Defensive x86_64 assembly research machine

Wuci-Ji / Wuci-OS

Sealed artifacts. Receipt-bound release. Public evidence. Wuci turns security claims into deterministic proof lanes and keeps the unsupported claims out of the release surface.

View source Read boundary

Research artifact Not production cryptography or independent audit status.

Evidence first Proof lanes are local, deterministic, and reviewable.

Bounded claims No runtime sandbox or quantum-safe claim is made here.

System shape

A small machine for claims that can be checked.

Wuci-Ji composes WJSEAL artifacts, authorization receipts, Gate checks, witness bundles, ledger history, signed local installation evidence, and Daylight protocol-state evidence into an inspectable research system.

sealed artifact
authorization receipt
Gate contract check
controlled release
public witness bundle
ledger history

Evidence lanes

Proof surfaces with explicit refusal lines.

Envelope

Assembly-owned WJSEAL artifact sealing and opening paths.

Boundary: not a general secret-management platform.

Gate + Warrant

Contract checks and deterministic fixture quorum receipts.

Boundary: fixture authority only.

Witness + Ledger

Public evidence bundles and local deterministic hash history.

Boundary: not an operated public log service.

CAGE + QCAGE

Artifact legitimacy checks and quantum-risk metadata.

Boundary: not OS containment or PQ security.

INSTALL

Signed local install manifest checks and copied root-key proof.

Boundary: no remote-code shell pipeline.

Daylight v14C+

Frozen ledger, corpus snapshot, and reproducible score package.

Boundary: candidate evidence, not release authority.

Wuci-OS image lane

An evidence-first operating-system image surface.

Wuci-OS verifies an operator-supplied musl ISO, records digest evidence, checks live layout, emits QEMU boot plans, and presents a Wuci-native live profile with the WJ prompt identity.

Live command: sudo INSTALL starts the automated Wuci install path.
Default account: wj is the live/demo admin login and prompt identity.
Release stance: Current OS work remains local image evidence and boot planning.

Command deck

Focused lanes for build, proof, and preview.

Wuci-OS regression

make wuci-os-test

Final ISO lane

tools/wuci-os final-iso --force --remaster-rootfs --install-suite-packages

NOXFRAME console

tools/wuci-noxframe --console --yes

Visual evidence

Actual artifacts from the Wuci-OS documentation set.

Daylight and Wuci wire model — Daylight/Wuci wire model

Boundary

Blunt by design.

Wuci-Ji is not production cryptography, not a general runtime sandbox, not post-quantum secure, not production authority, and not independently audited. A boundary is only treated as enforced when the repository has implementation and tests for that behavior.

Open the full security boundary