These docs are under active development.

Reference

reference
security.h — Security descriptors

Complete reference for <peios/security.h> — the SID, security-descriptor, ACL, and ACE vocabulary shared by every KACS interface, plus the SDDL text codec and SD inheritance helpers.

reference
token.h — Tokens and sessions

Complete reference for <peios/token.h> — opening and minting access tokens, querying their contents, adjusting privileges and groups, duplicating/restricting/impersonating them, installing primary tokens, and managing logon sessions.

reference
access.h — Access checks

Complete reference for <peios/access.h> — running the KACS AccessCheck pipeline for a token against a security descriptor, including the object-type-list variant.

reference
file.h — File security

Complete reference for <peios/file.h> — the native KACS file open, reading and writing a file's security descriptor by path or fd, and the superblock mount-policy controls.

reference
process.h — Process security

Complete reference for <peios/process.h> — setting process mitigation controls on the process security block (PSB).

reference
registry.h — The registry (LCS)

Complete reference for <peios/registry.h> — the LCS registry client: opening keys, reading and writing layered values, enumerating, watching for changes, securing keys, backup/restore, and transactions.

reference
msgpack.h — MessagePack codec

Complete reference for <peios/msgpack.h> — the in-house MessagePack encoder, decoder, and validator that builds and parses KMES event payloads.

reference
event.h — Events (KMES)

Complete reference for <peios/event.h> — emitting events and consuming them from the per-CPU KMES ring buffers, with both a high-level reader and the low-level ring API.

reference
rsi/source.h — Becoming a source

Complete reference for <rsi/source.h> — registering as a Peios registry source and obtaining the source fd on which the RSI protocol is served.

reference
rsi/request.h — Decoding requests

Complete reference for <rsi/request.h> — reading framed RSI requests from the source fd, splitting header from payload, and decoding each operation's payload with its typed parser.

reference
rsi/response.h — Building responses

Complete reference for <rsi/response.h> — replying to RSI requests with status-only or payload-bearing responses, and the validation contract the helpers enforce.