# K1641–K1645 bounded namespace creation

Creation publishes a directory entry, inode identity and inode allocation bit
together in one serialized in-memory state assignment. Root inode 1 and reserved
slot 0 stay allocated. File and directory names are nonempty UTF-8 byte strings,
at most 16 bytes, without slash, NUL, dot or dot-dot. Parent inodes must exist
and be directories. Duplicate sibling names, full tables and exhausted quotas
return explicit errors with the complete state unchanged.

The quota check happens after a private inode reservation. Failure discards that
reservation and leaves no name or bitmap change visible. A mutant that publishes
the reservation prematurely must fail the negative test. Successful creation
of `/docs` and `/docs/readme` shows the directory, file and distinct inode bits.

This is a synthetic in-memory metadata model and assumes serialized access.
It does not write a journal or persistent inode/bitmap sectors, integrate VFS
syscalls, or establish SMP or power-loss atomicity. Six development guest
profiles are separate evidence from canonical product release acceptance.