hal::isolation

Fail-closed vocabulary for hardware-isolated tasks. A validated layout is geometry, not ownership: the kernel must allocate its memory exclusively.

Structs

Region

struct Region { /* private fields */ }

Exact power-of-two region. Constructors never round a grant outward.

Implements: Clone, Copy, Debug, Eq, PartialEq, StructuralPartialEq

TaskMemory

struct TaskMemory { /* private fields */ }

Fixed-budget initial task domain: shared RX image, private guarded stack, and optional private RW data. Five of the eight hardware slots stay denied.

Implements: Clone, Copy, Debug, Eq, PartialEq, StructuralPartialEq

Window

struct Window {
    pub start: u32,
    pub end: u32,
}

Half-open address window supplied by the trusted linker/allocator.

Implements: Clone, Copy, Debug, Eq, PartialEq, StructuralPartialEq

Enums

Access

enum Access {
    ReadOnly,
    ReadWrite,
    ReadExecute,
}

Permissions never include writable executable memory.

Implements: Clone, Copy, Debug, Eq, PartialEq, StructuralPartialEq

Error

enum Error {
    Unsupported,
    Size,
    Alignment,
    Overflow,
    Overlap,
    OutsideWindow,
    Entry,
    Capacity,
}

Implements: Clone, Copy, Debug, Eq, PartialEq, StructuralPartialEq