[MatejGomboc]

Summary

A constitution amendment: merging this is yours to do, and is the amendment. It widens the Language clause so the assembly the kernel holds and the RFCs plan is allowed in terms. Drafted on your instruction of 2026-11-06.

Explanation for the maintainer

The clause allowed assembly only for "boot and context switching". That never covered vectors.s or the existing wfe, brk, ud2 and hlt, and RFC-0005 and RFC-0007 both asked whether it would cover what they plan.

It now reads:

Language: Rust. No exceptions beyond the minimal assembly required for boot, process and thread entry, kernel entry and exit, context switching, and single instructions or indivisible pairs stable Rust cannot express.

"Indivisible pairs" is there for sti; hlt, which RFC-0006 needs adjacent. "Stable" matters because wfe and others exist in core::arch only as unstable, so where a stable intrinsic exists, such as _rdtsc, it must be used instead.

The §3 change is withdrawn, for your attention. You agreed to reword priority inheritance (C1), but three drafts failed review, the last on two high findings. Each draft tried to state as law how priority works in a design RFC-0006 only proposes. Donation alone does not prevent inversion, and the bound also needs a correctly set ceiling and funding. C1 stays open for RFC-0006's verdict, the right place for it.

Which pillar does this serve?

Toil: it aligns project law with the tree. No pillar is affected.

If this changes a document or the constitution

• Supersedes: the old wording of the Language clause only.

• Invalidates: no code and no decision.

• Follows through: STYLE.md and boot.s, which restated the old clause, now point at it. RFC-0005 §17.7 and RFC-0007 open question 4 are marked answered.

• Cross-references still resolve; no clause is left contradicting another (/check-coherence)

• If this is a constitution amendment, it is the maintainer's, and docs/CHANGELOG.md records it

• No section other documents cite has been renumbered

Borrow Ledger

• I checked the Borrow Ledger (CONSTITUTION.md §4) for this subsystem
• The verdict for this subsystem is: n/a
• Vendored code retains its original licence notices; new files carry an SPDX header: no new files

unsafe register

• New unsafe blocks: None
• Every new unsafe block carries a // SAFETY: comment
• Every unsafe block is inside a module CLAUDE.md designates for it
• I have listed them in the session summary / PR description above

Checklist

• The pre-push checks pass: not run in the devcontainer, because Docker is not running here. markdownlint 0.23.1, spelling and code spans passed on the host, and the kernel built after the first boot.s comment edit; later wording changes to that comment were not rebuilt locally
• Boots in QEMU where applicable: CI's boot job covers the boot.s comment change
• CHANGELOG.md updated under [Unreleased]: docs/CHANGELOG.md, which records constitutional amendments
• Commit messages follow Conventional Commits (see CONTRIBUTING.md)

Reviews

Three reviewers, Opus at medium, across two rounds. All high findings concerned §3, now withdrawn. Of the findings on the Language clause, entry stubs and vectors.s were fixed in round 1, thread entry and the sti; hlt pair after round 2. Those last two have not been reviewed again.

🤖 Generated with Claude Code