redo boot around an explicit system volume and fixed kernel/HAL images, redo volumes and filesystem paths around capabilities instead of drive numbers and kernel CWD state, add a capability/security model with derived and revocable handles and security contexts, add port IPC and rssrv to manage the userspace resource namespace and publish the system volume, move process, dll and path loading to userspace and add process builder syscalls, init now supervises rssrv and the session process, redo the syscall ABI around request structs and four arguments, add a volume manager and proper partition arrival/removal handling so FAT and NTFS mount dynamically, clean up the HAL/DDK boundary so drivers don't depend on HAL internals, save fpu state properly now, the serial driver doesn't hang on a missing port, fix AHCI startup races, fix timeout accounting, fix shared mmap writeback, more smoke tests

code/boot.ini

@@ -1,6 +1,12 @@
+[boot]
+; Structural system-volume selector consumed by the bootloader and kernel storage stack.
+system_volume = mbr/4E544C31/2
+
 [kernel]
-; bitmask: 1 = debug prints, 2 = self check, 4 = file log, 4096 = checked intrusive lists
-; 0x8000 reports MTRRs. Add 0x10000 for one temporary framebuffer WC experiment.
-debug = 0xffff
+; Debug bitmask. Values are defined canonically in ntlite/ddk/debug.h.
+; 0x001 console output, 0x002 boot self-tests, 0x004 file log.
+; 0x008 pool canaries, 0x010 pool poison, 0x020 pool quarantine, 0x040 pool caller tracking.
+; 0x080 display assertions, 0x100 intrusive-list checks.
+debug = 0x1ff
 [init]
 commandline = apps/shell_native.exe