The commands you type. Every one of them is documented here, and the documentation is the source of
truth the implementation is held to - utilities/0_conventions.md is the shared contract all of them
obey, and a utility that breaks it is a bug in the utility.
A GodspeedOS utility is not a Unix utility with the corners knocked off. The primitives Unix builds on
do not exist here: no fork, no exec, no inherited file descriptors, no ambient stdin, no
environment inheritance, no signals. What replaces them is capabilities.
UNIX GODSPEEDOS
ls /data | grep .txt dir /data | match .txt
──────────────────── ──────────────────────
fork + exec + pipe(2) the shell carries each stage's output
fd 1 inherited by the child on; a SERVICE stage gets an endpoint
ambient access to /data `dir` holds a cap to `fs`, or it
cannot read anything at all
Three consequences you will feel immediately:
rm -rf / cannot exist. A utility can only touch what it was granted. There is no ambient
authority to leak through a fork.
Words, not flags.write append /f.txt text, not write -a. A flag is a character to memorise;
a word is readable a year later. (0_conventions.md §1.)
Every utility answers version and help. Not as a courtesy - as a contract, checked.
poweroff documents a utility that does not exist. It was built, tested,
and removed - the firmware's ACPI \_PTS method could not be executed without an AML interpreter, and
adding one to reach a power state was not a trade worth making. The page records what was tried, what
stopped it, and what would have to change.
That is the house style: a limitation that cannot be closed is written down, never quietly left
(§26.7).