keelOS management VM image (mvm.img). Everything in it is built from unmodified upstream sources:

Linux 6.12.111 (GPL-2.0, see linux-COPYING)
  https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.12.111.tar.xz
  sha256 9e59dc67624188fa12a6601f9598499cd6662a9066be572b59f935e3d7849810
init: keelOS's own program (tools/mvm/init.c), built with nolibc from the same kernel tree
(tools/include/nolibc, LGPL-2.1 OR MIT, used under MIT: nolibc-MIT).
BearSSL 0.6 (MIT, see bearssl-LICENSE.txt), compiled unmodified into init (keelRM's TLS)
  https://bearssl.org/bearssl-0.6.tar.gz
  sha256 6705bba1714961b41a728dfc5debbe348d2966c117649392f8c8139efc83ff14

mvm.img is the kernel's vmlinux with its symbols stripped (objcopy --strip-all), gzip -9 -n.
The kernel configuration is mvm.config; the build script (build.sh), the configuration fragment
(config) and init.c are published with keelOS in tools/mvm/ (init.c includes hyp/keel_abi.h,
published with them) and rebuild this image exactly.
The complete source of the GPL/LGPL/MPL components (upstream files at these versions, our patches, the kernel configuration, the build
scripts) is published for every keelOS build at https://keelos.dev/sources/ as keelos-<version>-sources.tar.xz (GPLv2 section 3 equivalent access).
