supermachine-kernel-aarch64 0.7.67

Pre-built aarch64 Linux kernel image, in-VM init shim (init-oci), control agent, and smpark.ko for supermachine's HVF backend, bundled as xz-compressed payloads inside the crate (no network at build time). Resolved automatically per target by the `supermachine-kernel` facade; pin in lockstep with `supermachine`.
Documentation
# supermachine-kernel-aarch64

Pre-built **aarch64** guest assets for [supermachine](https://crates.io/crates/supermachine)'s
HVF (Apple Silicon) backend, bundled inside the crate so no network is needed
at build time.

You normally **don't depend on this crate directly** — depend on the
[`supermachine-kernel`](https://crates.io/crates/supermachine-kernel) facade,
which re-exports the correct architecture's crate by `target_arch`. Cargo only
downloads the sub-crate matching the build target, so an aarch64 build pulls
only this crate, and an x86_64 build pulls only `supermachine-kernel-x86-64`.

## What's inside

| Asset | Const | Notes |
|-------|-------|-------|
| Kernel | `KERNEL_BYTES` | aarch64 Linux `Image` (raw, ~29 MiB) with the AF_TSI patch series. |
| init-oci | `INIT_OCI_BYTES` | Static aarch64-musl PID-1 shim: overlayfs + pivot, exec's the image entrypoint. |
| Agent | `SUPERMACHINE_AGENT_BYTES` | Static aarch64-musl in-VM control agent (`exec`/control RPCs over vsock). |
| smpark.ko | `SMPARK_KO_BYTES` | Kernel module for byte-identical multi-vCPU parked-WFI snapshot capture. |

## Rebuilding

See `crates/supermachine-kernel/` and the kernel-build pipeline. Re-bake the
kernel, `xz -k -9` the outputs, and commit the `.xz` files here.

## License

`Apache-2.0 AND GPL-2.0-only AND MIT`. The kernel and smpark.ko are
GPL-2.0-only; see `NOTICE` for the GPL §3(b) written offer for kernel source.