redo boot around an explicit system volume and fixed kernel/HAL images, redo volumes and filesystem paths around capabilities instead of drive numbers and kernel CWD state, add a capability/security model with derived and revocable handles and security contexts, add port IPC and rssrv to manage the userspace resource namespace and publish the system volume, move process, dll and path loading to userspace and add process builder syscalls, init now supervises rssrv and the session process, redo the syscall ABI around request structs and four arguments, add a volume manager and proper partition arrival/removal handling so FAT and NTFS mount dynamically, clean up the HAL/DDK boundary so drivers don't depend on HAL internals, save fpu state properly now, the serial driver doesn't hang on a missing port, fix AHCI startup races, fix timeout accounting, fix shared mmap writeback, more smoke tests

code/public/ntlite/service.h

@@ -0,0 +1,21 @@
+// Public nt-lite well-known system-service identifiers.
+
+#pragma once
+
+#include <stdint.h>
+#include <ntlite/handle.h>
+
+// System-service identities are numeric kernel registry keys, not pathnames.
+typedef uint32_t SYS_SERVICE_ID;
+
+#define SYS_SERVICE_INVALID  0u
+#define SYS_SERVICE_RESOURCE 1u
+#define SYS_SERVICE_MAX      1u
+
+// Connects to one well-known system service through its registered Port listener.
+typedef struct SYS_CONNECT_SYSTEM_SERVICE_REQUEST {
+    uint32_t Size;
+    SYS_SERVICE_ID ServiceId;
+    uint32_t Flags;
+    SYS_HANDLE* EndpointHandleOut;
+} SYS_CONNECT_SYSTEM_SERVICE_REQUEST;