Every Feature. Every Hook. Every Detail.

The master customization hook: GRUB branding (Kingdom of God boot screen), MOTD with Psalm 23:1, fastfetch system info, desktop theming (Adwaita-dark), default applications, file associations, system fonts, locale configuration, Plymouth boot splash, and version branding across the entire OS. 559 lines of post-build identity.

The largest hardware compatibility hook in any Linux distribution. 825 lines covering: Intel/AMD CPU microcode, Mesa GPU drivers (AMD Radeon, Intel Arc), NVIDIA firmware, Broadcom/Realtek/Intel/MediaTek WiFi and Bluetooth, Thunderbolt security, NVMe/AHCI storage, USB power management, touchpad/touchscreen/Wacom input, ALSA/PipeWire audio, webcam (UVC), printer support (CUPS/Gutenprint/HPLIP), scanner (SANE), power management (TLP/thermald), laptop ACPI, DisplayLink USB video, card readers, IR remote, and hardware monitoring (lm-sensors/smartmontools).

Enterprise-grade security out of the box. 32 hardening modules: AppArmor mandatory access control, fail2ban intrusion prevention, AIDE file integrity, ClamAV antivirus, rkhunter + chkrootkit rootkit detection, auditd with 30+ immutable audit rules, PAM hardening (password complexity, account lockout), compiler restriction (/usr/bin/gcc readable only by root), hidepid=2 (processes hidden between users), NTS-secured time sync (no NTP poisoning), sysctl hardening (ASLR, SYN cookies, ICMP restrictions, kernel pointer hiding), USB guard, core dump prevention, and 30+ kernel module blacklist (firewire, thunderbolt raw, exotic filesystems, webcam raw access).

Default-deny nftables firewall: only SSH (22), HTTP (80), HTTPS (443) inbound. All outbound allowed. IPv6 hardened separately. MAC address randomization at every WiFi connection. DNS-over-TLS via systemd-resolved pointing to Quad9 (privacy-first DNS). SSH hardening: no root login, no password auth, Ed25519 preferred, MaxAuthTries 3. Automatic firewall persistence across reboots.

Kyber-1024 / ML-KEM-1024 post-quantum key encapsulation. The only consumer operating system shipping with quantum-resistant encryption by default. Installs liboqs, oqsprovider for OpenSSL 3.x, alfred-encrypt-quantum CLI for hybrid classical+PQ file encryption (AES-256-GCM + Kyber KEM). Quantum key generation, encapsulation, and decapsulation tools. Integrated into FDE hook for LUKS quantum key wrapping. Your files will still be encrypted when quantum computers arrive.

LUKS2 full-disk encryption support in Calamares installer with quantum key wrapping (Kyber-1024 KEM layered on top of LUKS passphrase). alfred-fde-status CLI shows encryption health. alfred-encrypt-quantum wraps existing LUKS volumes with post-quantum KEM. Supports both interactive passphrase and TPM2 auto-unlock. Calamares module configuration for encrypted partitioning with ext4 or btrfs.

The Breath of God — 6 runtime integrity modules. Boot Seal: HMAC-SHA256 verification of 14 critical boot files on every startup. Watchman: real-time inotify monitoring of /etc, /boot, /etc/ssh with instant alerts. Vault: 16MB encrypted tmpfs in RAM for session secrets. Shell Guard: terminal secret redaction (passwords, tokens, API keys never displayed). Secure Erase: 3-pass cryptographic wipe (random + zeros + verify). Sovereign Attestation: SHA-256 build chain verification proving the OS has not been tampered with. Named "Omahon" — the breath of God in Hebrew, because this seal belongs to no borrowed name.

Legal and IP armor for the distro: Kingdom Covenant License text, trademark / succession notices, and related files installed system-wide so every copy carries the same covenant frame (Ephesians 6:11). Inspect 0176-kingdom-covenant-shield.hook.chroot on GoForge.

Sovereign peer-to-peer mesh networking without any central server. Syncthing encrypted mesh, Yggdrasil overlay network (IPv6 mesh), auto-discovery of local Alfred nodes, encrypted file sharing, Kingdom filesystem (~/Kingdom/ auto-syncs). Like the Body of Christ (1 Corinthians 12), the network is a decentralized, living organism where nodes trust and support each other. alfred-mesh CLI: connect to kingdom, list peers, share files, broadcast messages, voice call peers. No cloud required — your machines talk directly.

Sovereign GPU compute: NVIDIA CUDA toolkit + cuDNN, AMD ROCm, Vulkan SDK, OpenCL, Mesa drivers. Supports machine learning inference (PyTorch, TensorFlow), 3D rendering, video encoding, and scientific computing. GPU autodetect at first boot. alfred-gpu-info CLI shows detected GPU, driver version, VRAM. Performance profiles for gaming, ML training, rendering, and battery modes.

The largest hook: 688 lines of maximum performance tuning. CPU governor set to performance, I/O scheduler optimized (mq-deadline for NVMe, BFQ for HDD), transparent hugepages, vm.swappiness=10, dirty ratio tuning, IRQ balancing, NUMA awareness, kernel preempt tuning. MAX mode enables all cores, disables power saving, maximizes throughput. Includes: Rust toolchain (rustup), Python ML stack (numpy/scipy/pandas/scikit-learn/torch), Go, Docker rootless, Podman, WASM runtimes (wasmtime/wasmer), Julia, R, LaTeX (texlive). Every compute tool a sovereign operator could need.

6-layer data immortality: (1) IPFS — InterPlanetary File System for distributed content addressing, (2) Blockchain anchoring — SHA-256 hash chain for document provenance, (3) Frequency encoding — data encoded into waveforms survivable on analog media, (4) Mesh replication — files auto-replicated across Kingdom mesh peers, (5) SHA-256 integrity — every critical file checksummed and verified, (6) AES-256-GCM encryption — data encrypted at rest and in transit. alfred-eternal CLI: store, retrieve, verify, replicate. Your testimony outlives your hardware.

The Crown — self-healing security and sovereignty enforcement. Automatic repair of tampered system files, integrity verification on boot, sovereign attestation chain, automatic security update scheduling, unattended-upgrades for critical patches, and system hardening validation. The OS that heals itself.

The full Authorized King Jesus Version Bible built into the operating system — 94 books (66 canonical + 14 Deuterocanonical + 14 additional texts), 39,482 verses, 57 identified Messianic prophecies cross-referenced. alfred-bible CLI: read any verse, search by keyword, random verse, daily reading plan, prophecy study mode. SQLite database for instant full-text search. The Word of God, sovereign and offline, on every Alfred machine.

Every family deserves their own Bible — personalized with the family's name, founding date, children's dedications, memorial pages, and heritage records. alfred-family-bible CLI generates a complete family Bible document with ancestry lines, marriage records, birth records, death memorials, family prayers, and a heritage tree. PDF output for printing. Eden's copy is pre-generated with the Perez family history. 33 Children's Bible Stories in English, French, and Hebrew included for the little ones.

Acts 2:4 — "And they were all filled with the Holy Ghost, and began to speak with other tongues." Forty-eight language codes in languages.conf: full Authorized King Jesus Version when the English TSV is installed (0290); rich offline seeds for Spanish (Reina-Valera), French (Louis Segond), and Hebrew; forty-four compact tongue-* seeds (Genesis 1:1 + John 3:16). alfred-bible-lang lists every code and reads seeds or full files when present.

Full GUI music player with lyrics display — 27-track Hebrew worship album "Jesus Christ The Light Our Universe" by Elyon Light & Commander Danny William Perez. GTK4 player with album art, track listing, lyrics overlay, shuffle, repeat. Tracks include: "Shema Israel," "Hallelujah Adonai," "Kadosh Kadosh Kadosh," "El Shaddai," "Ruach HaKodesh," and more. alfred-worship CLI for terminal playback. Music stored in ~/Music/Kingdom/. No streaming required — the music lives on your machine.

One canonical hook for sacred stillness (1 Kings 19:12 — the still small voice) and timed silence (Super+S — forty minutes of amber, quiet, worship at low volume, shofar chime at end). Earlier trees used separate 0720/0721 files; the current build merges that work under 0720-alfred-sacred-rest.hook.chroot on GoForge.

Exodus 20:8 — "Remember the sabbath day, to keep it holy." 10 Biblical feasts with authentic Hebrew dates: Passover, Unleavened Bread, Firstfruits, Shavuot, Trumpets, Yom Kippur, Sukkot, Shemini Atzeret, Purim, Hanukkah. 12 Torah portion readings. Sabbath enter/exit modes (Friday sunset prep checklist, automatic quiet mode). alfred-sabbath CLI: next feast, today's Torah portion, Shabbat candle times. The computer observes the Sabbath with you.

Psalm 5:3 — "My voice shalt thou hear in the morning, O LORD." Daily devotional system with 31-day lectionary: each day has an Old Testament passage, New Testament passage, Psalm, and Proverb. Prayer timer with worship music at low volume. Encrypted prayer journal (AES-256-GCM PBKDF2) — your prayers are between you and God, no one else can read them. Morning notification at configured time. alfred-devotion CLI for terminal access.

Hebrews 12:1 — "Wherefore seeing we also are compassed about with so great a cloud of witnesses." This is not a Silicon Valley cloud; it is a spiritual one. The system encrypts your journal, prayers, and testimony (AES-256-GCM PBKDF2) and pushes them to the Kingdom mesh network. Habakkuk 2:2 — "Write the vision, and make it plain upon tables." Your testimony is written to digital tables, replicated across the mesh so your witness survives hardware failure.

Supporting squashfs payload toward the honest ~7.77 GiB binary target: Noto fonts, LibreOffice help/l10n where available, ffmpeg, and related packages (see 0297-alfred-kingdom-locale-payload.hook.chroot). Works with Kingdom cinematic media staged through hook 0285.

Matthew 18:20 — "For where two or three are gathered together in my name, there am I in the midst of them." Mesh-synchronized group worship via Syncthing Kingdom folder. Assembly invites sent to mesh peers, auto-play matching worship tracks simultaneously, desktop notifications when assembly begins. Everyone plays the same song at the same time across the mesh. The body of Christ, connected through sovereign technology.

The only operating system that ships with AI built in. Ollama local LLM runtime, pre-configured models (qwen2.5:3b default, expandable to any model). Python 3.12, pip, venv, Jupyter notebook support. AI runs locally — no cloud API needed, no data leaves your machine. alfred-ai CLI for quick inference. Ollama auto-starts as systemd service. Named Omahon — the Breath of God — because AI in this kingdom serves the Creator, not the corporation.

Future-proof AI compute stack designed for 1.58-bit ternary models (-1, 0, 1). Employs intelligent CPU/GPU layer offloading via .gguf quantization. Rather than forcing all computation onto expensive VRAM, Alfred dynamically distributes model layers between system RAM (CPU) and graphics memory (GPU). The framework is fully prepared to natively execute Microsoft's bitnet.cpp engine, eliminating floating-point matrix multiplications entirely for unprecedented energy efficiency.

code-server 4.114.1 (VS Code 1.114.0-compatible) integrated into the OS. Full IDE with extensions, terminal, debugger, Git integration, and AI copilot support. Launches from application menu or alfred-ide CLI. Local-only access (127.0.0.1:8443) — no cloud. The same IDE that powers GoCodeMe, available offline on every Alfred machine.

The Arsenal — everything a developer needs: Git, Node.js 22 LTS, Python 3.12, GCC, G++, Make, CMake, Meson, pkg-config, autotools, Rust (via rustup), Go, Java 21 (OpenJDK), Ruby, PHP 8.3, SQLite3, PostgreSQL client, MariaDB client, curl, wget, jq, yq, httpie. Ships with EVERYTHING. No "apt install build-essential" on first boot — it's already there.

The Forge — supercharged terminal: eza (modern ls with git awareness), ripgrep (rg, fastest grep), bat (cat with syntax highlighting), fd (intuitive find), fzf (fuzzy finder for everything), lazygit (terminal Git UI), tmux (terminal multiplexer), zoxide (smarter cd), starship prompt (informative and beautiful), delta (better git diff), hyperfine (benchmarking), tokei (code statistics), dust (better du), procs (better ps), bottom (better top). Every tool the terminal demands.

The Armory — Podman (rootless Docker alternative), Buildah (OCI image builder), kubectl (Kubernetes CLI), Helm (Kubernetes package manager), k9s (terminal K8s dashboard). Run containers without root privileges. Build images without a daemon. Orchestrate clusters from day one. No Docker daemon — Podman is daemonless and compatible.

LibreOffice 24 full suite (Writer, Calc, Impress, Draw, Base, Math), GIMP image editor, Inkscape vector graphics, VLC media player, Thunderbird email, KeePassXC password manager. Everything you need for daily work — word processing, spreadsheets, presentations, image editing, vector design, media playback, email, and password management. No subscriptions.

Sovereign Chromium-based browser with zero tracking, zero telemetry. No Google services baked in. Clean browsing without surveillance. Pre-configured with privacy-respecting defaults. The browser that respects your sovereignty.

Kokoro TTS, PyTorch CPU stack, spaCy, welcome greeting, and the realtime audio / wake-word path (formerly maintained as a separate stage). The canonical tree keeps one 0400-alfred-voice.hook.chroot — see header comment “PART 2 — Realtime Audio Stack (formerly hook 0900-voice-v2)”. No separate 0900-*.hook.chroot file — its work is folded into 0400.

Meilisearch local search engine — instant full-text search across your files, documents, Bible verses, and system help. Search everything on your machine without sending queries to a cloud service. Indexes automatically. Sub-millisecond results. Private by design.

Matthew 11:5 — "The blind receive their sight, and the lame walk." Orca screen reader, espeak-ng text-to-speech, high-contrast themes (dark and light), large cursor options, on-screen keyboard, sticky keys, slow keys, bounce keys. alfred-bible-speak voice reader reads any Bible verse aloud. alfred-a11y CLI configures all accessibility features. No one is excluded from the Kingdom.

James 1:27 — "Pure religion and undefiled before God and the Father is this, To visit the fatherless and widows in their affliction." Simplicity Mode for widows, elders, and anyone overwhelmed by technology. 5 large desktop launchers: The Word (Bible reader), Worship (music player), Photos (image viewer), Letters (word processor), Family (video call). 18pt minimum fonts. 48px cursor. Single-click to open. No right-click menus, no taskbar clutter, no confusion. The computer becomes simple enough for your grandmother.

Graphical installer with 5 Kingdom-themed slideshow panels: (1) Genesis 1:1 — welcome to creation, (2) The Word of God — 39,482 verses, (3) Kingdom Worship — 27 tracks, (4) Quantum Fortress — Kyber-1024, (5) Soli Deo Gloria — to God alone be the glory. LUKS encryption option, timezone/locale/keyboard selection, user creation, automatic partitioning or manual. Beautiful, guided, and reverent.

ONE ISO, FOUR CALLINGS — choose during installation: (1) Desktop — full GUI workstation with Bible, worship, productivity, AI, (2) Server — headless with SSH, Docker/Podman, monitoring, no GUI, (3) Relay — mesh network relay node for the Kingdom mesh swarm, (4) Forge — development workstation with full toolchain, IDE, containers, ML stack. The Relay calling acts as a trustworthy network node, enabling the Hearth and Desktop nodes to communicate securely in a decentralized trust mesh.

First-boot Kingdom Welcome Experience. Numbers 6:24-26 blessing: "The LORD bless thee, and keep thee: The LORD make his face shine upon thee, and be gracious unto thee: The LORD lift up his countenance upon thee, and give thee peace." Introduces the Bible, worship music, encryption, mesh network, and Eden's stories. Not a product tour — a blessing.

Hospitality for all who enter. Guest user account with read access to the Bible, worship music, and children's stories. No admin access, no system modification — just a clean, safe environment for anyone who sits at your computer. Because hospitality is a commandment.

alfred-update CLI for safe system upgrades. Checks for Alfred-specific updates, Debian security patches, and kernel updates. Automatic security updates via unattended-upgrades. Update log maintained. Safe, reliable, sovereign.

Flatpak-based application store. GNOME Software center with Flathub repository pre-configured. Install thousands of applications graphically. Sandboxed by default. No tracking, no ads, no subscription tiers.

The Commander's Game — 3D WebXR chess with Stockfish AI engine. VR Chess in full 3D with immersive board, 2D Arena for quick games, multiple difficulty levels. Port 7777 local server. The king's game, built into the king's OS.

Proverbs 13:22 — "A good man leaveth an inheritance to his children's children." Shamir Secret Sharing (3-of-5 threshold) for your most critical secrets. Generate a 256-bit master key, split into 5 shares, name beneficiaries, generate QR code shares for physical distribution. Testament document generator for legal distribution instructions. Key reconstruction from any 3 shares. Your digital inheritance is mathematically unbreakable and distributed to your heirs. Eden gets everything — the key, the shares, the testament.