4 files changed, 84 insertions, 0 deletions

diff --git a/bins/boom/Cargo.toml b/bins/boom/Cargo.toml
new file mode 100644
index 0000000..2d31886
--- /dev/null
+++ b/bins/boom/Cargo.toml
@@ -0,0 +1,10 @@
+[package]
+name = "boom"
+version.workspace = true
+edition.workspace = true
+
+[lints]
+workspace = true
+
+[dependencies]
+rsapi = { path = "../../rsapi" }
diff --git a/bins/boom/src/main.rs b/bins/boom/src/main.rs
new file mode 100644
index 0000000..0c3201b
--- /dev/null
+++ b/bins/boom/src/main.rs
@@ -0,0 +1,31 @@
+//! boom — crash-containment probe (ADR 0006 Phase 2 gate).
+//!
+//! Deliberately faults on an unmapped address.  The kernel must kill only
+//! this task; the shell survives and `jobs` shows the corpse.
+
+#![no_std]
+#![no_main]
+
+#[panic_handler]
+fn panic(_info: &core::panic::PanicInfo) -> ! {
+    loop {
+        core::hint::spin_loop();
+    }
+}
+
+/// The image entry point — the loader jumps here with the ABI arguments.
+#[unsafe(no_mangle)]
+pub extern "C" fn efi_main(
+    _exports: &'static rsapi::Exports,
+    _argc: usize,
+    _argv: *const rsapi::Arg,
+) -> i32 {
+    // Canonical-but-unmapped address (below 2^47, above any RAM/MMIO):
+    // the page walk terminates at a not-present entry → #PF with
+    // CR2 = address.  Same trick as the built-in `fault` command.
+    unsafe {
+        let p = 0x4000_0000_0000usize as *mut u64;
+        p.write_volatile(0xDEAD_BEEF);
+    }
+    0
+}
diff --git a/bins/hello/Cargo.toml b/bins/hello/Cargo.toml
new file mode 100644
index 0000000..ac71ded
--- /dev/null
+++ b/bins/hello/Cargo.toml
@@ -0,0 +1,10 @@
+[package]
+name = "hello"
+version.workspace = true
+edition.workspace = true
+
+[lints]
+workspace = true
+
+[dependencies]
+rsapi = { path = "../../rsapi" }
diff --git a/bins/hello/src/main.rs b/bins/hello/src/main.rs
new file mode 100644
index 0000000..d1d58df
--- /dev/null
+++ b/bins/hello/src/main.rs
@@ -0,0 +1,33 @@
+//! hello — the first rs-dos external binary (ADR 0006 Phase 2 gate).
+//!
+//! Prints one line through the injected Exports table and exits 0.
+//! Exercises the whole chain: PE32+ load, relocation, ABI call, task exit.
+
+#![no_std]
+#![no_main]
+
+use rsapi::Exports;
+
+#[panic_handler]
+fn panic(_info: &core::panic::PanicInfo) -> ! {
+    loop {
+        core::hint::spin_loop();
+    }
+}
+
+/// The image entry point — the loader jumps here with the ABI arguments
+/// (exports table, argc, argv).  The conventional UEFI name is kept so
+/// the PE looks normal; the signature is the rs-dos ABI.
+#[unsafe(no_mangle)]
+pub extern "C" fn efi_main(exports: &'static Exports, _argc: usize, _argv: *const rsapi::Arg) -> i32 {
+    let msg = b"hello, world - from an external binary";
+    let line = rsapi::Line {
+        ptr: msg.as_ptr(),
+        len: msg.len(),
+    };
+    if (exports.put_line)(line) {
+        0
+    } else {
+        1
+    }
+}