v1.0 · 2027 Q4github →

Twelve to eighteen months to v1.0. Then a four-year curve.

Order is locked. Per-release feature gating moves sprint by sprint. The hard ABI line is between v1.x and v2.0 — every v1.x release carries the same syscall + libcoconut ABI.

§ 04.1 — the timeline

2026 → 2031.

order is locked · per-release feature gating moves sprint by sprint · the hard ABI line is between v1.x and v2.0

§ 04.2 — release-by-release

2027 Q4

v1.0

x86_64 + NVIDIA · Workstation + Server

↳ Linux 6.12 hard fork · capability-mediated LSM
↳ 8 new syscalls · libcoconut userspace bindings
↳ coconutd PID 1 · coconutpkg · coconut-installer
↳ Coconut Shell (Wayland · Rust · Smithay)
↳ kvwarden + mlxd default brokers

2028 Q2

v1.1

ARM64 server-class

↳ Ampere first-class · NVIDIA Grace optional
↳ GUI installer for Server profile
↳ Live kernel patching (non-critical patches)
↳ HSM-rooted attestation
↳ Multi-seat · multi-admin RBAC

2028 Q4

v1.2

Apple Silicon · via Asahi bootstrap

↳ Apple Silicon NPU first-class
↳ TouchID PAM module
↳ Cross-arch checkpoint migration

~2029-30

v2.0

Full kernel substrate · ABI break

↳ Full mm/agent_mm.c page-allocator rewrite
↳ Full struct cred replacement (DAC-free credential graph)
↳ Federated tenant model (cross-cluster coconutd)

~2031+

v3.0

Formal-verification expansion · the 5-year vision

↳ Verification scope extends beyond the LSM hook
↳ Default substrate for safe multi-agent AI compute

held back

Sprint-level deliverables, the parallel-projects sequencing with kvwarden + mlxd, hire schedule, and the gating decisions for v1.1/v1.2/v2.0 are pinned in the PLAN + SPRINTS docs. Public preview shows the order; specifics travel with the spec drop and sprint reviews.

← prev · spec § 03

Capabilities, audit chain, attestation

DAC reduced to a compatibility layer. The capability bundle is the primary access-control ob…

next · spec § 05 →

Team + cadence

Ten engineers, named and committed. Twenty-six two-week sprints. Coconut Labs' first multi-e…