DraftLumen Protocol v0, revision 25 (frozen snapshot)Not stable. Breaking changes expected.SourceReport an issue

Lumen Protocol v0, revision 25 (frozen snapshot). © Moonbase 2090 LLC. Licensed under CC-BY-4.0. Report security issues privately via GitHub private vulnerability reporting or [email protected].

Platform support

Linux

Linux supports default sealing (see requirements) and optional hardened mode. Images are available after the decoder gates pass.

macOS

v0 creates no keys on macOS, so layers are grid plus Track 0. Images need the decoder memory gate and the decoder gate to pass on macOS. Track B paths follow the macOS rule in Transport.

Flatpak, Snap and rootless containers

  • No Flatpak build is provided for v0.
  • Snap and rootless containers are unsupported in v0. A terminal that detects it is running inside Flatpak, Snap or a non-initial user namespace creates no keys and shows a notice. Track 0 rendering follows the normal output rules.
  • Immutable distributions (for example Fedora Silverblue and Steam Deck) are a follow-up after v0.

Containers

A shell running inside a container is just a PTY writer. Its output is unsealed and gets the Track 0 rules.

tmux and screen

tmux and screen render Lumen output as escaped text in v0. See Multiplexers.

SSH

SSH sessions are grid plus Track 0, with no keys. See Sealed layers.