add lwIP TCP/IP stack as a runtime driver, native socket syscalls, SysGetMemoryStatus replacing CatchAllDebugBucket, fix timeGetTime to return milliseconds, fix SysSleep to interpret argument as milliseconds, SysGetTick now returns microseconds, harden all syscalls against bad user pointers with CopyFromUser/CopyToUser/MmProbeUser throughout, add networking test apps, port-forward 8080 in runa.bat, split LWIP_DRIVER_CFLAGS, add settings.ini to deploy, remove ethernet.c stub

code/kernel/mm_virt.h

@@ -53,6 +53,31 @@ __declspec(dllexport) KSTATUS MmSetPageProtect(uintptr_t virt, size_t size, uint
 // Returns 0 if the address is not mapped.
 __declspec(dllexport) PHYSICAL_ADDRESS MmGetPhysicalAddress(uintptr_t virt);
 
+
+// ---------------------------------------------------------------------------
+// User/kernel copy boundary helpers
+// ---------------------------------------------------------------------------
+// MmQueryPage returns the physical address and effective PAGE_* bits for a
+// mapped virtual address. The reported PAGE_USER/PAGE_WRITE bits account for
+// every page-table level, not just the leaf entry.
+__declspec(dllexport) KSTATUS MmQueryPage(uintptr_t virt, PHYSICAL_ADDRESS* physOut, uint64_t* flagsOut);
+
+// Probe a user virtual range without copying it. These functions only accept
+// lower-half user mappings with PAGE_USER set; MmProbeUserWrite additionally
+// requires PAGE_WRITE.
+__declspec(dllexport) KSTATUS MmProbeUserRead(const void* ptr, size_t size);
+__declspec(dllexport) KSTATUS MmProbeUserWrite(void* ptr, size_t size);
+
+// Copy through the syscall trust boundary. Kernel subsystems should receive
+// kernel-owned buffers, not raw user pointers, unless explicitly documented.
+__declspec(dllexport) KSTATUS CopyFromUser(void* kernelDst, const void* userSrc, size_t size);
+__declspec(dllexport) KSTATUS CopyToUser(void* userDst, const void* kernelSrc, size_t size);
+
+// Bounded NUL-terminated string import from user memory. Always NUL-terminates
+// kernelDst when kernelDstSize is non-zero. Returns STATUS_BUFFER_TOO_SMALL if
+// no NUL byte was found within kernelDstSize bytes.
+__declspec(dllexport) KSTATUS CopyStringFromUser(char* kernelDst, size_t kernelDstSize, const char* userSrc);
+
 // ---------------------------------------------------------------------------
 // Kernel pool - ring 0 only, never PAGE_USER.
 // Best-fit free-list allocator, thread-safe via spinlock.