debugging via 6 visual marker stages, each painting

ex_machina.sg — capability-topology lattice render for the sigilOS boot splash. EX-MACHINA-PASS verified. The visual identity of sigilOS boot: a lattice of capability nodes rendere

Fixes pink-instead-of-purple on real x86 hardware: EFI GOP reports PixelFormat==2 (PixelBitMask) with RGBX byte order. Previously hal_set_pixfmt_gop left pixfmt as raw value 2, cau

form_encode.sg is the T15 sprint — a 4-field HTML form percent-encoder. Reads 4 name/value pairs, encodes them to a percent-encoded query string. FORM-ENCODE-PASS 8/8. 10512 B arm-

fs_journal.sg — write-ahead journal for crash-safe VFS operations. STABLE pillar: protects ext2 metadata mutations against crash corruption. Append-only WAL at /<pfx>/journal

gesture_recognizer.sg is the T26 sprint — a gesture recognition engine that reads touch input events from gesture_buf @0x670000 (x, y, time, type), classifies gestures (tap, swipe,

gzip_decompress.sg is the T20 sprint — gzip decompressor stub with header/footer validation and CRC32 integrity check. Validates magic bytes (0x1f 0x8b), compression method (0x08 f

The HAL arch matrix opens its next block with 0x500000+ — two new seams: Apple Watch connectivity bridge and G5/POWER4 Virtual I/O bus.

Three sigil-kernel commits push the HAL arch matrix from 0x4EE000 to 0x4F3000, adding 6 seams: Apple MediaEngine codec ring, G4/G5 PMC, Apple USB4/TB4 host, G5 HyperTransport bridg

Three sigil-kernel commits push the HAL arch matrix from 0x4F4000 to 0x4F9000, adding 6 seams: Apple audio/CLPD routing controller, G5 U3H/U4 ECC memory controller, Apple M1 AMX ma

Three sigil-kernel commits extend the HAL arch matrix from 0x4FA000 to 0x4FF000, completing the 0x4E0000→0x4FF000 range — 35 Apple+PowerPC paired seams, 70 seams total. Six new sea

Two sigil-kernel commits push the HAL arch matrix from 0x502000 to 0x505000, adding 4 seams: Apple Continuity Camera bridge, G3/G4/G5 DIMM SPD + JC42 thermal sensors, Apple SIO Sma

Two sigil-kernel commits extend the HAL arch matrix from 0x506000 to 0x509000, adding 4 seams: Apple Neural Engine IPC, G5 HyperTransport + U3 UMA coherence, Apple SEP IPC, and G4/

Three sigil-kernel commits extend the HAL arch matrix from 0x50A000 to 0x50F000, adding 6 seams: Apple AWDL, G4/G5 AltiVec/VMX, Apple LPDDR5 AMC, G5 SMU, Thunderbolt 4/USB4, and G5

Three sigil-kernel commits extend the HAL arch matrix from 0x510000 to 0x515000, adding 6 seams: Apple AirPlay 2 receiver sink, G4 Keylargo MAC-I/O hub, Apple Handoff/Continuity, A

Four sigil-kernel commits close a landmark in the HAL arch matrix: 50 Apple Silicon ↔ PowerPC paired seams, 100 seams total, spanning 0x4E0000 through 0x51D000. Eight new seams: Ap

Four sigil-kernel commits advance the HAL arch matrix from 0x51E000 to 0x525000, adding 8 seams: Apple GXF UltraFusion cross-fabric, G3 L2CR cache controller, BCM4388 Bluetooth/BLE

Three sigil-kernel commits extend the HAL arch matrix from 0x526000 to 0x52B000, adding AIC2, OpenPIC, TB4/USB4 UCM retimer, FireWire OHCI, ACM USB-C port manager, and USB OHCI roo

HAL batch 20: 8 seams, 0x52C→0x533. MagSafe3/USB-C charger · G3/G4 CUDA/PMU99 · FaceTime HD ISP/CSI-2 · ATI Radeon 9600 Pro · Apple SMC · G5 liquid cooling · Metal 3/4 GPU kernel ·

Four sigil-kernel commits extend the HAL arch matrix from 0x534000 to 0x53B000, adding 8 seams: Apple Secure Boot Policy Engine, G3/G4/G5 Open Firmware, Apple ANE scheduler, G4/G5

Three sigil-kernel commits extend the HAL arch matrix from 0x53C000 to 0x541000, adding 6 seams: Apple Touch ID biometric, G5 K2/Intrepid SATA controller, Apple SPI HID keyboard/tr

Three sigil-kernel commits extend the HAL arch matrix from 0x542000 to 0x547000, adding 6 seams: Apple Always-On Processor, G3/G4 Z85C30 SCC serial, Apple PMGR power/clock manager,

Three sigil-kernel commits extend the HAL arch matrix from 0x548000 to 0x54D000, adding 6 seams: Apple SoC efuse/chip-ID, G3/G4/G5 CPU PVR/HID decode, Apple DART IOMMU, G5 U3/U4 DD

One sigil-kernel commit extends the HAL arch matrix from 0x54E000 to 0x54F000, adding 2 seams: Apple SPMI/PMIC bus controller and the G3/G4 BAT/segment MMU. 22109de — SPMI/PMIC + B

Three sigil-kernel commits extend the HAL arch matrix from 0x4E8000 to 0x4ED000, adding 6 seams: Apple CoreSight ETM/ETB, G3/G4/G5 MMU context, Rosetta 2 AOT cache, G5 SLB, ANE tas

cc0/net/http_fetch.sg is the cc0 HTTP/1.1 client — a full GET/POST request builder and response parser operating above Cap<NetConn>. Supports both Content-Length and chunked

http_resp_parser.sg is the T12 sprint — parsing an HTTP/1.1 response at resp_buf @0x440000 into 9 structured fields stored at resp_parts_buf @0x450000 (9 × 8 B). HTTP-RESP-PASS 7/7

json_parse.sg is the T17 sprint — minimal JSON object parser, quote/colon/comma scan. Reads {"key":"value",...} bytes from json_buf @0x500000. Extracts top-level string key/value p

load_page.sg is the 0.7.0 browser capstone — end-to-end page load from raw HTML to rendered pixels. One call: load_page(dest, pitch, fw, fh, html_ptr, html_len) orchestrates the en

mime_parser.sg is the T11 sprint — parsing a Content-Type header string into 3 structured fields (type, subtype, charset) stored as (offset, length) pairs. MIME-PARSER-PASS. 10136

origin_storage.sg lands in sigil-fs, giving sigilOS's browser a Director-mandated SECURE origin-isolated storage layer. Each web origin gets its own ChaCha20-Poly1305 encrypted blo

os_https_fetch.sg is the HTTPS pipeline capstone — it wires TLS 1.3 (os_tls.sg) into the network handler IPC ring so the browser can load real https:// URLs. The end-to-end pipelin

Two sigil-os commits close the browser→OS network path for plain HTTP. os_dns.sg provides a minimal RFC 1035 DNS A-record resolver; os_net_handler.sg provides the IPC ring that bri

os_net_resolve.sg wires DNS (from os_dns.sg) into the net_handler request pipeline. The net_handler previously required the caller (renderer) to pass an IP:port. Now it parses the

os_tls.sg establishes the TLS 1.3 minimal client foundation for HTTPS support. This completes the HTTPS pipeline after DNS resolution (os_net_resolve.sg) and the browser→OS network

page_present.sg ties the full browser visual pipeline into one call: layout_box → css_paint (bg/border/radius) → text_layout + font_raster (text content) → compositor layer → comp_

pi_login.sg is the arm analog of m3login.sg — the SAME render-only login closure (OS scene → SRDX wire → Video composite) that runs on x86, but the framebuffer comes from board_pi3

sigilOS boots to the login on a real Pi 3B — blue framebuffer probe + all 5 green stage squares (fb-init, sb_valid, font, scene, composite) → the login card rendered on real hardwa

sigil-kernel 98a31c0 closes Director issue #108 — two real-silicon boot black-screen bugs: Pi 3B boot was using a hardcoded QEMU framebuffer address instead of the VideoCore IV mai

Query string parser T16 sprint: percent-decode inverse of form_encode, split on & and =, 4-pair store. QUERY-PARSE-PASS 8/8.

redirect_follow.sg is the T14 sprint — following an HTTP redirect chain (301→302→200) with a 5-hop guard. Each hop builds a synthetic HTTP response, parses status + Location, and u

render_engine.sg is the T23 sprint — the pixel rasterizer that bridges CSS layout to the framebuffer. Reads layout boxes (x, y, w, h) from layout_buf @0x5C0000, renders rectangular

RUNE is the Sigil ROM distribution container for .ness, .sfcs, .gbc, .z64, etc. rune_read.sg provides the reader for the format: a simple header (magic + version + num_entries) fol

rune_write.sg is the builder half of the RUNE container format — pairs with rune_read.sg to complete the read/write cycle. Builder API: begin → add(name, rom) → finish(path). Compu

From render primitives to complete experiences: SkiFree is now a full playable game and Flying Toasters is a complete screensaver. SkiFree Full Game (SKIFREE-GAME-PASS) terrain gen

sprite_blit.sg — GPU-first sprite blitter, the shared render primitive for Flying Toasters + SkiFree screensavers and game rendering. SPRITEBLIT-PASS verified. GPU path silicon-pen

cc0/net/srdx_invite.sg closes the SRDX secure session onboarding gate: a 128-byte wire blob carries host_pubkey + ext_ip + port + session_token + expires_unix + Ed25519 signature.

cc0/net/stun.sg implements STUN RFC 5389 Binding Request/Response in cc0 — discovering a peer's external IP:port via XOR-MAPPED-ADDRESS. This unblocks Tier-2 hole-punch in the SRDX

tls_cert_parse.sg is the T21 sprint — X.509 TLS certificate parser with ASN.1 structure validation. Validates ASN.1 SEQUENCE tag (0x30), extracts issuer and subject offsets/lengths

Two iconic render primitives built on sprite_blit: Flying Toasters screensaver and SkiFree game renderer. Both use the GPU-first sprite blitter with software-floor fallback. Apps o

url_parser.sg arrives as the first piece of the T10 sprint — parsing a full URL string into 6 structured components (scheme, host, port, path, query, fragment) stored as (offset, l

Four core VFS primitives landed — the Unix fundamentals that processes need for IPC and coordination. vfs_watch.sg

vfs_quota.sg — per-origin storage quota enforcement for the browser storage layer. In-memory 16-slot quota table keyed by SHA-256(origin)[0:8]. Each origin gets a byte budget (defa

ROOT CAUSE of the x86 keyboard #DE (divide error, RBX=0) that survived 4 xHCI fixes + DMA-zero debugging. wait_bit_set/clear tests a bit via peek32(addr,off) / bit % 2, where bit i

Real xHCI hardware stalls at Enable Slot because the command TRB is not visible to the controller when the doorbell is rung. QEMU auto-processes without requiring a barrier; real h

Four driver commits hardening USB for real hardware — three xHCI metal-only bug fixes and DWC2 HID keyboard stages 4-6 implementation. xHCI fixes Event-ring cycle bit

If you're arriving here for the first time, this post is your orientation. What is sigilOS, who is building it, how does it work, and where does it stand today? We'll cover the…

P2 local controller support is now complete across all 73 sigilOS RetroPie systems. Three commits over 24 hours grew P2 coverage from 0 to 73. The EL0 API is uniform: sys3(44, 1, 0

sigil-retropie 38bc419 wires P2 local controller input for NES, SNES, Genesis, and SMS — the four systems with two-player support. Genesis and SMS cores gained full P2 hardware reg

Two more sigil-retropie commits extend P2 local controller support to 9 more systems: Colecovision, Neo Geo, Atari 2600, SG-1000, MSX, C64, PC Engine, and CPS-1/2/3 arcade.

sigil-kernel's tenth HAL batch adds 8 more seams: Apple HDMI/DP audio, PVT sensors, eFuse OTP controller, VM memory pressure notifier; PowerPC OFW flat device tree, VIA 6522, SCC Z

sigil-kernel's eleventh HAL batch adds 8 more seams: Apple UltraFusion die-to-die, USB-C mux alt-mode, secure boot chain of trust, ProRes media engine, and PowerPC Grackle, Heathro

sigil-kernel's twelfth HAL batch adds 10 more seams — Apple Watch bridge, Continuity Handoff, AirPlay 2, biometric (Touch ID/Face ID), kernel panic reporter, and five PowerPC seams

sigil-kernel's thirteenth HAL batch adds 10 more seams: Apple TrueDepth camera, Neural Engine, Sidecar, Spatial Audio, SEP, and PowerPC FPU, Media Bay, Uni-N northbridge, FireWire

sigil-kernel's fourteenth HAL batch adds 6 new seams plus an AGP correction — Apple DP/MST/HDMI, FaceTime HD ISP, MagSafe 3 USB-C PD, PPC OpenPIC, G5 DART IOMMU, KeyLargo Mac I/O h

sigil-kernel HAL batch 15 adds 8 seams: Apple Silicon DART2 IOMMU, Thunderbolt 3/4/USB4, embedded NVMe, SPI controller, and PowerPC USB OHCI, HyperTransport, L1 cache, and DBDMA. A

sigil-kernel's sixteenth HAL batch: 5 Apple Silicon seams (I2C, AOP, SMC, USB4/TB4, M-series PMU) and 5 PowerPC seams (GMAC, VIA 6522, Symbios 875, SWIM3, G3/G4 PMU). All QEMU PASS

sigil-kernel HAL batch 17: 8 new seams — M-series RTC, Touch ID (SEP-gated), MCC LPDDR5, Apple Neural Engine, PPC ADB, FireWire 1394a, G5 dual-CPU thermal, Uni-N PCI host bridge. A

sigil-kernel's eighteenth HAL batch adds 8 more seams: ISP camera, AIC2 interrupt controller, Metal GPU command queue, PCIe Root Complex, Screamer/Tumbler sound, PPC timebase/DEC,

sigil-kernel's nineteenth HAL batch adds 6 more seams: M-series DMA controller, SIO serial hub, Secure Enclave Processor, G3/G4 VIA 6522 timer extension, Cuda MC68HC05, and G4 UniN

The second Apple Silicon HAL batch ships the 1.0-gate FB backend plus 8 more M1 components and 3 PowerPC additions. apple_fb.sg is sigil-kernel#3 complete — the GPU/display HAL bac

sigil-kernel HAL batch 20: apple_tb.sg (Thunderbolt/USB4 dual-port controller, 40 Gbps, DP alt-mode, PCIe tunnel, 85W PD) and ppc_keylargo.sg (G4 KeyLargo I/O hub, 2-channel ATA, 6

sigil-kernel's third Apple Silicon HAL batch ships 12 new HAL components — Apple audio (CS35L41), SMBus battery/charger (BQ40Z50/BQ25890H), GPT block device, USB-PD (100W EPR), Tou

sigil-kernel's fourth HAL batch ships 10 more components — Apple: secure boot chain (4-stage chain-of-trust), watchdog timer, AMC unified memory controller (8GB LPDDR4X), Media Eng

sigil-kernel's fifth HAL batch adds 10 more components — Apple: ARMv8 PMU (8 event counters + cycle counter), CPU P-state frequency scaling (E+P clusters, 5+8 P-states), NFC+UWB co

sigil-kernel's sixth HAL batch wires 9 more components — BT 5.x BCM4387, ChipID fuse, DART2 IOMMU, dual-speed Ethernet, SPI NOR flash, G5 PMU, Machine Check Exception, PowerPC FPU,

sigil-kernel's seventh HAL batch adds DDC/CI+EDID and PPC Grand Central IRQ seams, fixes apple_secboot's unconditional VERIFIED=1 stub with real hash verification, and corrects the

sigil-kernel's eighth HAL batch wires 6 new seams: Apple PCIe topology, SMC thermal/power, boot-args parser, and PowerPC BAT registers, Hash Page Table, and Segment Registers. Comm

sigil-kernel's ninth HAL batch adds 8 more seams — Apple: NVMe I/O scheduler, ANE command scheduler, hardware crypto engine, RTKit firmware lifecycle. PowerPC: SPR register file, L

sigilOS ships a complete Apple Silicon HAL (M1–M4): AIC interrupt controller, iBoot/m1n1 boot handoff, UART, 16KiB-granule page tables (T0SZ=25), PMGR power gating, GPIO (212 pins)

Two small but precise landings: sigil-apps ships a proper AA text path in the sig-sh terminal (4-neighbour coverage kernel, cov_blend, sigil-apps#1 0.5.0 gate). sigil-fs ships NFS3

sigilOS's audio service uses the same capability model as every other subsystem: an 8-slot PCM mixer with per-session volume, a mic consent gate that an EL0 process cannot bypass,

browser.sg ships the complete Lumen browser chrome, compositor.sg delivers the GPU-first layer compositor (COMP-PASS), and canvas2d.sg adds the browser Canvas 2D hot path (CANVAS2D

browser_ipc.sg wires the multi-process IPC ring; renderer_spawn.sg isolates each tab with only CAP_IPC; BROWSER_RFC.md ratifies the full design contract. The 0.7.0 browser sprint.

Two OS-level browser commits complete the 0.7.0 OS layer: http_fetch.sg, tls_client.sg, dns_client.sg, chrome_bridge.sg, and BROWSER_RFC.md — the complete joint OS+Apps browser des

fs/metal/browser_storage.sg (sigil-fs 28c42bf) adds persistent key-value storage for the sigilOS browser — localStorage and cookie namespaces, backed by the VFS. ABCDEFG 7-step rou

Cap<NetSession> (sigil-os#12) brings network access under the capability model: a session token gates all net I/O, the kernel injects HP_NET_TOKEN at the broker boundary, and

core_input_p2.sg routes P2 Xbox One BT state → hid_gamepad P2 slot → emulator core. Axis scaling, d-pad hat translation, blo/bhi button packing. 13/13 PASS. The last input piece fo

apps/web/css_tokenizer.sg is the CSS byte-stream tokenizer for sigilOS browser, following the same pattern as html_tokenizer.sg. Interop-identical 12-byte token layout, 7-state mac

css_transform.sg brings affine 2D matrix transforms to compositor layers; img_decode.sg brings the RGBA→GPU texture pipeline for <img> and canvas2d.drawImage. 7/7 checks PASS

sigil-apps 3f47417 closes the Apps-layer network dark lane: dns_resolve.sg constructs a real UDP DNS A-record query packet, and tls_handshake.sg constructs a complete TLS 1.3 Clien

apps/web/dom_builder.sg converts html_tokenizer output into a full DOM tree. Token walk: StartTag/SelfClose → new node; Attr pairs → class/id fields; EndTag → close active node. DO

sigil-drivers ships 6 production drivers: BCM43438/CYW43455 onboard WiFi (SDIO), VGA 80×25 color text console, bochs DISPI framebuffer, SRDX frame decoder (viewer-side), SRDX input

DS4 v1/v2 Bluetooth HID driver (77-byte report, 21 checks PASS) + MAME/No-Intro CRC32 ROM scanner + two-level 4×5 card grid launcher. RetroPie player experience complete for 0.6.0.

sigil-kernel 8be7ad3 closes a 1.0-security gate in the SRDX transport layer and fixes a silent constant error in the Pi 4B board HAL. xport_uptr_ok now enforces both lower and uppe

apps/web/event_loop.sg (sigil-apps dacb955) is the T8 sprint deliverable — the browser event loop that connects input events to DOM nodes via hit-testing layout boxes. EVENT-LOOP-P

ext_manager.sg ships the complete honest extension UX per BROWSER_RFC.md §7. sessions.sg is updated to 0.7.0 with srdx_negotiate_* wired from the OS ABI. The 0.7.0 browser lane is

Three kernel commits push the 0.7.0 sprint forward: ext_zone.sg extension process isolation, Pi 4B BCM2711 board support, and SRDX xport EL0→EL1 bounds-check security fix.

The x86 ISA legacy driver set is complete: Intel 82077AA FDC and PC parallel port LPT1 join the stack, bringing the total to 10 verified x86 drivers. Every major IBM PC-AT era devi

font_raster.sg (sigil-video 8f6bda0) lands the Pi3-floor text renderer: an 8×8 bitmap Latin subset that unblocks HTML text layout in the browser lane. FONTRAST-PASS: char, atlas, a

Nintendo GameCube (#58) joins the fleet — IBM PowerPC 750CXe Gekko + Flipper GPU + 640×480 EFB. sigil-fs completes the utime surface: fat_utime_in + unix_to_fat_packed. All four VF

Four new HAL seams spanning the M-series P/E cluster controller, G5 DDR2 ECC, M-series extended PMU thermal model, and G3/G4/G5 SoC config — pushing the HAL seam count to ~146. Plu

Two sigil-kernel commits add four new HAL seams: Apple Neural Engine (ANE, M1–M4), PPC AltiVec (G4/G5 VMX SIMD), Apple DART IOMMU, and G5 HyperTransport bus topology. Arch matrix e

Four more sigil-kernel commits push the arch matrix from 0x4BE000 to 0x4C5000, adding 8 HAL seams across Apple Silicon and PowerPC: NVMe host queue, VIA-CUDA ADB/PMU, SEP mailbox,

Three sigil-kernel commits push the arch matrix from 0x4C6000 to 0x4CB000, adding 6 HAL seams: Apple USB4/TB4, PPC BAT, Apple media codec, G5 SMU, Apple ISP, and PPC OHCI. All pass

Four sigil-kernel commits extend the arch matrix from 0x4CC000 to 0x4D3000, adding 8 HAL seams: Apple Touch ID, G4/G5 AGP, Apple GMUX, PPC OHCI-1394 FireWire, Apple Matrix PMU DVFS

Three more sigil-kernel commits extend the arch matrix from 0x4D4000 to 0x4D9000, adding 6 HAL seams: Apple Bluetooth 5 (BCM4387 HCI), PPC decrementer + 64-bit time-base, Apple HID

Three sigil-kernel commits extend the arch matrix from 0x4DA000 to 0x4DF000, adding 6 HAL seams: Apple ADMAC audio DMA, KeyWest I2C, microphone array, PPC DBDMA, lid sensor state m

sigil-kernel c2f25bc adds two HAL seams at 0x4E0000–0x4E1000: apple_display_pipe.sg wraps the M-series DCP display coprocessor, and ppc_mesh.sg models the G3 Mesh / G4 HIO host int

Three sigil-kernel commits extend the arch matrix from 0x4E2000 to 0x4E7000, adding 6 HAL seams: Apple SEP coprocessor mailbox transport, G4/G5 AltiVec context save/restore, Apple

The CLS_BUS seam completes the five-contract Hardware Abstraction Layer that lets sigilOS bind real drivers at runtime without trusting them at compile time. One pattern, five hard

sigilOS Drivers lands hid_router.sg: a unified USB HID polling entry point behind CAP_HID, absolute cursor accumulation from relative mouse deltas, screen-clamp, and ev_overlay coo

hidinput.sg wires the HID driver output to the Lumen WM event model. HID_CAP_TOKEN (0x48494421) is the broker-held gate — no EL0 code can forge it. Per-window key rings at 0xA60000

apps/web/html_tokenizer.sg is the HTML byte-stream tokenizer for sigilOS browser — the first stage of the parse pipeline. It takes raw HTML source bytes and produces a flat token a

Two companion commits ship HTTP response caching at both the VFS layer and the browser cc0 layer. sigil-fs daf6d3d adds http_cache.sg — a VFS-backed URL-keyed cache; sigil-apps 7f6

Three sigil-os capability seams land: identity.sg closes multi-user auth (16-slot user table, ID_ELEV_TOKEN sudo-equivalent, POSIX rwx check); audiosess.sg delivers Cap<AudioSes

Mattel Intellivision (#67) and Fairchild Channel F (#68, the world's first ROM-cartridge console) join the fleet. VGA Attribute Controller completes the VGA register surface. PS/2

sigilOS's IPC layer is complete: cap-scoped ring-buffer pipes, a signal queue, and 8-slot shared memory segments. Three primitives, one capability model, zero ambient authority.

The sigilOS rootfs keyslot now derives encryption keys via a memory-hard ROMix KDF (1 MB work factor, 2^17). A mount-before-write guard eliminates the UMR write-before-mount class.

Two sigil-retropie commits complete the RetroPie launcher loop: cd41f53 wires EV_SELECT to actually spawn emulators, and 5a4a286 adds Smart Folder navigation partitioning 73 system

layout_box.sg (sigil-video f33524f) is the CSS2 block/inline formatting context for sigilOS browser. Block auto-width, inline line boxes, wrap, margin/padding/border — all verified

Three landings close the x86 real-silicon peripheral stack: lcars_boot_banner (GOP framebuffer splash), NS16550A UART (COM1, 115200 baud, loopback verified), and Intel 8259A PIC ma

lcars_boot_progress completes the LCARS boot sequence — a gold left-fill progress bar called per kernel init step. sigil-drivers adds the Intel 8237A ISA DMA controller, completing

Two distinct landings: sigil-video adds lcars_window_chrome — a full LCARS WM title bar (orange pill cap + black title area + tan right accent) for Lumen window decorations. sigil-

The LCARS desktop layout is now complete. lcars_wchrome_title adds AA title text to window chrome via lcars_gch_cov (the ui_glyph→cov_blend path, per-channel linear blend, BGRA-awa

lcars_taskbar_item completes the Lumen taskbar with active/inactive cells and AA glyph rendering. The LSRA canary gate is documented. sigil-drivers adds the Intel 8253/8254 PIT — t

sigil-video ships the LCARS (Star Trek) UI skin for Lumen WM. lcars_theme.sg delivers 7 palette colors and 5 geometry primitives. lcars_label() adds bitmap text labels via glyph.sg

Three final LCARS UI primitives complete the Lumen toolkit: lcars_tooltip, lcars_dialog_frame, lcars_panic_screen. sigil-apps wires LCARS chrome into colbrowser, files, and termwin

Two more LCARS widgets complete the Lumen UI kit: lcars_scrollbar and lcars_menu_item. sigil-drivers adds PCI configuration space enumeration and a Bochs BGA display driver. VIDEO

The LCARS theme grows two new widgets: lcars_progress (right-justified fill bar) and lcars_data_strip (N-segment status readout). A capstone demo test combines all primitives into

Three window-management primitives complete the interactive LCARS WM layer — lcars_resize, lcars_snap_zones, lcars_focus_chrome — plus the Intel 8042 PS/2 controller in sigil-drive

The Director's AA (anti-aliased typography) mandate is fulfilled. menu.sg, term.sg, and wmel0.sg all replace bitmap draw_char with ui_glyph — every character in the Lumen UI now ro

sigil-video proves the SDF terminal AA pipeline end-to-end; sigil-apps closes the AA coreutils story with all 8 builtins; three new libwin Lumen apps land — netstat, scope, ticker

The Lumen window manager's accelerated present path — opaque blit, src-over composite, right-edge clipping, and the GPU-first rendering chain from surface allocation to scanout — i

lumenfiles.sg ships the complete tag-driven file experience: Smart Folder dock, NeXT column browser, and tag-well inspector — all over the live EL0 tag-query seam, cap-scoped by th

Lumen is the sigilOS design language — six principles, a palette, and a UI paradigm built around one idea no other OS can match: showing you exactly what each app holds and letting

sigilOS's identity seam lands: a 16-slot user table, pid-gated session tokens, a sudo-equivalent elevation gate backed by a broker-held token EL0 cannot forge, and full POSIX rwx s

Nintendo DS (#56, ARM9 ARMv5TE + ARM7 stub + 256×192 dual-screen) pushes the RetroPie fleet to 56 LAUNCHABLE. sigil-fs lands ntfs_move_in — atomic cross-directory rename. VFS write

sigilOS NFS3 gains RENAME (proc 14) and RMDIR (proc 12), completing the directory mutation set: CREATE + REMOVE + MKDIR + RMDIR + RENAME. 337/337 ALL PASS.

Four protocol/VFS landings: NFS3 LINK (proc 15) completes NFS3 standard ops. SMB2 IOCTL (cmd 11) adds FSCTL dispatch. CHANGE_NOTIFY + OPLOCK_BREAK finishes all 18 SMB2 commands. tm

NFS3 MKNOD (proc 13) completes all 17 standard NFS3 procedures — device file creation with sattr3, BLK/CHR device_data encoding. btrfs subdirectory readdir adds component-walk (btr

sigilOS now has a native NFS v3 client written in Sigil — XDR codec, ONC RPC transport, GETATTR/LOOKUP/READ/READDIR, and full integration into the vfs_dev provider layer.

sigilOS's night-mode scheduler switches between THEME_DARK and THEME_LIGHT based on a configurable sunrise/sunset window and a UTC timezone offset — no NTP, no geolocation, no ambi

Five more consoles and home computers join the sigilOS RetroPie fleet (systems #69–#73): Magnavox Odyssey 2, TI-99/4A, Dragon 32, Acorn Electron, and NEC PC-FX. Plus the USB HID ga

sigil-os ships syscall 105 (Direct-Scene Overlay absorption) and sigil-apps ships 12 overlay EL0 demo apps plus real Lumen libwin apps. All cap-gated via the broker session slot.

apps/web/page_render.sg wires the complete Apps cc0 web pipeline end-to-end: DOM + CSS → style_resolver → layout_box → text_layout (solid-fill stub) → compositor blit → pixel probe

pi_gpio_joypad.sg: BCM2835/BCM2711 GPIO digital joypad driver for Pi arcade HATs and DIY builds. Active-low buttons, SNES-style default pin mapping, sim-safe init, snap/restore rol

Three seventh-gen and handheld flagships join the fleet: PS Vita (ARM Cortex-A9 quad-core + SGX543MP4), PS3 (Cell PPE PPC G5-class + RSX), Wii U (IBM Espresso tri-core PPC + AMD GP

Two landmark systems join the fleet: PlayStation 2 (#61, MIPS R5900 EE 294MHz + GS) and Xbox 360 (#62, IBM Xenon PPC triple-core + Xenos GPU, 1280×720 HD) — the first HD-capable an

The PSP joins the fleet as system #57 — MIPS Allegrex + 480×272 widescreen, the first widescreen console. sigil-fs adds ntfs_utime, completing the VFS metadata-write surface. MANIF

The sigilOS 0.6.0 Remote Desktop RFC: capability-isolated RFB sessions over Cap<NetConn>, per-session DSO overlay slots, and the fleet implementation order gating the 0.6.0 s

The Session Manager's remote protocol stack is taking shape: a delta frame encoder, an ephemeral frame store, RFB 3.8 handshake, and a VT100 framebuffer renderer — all wired throug

render_page.sg (sigil-video e173c87) is the capstone of the 0.7.0 browser rendering sprint — the first end-to-end integration smoke test driving the complete rendering pipeline fro

Sega 32X is the 44th launchable system in sigilOS RetroPie. SH-2 bus seam via first-def-wins override, 320×224 frame VRAM, RGB555→ARGB render. uart=51 PASS.

Four new landings: RetroPie fleet reaches 49 LAUNCHABLE with Neo-Geo Pocket Color (#47, TLCS-900H + K2GE 4bpp RGB444), Supervision (#48, 65C02 + 4-shade 160×160 LCD), and Sega Pico

Two more RetroPie landings push the fleet to 52 LAUNCHABLE: Sega CD (#51) and Atari Jaguar (#52). sigil-fs completes the NTFS VFS write path with nested-directory rename and rmdir.

Three more consoles push the fleet to 55 LAUNCHABLE: 3DO (ARM60 + MADAM/CLIO), Pokémon Mini (S1C88 + 96×64 1-bit LCD), and Vectrex (6809 + vector display). sigil-fs completes FAT a

The Atari 800 (6502A, GTIA, GR.0 character render) and the MSX Turbo-R (R800 thin override over the MSX2 core) bring the sigilOS RetroPie launcher to 42 launchable systems.

sigilOS RetroPie ships 4 new LAUNCHABLE systems in one batch: Atari 800 (#41, 6502A/GTIA/GR.0 text render), MSX Turbo-R (#42, R800/Z80-compat), Sega Saturn (#43, SH-2 CPU + VDP2 ba

Three more systems join the sigilOS RetroPie layer: CPS-2 with dual scroll layers, CPS-3 on the 68020, and the Famicom Disk System hooked into the NES core.

Systems #36 and #37 are live in the sigilOS RetroPie layer: Nintendo 64 with full VI display and a real MIPS interpreter, and CPS-1 (Street Fighter II hardware) built on the existi

Two classic Japanese home computers join the sigilOS RetroPie layer: the NEC PC-88 with Z80A + 3-plane framebuffer, and the Sharp X68000 with MC68000 + 4bpp GVRAM. Systems #40 and

sigilOS RetroPie now has a formal savestate ABI across 7 emulator cores — NES, Game Boy, Odyssey 2, TI-99/4A, Dragon 32, Acorn Electron, PC-FX — the foundation for Mode-2 determini

sigilOS RetroPie ships the NEC WonderSwan (system #45): V30MZ CPU (NEC x86 variant), 2bpp tile render (224×144), screendump harness with PNG evidence, EL0 app + launcher card.

The Sega Saturn joins the sigilOS RetroPie launcher as system #43, built on a new SH-2 CPU core with delay-slot semantics, a VDP2 backdrop renderer, and the first 32-bit console in

core/scroll_compositor.sg (sigil-video 21a7fd5) adds per-layer (scroll_x, scroll_y) viewport offsets to the Lumen compositor — enabling pages taller than the display to scroll. SCR

sigilOS's SDF rasterizer builds signed-distance fields from bitmap glyph atlases and samples them GPU-first for anti-aliased text at any scale — the font path for Inter and JetBrai

Two follow-up commits round out SigDB: crash recovery via WAL undo at boot (STABLE pillar, RWICVEY) and a VFS filesystem provider that lets you ls /db and cat /db/42 — database key

SigDB is sigilOS's native storage engine: a page-managed B-tree with MVCC, write-ahead logging, and a Cap<DBTxn> broker layer that keeps EL0 processes away from raw database state.

sigilOS 0.5.0 ships the usable Lumen desktop: WM drag/resize/fullscreen, AA text, BT HID, column file browser, LCARS design language, 100+ kernel HAL seams, 65 RetroPie systems — a

sig-sh gains two tiers of autocomplete: command/flag completion (pt1) and capability-scoped path/file completion via the tag substrate (pt2, fs_query syscall 91). The same engine a

The SMB2 1.x handle lifecycle is fully round-trippable in sigilOS: NEGOTIATE → SESSION_SETUP → TREE_CONNECT → CREATE → WRITE → SET_INFO → CLOSE. Windows share I/O is now end-to-end

The last two SMB2 commands — CHANGE_NOTIFY (cmd 15, async directory-change subscription) and OPLOCK_BREAK (cmd 18, oplock downgrade) — complete the full SMB2 standard codec. 18/18

sigilOS now has a native SMB 2.1 client — NEGOTIATE, SESSION_SETUP, TREE_CONNECT, READ, QUERY_DIRECTORY, and a 16-slot fhandle table wired into the vfs_dev provider layer. MANIFEST

sigil-os 585a58e ships three cc0 modules that close the Mode 1 SRDX loop for 4-player arcade: proc_super.sg, srdx_input.sg, and srdx_relay_bcast.sg. TMNT, Simpsons, X-Men across a

Four commits across four repos: SRDX latency/bandwidth metrics API (SRDXBENCH-PASS), Pi BT ACL→L2CAP→HID session layer, ROM scanner rewrite in Sigil, and append-only SRDX connectio

srdx_loopback verifies the full encode/decode round-trip in a single QEMU session without a network. srdx_persist.sg bridges the in-memory SRDX frame ring to VFS-backed session per

The 0.6.0 SRDX milestone is proven: a complete pixel-to-pixel round-trip from the compositor framebuffer through delta-encode, fragment, raw-NIC transmit, reassemble, decode, and p

The SRDX bidirectional pipeline is now complete: fbtap zero-copy forward channel, KBC-inject HID reverse channel, and gameport gamepad reverse channel — full remote-desktop over si

SRDX is sigilOS's primary remote desktop protocol — kernel-native, capability-secured, pixel-perfect, low-latency, mesh-capable, and the transport for RetroPie game streaming. RDP

sigil-os 277842a fixes a test ordering bug in cc0/srdx_relay_bcast.sg where T6 input-receive read leftover broadcast frame data from conn=0's loopback ring. bcast_stub_drain_ring r

sigil-os 0ffa8cf corrects an arithmetic error in the RELAY_WIRE_TAG constant in cc0/srdx_relay.sg. The tag was hardcoded as 1381256521 but 0x52454C59 (RELY in ASCII) is 1380273241.

srdx_relay.sg closes the OS-side SRDX loop: host-side frame capture, encode, and relay over raw NIC. Combined with viewer.sg in sigil-apps, the full SRDX end-to-end loop is wired i

The SRDX transport surface is complete. Two commits close the Cap&lt;NetConn&gt; blocker: NIC driver ABI (nic_iface.sg) + raw-NIC syscalls 113–116 (srdx_xport.sg). 8 syscalls, two

srdx_advertise.sg and srdx_twopi_test.sg complete the two-Pi SRDX session bringup layer: a raw-frame broadcast discovery protocol and a full integration test from ADV build/parse t

apps/viewer/viewer.sg ships the SRDX viewer Lumen window and sessions.sg gains the REMOTE DISPLAY folder — closing the 0.6.0 T1 loop: kernel transport proven, user-visible surfaces

core/srdx_wire.sg adds four thin TCP shims over kernel syscalls 109–112 and proves the full TCP loopback in QEMU RAM: listen→SYN→ACK→ESTAB→send→recv→magic/nrects/seq verified. SRDX

apps/web/style_resolver.sg is the CSS selector resolver for the sigilOS browser — the pipeline step between tokenization and layout. It reads html_tokenizer + css_tokenizer output

Nintendo Switch (#66) joins the fleet with Tegra X1 Cortex-A57 + Maxwell GPU, 1280×720. sigil-drivers adds IDE/ATA PIIX3 and VGA Sequencer + Graphics Controller, completing the x86

sw_pro_bt.sg adds the Nintendo Switch Pro Controller Bluetooth driver (057E:2009, 24 checks PASS). sigil-retropie 1c48e9b extends core_savestate/core_loadstate to all 73 RetroPie c

core/syscall_filter.sg adds a per-process syscall allowlist to the sigilOS kernel — a flat 256-byte table per process slot, gating kernel dispatch before capability checks. Five bu

text_layout.sg (sigil-video 6158863) closes the browser text rendering loop: left-to-right cursor advance, automatic line-wrap, forced newlines, and a GPU quad buffer for batch upl

sigilOS gains a POSIX-style integer fd layer over the VFS: 16-slot fd table at 0x340000, vfs_open/close/fread/fseek/ftell. App code no longer handles (backend,id) pairs. 336/336 AL

The VGA subsystem is complete: VGA 6845 CRTC driver (cursor, scroll, display/vsync status) and VGA DAC palette driver (256-entry 6-bit RGB). Together with Bochs BGA, sigilOS now ha

sigil-apps ad28b7d closes two critical 0.7.0 loops: the SRDX viewer inline BGRA32 decoder blitting dirty-rect frames to the raw framebuffer, and the arm-el0 HTTP/1.1 redirect-follo

The RetroPie fleet hits 50 LAUNCHABLE systems with the Virtual Boy — Nintendo's stereoscopic NEC V810 console with a 1-bit red VIP framebuffer. sigil-drivers adds the MC146818A CMO

webgl.sg brings WebGL 1.0 context support to the sigilOS browser; comp_dirty.sg adds tile-level dirty-rect compositing that only pushes changed 64×64 tiles to the GPU. Both follow

sigil-drivers ships 5 more wireless drivers: Intel WiFi (iwlwifi: ibt-20, 3945/5300/7260/8265/9260/AX200), Atheros WiFi (ath9k: AR9280-AR9485, firmware-free direct MMIO), Realtek W

Nintendo Wii (#59) and Nintendo 3DS (#60) land in sigilOS. sigil-drivers adds QEMU fw-cfg and PC speaker. sigil-fs extends stat with mtime@24. MANIFEST 366, ALL PASS.

RetroPie fleet reaches 46 LAUNCHABLE with WonderSwan Color (#46): first-def-wins over ws.sg, 4bpp tile format (32 bytes/tile), RGB444 palette decode (×17 scale 4-bit→8-bit), wsc_re

sigilOS leaves QEMU for the first time. The x86-64 bootable test image directive (sigil-os#18): three milestones from UEFI console to Lumen desktop on real hardware.

drivers/input/bt-hid delivers the Xbox One S Bluetooth HID controller driver and drivers/timer/pmtmr delivers the ACPI PM Timer — together completing the gamepad input stack and pr