Karol Broda

A domain library can be written today but neither published nor consumed: there is no module system and no registry. This adds workspaces and a lock, the publication path over a real transport, and the documentation a third-party author needs, ending in a tagged release. Covers WP1, WP2, WP5: 340 hours over 12 months.

The kernel's compile-and-link builder is authored in Rust. This re-authors it in Pith's own notation, the proof that a domain author can extend the system without touching the kernel, and adds the source-fetch path that verifies upstream sources against their declared digest. Covers WP3: 180 hours over 12 months.

Every build step is already recorded as a computation. This derives an SPDX SBOM and an in-toto attestation in SLSA form from those records, so a build's provenance comes from the build itself, not from a scan afterwards. Covers WP4: 100 hours over 12 months.

Re-executes recorded actions to localise non-determinism to the exact computation that caused it, finishes run bounds and partial cancellation in the confined executor, and extends CI to aarch64 so the sandbox paths are exercised on a second architecture. Covers WP6, WP7, WP8: 210 hours over 12 months.

Any amount toward the open workplan, without a grant process.