Kenosian Q-Link Host Runtime with Execution Contracts

Kenosian Q-Link Host Runtime manages caller-owned aligned-buffer lifetimes through a versioned C ABI, generation fencing and explicit completion states. Submission return, remote receipt and application consumption remain separate. Cancellation or an unknown result does not authorize early reuse. Baseline host contracts remain independent of optional adapters.

The optional customer-configured Bedrock text gateway uses mandatory TLS1.3 client certificates, SigV4 ConverseStream and a private-endpoint peer allowlist. A single authorized public synthetic Nova Micro request was completed over HTTP/2 through a task-only Bedrock Runtime interface endpoint on2026-10-28. This is a bounded seller validation, not customer model access, regional availability, SLA or throughput evidence. Endpoint, IAM/model access, trust anchors, client certificates and audit keys are supplied by the buyer; the gateway is disabled until configured. No public upstream fallback or automatic inference retry is provided.

A fixed Lean4.14 kernel policy verifies the declared bounded literal and digit-run rules on canonical NFKC text. Default input bound is2048 UTF8 bytes; maximum configuration bound4096. It does not prove absence of all PII, secrets, semantic prompt injection or harmful content. Per-input proof material is temporary; hashes bind the exact input/policy, not a universal safety theorem.

The default PoT-v08 admission profile remains distinct. An explicit TTTPS180 signed-prior-admission profile pins an independent frontdoor issuer, policy hash, audience and action. The consumer verifies the original180-byte record, exact event/content and signed receipt, then reserves the task durably before any effect. That frontdoor must perform its own TLS exporter, holder, PQ and time checks. This is authority delegation across independent products, not an assertion that frontdoor and Bedrock share a TLS session. The modified DECK TLS stack is not included. In integrated testing the frontdoor time guard used an explicit isolated clock fixture after unconfigured GCP CLOCK_TAI failed closed; live hardware time/PTP readiness is unverified.

Native-owned managed prompt/response workspaces are explicitly overwritten after synchronous consumers stop and are read back. Caller-owned buffers, SDK/Lean/TLS/kernel/downstream/remote copies remain outside this erase coverage. There is no fixed nanosecond erase, whole-host zero-residue, zero-jitter or D-Wave integration guarantee.

A128-byte audit body is bound to a separate, larger Ed25519-signed context and HydraAudit chain adapter. Admission, observed application outcome and downstream consumption are distinct. SQLite WAL/FULL task and receipt state supports failure/restart reconciliation; uncertain effects are not retried automatically. External checkpoints and pinned public keys are needed for rollback detection against a privileged operator.

Kenosian orchestration is proprietary compiled native code with minimal readable bootstrap. Third-party AWS/HTTP/cryptographic/Lean components and notices retain their licenses. Binaries remain reverse-engineerable by customer root; compilation does not guarantee code secrecy. No excluded quantum research engine or notebook is included. Software charges exclude EC2, EBS, Bedrock, VPC endpoint and network charges.