MACS Kernel — Infrastructure Layer

IBM lineage: z/OS BCP (Base Control Program) — Dispatcher + SVC Handler + SRB + Lock Manager

Kernel is the shared infrastructure layer for all 14 MACS subsystems. It is not a subsystem itself — it is the thin in-process foundation that every subsystem imports.

Components

Component	z/OS BCP	Role
Arbiter	Dispatcher	Unified admission: token budget + security clearance → dispatch
Brake	SVC Handler	Circuit breaker: error rate / timeout / overload → open/close
Audit	SRB	Audit hook registry: subsystems register hooks → Chronicle consumes
Trace	—	W3C traceparent: inject/extract for all spans
Lock	Lock Manager	Agent context concurrency: read/write lock with deadlock detection

Quick Start

import "github.com/deeparchi-ai/macs-kernel-go/pkg/kernel"

// Arbiter: unified admission
result := kernel.Admit(ctx, kernel.AdmissionRequest{
    AgentLU:  "research.prod",
    TokenBudget: budget,
    SecurityLevel: sanctum.Level(),
})

// Brake: circuit breaker
cb := kernel.NewCircuitBreaker("xval-primary", kernel.CBOptions{
    MaxFailures:  5,
    ResetTimeout: 30 * time.Second,
})

// Audit: hook registry
kernel.Audit.On("agent.call", func(e kernel.AuditEvent) {
    chronicle.Record(e)
})

// Trace: W3C traceparent
ctx = kernel.InjectTrace(ctx, spanID)

// Lock: concurrency control
kernel.AcquireRead("research.prod")
defer kernel.ReleaseRead("research.prod")

Canonical Spec

MACS Governance Specification v3.0 — Kernel