Requirement catalog

This catalog is generated from the normative Markdown sources. Design status is separate from execution evidence: no requirement is marked tested by extracting it or finding its ID in a header. All evidence here is not evaluated. The executed-case/profile matrix remains a separate M2 deliverable.

Download: JSON or CSV.

ID	Title	Status	Evidence	Design Source
API-001	Return type discipline	Accepted	not evaluated	requirements/API.md
API-002	Timeouts on blocking functions	Accepted	not evaluated	requirements/API.md
API-003	Machine-readable contract annotations	Accepted	not evaluated	requirements/API.md
API-004	Header portability	Accepted	not evaluated	requirements/API.md
API-005	One API for all privilege levels	Accepted	not evaluated	requirements/API.md
API-006	Namespace reservation	Accepted	not evaluated	requirements/API.md
API-007	Identifier grammar	Accepted	not evaluated	requirements/API.md
API-008	Parameter order	Accepted	not evaluated	requirements/API.md
API-009	No `_try` and no `_from_isr` variants	Accepted	not evaluated	requirements/API.md
API-010	Stable status values	Accepted	not evaluated	requirements/API.md
API-011	Status code set	Accepted	not evaluated	requirements/API.md
API-012	One code for an unsatisfied wait	Accepted	not evaluated	requirements/API.md
API-013	Error precedence	Accepted	not evaluated	requirements/API.md
API-014	Context classes	Accepted	not evaluated	requirements/API.md
API-015	Misuse behavior	Accepted	not evaluated	requirements/API.md
API-016	No kernel fault from an unprivileged caller	Accepted	not evaluated	requirements/API.md
API-017	Misuse faults are attributable	Accepted	not evaluated	requirements/API.md
API-018	Handle representation	Accepted	not evaluated	requirements/API.md
API-019	Generated storage types	Accepted	not evaluated	requirements/API.md
API-020	Attribute structs	Accepted	not evaluated	requirements/API.md
API-021	Construction and destruction	Accepted	not evaluated	requirements/API.md
API-022	Distinct time types	Accepted	not evaluated	requirements/API.md
API-023	Time conversion rules	Accepted	not evaluated	requirements/API.md
API-024	Blocking time bounds	Accepted	not evaluated	requirements/API.md
API-025	Public header rules	Accepted	not evaluated	requirements/API.md
API-026	No C++ keywords	Accepted	not evaluated	requirements/API.md
API-027	Enumerations in the API	Accepted	not evaluated	requirements/API.md
API-028	Annotation export	Accepted	not evaluated	requirements/API.md
API-029	Compiler portability layer	Accepted	not evaluated	requirements/API.md
API-030	Versioning and stability	Accepted	not evaluated	requirements/API.md
API-031	Callbacks and variadics	Accepted	not evaluated	requirements/API.md
API-032	No hidden error state	Accepted	not evaluated	requirements/API.md
ARCH-AVR-001	Manifest and tiny defaults	Accepted	not evaluated	requirements/ARCH-AVR.md
ARCH-AVR-002	One frame layout	Accepted	not evaluated	requirements/ARCH-AVR.md
ARCH-AVR-003	Atomic launch and switch tail	Accepted	not evaluated	requirements/ARCH-AVR.md
ARCH-AVR-004	Interrupt prologue, epilogue, and reserve	Accepted	not evaluated	requirements/ARCH-AVR.md
ARCH-AVR-005	Timer1 modes and latency	Accepted	not evaluated	requirements/ARCH-AVR.md
ARCH-AVR-006	Footprint budget	Accepted	not evaluated	requirements/ARCH-AVR.md
ARCH-AVR-007	Flash constants and linker outputs	Accepted	not evaluated	requirements/ARCH-AVR.md
ARCH-AVR-008	Robustness without faults	Accepted	not evaluated	requirements/ARCH-AVR.md
ARCH-AVR-009	Debug and emulation path	Accepted	not evaluated	requirements/ARCH-AVR.md
ARCH-AVR-010	Board description	Accepted	not evaluated	requirements/ARCH-AVR.md
HW-001	Single source for hardware facts	Accepted	not evaluated	requirements/HW.md
HW-002	Schema validation with named errors	Accepted	not evaluated	requirements/HW.md
HW-003	Reproducible generated files	Accepted	not evaluated	requirements/HW.md
HW-004	SVD and DeviceTree importers	Accepted	not evaluated	requirements/HW.md
HW-005	Normalized JSON export	Accepted	not evaluated	requirements/HW.md
HW-006	Two linker outputs from one region model	Accepted	not evaluated	requirements/HW.md
HW-007	Three description kinds and common conventions	Accepted	not evaluated	requirements/HW.md
HW-008	SoC and board content	Accepted	not evaluated	requirements/HW.md
HW-009	System description as the static source	Accepted	not evaluated	requirements/HW.md
HW-010	Generated outputs	Accepted	not evaluated	requirements/HW.md
HW-011	Semantic validation	Accepted	not evaluated	requirements/HW.md
HW-012	Importers produce drafts, never overwrites	Accepted	not evaluated	requirements/HW.md
HW-013	Determinism and stamps	Accepted	not evaluated	requirements/HW.md
HW-014	Schema versioning and migration	Accepted	not evaluated	requirements/HW.md
HW-015	Benchmark and tooling metadata	Accepted	not evaluated	requirements/HW.md
KRN-CAP-001	One handle type, profile-selected representation	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-002	Validation at the boundary	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-003	Rights only reduce	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-004	Static capability tables	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-005	Zero cost on tiny	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-006	Handle models	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-007	Capability entry and validation	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-008	Rights per type	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-009	Grant, derive, delete, revoke, renew	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-010	Build-time grants	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-011	Pointer models keep the API	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-012	Statistics	Accepted	not evaluated	requirements/KRN-CAP.md
KRN-CAP-013	Incarnation persistence and exhaustion	Proposed	not evaluated	requirements/KRN-CAP.md
KRN-IPC-001	Common wait mechanism	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-002	Determinable capacity and memory	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-003	ISR-safe IPC never blocks	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-004	Explicit zero-copy ownership	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-005	Deterministic wake order	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-006	Ownership moves with the message	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-007	Bounded pools, O(1) allocation	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-008	Ports share queue semantics	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-009	Leases for large cross-partition buffers	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-010	Message queue semantics	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-011	Bounded item copy under the lock	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-012	Send to front	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-013	Pipe semantics	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-014	Pipe chunking and SPSC path	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-015	Pipe close and reset	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-016	Buffer pool semantics	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-017	Ownership tracking in checked builds	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-018	Bindings on IPC objects	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-019	Storage declaration helpers	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-020	Trace and statistics	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-021	Tiny profile	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IPC-022	Model coverage	Accepted	not evaluated	requirements/KRN-IPC.md
KRN-IRQ-001	No blocking in interrupt context	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-002	Interrupt context is distinguishable	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-003	Wakeup from an interrupt permits scheduling before thread resume	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-010	ISR-safe operations are explicit	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-011	ISR-safe operations never block the caller	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-012	Nesting depth is observable	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-013	Reschedule during nested handling stays pending	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-014	Bounded kernel masking	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-015	No controller assumption in the generic kernel	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-016	Documented entry, exit, save, and reschedule behavior	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-017	Two interrupt classes	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-018	Key-based, nestable critical sections	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-019	Critical sections are per CPU	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-020	Measured critical-section budgets	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-021	No blocking inside a critical section	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-022	Scheduler lock semantics	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-023	Enumerated preemption points	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-024	Reschedule on outermost exit	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-025	Portable handler declaration	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-026	Bounded nesting	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-027	Interrupt stacks	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-028	Generic interrupt priority numbering	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-029	Interrupt management API	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-030	Exceptions route to the fault manager	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-031	Timer interrupt level and bound	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-032	Latency metrics are defined and published	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-033	The kernel never unmasks behind a caller	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-034	Context query is O(1) and exact	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-035	Checked-build detection	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-IRQ-036	Handoff from kernel-independent interrupts	Accepted	not evaluated	requirements/KRN-IRQ.md
KRN-NOTIF-001	Per-thread bits, ISR-settable	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-002	Owner-only wait	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-003	O(1), allocation free	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-004	Binding on every waitable object	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-005	Direct waiters unaffected	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-006	Bit budget	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-007	Kernel bits	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-008	Level semantics and hand-off	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-009	Binding lifecycle	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-010	Rights in isolated profiles	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-011	Trace	Accepted	not evaluated	requirements/KRN-NOTIF.md
KRN-NOTIF-012	Binding mask and initial readiness	Proposed	not evaluated	requirements/KRN-NOTIF.md
KRN-OBJ-001	Destroy with waiters	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-002	Generation bump on destroy	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-003	Caller owns storage	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-004	System freeze	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-005	Thread and partition generations	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-006	Common header	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-007	Lifecycle states	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-008	Generated storage types	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-009	Init table	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-010	Type-specific destroy conditions	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-011	Names and registry	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-012	No flash-resident objects in 1.0	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-OBJ-013	Trace	Accepted	not evaluated	requirements/KRN-OBJ.md
KRN-PART-001	Every thread has one partition	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-002	Compiles to nothing without protection hardware	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-003	Memory confinement	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-004	Restart without reboot	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-005	Policy in the supervisor	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-006	Static partitions in the first isolated release	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-007	Partition-local kernel storage	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-008	Partition description	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-009	Layout and hardware constraints	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-010	Cross-partition switch cost only	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-011	Per-thread kernel stack, syscalls in privileged thread mode	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-012	Generated stubs, marshallers, and table	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-013	Argument validation	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-014	Privileged code never traps	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-015	Fault capture and delivery	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-016	Restart procedure	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-017	Restart limits and delay	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-018	Supervisor interface	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-019	Device capabilities and interrupt delivery	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-020	Shared regions	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-021	Partition accounting	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-022	Observability	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-023	M3 scope	Accepted	not evaluated	requirements/KRN-PART.md
KRN-PART-024	DMA confinement and quiescence	Proposed	not evaluated	requirements/KRN-PART.md
KRN-PART-025	Blocking syscall buffer lifetime	Proposed	not evaluated	requirements/KRN-PART.md
KRN-PART-026	Authenticated syscall return and object construction	Proposed	not evaluated	requirements/KRN-PART.md
KRN-PART-027	Restart progress and evidence	Proposed	not evaluated	requirements/KRN-PART.md
KRN-SYNC-001	Common wait mechanism	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-002	Explicit, validated ownership	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-003	Priority inheritance available	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-004	Nested dependency chains	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-005	ISR-safe signaling is distinct	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-006	Deterministic wait ordering	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-007	No hidden allocation	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-008	Unlock by a non-owner	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-009	Transitive inheritance with a depth bound	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-010	Recomputation on unlock	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-011	Owner termination	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-012	Ceiling protocol on the same object type	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-013	Recursive locking is an option	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-014	Owned-mutex list and immediate recomputation	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-015	Deadlock detection	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-016	Any unlock order	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-017	Static ceilings from the system description	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-018	Effective priority definition	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-019	Propagation in both directions	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-020	Mutex lock cost	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-021	Hand-off on unlock	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-022	Waiter removal hook	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-023	Recursion and self-relock	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-024	`EMB_EDEADLK`	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-025	Owner death policies	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-026	Ceiling rules	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-027	No ISR operation on mutexes	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-028	Semaphore semantics	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-029	Event flag semantics	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-030	Condition variable semantics	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-031	Barrier semantics	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-032	Priority change preserves contributions	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-033	Spinlock rules	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-034	Atomics	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-035	Binding on semaphores and events	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-036	Trace and statistics	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-037	Tiny profile options	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-SYNC-038	Model coverage for inheritance	Accepted	not evaluated	requirements/KRN-SYNC.md
KRN-THR-001	One RUNNING thread per processor	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-002	READY is eligible	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-003	BLOCKED is ineligible	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-004	Independent context and stack	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-005	Entry return terminates	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-006	Execution and object lifetimes are independent	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-007	Static threads	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-008	Stable identity	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-009	Start, suspend, resume are wait reasons	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-010	Suspend keeps the wait	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-011	Cooperative cancellation	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-012	Join and detach	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-013	TLS slots	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-014	No compiler TLS	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-015	Lifecycle states and reusability	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-016	Start semantics	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-017	Exit path	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-018	Single joiner, exit-code hand-off	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-019	Detach	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-020	Suspend and resume are idempotent and overlaid	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-021	Cancellation delivery and disable count	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-022	Priority range and direction	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-023	Stacks	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-024	Destroy	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-025	Introspection	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-026	Kernel threads	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-027	Isolated profile rules	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-028	Trace and statistics	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-029	Tiny profile	Accepted	not evaluated	requirements/KRN-THR.md
KRN-THR-030	Model coverage	Accepted	not evaluated	requirements/KRN-THR.md
KRN-TIM-001	Monotonic kernel time	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-002	Independence from wall-clock time	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-003	Correct across counter wraparound	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-004	Tickless operation permitted	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-005	Defined callback-context semantics	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-006	Bounded timer operations	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-007	Documented conversions	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-008	Clock width	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-009	Tick unit	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-010	Distinct time types	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-011	Absolute-deadline variants	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-012	Cycle counter is not the scheduling clock	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-013	Callbacks on a work queue by default	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-014	ISR-context callbacks are opt-in and bounded	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-015	Periodic re-arm without drift	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-016	No 64-bit atomics for time	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-017	Two clock modes, one semantics	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-018	Next-deadline computation	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-019	Clock update on wake	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-020	Architecture timer contract	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-021	Timeout structure	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-022	32-bit profile timeout range	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-023	Deadline computation	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-024	Sleep semantics	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-025	Software timer API	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-026	Expiry processing	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-027	Periodic re-arm and overrun accounting	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-028	Timer lifecycle	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-029	Time slicing quantum as a deadline	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-030	Cycle counter API	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-031	Wall clock is an offset	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-032	Clock read mechanism	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-033	Bounded timer interrupt	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-034	Port time documentation	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-TIM-035	Checked-build detection for time	Accepted	not evaluated	requirements/KRN-TIM.md
KRN-WAIT-001	Default wake order	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-002	FIFO option	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-003	Repositioning on priority change	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-004	Exactly one winner	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-005	Result before READY	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-006	Atomic removal from queue and timeout structure	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-007	Modeled and explored before implementation	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-008	Three-state wait flag, no lock across the block window	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-009	Wait generation and superseded timeouts	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-010	One wait at a time, node in the thread control block	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-011	Three bounded sections	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-012	Hand-off with the result	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-013	Wake-all order and single reschedule	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-014	Suspend is an overlay	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-015	Cancellation as a wake source	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-016	Flush on destroy and on stale peers	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-017	Lock domains and order	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-018	Cross-CPU wake	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-019	Tiny profile bitmap wait sets	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-020	Trace and statistics	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-021	Checked-build diagnostics	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WAIT-022	Exploration coverage	Accepted	not evaluated	requirements/KRN-WAIT.md
KRN-WQ-001	Intrusive, static, ISR-safe submit	Accepted	not evaluated	requirements/KRN-WQ.md
KRN-WQ-002	FIFO per queue in thread context	Accepted	not evaluated	requirements/KRN-WQ.md
KRN-WQ-003	Delayed work over software timers	Accepted	not evaluated	requirements/KRN-WQ.md
KRN-WQ-004	Cancellation reports the state	Accepted	not evaluated	requirements/KRN-WQ.md
KRN-WQ-005	Submit outcomes	Accepted	not evaluated	requirements/KRN-WQ.md
KRN-WQ-006	Synchronous cancel and flush	Accepted	not evaluated	requirements/KRN-WQ.md
KRN-WQ-007	Delayed work scheduling	Accepted	not evaluated	requirements/KRN-WQ.md
KRN-WQ-008	System work queue	Accepted	not evaluated	requirements/KRN-WQ.md
KRN-WQ-009	Work queue thread	Accepted	not evaluated	requirements/KRN-WQ.md
KRN-WQ-010	Lifecycle misuse	Accepted	not evaluated	requirements/KRN-WQ.md
KRN-WQ-011	Trace and statistics	Accepted	not evaluated	requirements/KRN-WQ.md
OBS-001	Deferred-format logging	Accepted	not evaluated	requirements/OBS.md
OBS-002	Compile-time and runtime filtering	Accepted	not evaluated	requirements/OBS.md
OBS-003	ISR logging bounded, drops counted	Accepted	not evaluated	requirements/OBS.md
OBS-004	Transports	Accepted	not evaluated	requirements/OBS.md
OBS-005	Trace points compile to nothing when off	Accepted	not evaluated	requirements/OBS.md
OBS-006	CTF with generated metadata	Accepted	not evaluated	requirements/OBS.md
OBS-007	Streaming and snapshot	Accepted	not evaluated	requirements/OBS.md
OBS-008	Debug descriptor	Accepted	not evaluated	requirements/OBS.md
OBS-009	Worst-case monitors with opener address	Accepted	not evaluated	requirements/OBS.md
OBS-010	Monitor thresholds	Accepted	not evaluated	requirements/OBS.md
OBS-011	Monitor export	Accepted	not evaluated	requirements/OBS.md
OBS-012	Benchmark baseline regression	Accepted	not evaluated	requirements/OBS.md
OBS-013	Log record format	Accepted	not evaluated	requirements/OBS.md
OBS-014	Trace event catalogue and emission	Accepted	not evaluated	requirements/OBS.md
OBS-015	Trace clock	Accepted	not evaluated	requirements/OBS.md
OBS-016	Crash record format	Accepted	not evaluated	requirements/OBS.md
OBS-017	Descriptor contents and discovery	Accepted	not evaluated	requirements/OBS.md
OBS-018	Statistics API and monitor categories	Accepted	not evaluated	requirements/OBS.md
OBS-019	Framing and memory channel	Accepted	not evaluated	requirements/OBS.md
OBS-020	Host tools and build-id checks	Accepted	not evaluated	requirements/OBS.md
OBS-021	Profile defaults	Accepted	not evaluated	requirements/OBS.md
PORT-001	Port manifest	Accepted	not evaluated	requirements/PORT.md
PORT-002	Context on the thread stack	Accepted	not evaluated	requirements/PORT.md
PORT-003	Startup entry points	Accepted	not evaluated	requirements/PORT.md
PORT-004	Context init and single switch path	Accepted	not evaluated	requirements/PORT.md
PORT-005	Interrupt entry, exit, and controller operations	Accepted	not evaluated	requirements/PORT.md
PORT-006	Timer and cycle counter contract	Accepted	not evaluated	requirements/PORT.md
PORT-007	Atomics through the portability layer	Accepted	not evaluated	requirements/PORT.md
PORT-008	Atomic idle	Accepted	not evaluated	requirements/PORT.md
PORT-009	Stack rules and checks	Accepted	not evaluated	requirements/PORT.md
PORT-010	Fault entry and decode	Accepted	not evaluated	requirements/PORT.md
PORT-011	Protection and trap hooks	Accepted	not evaluated	requirements/PORT.md
PORT-012	Debug descriptor contribution	Accepted	not evaluated	requirements/PORT.md
PORT-013	Toolchain rules for port code	Accepted	not evaluated	requirements/PORT.md
PORT-014	Port deliverables	Accepted	not evaluated	requirements/PORT.md
PORT-ABI-001	No EmbCC-specific extension in the public API	Accepted	not evaluated	requirements/PORT.md
PORT-ABI-002	Portability layer for attributes and builtins	Accepted	not evaluated	requirements/PORT.md
PORT-ABI-003	Documented and tested compiler matrix	Accepted	not evaluated	requirements/PORT.md
PORT-ABI-004	Early detection of incompatible combinations	Accepted	not evaluated	requirements/PORT.md
PORT-ABI-005	Optimizations never change semantics	Accepted	not evaluated	requirements/PORT.md
SIM-001	Native port passes the conformance suite	Accepted	not evaluated	requirements/SIM.md
SIM-002	One emulated target per architecture	Accepted	not evaluated	requirements/SIM.md
SIM-003	Emulated results are not timing evidence	Accepted	not evaluated	requirements/SIM.md
SIM-004	Deterministic, replayable runs	Accepted	not evaluated	requirements/SIM.md
SIM-005	Exact scheduling through the gate	Accepted	not evaluated	requirements/SIM.md
SIM-006	Asynchronous stress mode	Accepted	not evaluated	requirements/SIM.md
SIM-007	Fault injection and software region checks	Accepted	not evaluated	requirements/SIM.md
SIM-008	Differential bridge to the reference model	Accepted	not evaluated	requirements/SIM.md
SIM-009	Sanitizers, coverage, fuzzing	Accepted	not evaluated	requirements/SIM.md
SIM-010	Host portability of the port	Accepted	not evaluated	requirements/SIM.md
SIM-011	Multi-CPU reservation	Accepted	not evaluated	requirements/SIM.md

• API requirements
• ARCH-AVR requirements
• HW requirements
• KRN-CAP requirements
• KRN-IPC requirements
• KRN-IRQ requirements
• KRN-NOTIF requirements
• KRN-OBJ requirements
• KRN-PART requirements
• KRN-SYNC requirements
• KRN-THR requirements
• KRN-TIM requirements
• KRN-WAIT requirements
• KRN-WQ requirements
• OBS requirements
• PORT requirements
• PORT-ABI requirements
• SIM requirements