{"id":"https://openalex.org/W7225320225","doi":"https://doi.org/10.5281/zenodo.23982145","title":"GenOS: An AI-Native Microkernel Architecture with Hardware-Isolated Capabilities, Decentralized Information Flow Control, and Post-Quantum Causal Verification","display_name":"GenOS: An AI-Native Microkernel Architecture with Hardware-Isolated Capabilities, Decentralized Information Flow Control, and Post-Quantum Causal Verification","publication_year":2026,"publication_date":"2026-11-05","ids":{"openalex":"https://openalex.org/W7225320225","doi":"https://doi.org/10.5281/zenodo.23982145"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23982145","doi":"https://doi.org/10.5281/zenodo.23982145","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23982145","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23982145","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5153402691","display_name":"Genaro Agust\u00edn P\u00e1ssero","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"P\u00e1ssero, Genaro Agustin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5153402691"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/genos","display_name":"genos","score":0.7409999966621399},{"id":"https://openalex.org/keywords/microkernel","display_name":"microkernel","score":0.6769999861717224},{"id":"https://openalex.org/keywords/ai-agent-security","display_name":"AI agent security","score":0.7070000171661377},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.8050000071525574},{"id":"https://openalex.org/keywords/indirect-prompt-injection","display_name":"indirect prompt injection","score":0.8809999823570251},{"id":"https://openalex.org/keywords/zero-trust-security","display_name":"zero-trust security","score":0.8429999947547913},{"id":"https://openalex.org/keywords/capability-based-security","display_name":"capability-based security","score":0.8240000009536743},{"id":"https://openalex.org/keywords/data-loss-prevention","display_name":"data loss prevention","score":0.6079999804496765},{"id":"https://openalex.org/keywords/hardware-security","display_name":"hardware security","score":0.3540000021457672},{"id":"https://openalex.org/keywords/cryptographic-signing","display_name":"cryptographic signing","score":0.33899998664855957}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8378000259399414},{"id":"https://openalex.org/C147346212","wikidata":"https://www.wikidata.org/wiki/Q5492632","display_name":"Trusted computing base","level":4,"score":0.555899977684021},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.48190000653266907},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.4625000059604645},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.43290001153945923},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.4244000017642975},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.4228000044822693},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.40070000290870667},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3815999925136566},{"id":"https://openalex.org/C3265923","wikidata":"https://www.wikidata.org/wiki/Q669129","display_name":"Arithmetic underflow","level":2,"score":0.37599998712539673},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.36890000104904175},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.3628000020980835},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3582000136375427},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.3474000096321106},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33559998869895935},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.3325999975204468},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.32589998841285706},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.31929999589920044},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.31189998984336853},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.31029999256134033},{"id":"https://openalex.org/C202973057","wikidata":"https://www.wikidata.org/wiki/Q7380130","display_name":"Runtime verification","level":3,"score":0.30790001153945923},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.30720001459121704},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3018999993801117},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.2994999885559082},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.2924000024795532},{"id":"https://openalex.org/C39217717","wikidata":"https://www.wikidata.org/wiki/Q1432354","display_name":"Hardware security module","level":3,"score":0.2833999991416931},{"id":"https://openalex.org/C48721391","wikidata":"https://www.wikidata.org/wiki/Q1265942","display_name":"FIFO and LIFO accounting","level":3,"score":0.27799999713897705},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.27799999713897705},{"id":"https://openalex.org/C2777127024","wikidata":"https://www.wikidata.org/wiki/Q726378","display_name":"Microkernel","level":2,"score":0.2743000090122223},{"id":"https://openalex.org/C32455479","wikidata":"https://www.wikidata.org/wiki/Q506053","display_name":"Kerberos","level":3,"score":0.27250000834465027},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.26989999413490295},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.2694999873638153},{"id":"https://openalex.org/C138101251","wikidata":"https://www.wikidata.org/wiki/Q213092","display_name":"Thread (computing)","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.2653000056743622},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.2644999921321869},{"id":"https://openalex.org/C2778000800","wikidata":"https://www.wikidata.org/wiki/Q830043","display_name":"Handshake","level":3,"score":0.26190000772476196},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.2615000009536743},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.26019999384880066},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.2596000134944916},{"id":"https://openalex.org/C53833338","wikidata":"https://www.wikidata.org/wiki/Q1061424","display_name":"Context switch","level":2,"score":0.25279998779296875}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23982145","doi":"https://doi.org/10.5281/zenodo.23982145","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23982145","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.23982146","doi":"https://doi.org/10.5281/zenodo.23982146","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23982146","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23982145","doi":"https://doi.org/10.5281/zenodo.23982145","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23982145","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, justice, and strong institutions","score":0.4399999976158142}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7165673943","https://openalex.org/W7126146385","https://openalex.org/W7214329609","https://openalex.org/W7133201951","https://openalex.org/W7201831063","https://openalex.org/W7160649573","https://openalex.org/W7154826983","https://openalex.org/W7155647529","https://openalex.org/W7221147873","https://openalex.org/W7212319369"],"abstract_inverted_index":{"Traditional":[0],"operating":[1],"system":[2],"architectures,":[3],"including":[4],"Linux,":[5],"Windows,":[6],"and":[7,40,67,90,97,144,165,175,198,217,231,247,275,299,357,372],"POSIX":[8],"microkernels,":[9],"were":[10],"engineered":[11],"under":[12],"the":[13,53,75],"foundational":[14],"assumption":[15],"that":[16,155,238],"software":[17],"processes":[18],"execute":[19],"deterministic,":[20],"human-authored":[21],"machine":[22],"binaries":[23],"within":[24],"static":[25],"protection":[26],"boundaries.":[27],"Both":[28],"autonomous":[29],"artificial":[30],"intelligence":[31],"(AI)":[32],"agents":[33,62],"governed":[34,308],"by":[35,261,309],"large":[36],"language":[37],"models":[38],"(LLMs)":[39],"modern":[41],"institutional":[42],"cryptographic":[43,190,300],"signing":[44],"pipelines":[45],"invalidate":[46],"this":[47,114],"paradigm:":[48],"unverified":[49],"control":[50,83],"flow":[51],"at":[52],"execution":[54,148],"boundary":[55],"leads":[56],"to":[57,85,296],"catastrophic":[58],"blind":[59],"execution.":[60],"Autonomous":[61],"ingest":[63],"untrusted":[64],"external":[65,133],"text":[66],"invoke":[68],"mutating":[69],"tools":[70],"via":[71,157],"protocols":[72],"such":[73],"as":[74],"Model":[76,416],"Context":[77,417],"Protocol":[78,418],"(MCP),":[79],"rendering":[80],"conventional":[81],"access":[82],"vulnerable":[84],"Indirect":[86],"Prompt":[87],"Injection":[88],"(IPI)":[89],"secret":[91],"exfiltration;":[92],"similarly,":[93],"compromised":[94],"developer":[95],"endpoints":[96],"spoofed":[98],"web":[99],"interfaces":[100],"trick":[101],"human":[102],"signers":[103],"into":[104],"blind-signing":[105,245],"malicious":[106],"smart-contract":[107],"delegations":[108],"(DELEGATECALL,":[109],"EIP-7702":[110,240],"0x04":[111,241],"SetCode).":[112],"In":[113],"paper,":[115],"we":[116],"introduce":[117],"GenOS,":[118,379],"a":[119,138,158,178,199,205,252,262,276,284,358,460],"tri-engine":[120],"Zero-Trust":[121,207,382,443],"security":[122,169,182,374],"architecture":[123],"implemented":[124],"in":[125,283,354],"100%":[126,359],"stable":[127],"Rust":[128,389],"(rustc":[129,391],"1.99.0)":[130,392],"with":[131,221,226],"zero":[132],"crate":[134],"dependencies.":[135],"GenOS":[136],"shares":[137],"portable":[139],"#![no_std]":[140],"verification":[141],"core":[142],"(causal-core":[143],"capability-engine)":[145],"across":[146,362],"three":[147],"planes:(1)":[149],"A":[150],"bare-metal":[151,400],"x86-64":[152,401],"microkernel":[153,399],"(kernel/)":[154],"boots":[156],"SHA-256":[159],"verified":[160],"UEFI":[161],"Limine":[162],"8.7.0":[163],"protocol":[164],"enforces":[166],"hardware":[167],"CPU":[168],"registers":[170],"(CR0.WP,":[171],"EFER.NXE,":[172],"CR4.SMEP,":[173],"CR4.SMAP,":[174],"CR4.UMIP).(2)":[176],"genos-guard,":[177,409],"drop-in":[179],"user-space":[180],"MCP":[181,367],"proxy":[183,411],"featuring":[184],"Decentralized":[185],"Information":[186],"Flow":[187],"Control":[188],"(DIFC),":[189],"Data":[191],"Loss":[192],"Prevention":[193],"(DLP),":[194,430],"scoped":[195],"path":[196],"rules,":[197],"localhost":[200],"transactional":[201],"Escrow":[202,343],"queue.(3)":[203],"genos-sentinel,":[204,440],"dual-ring":[206],"Perimeter":[208],"(GenOS":[209,236,444,465],"Shield:":[210,445],"IPv4/CIDR":[211],"allowlisting,":[212],"cryptographically":[213],"signed":[214],"binary":[215],"manifests,":[216],"WOTS-signed":[218],"peer":[219],"envelopes":[220],"monotonic":[222],"anti-replay":[223],"nonces)":[224],"paired":[225],"an":[227,312,325],"independent":[228],"Ethereum":[229],"RLP":[230],"Safe{Wallet}":[232],"EIP-712":[233],"Policy":[234],"Co-Signer":[235],"Sentinel)":[237,466],"detects":[239],"SetCode":[242],"delegations,":[243],"DELEGATECALL":[244],"spoofs,":[246],"velocity":[248],"anomalies":[249],"before":[250],"tripping":[251],"global":[253],"multi-chain":[254],"Circuit":[255],"Breaker.":[256],"Protection":[257],"domains":[258],"are":[259],"mediated":[260],"constant-time":[263],"O(1)":[264],"Capability":[265],"Engine":[266],"employing":[267],"generational":[268],"epoch":[269],"tokens":[270],"(CapId":[271],"=":[272],"<slot,":[273],"generation>)":[274],"Bell-LaPadula/Biba":[277],"DIFC":[278,352],"lattice.":[279],"Auditability":[280],"is":[281,307],"anchored":[282],"hash-chained":[285],"causal":[286],"ledger":[287],"supporting":[288],"post-quantum":[289],"Winternitz":[290],"One-Time":[291],"Signatures":[292],"(WOTS,":[293],"w=16)":[294],"immune":[295],"Shor's":[297],"algorithm":[298],"Merkle":[301],"inclusion":[302],"proofs":[303],"(CausalMembershipProof).":[304],"Resource":[305],"arbitration":[306],"SchedCP,":[310],"achieving":[311],"empirical":[313],"Jain's":[314],"Fairness":[315],"Index":[316],"of":[317,338,346],"0.9996.":[318],"User-space":[319],"statistical":[320],"evaluation":[321],"(N=10":[322],"runs":[323],"on":[324],"AMD":[326],"Ryzen":[327],"9":[328],"3900X":[329],"12-Core":[330],"/":[331],"24-Thread":[332],"processor)":[333],"demonstrates":[334],"capability":[335],"validation":[336],"latencies":[337,345],"1.9":[339],"ns/op":[340],"(531.6M":[341],"ops/s),":[342,350],"staging":[344],"83.6":[347],"ns/action":[348],"(12.0M":[349],"IPC":[351],"routing":[353],"1.1":[355],"us/msg,":[356],"pass":[360],"rate":[361],"97":[363],"automated":[364],"unit,":[365],"end-to-end":[366],"proxy,":[368],"Lazarus":[369],"Red-Team":[370],"replay,":[371],"adversarial":[373],"tests.":[375],"---Resumen":[376],"en":[377,388,405,436],"Espa\u00f1ol:Presentamos":[378],"una":[380],"arquitectura":[381],"de":[383,412,422,426,428,432,451,463,472],"triple":[384],"motor":[385],"implementada":[386],"\u00edntegramente":[387],"estable":[390],"con":[393,403,420,456,467],"cero":[394],"dependencias":[395],"externas:":[396],"(1)":[397],"un":[398,410,441,461],"(#![no_std])":[402],"aislamiento":[404],"Ring":[406],"3;":[407],"(2)":[408],"seguridad":[413],"para":[414],"agentes":[415],"(MCP)":[419],"seguimiento":[421],"contaminaci\u00f3n":[423],"DIFC,":[424],"prevenci\u00f3n":[425],"fuga":[427],"secretos":[429],"alcances":[431],"rutas":[433],"y":[434,438,454,477,483],"retenci\u00f3n":[435],"Escrow;":[437],"(3)":[439],"per\u00edmetro":[442],"listas":[446],"blancas":[447],"CIDR":[448],"IPv4,":[449],"manifiestos":[450],"binarios":[452],"firmados":[453],"sobres":[455],"nonces":[457],"anti-replay)":[458],"junto":[459],"co-firmante":[462],"pol\u00edticas":[464],"decodificador":[468],"independiente":[469],"RLP/EIP-712,":[470],"disyuntor":[471],"velocidad":[473],"por":[474],"ventana":[475],"deslizante":[476],"qu\u00f3rum":[478],"criptogr\u00e1fico":[479],"M-de-N.":[480],"C\u00f3digo":[481],"fuente":[482],"suite":[484],"reproducible:":[485],"https://github.com/genaropass/Gen-OS":[486]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-11-06T00:00:00"}