Small Kernel, Readable Tree
FIG. P1 — Kernel subsystem approval model. Solid lines indicate justified subsystems accepted into the kernel tree. Dashed red lines indicate proposals rejected at the justification gate. The kernel source tree targets ~18,000 lines of C — small enough to be read and understood by an experienced operator in a single session.
ENGINEERING CONSTRAINT: Every subsystem must pass the justification gate — a design review that demands a demonstrated operator problem and a minimal implementation. Code added without justification is removed at the next release boundary. See src/SYS_CONSTRAINTS.