# K1571–K1575: read-only stat and directory metadata

A fixed read-only directory owns two distinct UTF-8 entry names and three distinct inode identities: the directory, an empty file, and a 513-byte file. `Stat` exposes inode identity, kind, read-only permissions, owner identity, logical size, and allocated 512-byte block count. The empty file reports zero bytes and blocks; the 513-byte file reports 513 bytes and two blocks.

The proposed EL0 return value is a 40-byte `repr(C)` `StatWire`: `inode`, `size`, and `blocks512` as 64-bit little-endian values, followed by 32-bit `kind` (1 directory, 2 regular), `permissions`, `uid`, and `gid`. The kernel must copy this whole value through the authenticated current user's memory helper only after catalog validation; a failed query leaves the caller's output buffer untouched.

Catalog construction validates every inode before publishing the directory. A logical size larger than allocated capacity or a non-block-aligned capacity returns `CorruptInodeSize`. Invalid identity, type, permissions, duplicate names, and malformed names also refuse construction or lookup without changing an existing catalog. Stats are copied values; reads allocate no frame and change no state.

This model establishes metadata consistency. A userspace `stat` ABI, disk-backed 513-byte file, and product release acceptance require separate evidence.