Kernel modules

What kernel modules are on Peios, the security premise behind the loading model, and the high-level policy posture.

The load/unload syscalls, authority gate via SeLoadDriverPrivilege, the userspace helper path, reference counting, and forced unload policy.

How the kernel verifies module signatures, the three trusted-key sources, the build-floor + registry knob policy model, and Secure Boot integration.

Module-declared tunables — load-time and runtime — and the file-SD model that governs their mutation.

How modules declare dependencies and exports, the depmod-built dependency database, vermagic and modversions ABI checks, and EXPORT_SYMBOL_GPL semantics.

The request_module demand-load path, AutoLoadPolicy registry knob, blacklist mechanism, and the post-boot LockAfterBoot ratchet.

The kernel-tainted flag bitfield — what each bit means, when it's set, how it's surfaced, and how taint events flow into audit.