Added the ZoneX Phase-0 partitioning demonstrator

.gitattributes

@@ -0,0 +1,35 @@
+###############################################################################
+# Copyright (c) 2026 Eclipse ThreadX contributors
+#
+# This program and the accompanying materials are made available under the
+# terms of the MIT License which is available at
+# https://opensource.org/licenses/MIT.
+#
+# AI Disclosure: This file was largely AI-generated by Claude Code (Opus 5).
+# The AI-generated portions may be considered public domain (CC0-1.0)
+# and not subject to the project's licence. The human contributor has
+# reviewed and verified that the code is correct.
+#
+# SPDX-License-Identifier: MIT and CC0-1.0
+###############################################################################
+
+.git*            export-ignore
+
+# Custom attribute marking sources that follow the project's C code style.
+[attr]our-c-style  whitespace=tab-in-indent eol=lf
+
+# Line endings.  ZoneX is built on Linux and on the Armv8-R AEM FVP; the
+# PowerShell entries are here so that a Windows story, should ZoneX ever gain
+# one (see docs/decisions.md D13), does not arrive with mixed endings.
+*.sh             eol=lf
+*.py             eol=lf
+*.ps1            eol=crlf
+*.bat            eol=crlf
+
+*.c              our-c-style
+*.h              our-c-style
+*.S              our-c-style
+
+*.cmake          whitespace=tab-in-indent
+*.txt            whitespace=tab-in-indent
+*.lds            whitespace=tab-in-indent

.github/CODEOWNERS

@@ -0,0 +1,16 @@
+###############################################################################
+# Copyright (c) 2026 Eclipse ThreadX contributors
+#
+# This program and the accompanying materials are made available under the
+# terms of the MIT License which is available at
+# https://opensource.org/licenses/MIT.
+#
+# AI Disclosure: This file was largely AI-generated by Claude Code (Opus 5).
+# The AI-generated portions may be considered public domain (CC0-1.0)
+# and not subject to the project's licence. The human contributor has
+# reviewed and verified that the code is correct.
+#
+# SPDX-License-Identifier: MIT and CC0-1.0
+###############################################################################
+
+@eclipse-threadx/admins

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,41 @@
+<!--
+Copyright (c) 2026 Eclipse ThreadX contributors
+
+This program and the accompanying materials are made available under the
+terms of the MIT License which is available at
+https://opensource.org/licenses/MIT.
+
+AI Disclosure: This file was largely AI-generated by Claude Code (Opus 5).
+The AI-generated portions may be considered public domain (CC0-1.0)
+and not subject to the project's licence. The human contributor has
+reviewed and verified that the code is correct.
+
+SPDX-License-Identifier: MIT and CC0-1.0
+-->
+
+## What this changes, and why
+
+<!-- One paragraph. What was wrong or missing, and what this does about it. -->
+
+## How it was verified
+
+<!-- Name the target and how you ran it: host suite, FVP, S32Z280 silicon.
+     "It builds" is not verification. If you could not verify part of it, say
+     which part and why. -->
+
+## Checklist
+
+<!-- Put an `x` in each box that applies. -->
+
+- [ ] Branched from `dev`, and targets `dev`.
+- [ ] Commit subject starts with a past-tense verb.
+- [ ] AI assistance, if any, is attributed: `Assisted-by:` in the commit and the
+      AI Disclosure paragraph in every new file header. No `Co-Authored-By:`.
+- [ ] New files carry the full Eclipse header with the current year.
+- [ ] Regression tests added or updated, or a stated reason why not.
+- [ ] Builds clean under the strict warning set (`--preset ci-strict`).
+- [ ] No A-profile or RISC-V terminology (`scripts/check_terminology.sh` passes).
+- [ ] No local paths, and no comment citing a document that is not in the
+      repository (`scripts/check_references.sh` passes).
+- [ ] API or behaviour changes have a matching documentation pull request
+      against `rtos-docs-asciidoc`.

.github/dependabot.yml

@@ -0,0 +1,102 @@
+###############################################################################
+# Copyright (c) 2026 Eclipse ThreadX contributors
+#
+# This program and the accompanying materials are made available under the
+# terms of the MIT License which is available at
+# https://opensource.org/licenses/MIT.
+#
+# AI Disclosure: This file was largely AI-generated by Claude Code (Opus 5).
+# The AI-generated portions may be considered public domain (CC0-1.0)
+# and not subject to the project's licence. The human contributor has
+# reviewed and verified that the code is correct.
+#
+# SPDX-License-Identifier: MIT and CC0-1.0
+###############################################################################
+
+version: 2
+
+# Keeps the pinned action SHAs moving.
+#
+# Every action reference under .github/workflows is a 40-character commit SHA
+# with the version in a trailing comment.  A SHA pin *without* this file is
+# worse than a floating tag: it freezes CI on whatever was current the day it
+# was written.  ThreadX discovered that with actions/cache@v1 still sitting in
+# a workflow until GitHub began auto-failing every request that used it, and
+# with four other actions between two and four majors behind -- none of it
+# reported anywhere, because there was no configuration like this one.
+#
+# Dependabot understands the SHA form and rewrites the trailing version comment
+# together with the pin, so the comment cannot drift away from the SHA it
+# describes.  That is what keeps "which exact code ran in our CI" answerable
+# from the repository, which the certification and SBOM work for ZoneX needs on
+# its own account.
+#
+# Two things this does not fix.  It reports drift, not silence: a workflow that
+# never triggers rots unnoticed no matter what is pinned in it, which is why
+# every ZoneX workflow triggers on pull_request against dev and main and on
+# push to both.  And a new pull_request trigger does not reach a pull request
+# that is already open -- only a rebase makes new checks appear on one.
+#
+# There is no entry for any other ecosystem, and that is a decision rather than
+# an oversight: the project forbids external dependencies, there are no
+# submodules, and the pinned tools -- gcovr in scripts/install.sh, the Arm GNU
+# Toolchain and ATfE versions in the workflows -- live where no Dependabot
+# ecosystem can parse them.  Those pins move by hand.
+updates:
+  - package-ecosystem: "github-actions"
+    # "/" is the only accepted value for this ecosystem; it covers
+    # .github/workflows and .github/actions.
+    directory: "/"
+
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "Etc/UTC"
+
+    # Dependabot reads this file from the repository's DEFAULT branch, which is
+    # main.  But main holds the latest release and pull requests belong on dev,
+    # which is where the checks gate them.  target-branch sends the pull
+    # requests to dev and makes Dependabot read the workflows it is updating
+    # from dev as well.
+    #
+    # The consequence to plan for: landing this file on dev ARMS it, it does not
+    # fire it.  Nothing happens until a release merge carries it to main.
+    #
+    # Setting target-branch also opts out of Dependabot *security* updates,
+    # which only ever run against the default branch.  For this ecosystem the
+    # cost is small -- an action advisory arrives as an ordinary version bump on
+    # the weekly run -- but it is a real trade and not a detail to rediscover
+    # later.
+    target-branch: "dev"
+
+    groups:
+      # Patch and minor arrive together in one pull request: they are the
+      # routine traffic, and reviewing them one at a time is how an update
+      # queue starts being ignored, which is the failure mode this file exists
+      # to prevent.  Majors stay ungrouped, one pull request each, because
+      # every breaking change ThreadX met in an action set was a major --
+      # download-artifact v8 defaulting digest-mismatch to error, and
+      # upload-artifact v6 requiring runner 2.327.1 or newer.
+      actions-minor-and-patch:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+
+    # Three distinct actions are in use today (checkout, cache,
+    # upload-artifact).  Ten leaves room for a wave of majors without becoming
+    # a silent cap, and matches what ThreadX settled on.
+    open-pull-requests-limit: 10
+
+    labels:
+      - "dependencies"
+
+    # Reviewers are not listed here.  .github/CODEOWNERS already routes every
+    # path to @eclipse-threadx/admins and Dependabot honours it.
+    #
+    # Commit subjects are left at Dependabot's own "Bump x from a to b"
+    # wording.  The project asks for a past-tense subject and still gets one:
+    # these pull requests are squash-merged, and the subject is set at that
+    # point.

.github/workflows/clang_check.yml

@@ -0,0 +1,178 @@
+###############################################################################
+# Copyright (c) 2026 Eclipse ThreadX contributors
+#
+# This program and the accompanying materials are made available under the
+# terms of the MIT License which is available at
+# https://opensource.org/licenses/MIT.
+#
+# AI Disclosure: This file was largely AI-generated by Claude Code (Opus 5).
+# The AI-generated portions may be considered public domain (CC0-1.0)
+# and not subject to the project's licence. The human contributor has
+# reviewed and verified that the code is correct.
+#
+# SPDX-License-Identifier: MIT and CC0-1.0
+###############################################################################
+
+name: clang_check
+
+# Cross-builds ZoneX for the Cortex-R52 with Arm Toolchain for Embedded, which
+# is LLVM based and is the successor to Arm Compiler 6.
+#
+# Why a second toolchain on a repository this small: GNU as accepts several
+# non-canonical assembly forms that LLVM's assembler rejects, and ZoneX will be
+# substantially assembly by the time that starts to bite.  Catching each one as
+# it is written costs a minute; finding forty of them the first time somebody
+# tries an LLVM build costs a week, which is what ThreadX's ports did before
+# clang_check existed there.
+#
+# It compiles and links and executes nothing.
+
+on:
+  push:
+    branches: [ dev, main ]
+    paths:
+      - ".github/workflows/clang_check.yml"
+      - "CMakeLists.txt"
+      - "CMakePresets.json"
+      - "cmake/**"
+      - "common/**"
+      - "core/**"
+      - "platform/**"
+      - "examples/**"
+  pull_request:
+    branches: [ dev, main ]
+    # Duplicated deliberately; see the note in host_tests.yml.  **Edit both.**
+    paths:
+      - ".github/workflows/clang_check.yml"
+      - "CMakeLists.txt"
+      - "CMakePresets.json"
+      - "cmake/**"
+      - "common/**"
+      - "core/**"
+      - "platform/**"
+      - "examples/**"
+
+jobs:
+  atfe:
+    runs-on: ubuntu-24.04
+
+    env:
+      # Pinned deliberately, as the runner image is.  22.1.0 is the version
+      # CONTRIBUTING.md names as the reference.
+      # Releases: https://github.com/arm/arm-toolchain/releases
+      ATFE_VERSION: 22.1.0
+
+    steps:
+    - name: Check out the repository
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+    # THE GUEST IMAGES NEED A THREADX CHECKOUT, and without one the example
+    # CMakeLists SKIPS them -- with a message, which is right for a
+    # contributor who has no kernel sources to hand and wrong here.  Skipped,
+    # the ZoneX code that is compiled into a ThreadX image never faced this
+    # workflow at all: the guest support and both partition images are
+    # thousands of lines that no warnings-as-errors lane was looking at.
+    #
+    # Pinned to the same commit zx_fvp.yml pins, and for the same reason: an
+    # unpinned guest means this workflow's results change when a different
+    # repository does.  Change the two together.
+    - name: Check out ThreadX, for the guest images
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      with:
+        repository: eclipse-threadx/threadx
+        ref: 13c8c768c73b9ce10c9605f6df8b02080440f953
+        path: threadx
+
+    - name: Cache Arm Toolchain for Embedded
+      id: cache-atfe
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+      with:
+        path: atfe
+        key: atfe-${{ env.ATFE_VERSION }}-linux-x86_64
+
+    # Arm publishes a plain .sha256 for this one, unlike the GNU toolchain
+    # whose .sha256 is an MD5.  See the note in gcc_check.yml before assuming
+    # the two are interchangeable.
+    - name: Install Arm Toolchain for Embedded
+      if: steps.cache-atfe.outputs.cache-hit != 'true'
+      run: |
+        set -eu
+        base="https://github.com/arm/arm-toolchain/releases/download/release-${ATFE_VERSION}-ATfE"
+        archive="ATfE-${ATFE_VERSION}-Linux-x86_64.tar.xz"
+        mkdir -p atfe && cd atfe
+        curl -fsSLO "$base/$archive"
+        curl -fsSLO "$base/$archive.sha256"
+        sha256sum -c "$archive.sha256"
+        tar xf "$archive"
+        rm -f "$archive"
+
+    - name: Ensure ninja is available
+      run: |
+        set -eu
+        if command -v ninja >/dev/null 2>&1; then
+          ninja --version
+        else
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends ninja-build
+        fi
+
+    - name: Build every Cortex-R52 configuration with clang
+      run: |
+        set -eu
+        atfe="$GITHUB_WORKSPACE/atfe/ATfE-${ATFE_VERSION}-Linux-x86_64/bin"
+        "$atfe/clang" --version | head -1
+
+        status=0
+
+        build_configuration() {
+          name="$1"; shift
+          echo ""
+          echo "=============================================================="
+          echo "== $name"
+          echo "=============================================================="
+          if ! cmake -S . -B "build/clang-$name" -G Ninja \
+                  -DCMAKE_TOOLCHAIN_FILE=cmake/cortex_r52_clang.cmake \
+                  -DZX_ATFE_TOOLCHAIN_PATH="$atfe" \
+                  -DZX_THREADX_SOURCE_DIR="$GITHUB_WORKSPACE/threadx" \
+                  -DCMAKE_COMPILE_WARNING_AS_ERROR=ON "$@"; then
+            echo "::error::$name: CMake configure failed"
+            status=1
+            return
+          fi
+          if ! cmake --build "build/clang-$name"; then
+            echo "::error::$name: build failed"
+            status=1
+            return
+          fi
+
+          # The IMAGES as well.  They are EXCLUDE_FROM_ALL, as ThreadX's are,
+          # so the build above reports "no work to do" for every one of them
+          # and a compile error in an image would slip past this whole lane.
+          #
+          # Named from the generated ninja graph rather than from a list kept
+          # here, so an image added to a CMakeLists.txt cannot escape the
+          # check by nobody remembering to list it.
+          local images
+          images="$(ninja -C "build/clang-$name" -t targets all 2>/dev/null \
+                    | grep -oE '^[A-Za-z0-9_]+\.elf' \
+                    | grep -v '^cmake_' | sort -u || true)"
+          if [ -z "$images" ]; then
+            echo "::error::$name: the CMake graph produced no images at all"
+            status=1
+            return
+          fi
+          echo "$name: building $(echo "$images" | wc -l) image(s)"
+          # shellcheck disable=SC2086
+          if ! cmake --build "build/clang-$name" --target $images; then
+            echo "::error::$name: an image failed to build"
+            status=1
+          fi
+        }
+
+        build_configuration fvp \
+            -DZX_BUILD_FVP_EXAMPLE=ON -DZX_BUILD_S32Z280_EXAMPLE=OFF
+
+        build_configuration s32z280 \
+            -DZX_BUILD_FVP_EXAMPLE=OFF -DZX_BUILD_S32Z280_EXAMPLE=ON
+
+        exit $status