# K1586–K1590: bounded temporary filesystem

The temporary filesystem owns two file slots and at most 64 data bytes, with a configurable nonzero quota. Names are bounded UTF-8 without separators or NUL bytes. Each file has a nonzero owner and a monotonically assigned inode; tokens also carry a mount generation.

Create, write, unlink, and reset update the fixed table only after all name, owner, slot, offset, and quota checks pass. A write may leave a zero-filled gap, and quota accounts for the resulting file length. Failed writes preserve file bytes, quota usage, and ownership. Reads on an invalid owner or stale token leave the output buffer unchanged.

Unlink frees its file's quota and invalidates its inode. Reset clears all files, releases quota, and advances the generation, so prior tokens cannot be reused. The model uses RAM only; actual userspace file operations, persistence, and product release acceptance require separate evidence.