Glossary
The Syn_OS codebase has accumulated its own vocabulary. This is the canonical reference.
Core concepts
Section titled “Core concepts”Syn_OS — The Synaptic Operating System. Always written with an underscore. Lowercase only in filenames and crate names; never in prose.
The Synaptic Gap — The cleft where electrical signal becomes chemical meaning. The first axiom: the operating system itself is the synaptic gap. The underscore in Syn_OS is the visual representation.
Consciousness Fusion — ALFRED’s four-path decision engine: Traditional AI + Neuromorphic SNN + Quantum coherence + TNGS. A v53-Quantumweave addition adds an MPS cortex as a fifth path.
Fragment Field IDS — Energy-topology intrusion detection. Treats attack patterns as physics-layer signatures. Implemented in synos-fragment-field (3,002 LOC) + fragment_field.rs in the kernel.
Curtain — The mechanism that prevents tier escalation. v1 was static (build-time scanner). v2 added 7 runtime enforcement points. v3 (Sundered Crown) added ed25519 capability tokens. v4 (Last Light — current) integrates a compile-time xtask ELF/string scanner with v3’s token system, replacing raw ed25519 per-operation gates with SipHash-2-4 keyed-MACs enforced by the synos_capability kernel module.
Sovereign Operator Path — The long-form GRIMOIRE questline that graduates a player from CTF novice to running their own encrypted mesh.
Components & products
Section titled “Components & products”ALFRED — Adaptive Learning Framework for Responsive Evolution & Defense. The AI daemon. Two-layer Rust + Python architecture. v6.0 (1.0 GA consolidation).
GRIMOIRE — Gamified Reconnaissance, Intelligence, Malware Operations, Intrusion Response & Exploitation. The training platform. 117 labs, 13 categories (catalog 1.0), 110+ game modules.
ARCANUM Hive — The distributed mesh layer. Tailscale + WireGuard + Kubernetes operator. v55 Stoneglass shipped 8-node Ansible GA.
Sanctum — Multi-tenant federation server. v49 Crystal Net. Each Sanctum is a tenant boundary; tenants federate selectively.
Icarus — Post-quantum cryptography engine. v9.0 implements ML-KEM (FIPS 203), ML-DSA (FIPS 204), SLH-DSA (FIPS 205).
Forge — Reproducible-build supply chain. v48. Cosign + Sigstore Rekor + SLSA-3 + cross-oracle verify.
Riftrunner — In-kernel safe-bytecode VM. v52. 22-instruction eBPF subset with in-kernel verifier and interpreter.
Storm Glass — Digital-twin substrate. v51. Kernel snapshot crate + Bevy Twin plugin.
Stagehand — GRIMOIRE Public Wave 2. v58. Classroom + cohort + lab generator.
Doublecross — FedRAMP Moderate readiness. v59. NIST SP 800-53 Rev 5 control map + daily ConMon collector.
Sun & Salt — Commercial-readiness & business-hardening package. v60 (prior release).
Last Light — The 1.0 GA release. v111.0.0 (current). Completes the v101→v111 “Rust Everything” software campaign. ALFRED v6.0, GRIMOIRE 1.0 (117 labs), 245 crates, post-quantum by default.
Kernel & interface
Section titled “Kernel & interface”7.0-synos-ai — The Syn_OS kernel build target. Linux 7.0 (launch base; 7.2 bump planned) + CONFIG_RUST=y + 12 CONFIG_SYNOS_* knobs + capability-gated signed loadable Rust modules.
Kernel AI interface — The capability-gated, signed Rust kernel-module interface that exposes AI/observability state to userspace (root-only, CAP_SYS_ADMIN-gated, 0600 device nodes). Replaced the retired custom-syscall approach (v111). See Kernel Interface Reference →.
LSM hook — Linux Security Module hook in synos-security that consults Curtain v4 capability tokens before privileged operations.
MOK — Machine Owner Key. Used in the SecureBoot signing chain (v41 Wave 9).
KSPP — Kernel Self Protection Project. Hardening defaults Syn_OS adopts.
Brain crates (the 11)
Section titled “Brain crates (the 11)”synos-thalamus — Sensory relay. Event gating middleware.
synos-hippocampus — Long-term memory. Stores MemoryFragment objects.
synos-amygdala — Threat detection. Sub-millisecond fast-path.
synos-cerebellum — Predictive timing. Scheduler feedback, P99 latency.
synos-insula — Interoception. System health awareness.
synos-corpus-callosum — Inter-hemisphere bridge. Red ↔ Blue team IPC.
synos-default-mode-network — Idle / consolidation. 30s cycles when CPU < 10%.
synos-glial — Adaptive caching, memory pruning. MyelinCache::get().
synos-brainstem — Pipeline runtime. Wires the 11 brain crates into the live signal loop.
synos-nucleus — Root-of-trust governance. Identity, attestation, Curtain token chain validation.
synos-consciousness-types — Shared type substrate. ConsciousnessState, BrainSignal, taint markers shared across all brain crates.
Factions
Section titled “Factions”Crimson Spire — Corporate-fortress red team. Apex predator, brand of fire and edge. (Also: v43.2 codename — fix-matrix release that closed 17 defects from v43.1 live-VM diagnosis.)
Neon Collective — Decentralised blue team. Community-defended, brand of cyber-neon.
The Warden — Lawful neutral. Supply-chain integrity, the inevitable audit.
Operations
Section titled “Operations”ARCANUM mesh — The full distributed substrate (Tailscale + WireGuard + Hive operator + Sanctum federation).
Hive — The Kubernetes operator inside ARCANUM. Four crates: controller, attestor, profiler, tests.
Tenant — A multi-tenant boundary (synos-tenant crate). Each Sanctum is a tenant boundary.
Master Generation Run Kit — Single-command pre-flight + ISO kickoff for cutting a full-capability release. (Internal build-tooling name.)
synos-doctor — 41-stage post-install validation wizard.
synos-ops — Multi-tab terminal UI for ALFRED, system, mesh, PQ-posture, supply-chain, and observability dashboards.
synos-bench — Benchmark runner — neural inference throughput, latency P99, etc.
synos-cradle-verify — systemd service that validates the kernel module signing chain on first boot.
Compliance & supply chain
Section titled “Compliance & supply chain”SLSA — Supply-chain Levels for Software Artefacts. Forge ships SLSA-3 provenance.
SBOM — Software Bill of Materials. CycloneDX format, generated per release.
Rekor — Sigstore’s transparency log. Every release artefact is logged.
Cosign — Container/blob signing tool from Sigstore.
ConMon — Continuous Monitoring (FedRAMP). Daily collector at growth/development/scripts/monitoring/fedramp-monitor.sh.
CMMC L2 — Cybersecurity Maturity Model Certification, Level 2. Control map at fruit/distribution/legal/CMMC_L2_CONTROL_MAP.md.
ISO profiles
Section titled “ISO profiles”Enterprise Edition — Licensed commercial product. GoodLife’s full sovereign capability at organizational scale, plus multi-tenant ARCANUM federation, fleet management, and a FedRAMP Moderate / CMMC L2 / SOC2 compliance posture. Not a public download — by customer agreement.
GRIMOIRE Public — Progressive-unlock training profile. Public release.
GoodLife — AI-research profile. Local LLMs, no offensive tools.
Build & release
Section titled “Build & release”Operation Warp Speed — Umbrella codename for the v44 → v60 codesprint. Code-complete on feat/operation-warp-speed.
v101→v111 “Rust Everything” campaign — The 11-version codesprint that delivered the 1.0 GA milestone. Completes with v111.0.0 “Last Light”.
SYNOS_STRICT — Build-orchestrator flag. When =1, any stage failure aborts the entire build (fail-loud).
stage 17e — Pre-squashfs validation gate (≥12 assertions) added in v43.2 Crimson Spire and hardened across waves.
stage 22 — Regression gate stage. CRIT-1 + HIGH-6 checks land here.
Reading order
Section titled “Reading order”If you’ve never read the architecture before: