Snapshot of October 29, 2026. This dossier describes the four repositories as they stood that day; the projects have moved on since, and the repositories are the authority. Underlined links lead to the sources, frozen at their state of that day. What came next lives on gnu6dotlive.github.io.

Dossier 1 · the desktop

gnosix

A desktop environment for Linux, written in Rust, that draws everything you see itself: the bar, the deck and its AppStack, the windows, the settings, the lock screen.

Experimental 26.11-rc1 « Ardoise » MIT licence

On this page
  1. In one picture
  2. What it does, concretely
  3. Under the hood: four planes
  4. What "proven" means here
  5. History: three weeks of public repository
  6. Projections: what comes after « Ardoise »
  7. What it changes, depending on who you are
  8. What is still open
  9. Going further
8surfaces proven in the author's real session
9surfaces qualified in an isolated session, awaiting review
2surfaces verified in source only
1engine still experimental: the background renderer

In one picture #

The analogy

Think of a tidy workshop. There is the workbench where you act, the drawers where you keep what must survive the night, the shelf where the tools sit, and the rulebook that says who may open what.

A computer desktop is exactly that. Most desktops melt all four into a single program. gnosix keeps them apart, and names each one.

What it does, concretely #

Once started, gnosix replaces the session's graphical shell. It is not a decoration laid over an existing desktop: it is the desktop itself, drawn in Rust and displayed natively.

Diagram of a gnosix screen: bar at the top, windows in the middle, the AppStack open above the deck, the deck at the bottom, with annotations.
The four main surfaces. The bar can travel from one edge to another; the deck gathers the applications; the AppStack, housed in the deck, is for searching and opening; the desktop carries the windows and modules.
Sketch of a gnosix screen: bar at the top, two windows, deck at the bottom, a notification and an on-screen display on the right.
A sketch of the principle. The numbered markers (1 to 5) name the surfaces: bar, windows, deck, notification, on-screen display. It is a proposed layout, not a screenshot — the shapes suggest, they do not reproduce.

The bar

Persistent, on any edge of any screen. It moves along the frame; its modules follow it and turn with it. They can be reordered with the mouse. Edge, density, thickness and visibility are remembered.

The deck and the AppStack

A dock of application cards, with magnification. The AppStack searches the catalogue from there (recent, A–Z, categories, search) and launches through the launch authority. Pins are durable.

The utilities

Quick toggles (do not disturb, keep awake, microphone, Wi-Fi, Bluetooth), brightness (backlight and DDC/CI) and volume, with an on-screen display.

The session

Lock, suspend, log out, reboot, power off — through logind. Heavy actions are held back, blockers are shown.

The dashboard

Calendar, media controls (MPRIS) and system resources, extruded from the bar's clock.

The workspaces

A workspace manager with live window thumbnails — in memory only, never while the session is locked, with a list of excluded applications.

The notifications

gnosix is the session's notification service. Per-application rules, a "do not disturb" mode.

The lock screen

A lock screen with PAM, automatic lock after inactivity, and its settings.

The settings

A single surface: bar, deck, surfaces, displays (resolution, refresh rate, scale, rotation, position, with keep-or-revert), default applications, notifications, language, wallpaper.

Language and icons

English and French throughout, chosen in the settings, with a coverage check. Tabler icons drawn natively.

Animation: the AppStack card in the deck is pressed; the deck stretches upward into a single panel, “cali” is typed, Calix comes up, Enter; the panel folds back, the bar shows “launch authority granted” and Calix joins the deck.
The AppStack comes out of the deck. A single shape stretches out of the deck, instead of a window laid on top; the search lives inside it, then everything folds back. Launching goes through the launch authority, which grants or refuses. An illustration of the principle: neither a screen capture nor real timings.

Frugal at rest, precise in motion

A desktop spends most of its time doing nothing. gnosix takes that into account: no redraw at rest. Nothing is repainted while nothing changes, which spares the graphics card and the battery.

When something moves — the bar changing edge, the deck stretching — motion follows 4-millisecond deadlines, set to the screen's real refresh rate. The repository measured it at 75 and 165 frames per second. At 165 Hz a frame lasts about 6 ms: a 4 ms deadline leaves room never to skip one.

Privacy by construction

The workspace manager shows live window thumbnails. The repository sets their bounds: thumbnails live in memory only, are never captured while the session is locked, and a list of excluded applications keeps sensitive windows out. Notifications have per-application rules and a "do not disturb" mode.

One text editor, everywhere

Every input field on the desktop — search, settings, lock screen — goes through the same editor, which splits text by grapheme (a character as you see it, accents and emoji included) and accepts input methods. French and English cover the whole shell, lock screen included, and a coverage check refuses a forgotten string.

Under the hood: four planes #

It is the project's most important architectural decision, and the easiest to explain: observing, remembering, showing and acting are four different trades. gnosix gives them four distinct planes.

Four planes: observe, remember, show, act. Data flows between them, but the right to act does not follow.
The central rule. Passing data from one plane to another never transfers the right to act. A name, a path or a running process does not prove a permission.

The observation plane translates the compositor's facts into a typed, deterministic model: screens, workspaces, windows, focus, visibility. This model decides nothing; it describes.

The durable plane keeps identities and profiles. A plugged-in screen is not automatically "the known screen": the association between the session identity and the durable identity is explicit, and can deliberately fail.

The presentation plane projects the current state onto the screen. Geometry there is product data, not decoration: the same geometry is used to paint and to decide whether a click hits its target.

Finally, the authority plane carries out the rare gestures: locking, launching an application, switching workspaces. Each request carries a typed target and a freshness boundary. If the state is unknown or stale, the system refuses rather than inventing normal behaviour.

Two ways to build a desktop

Question"Monolithic" desktopSeparated desktop (gnosix)
Who knows the state?The main program, a bit everywhereA single, explicit model
Who may act?Often the same programNarrow, authenticated services
What happens if the state is unclear?A plausible state is assumedThe action is refused
How do you prove a feature works?"It seems to work"A named, published level of proof

Neither approach is "the right one" in absolute terms. The second costs more work, but makes failures explainable and permissions verifiable.

Where the code lives

At the snapshot commit, gnosix holds 182,325 lines of Rust written by the project, spread over 38 packages ("crates") and a checking tool. The presentation layer, gnos-ux-gpui, carries 58% of it on its own: drawing a desktop that responds well takes more code than observing or governing it.

Where gnosix's code lives Lines of Rust per crate: gnos-ux-gpui holds 105,902, 58% of first-party Rust; vendored GPUI is 111,519 upstream lines. GNOSIX · THE CODE Where the code lives Lines of Rust per crate, at the snapshot commit. Presentation outweighs everything else combined. 0 25,000 50,000 75,000 100,000 gnos-ux-gpui presentation: bar, deck, panels 105,902 gnos-ux-surface surfaces and geometry 17,670 gnosix-hyprland compositor observation 6,407 xtask tooling: CI contract, checks 5,944 in-gnu-os-desktop-profiles durable profiles 5,394 in-gnu-os-output-identity output identity 3,651 gnos-network network 3,444 gnos-audio audio 2,574 gnosix-desktop-model typed desktop model 2,398 30 other crates lock, notifications, launch, icons… 28,941 58% of first-party Rust Vendored GPUI vendor/ — upstream code, not written by the project 111,519 First-party Rust: 182,325 lines in 38 crates and xtask · Python 9,295 · HTML 5,825 · evidence JSON 30,478 · 325 SVG icons Line count (comments and blanks included) on gnosix at commit 66d801b. A line is not a measure of quality.
Presentation outweighs everything else. The other planes — observe, remember, act — fit in narrow crates of a few thousand lines each. GPUI, vendored as is, is upstream code: it is not counted as the project's work.

What "proven" means here #

The repository distinguishes five states, and publishes them surface by surface. This is not rhetoric: it is what stops a successful demo from turning into a general promise.

StateWhat it meansExample
PROVENQualified in source, observed in the real session, confirmed by the author.Notifications, French and English, fluidity.
QUALIFIEDQualified in source and in an isolated Wayland session; deployed on the author's machine, confirmation pending.The bar, the deck, the settings, the lock screen.
SOURCE-QUALIFIEDContracts and invariants are exercised in source; broader real behaviour is not implied.Durable screen identity, accessibility mechanics.
EXPERIMENTALActive work, limited claim.The wallpaper rendering engine.
OPENA named obligation remains unresolved.Full product acceptance.
gnosix's 20 published capabilities, by level of proof Stacked bar: 8 PROVEN, 9 QUALIFIED, 2 SOURCE-QUALIFIED, 1 EXPERIMENTAL, with the list of capabilities at each level. GNOSIX · PUBLISHED STATUS What is proven, what awaits review Each capability carries one level, published surface by surface. None is “finished”: the top step is the author's confirmation. 20 PUBLISHED CAPABILITIES, BY LEVEL OF PROOF 8 9 2 1 PROVEN · 8 seen in the real session, confirmed Notifications French and English Tabler icons Fluidity Multi-output routing Profile store Workspace activation Session lifecycle QUALIFIED · 9 qualified in an isolated session The bar The deck and the AppStack Utilities and OSD Session Dashboard Workspaces Lock screen Settings Desktop and modules SOURCE-QUALIFIED · 2 verified in source Durable output identity Accessibility mechanics EXPERIMENTAL · 1 limited claim gnoshow, the background renderer And 5 obligations remain OPEN: whole-product acceptance, the author's review, the screen reader, keyboard on the bar, mods. Source: gnosix/docs/status/STATUS.md at commit 66d801b (October 29, 2026).
The picture on October 29. Nine capabilities wait for the same thing: the author's review, which will move them to PROVEN or reopen them. None is declared "finished" without it.

History: three weeks of public repository #

gnosix's public repository does not tell the whole story, and says so. Development happens in a private repository; the public one receives projections of it at each release. What is visible starts on October 5, 2026.

gnosix's public history, October 5 to 27, 2026 Public commits per day and milestones: first source cut on October 5, MIT licence on the 10th, Wayland qualification on the 12th, 26.11-rc1 pre-release on the 21st, CI 38/38 on the 27th. GNOSIX · HISTORY Three weeks of public repository The work lives in a private repository; the public one receives projections of it. Here is what is visible. 3 1 16 6 3 4 Oct 5 Oct 10 Oct 15 Oct 21 Oct 27 First public source cut code arrives by projection Relicensed to MIT “everyone's property” Wayland qualification click, dual output, drag and drop v26.11-rc1 « Ardoise » first public pre-release CI 38/38 · default profile after merging the pre-release 33 public commits · bars: commits per day Source: Git history of gnu6dotlive/gnosix up to commit 66d801b; docs/reference/RELEASE-POLICY.md.
33 public commits. October 10 holds nearly half of the visible activity, with the switch to the MIT licence. On the 21st, the first public pre-release; on the 27th, its merge and a green CI contract.

The milestones, in order

How a release is born

The release policy, ratified on October 21, fits in a few rules. The private repository is the truth; the public repository is a projection written one way, by a script, with a whitelist of paths and a manifest of fingerprints. A public contribution is reviewed, integrated on the private side, and comes back with the next release.

The product is named by the year and month it ships, plus a mineral name, in alphabetical order: 26.11 « Ardoise » (slate). The crates keep semantic versioning: a crate whose interface changes must change its version, or the release check refuses it. Three channels: edge (the development branch, deployed on the author's machine), stable (the latest release), and a possible LTS, decided later.

The CI contract, in figures

On October 27, after merging the pre-release: 38 checks out of 38, in 25.9 seconds. The check set was reorganised with the pre-release (it had 48 before): the two figures do not compare, and the receipt says so.

Projections: what comes after « Ardoise » #

gnosix's roadmap is driven by evidence: a work item moves when its evidence is complete and, where required, accepted by the author. Releases, on the other hand, have fixed dates — two a year, in May and November — and carry whatever is ready.

gnosix's roadmap after 26.11 Timeline of release windows (26.11-rc1 published, 26.11, 27.05, 27.11) and seven announced work items without dates, including the threat model that precedes mods. GNOSIX · PROJECTIONS What comes after « Ardoise » Fixed release windows, undated work items: each moves when its evidence is complete. Oct 2026 Jan 2027 Apr Jul Oct Dec 2027 26.11-rc1 published Oct 21 26.11 « Ardoise » the release, announced 27.05 May window 27.11 November window TWO RELEASES A YEAR, IN MAY AND NOVEMBER · WHAT IS READY SHIPS, THE REST WAITS The author's review each QUALIFIED confirmed or reopened Module cards a module never loses its material The scene in layers one layer per surface, by attention Keyboard on the bar focus, arrows, Enter One shape for the shell one distance field for the whole shell A threat model authorities, D-Bus, keyboard, lock screen Confined mods after the threat model WHAT GNOSIX WILL NOT DO No generic shell-command executor, no monolithic settings daemon, no durable identity guessed from geometry. Source: gnosix/docs/status/ROADMAP.md and docs/reference/RELEASE-POLICY.md at commit 66d801b. The 27.05 and 27.11 windows follow from the announced cadence.
Fixed windows, undated work. The 27.05 and 27.11 windows follow from the announced cadence; no work item is promised for them. The threat model comes before mods: the desktop is not opened to third-party modules before writing down what it defends against.

The announced work

A review of every QUALIFIED surface; "cards" so each bar module keeps its material when moved; a scene built in layers; keyboard control of the bar; a single mathematical shape for the whole shell; a threat model; then confined mods, each in its own process, with declared permissions.

What will not be done

No generic shell-command executor, no monolithic settings daemon, no screen identity guessed from its geometry, and no silent adoption of a donor project's authority. A stable release for others is not claimed before an accessibility review.

What it changes, depending on who you are #

Curious Linux user

You can try a desktop unlike the others, on Arch Linux with Hyprland. Set aside some time: it is not yet a turnkey install for the general public.

Developer or integrator

The repository is a rare reference on separating observation, durable state, presentation and authority. The typed contracts and invariants are documented and testable.

Decision-maker or funder

The value is not "one more desktop". It is a method: a visible product whose every claim is bounded, dated and verifiable. The risk is owned and stated.

What is still open #

The limits, plainly
  • Not yet a desktop for others. 26.11-rc1 is an experimental public pre-release, used daily by its author — not a stable product.
  • Screen-reader accessibility is not claimed. Keyboard navigation and focus exist; real use by a blind person has not been reviewed.
  • Keyboard control of the bar is designed, not built.
  • Third-party modules are designed, not built. A threat model has to come first.
  • The native wallpaper remains experimental.

Going further #

Technical — languages, building blocks, licence

Language: Rust, with a toolchain pinned in the repository. Display: Wayland and GPUI; the target compositor is Hyprland. Size: some forty internal packages, split by domain (desktop model, Hyprland integration, presentation, system authorities).

Licence: MIT for the original code and documentation since October 10, 2026; GPL versions already distributed keep their permissions. Third-party components keep their own terms.

Checking for yourself

The repository exposes three qualification commands. cargo xtask ci is the reproducible contract to run before any publication; cargo xtask verify adds checks tied to the host machine, to be used only in an authorised environment.

The current status, surface by surface, is published in docs/status/STATUS.md. It is the document to read before repeating a claim.