replace ad hoc driver loading with a proper driver manager, new DDK, new PnP manager with device matching, asynchronous startup, resource ownership and removal, add shared PCI capability helpers, replace typed, rigid services with a proper service manager, implement proper system shutdown and restart, shutting down unloads drivers and shuts down services, add simple power button, remove heavyweight boot self-tests and SMP stress runs, add monotonic timestamps to kernel debug output, fruitless USB and PS/2 fixes, make test builds opt in.

code/services.ini

@@ -1,10 +1,21 @@
 ; nt-lite user-mode system services.
 ;
-; init.exe loads this mandatory file from the bootstrap system volume. Service
-; identifiers are the case-sensitive suffix of [service.<id>].
+; init.exe loads this mandatory file from the bootstrap system volume.
+; [service.<id>]  Service identity; the <id> suffix is case-sensitive.
+; image=          Executable path relative to the bootstrap system volume.
+; start=          auto starts at boot; disabled prevents automatic startup.
+; critical=       Whether service failure is fatal to system startup (true/false).
+; restart=        Restart policy (never or on-failure; current adapters restrict usage).
+; ready_timeout_ms= Milliseconds allowed for the service READY handshake.
+; stop_timeout_ms=  Milliseconds allowed for graceful service shutdown.
+; requires=       Comma-separated service IDs that must start first; empty is allowed.
+; grants=         Comma-separated capability sources delegated at startup; empty is allowed.
+; exports=        Names of handles this service must transfer at READY; empty is allowed.
+;                 Source names are boot.<name> or <service-id>.<ready-export>.
+; Each service key is mandatory. Comments occupy separate lines.
+; RSSRV defines publisher names and their allowed paths; init only forwards handles.
 
 [service.rssrv]
-type=resource
 image=system/rssrv.exe
 start=auto
 critical=true
@@ -12,12 +23,10 @@ restart=never
 ready_timeout_ms=5000
 stop_timeout_ms=5000
 requires=
-
-; Generic services export one public Port listener in READY. Init publishes it at
-; /Services/<id> through RSSRV and supervises the process with restart=never.
+grants=boot.namespace-root,boot.volume-manager,boot.input-manager,boot.display-policy,boot.resource-registration
+exports=session-control,desktop-publisher,posix-publisher
 
 [service.posix]
-type=generic
 image=system/posixsrv.exe
 start=auto
 critical=false
@@ -25,9 +34,10 @@ restart=never
 ready_timeout_ms=5000
 stop_timeout_ms=5000
 requires=rssrv
+grants=rssrv.posix-publisher
+exports=public
 
 [service.dwm]
-type=dwm
 image=system/dwm.exe
 start=auto
 critical=false
@@ -35,3 +45,5 @@ restart=never
 ready_timeout_ms=5000
 stop_timeout_ms=5000
 requires=rssrv
+grants=boot.display-present,rssrv.session-control,rssrv.desktop-publisher
+exports=desktop