replace ad hoc driver loading with a proper driver manager, new DDK, new PnP manager with device matching, asynchronous startup, resource ownership and removal, add shared PCI capability helpers, replace typed, rigid services with a proper service manager, implement proper system shutdown and restart, shutting down unloads drivers and shuts down services, add simple power button, remove heavyweight boot self-tests and SMP stress runs, add monotonic timestamps to kernel debug output, fruitless USB and PS/2 fixes, make test builds opt in.

code/user/system/rssrv/publication_scope.h

@@ -0,0 +1,17 @@
+// Exact-path namespace publication policy. A scoped capability can bind or unbind one name.
+
+#pragma once
+
+#include <stdbool.h>
+#include <stddef.h>
+#include <stdint.h>
+#include <string.h>
+#include <ntlite/resource.h>
+
+static inline bool RssrvScopeAllows(const char* scope, uint32_t operation,
+                                     const char* path, uint32_t pathLength) {
+    if (!scope) return true; // Unscoped administrator; separately issued by RSSRV.
+    return path &&
+           (operation == NTL_RESOURCE_OP_BIND || operation == NTL_RESOURCE_OP_UNBIND) &&
+           strlen(scope) == (size_t)pathLength && memcmp(scope, path, pathLength) == 0;
+}