Constants and catalogs

The numeric constants, named values, and lookup tables that appear throughout the KACS surface — well-known SIDs, privilege LUIDs, ACE types and flags, access mask bits per object type, mitigation flags, mount policy values, error codes. This page is the map.

Catalog of SIDs whose values are defined by Peios rather than allocated at runtime. Organised by authority — universal, NT Authority, BUILTIN, integrity, PIP trust, confinement, capabilities.

Every privilege defined in v0.20, with its LUID bit position, category, and one-line effect. Privileges occupy a 64-bit bitmask on each token; this catalog is the bit-by-bit reference.

The 21 ACE type values catalogued, plus the AceFlags bits (inheritance and audit), the SD control flags, and the canonical inheritance flag combinations.

The 32-bit access mask uses object-specific bits (0–15) whose meaning depends on the object type, plus standard rights, special rights, and generic rights. This page catalogues the per-object-type bits — file, process, token, registry key, and service — and the GenericMapping tables that convert generic rights to specific ones.

Mitigation flags, mount policy values, integrity levels, impersonation levels, logon types, error codes, size limits, magic numbers, and the rest of the numeric constants that don't fit the larger catalogs.