fix: Oracle review 4 — all remaining issues resolved

1. KWin || true removed from sed commands (lines 53-57)
2. docs/07: RELIBC-COMPLETENESS+IMPLEMENTATION → KERNEL-IPC-CREDENTIAL
3. docs/README: v2.0 note → v4.0, date 2026-04-18 → 2026-05-01
4. local/AGENTS.md: v2.0 reference → v4.0
5. redox-drm: virtio-gpu (0x1AF4) added to auto-probe filter
   + P5-virtio-auto-probe.patch wired in recipe.toml
6. KWin cmake configs kept (downstream dependency, not KWin stub)

docs/07-RED-BEAR-OS-IMPLEMENTATION-PLAN.md

@@ -410,8 +410,7 @@ The current subsystem plans to treat as first-class are:
 - `local/docs/USB-IMPLEMENTATION-PLAN.md`
 - `local/docs/WIFI-IMPLEMENTATION-PLAN.md`
 - `local/docs/BLUETOOTH-IMPLEMENTATION-PLAN.md`
-- `local/docs/RELIBC-COMPLETENESS-AND-ENHANCEMENT-PLAN.md`
+- `local/docs/KERNEL-IPC-CREDENTIAL-PLAN.md` — implemented credential syscalls + kernel robustness
-- `local/docs/RELIBC-IMPLEMENTATION-PLAN.md` — implementation roadmap for relibc POSIX gaps
 - `local/docs/RELIBC-IPC-ASSESSMENT-AND-IMPROVEMENT-PLAN.md`
 - `local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md` — **canonical comprehensive plan**
 

docs/README.md

@@ -5,9 +5,9 @@ Technical documentation for Red Bear OS as an overlay distribution on top of Red
 This index is the entry point for the documentation set. Its main job is to make the
 current/canonical versus historical/reference split obvious.
 
-> **Status note (2026-04-16):** The canonical desktop path document is now
+> **Status note (2026-04-30):** The canonical desktop path document is
-> `local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md` (v2.0, three-track Phase 1–5 model). It consolidates
+> `local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md` (v4.0, single comprehensive plan). It supersedes
-> the Wayland, KDE, and GPU roadmap into one honest implementation plan with testable exit criteria.
+> all earlier individual assessments and is the single authority for current state.
 > The historical docs below (01–05) remain useful for architecture reference and implementation
 > rationale, but they should be read together with the new plan and the current local subsystem docs.
 
@@ -92,9 +92,9 @@ Do not flatten those into one “supported” claim in public summaries.
 
 - `../local/docs/SCRIPT-BEHAVIOR-MATRIX.md` — what the main sync/fetch/apply/build scripts do and do not guarantee
 
-## Current State Summary (as of 2026-04-18)
+## Current State Summary (as of 2026-05-01)
 
-This summary is only a quick orientation layer. For canonical current-state detail, prefer:
+This summary is only a quick orientation layer. For canonical current-state detail, see `local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md` (v4.0).
 
 - `docs/07-RED-BEAR-OS-IMPLEMENTATION-PLAN.md` for repository-wide execution order,
 - `local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md` for the canonical comprehensive plan,

local/AGENTS.md

@@ -370,8 +370,8 @@ When mainline updates affect our work:
 ## PLANNING NOTES
 
 - `docs/07-RED-BEAR-OS-IMPLEMENTATION-PLAN.md` is the canonical public execution plan.
-- `local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md` (v2.0) is the canonical desktop path plan from console to
+- `local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md` (v4.0) is the canonical comprehensive plan —
-  hardware-accelerated KDE Plasma on Wayland, using a three-track Phase 1–5 model.
+  supersedes all individual subsystem docs. See it for current state, blockers, and roadmap.
 - `local/docs/WAYLAND-IMPLEMENTATION-PLAN.md` is the canonical Wayland subsystem plan beneath the
   desktop path. Use it for Wayland-specific stability, completeness, ownership, and runtime-proof
   sequencing.

local/patches/redox-drm/P5-virtio-auto-probe.patch

@@ -0,0 +1,16 @@
+diff --git a/local/recipes/gpu/redox-drm/source/src/main.rs b/local/recipes/gpu/redox-drm/source/src/main.rs
+index 612a64e0f..f4abdc7bb 100644
+--- a/local/recipes/gpu/redox-drm/source/src/main.rs
++++ b/local/recipes/gpu/redox-drm/source/src/main.rs
+@@ -168,9 +168,9 @@ fn select_gpu_from_args() -> Result<PciDeviceInfo> {
+         .map_err(|e| DriverError::Pci(format!("PCI scan failed: {e}")))?;
+     let first = devices
+         .into_iter()
+-        .find(|d| d.vendor_id == PCI_VENDOR_ID_AMD || d.vendor_id == PCI_VENDOR_ID_INTEL)
++        .find(|d| d.vendor_id == PCI_VENDOR_ID_AMD || d.vendor_id == PCI_VENDOR_ID_INTEL || d.vendor_id == 0x1AF4)
+         .ok_or_else(|| {
+-            DriverError::NotFound("no AMD or Intel GPU found via scheme:pci".to_string())
++            DriverError::NotFound("no AMD, Intel, or VirtIO GPU found via scheme:pci".to_string())
+         })?;
+     let mut pci = PciDevice::open_location(&first.location)
+         .map_err(|e| DriverError::Pci(format!("failed to open GPU {}: {e}", first.location)))?;

local/recipes/gpu/redox-drm/P5-virtio-auto-probe.patch

@@ -0,0 +1,16 @@
+diff --git a/local/recipes/gpu/redox-drm/source/src/main.rs b/local/recipes/gpu/redox-drm/source/src/main.rs
+index 612a64e0f..f4abdc7bb 100644
+--- a/local/recipes/gpu/redox-drm/source/src/main.rs
++++ b/local/recipes/gpu/redox-drm/source/src/main.rs
+@@ -168,9 +168,9 @@ fn select_gpu_from_args() -> Result<PciDeviceInfo> {
+         .map_err(|e| DriverError::Pci(format!("PCI scan failed: {e}")))?;
+     let first = devices
+         .into_iter()
+-        .find(|d| d.vendor_id == PCI_VENDOR_ID_AMD || d.vendor_id == PCI_VENDOR_ID_INTEL)
++        .find(|d| d.vendor_id == PCI_VENDOR_ID_AMD || d.vendor_id == PCI_VENDOR_ID_INTEL || d.vendor_id == 0x1AF4)
+         .ok_or_else(|| {
+-            DriverError::NotFound("no AMD or Intel GPU found via scheme:pci".to_string())
++            DriverError::NotFound("no AMD, Intel, or VirtIO GPU found via scheme:pci".to_string())
+         })?;
+     let mut pci = PciDevice::open_location(&first.location)
+         .map_err(|e| DriverError::Pci(format!("failed to open GPU {}: {e}", first.location)))?;

local/recipes/gpu/redox-drm/recipe.toml

@@ -1,6 +1,6 @@
 [source]
 path = "source"
-patches = ["P1-intel-gen-gate.patch", "P2-intel-display-fixes.patch", "P3-intel-gen8-gen9-firmware.patch", "P4-virtio-gpu-driver.patch"]
+patches = ["P1-intel-gen-gate.patch", "P2-intel-display-fixes.patch", "P3-intel-gen8-gen9-firmware.patch", "P4-virtio-gpu-driver.patch", "P5-virtio-auto-probe.patch"]
 
 [build]
 template = "cargo"

local/recipes/kde/kwin/recipe.toml

@@ -51,10 +51,10 @@ done
 
 # Attempt real cmake build with Redox-viable feature set
 sed -i "s/^ecm_install_po_files_as_qm/#ecm_install_po_files_as_qm/" \
-    "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null || true
+    "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null
 sed -i 's/^ki18n_install(po)/#ki18n_install(po)/' \
-    "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null || true
+    "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null
-sed -i '/include(ECMQmlModule)/s/^/#/' "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null || true
+sed -i '/include(ECMQmlModule)/s/^/#/' "${COOKBOOK_SOURCE}/CMakeLists.txt" 2>/dev/null
 
 rm -f CMakeCache.txt
 rm -rf CMakeFiles