The Zainium Principles

Principles by Ali Zain

Zainium OS is built around one idea: the core of a computer should never break. These ten principles are how we keep that promise — and what every part of the system is measured against.

1. 01

   The core never breaks

   The base of the system — syshub — is immutable by design. Installing software, a failed update or a careless command cannot damage it. If anything built on top of it fails, the base still boots on its own, and you are back to a working computer.

2. 02

   Build it from scratch

   Zainium OS is not a respin of another distribution. Every package of the base is built from source by our own recipes and CI, so we understand and own every part of how the system is put together — and nothing upstream can quietly change it.

3. 03

   Every file has one owner

   The base, the software you install and the boot files live in separate layers, and no layer writes into another. When every file has exactly one owner, the system stays understandable, removable and repairable. We published this layout as an open standard, the Dualayer Hierarchy Standard.

4. 04

   Atomic or not at all

   An upgrade of the base either applies completely or does not apply. It is downloaded and verified while you work, applied at the next boot before anything uses it, journaled at every step, and can be rolled back. A half-upgraded system is not a state Zainium OS can be in.

5. 05

   No dependency hell

   Nothing is installed until every package and every shared library it needs is resolved. zex takes a missing library from the repository that has that exact version, and stops before changing anything when something cannot be satisfied. No half-installed packages, ever.

6. 06

   Root protects

   Administrators need power, not the ability to destroy the system by accident. elevate replaces sudo and refuses to delete, move or overwrite the base even as root, and the kernel seals every file of the base so not even root can change its content. The core changes only through verified upgrades.

7. 07

   Run everything

   A secure base must not mean a small world. musl and glibc run side by side, software built for other distributions keeps working through sys_resolver, and prebuilt applications start with the right loader — without ever touching the core.

8. 08

   Open by default

   The operating system is free software under the GPL-3.0, every recipe is public, and the filesystem layout is an open specification any distribution can implement. Trust comes from what anyone can read.

9. 09

   A system that explains itself

   The documentation lives in the system itself, in /overlayer, next to what it describes — for people and for the AI agents that increasingly work alongside them. A computer you can understand is a computer you can trust.

10. 10

    Simple for people, serious for enterprises

    A clean COSMIC desktop that just works for everyday use, and the guarantees that organizations need from the machines they cannot afford to lose: a core that does not break, upgrades that do not half-apply, and a system that can always be recovered.