The Fine Line between Bold and Fringe Lunatic
summary
Argues that whole-system provenance (PASS) actually captures useful, practical evidence beyond database semantics, shows a hacked Linux kernel (PASS v1) that emits ~106 kilobytes per workflow run, and traces evolution to a stable Linux Security Module integration that survives many releases but still sees low adoption due to overhead and semantic gaps. Describes a separate BRASS effort (team princess) that synthesizes parts of OSes: four processors tested, 17 case studies, OS161 runs on one, Barrelfish on two — partial success, big lessons on specs, SMT solvers, and component granularity.
AI-written summary · about