Docs.rs

The unified FluxCD-adjacent Kubernetes controller — reconciles Process CRDs as Unix processes, composes tatara three-pillar attestation

Task vocabulary: ForgeSpec, ForgeCommand, and the TaskPlacement (location x runtime) axis, sharing TaskId + scryer scope

CLI binary for tatara — Nix-native workload orchestrator

GitHub webhook receiver — translates org-wide PR + push + branch events into EphemeralAllocation CRs the pool reconciler then routes to a matching EphemeralPool.

tatara IS PID 1 — typed service supervisor authored in tatara-lisp. Drop-in replacement for systemd/s6/openrc inside a tatara-os Linux guest.

Native Rust GHA YAML workflow runtime for QED (parser + types; F1)

Shared event types for the scryer observation substrate (hoisted from task-runs)

REST + GraphQL + SSE API server for tatara

Reconciler for EphemeralPool + EphemeralAllocation CRDs — population manager that maintains warm pools of pre-attested ephemeral Processes and allocates them to requestors (GitHub PRs, CI runs, manual operators).

Apply pipeline outputs to in-tree manifests as content-addressed receipts (W209). Per-file transactional, idempotent, predicate-gated write-back.

Multi-runtime WASI/WASM host for tatara — one crate, feature-gated runtimes (wasmtime, WasmEdge, Wasmer, wasmi, WAMR). Phase H.3 + H.4.

NixOS-equivalent — typed SystemConfig deriving TataraDomain, activation synthesizer, Linux-kernel + bootloader + services + users + filesystems, composed via tatara-nix module fixpoint

Apple Hypervisor.framework backend for tatara — bare-metal VM engine with own virtio device models. Phase H.2.

Nix's academic essence, re-expressed in Rust + Lisp. Derivation, StorePath, Module, Overlay, Flake — all typed, all Lisp-authorable via #[derive(TataraDomain)], all attestable via BLAKE3.

Optimized in-memory Lisp interpreter for tatara — evaluates Sexp to Value, produces typed Derivations, composes with tatara-nix realizers