systems-foundations is a training repository for small, reviewable labs around Linux and systems fundamentals.

The goal is to keep each lab narrow, deterministic, and easy to inspect end to end: input evidence, normalization, filtering, reporting, and notes that explain the basics without pretending to be a full platform.

• projects/linux-auth-observe: Linux auth evidence mini-lab for exported journald JSON lines and distro auth syslog files. This was the first stable mini-lab in v0.1.0.
• projects/linux-socket-observe: local Linux networking state mini-lab for ss plus selected iproute2 snapshots. It builds one normalized snapshot artifact and generates a Markdown diff between two snapshots.

Latest stable release: v0.2.0 Latest release notes: v0.2.0 Changelog: CHANGELOG.md Docs index: docs/README.md Reviewer brief: docs/reviewer-brief.md

• Notes index
• Linux notes index
• Public note policy
• Text processing pipelines
• System information and disk triage

Each mini-lab keeps its own tests:

cd projects/linux-auth-observe
python -m pytest -q
cd ../linux-socket-observe
python -m pytest -q

• projects/: focused mini-labs
• docs/: reviewer-facing docs and release notes
• notes/: short learning notes and schemas that support the labs
• .codex/: local assistant configuration for this repository