Complexity at the edges
The kernel isolates, schedules, routes, enforces. Everything else is a service.
PRINCIPLES
Whenever a decision is unclear, these win.
Authority is explicit
No root. No ambient privilege. Authority flows through unforgeable capabilities.
Failure is contained
Restart a service without rebooting. Recoverability is the architecture.
Hardware does not shape software
x86, ARM or RISC-V behind hardware abstraction kernels.
Time is never ambiguous
Store and compute in UTC. Convert only at the edge.
Storage describes truth
Content, versions, integrity, history. Checksums are not optional.
Resources are contracts
Apps declare what they need. The OS guarantees it, or refuses to start.
Compatibility never dictates
Valuable, not sacred. It lives behind translation layers.