Signed, reproducible, content-addressed packages. Inspect the recipe. Rebuild the binary. Trust the math, not the vendor.
Badge claims are backed by the registry schema. Each package entry must
include a matching evidence block, and operators can check the catalog
with nexus bazaar validate before installing or publishing.
Ed25519 signature valid against the publisher key — the production signing target. The current pack uses development BLAKE3 sidecars until the Forge pipeline lands.
Two independent builds produce identical artifact hashes — the reproducibility target. Build proofs are recorded per package; independent-build verification is being automated.
Third-party security review target, with the report linked in the package detail. The first audited set ships with the production pipeline.
Static allocation only. Verified by build-time analysis. Suitable for safety-critical deployments.
Package does not initiate network connections at runtime. Syscall filter enforced.
No external runtime dependencies. Can be installed and operated entirely offline.
These packages are maintained by the core team and verified through the Forge pipeline. Each carries a Variant-CID (sample values shown until production signing lands), build proof, and compatibility matrix. Production Ed25519 signing is in the Forge/Bazaar pipeline — the current proof pack carries development BLAKE3 sidecars (see the SDK).
Core kernel graft — Linux LTS or native Rumpk microkernel.
VirtIO GPU display driver with framebuffer and cursor support.
VirtIO network driver with LWF frame support and NetSwitch bridge.
VirtIO block storage driver with Block Valve protocol.
VirtIO input driver for keyboard, mouse, and multi-seat support.
Event-driven Harmonic Scheduler with spectrum tiers and time budgets.
CSpace, pledge/unveil, and Kinetic Economy enforcement.
Sovereign package manager with CAS, grafting, and ProvChain.
Flash-native, content-addressed filesystem with Merkle DAG snapshots.
Universal Transport and Control Protocol — identity-centric, encrypted by default.
Libertaria Wire Frame v3 — Noise XX, XChaCha20-Poly1305, zero cleartext.
Nexus Registry Protocol — SovereignKV-backed system nervous system.
Semantic shell — KDL intents, PRQL queries, structured display lists.
Vector scene graph compositor with Niri layout and TextureRef support.
Bosch BNO055 9-DOF IMU driver with sensor fusion support.
Real-time kinematics solver for robotic arm control.
Time-Sensitive Networking driver for deterministic industrial Ethernet.
Compact cryptographic library — Ed25519, BLAKE3, XChaCha20-Poly1305.
Type-1 hypervisor for NipCell isolation. EL2 on ARM64, VMX on x86_64.
Resolves dependencies, verifies signatures, extracts to /Programs/Nippels/.
Fetches from foreign package manager, converts to NPK, installs via CAS.
Have a driver, library, or tool that belongs in the Sovereign Bazaar? Packages must build reproducibly, pass static analysis, and carry a valid signature.