# INIT service manifest (K1241–K1245)

INIT receives at most eight static service declarations. Each declaration has
a nonzero unique service ID, a nonzero SHA-256 image identity, a supported
required user ABI version, and a positive page limit. Validation sums page
and handle limits against a caller-provided budget. It takes no resource and
returns a move-only `Validated` token only after all declarations pass.

The manifest is a declaration, not a launch order. Service dependencies,
startup sequencing, process creation, image authentication, and actual guest
acceptance require later stages. K1245 must exercise a validated declaration
in a real EL0 INIT path and show that rejected declarations acquire no owner.