[shaynelegault]

P105 can now append logical writes through the native kernel VFL/SwissPPNFTL path. Each complete 16 KiB program and its metadata pass synchronous readback before the map changes. Partial-sector updates preserve untouched bytes, and flush/FUA follow the same completion rule.

This exports three source commits as MTD patches 0006–0008, scoped to apple-armv7, and records separate device/chip evidence. Allocation preserves Apple contexts, VFL bootstrap members and mapped blocks. Every candidate is checked completely before use. Native summaries support fresh replay after open or closed blocks; an interrupted summary requires a fully validated data prefix. The allocator stops at ENOSPC; erase and reclamation remain open.

Both write Kconfig options default off. Logical writes also require write_enable=1, a verified program callback and a supported replay state. The recovered allocation floor must equal the final visible journal sequence. That holds for the saved 64 GB map checked by the C core. The caller must fence the intended logical partition. Request processing uses a NOIO allocation scope to prevent recursive writeback while its lock is held.

The inherited operating policy defaults to 32768 explicit read callbacks and ten minutes from probe. Program-internal blank checks and readback stay inside their provider callback, whose deadline is checked before and after completion. An installed root needs an explicit operating policy. P105 storage_read and storage_write stay missing, which keeps installation gated.

Validation:

• The official exporter proves the three patches reproduce Linux c63274165870417f01cc3e1264067cef71d9c0b2 from dependency 161217fd32. Selection changes from 28 to 31 patches on ARMv7; both ARM64 selections remain at 450.
• Exact current ARMv7 core, block, fixture and H2FMI objects compile in read-only and write-enabled configurations with W=1 and warnings as errors, retaining the inherited vmstat.h enum warning.
• All 26 real Linux KUnit cases pass on pinned pristine v6.12 with exact core/block/test C and a validation-only dependency symbol for the synthetic program provider. This excludes H2FMI hardware.
• Host ASan/UBSan checks pass 26 core cases, 13 read-only cases, 25 request-helper cases plus 2048 varied requests, and queue/provider policy checks. Coverage includes all 16 lanes, 8160 footer entries, uncertain programs, NOIO scope and fresh replay.
• Actual C replay of saved pages matches 28830 map boundary checks and native LwVM/System prefixes. The full Orchard suite completed 663 tests with one Linux-only Cascadia runtime fixture skipped. The three modules that launch isolated Python children were rerun in a private venv installed from this exact checkout: all 32 tests passed, and python -I resolves this checkout. All 34 catalog checks and four kernel-tree/export tests pass; the matrix regenerated unchanged.

The exact kernel writer awaits physical qualification. The earlier unplugged Omarchy desktop used the local Python backend. Native iOS recovery after writes, reboot persistence and interruption handling still require approved device work.

The topic-only delta is fd7bf97…4d93e3b. This draft targets upstream main. Merge dependencies are patch scoping (#85), verified PPN programming (#87), then bounded native-map recovery (#89). The latter carries the read and recovery-producer prerequisites.