diff --git a/config/redbear-bare.toml b/config/redbear-bare.toml
new file mode 100644
index 0000000000..80d3fe72ed
--- /dev/null
+++ b/config/redbear-bare.toml
@@ -0,0 +1,102 @@
+# Red Bear OS Bare Configuration
+# 
+# Target contract:
+# - Boots kernel
+# - Starts init daemons via base-initfs 90_initfs.target
+#   (logd, randd, zerod, ptyd, inputd — provided by base recipe)
+# - Console getty → zsh login prompt (from minimal.toml's 30_console.service)
+# - No networking, no driver-manager, no display, no audio, no extra daemons
+# - Stripped to bare minimum
+#
+# Build: make live CONFIG_NAME=redbear-bare
+
+include = ["minimal.toml"]
+
+[general]
+filesystem_size = 96
+
+# Override base.toml's network config — no DNS, no IP, no router
+[[files]]
+path = "/etc/net/dns"
+data = ""
+
+[[files]]
+path = "/etc/net/ip"
+data = ""
+
+[[files]]
+path = "/etc/net/ip_router"
+data = ""
+
+[[files]]
+path = "/etc/net/ip_subnet"
+data = ""
+
+# Override base.toml's package manager config — no remote repo
+[[files]]
+path = "/etc/pkg.d/50_redox"
+data = ""
+
+# Override base.toml's login_schemes — no display/audio schemes in bare
+[[files]]
+path = "/etc/login_schemes.toml"
+data = """
+[user_schemes.root]
+schemes = [
+    "debug",
+    "event",
+    "memory",
+    "pipe",
+    "serio",
+    "irq",
+    "time",
+    "sys",
+    "rand",
+    "null",
+    "zero",
+    "log",
+    "shm",
+    "chan",
+    "uds_stream",
+    "uds_dgram",
+    "file",
+    "pty",
+    "sudo",
+]
+[user_schemes.user]
+schemes = [
+    "debug",
+    "event",
+    "memory",
+    "pipe",
+    "serio",
+    "irq",
+    "time",
+    "sys",
+    "rand",
+    "null",
+    "zero",
+    "log",
+    "shm",
+    "chan",
+    "uds_stream",
+    "uds_dgram",
+    "file",
+    "pty",
+    "sudo",
+]
+"""
+
+[users.root]
+password = "password"
+uid = 0
+gid = 0
+shell = "/usr/bin/zsh"
+
+[users.user]
+password = ""
+shell = "/usr/bin/zsh"
+
+[groups.sudo]
+gid = 1
+members = ["user"]