Abstract ENThis document, produced with the assistance of ChatGPT o3 and GPT-5 Thinking, is released under the Apache 2.0 license. It is a voluntary defensive publication (prior art) and therefore enters the prior art upon release under the applicable patent statutes: EPC Art. 54(2) (European Patent Convention), French IPC/CPI Art. L 611-11 (French Intellectual Property Code), 35 U.S.C. §102(a) (United States Patent Act), Chinese Patent Law Art. 22(5) (中华人民共和国专利法), and Japanese Patent Act Art. 29(1) (特許法). It discloses an end-to-end blueprint for native AI in operating systems, covering kernel/userland architecture, energy-aware scheduling, model supply-chain integrity, privacy-by-design dataflows, TEE-secured RAG, multimodal pipelines (ASR/TTS/vision), governance and compliance, hardware/thermal enablers, QA/bench frameworks, and dev-tooling. Each contribution is enabling (design, parameters, QA/validation), classified with IPC/CPC, and suitable for OSS/open-core contexts and EU regulatory environments. Timestamp proofs (RFC 3161 / FreeTSA) and cryptographic digests are provided to secure provenance and priority. Résumé FRCe document, produit avec l’assistance de ChatGPT o3 et GPT-5 Thinking, est diffusé sous licence Apache 2.0. Il constitue une publication défensive volontaire (antériorité) et entre, dès sa diffusion publique, dans l’art antérieur au titre des régimes suivants : CBE art. 54(2), CPI art. L 611-11, 35 U.S.C. §102(a), Loi chinoise sur les brevets art. 22(5) (中华人民共和国专利法), et Loi japonaise sur les brevets art. 29(1) (特許法). Il décrit une intégration d’IA native dans l’OS, incluant architecture noyau/espace utilisateur, ordonnancement frugal en énergie, intégrité de la chaîne d’approvisionnement des modèles, flux de données « privacy-by-design », RAG sécurisé en TEE, pipelines multimodaux (ASR/TTS/vision), conformité/gouvernance, dispositifs matériels/thermiques, cadres QA/benchmarks et outillage développeur. Chaque proposition est enabling (conception, paramètres, QA/validation), classée IPC/CPC et compatible OSS/open-core et cadres réglementaires UE. Des preuves d’horodatage (RFC 3161 / FreeTSA) et de hachage cryptographique assurent la traçabilité. Timestamp: 2025-09-20T09:26:36ZSHA-256: 6fce8b89be22263f1a7dc709c5e4a30f5f56643586011037a4a7a30a00a59bd7 Liste des innovations & classification (IPC ; CPC) DVFS scheduler + paged KV — G06F 1/32 ; G06F 1/3296 Quantized shared KV-cache — G06F 12/0893 ; G06F 12/0891 Kernel DLP with LSM/eBPF — G06F 21/55 ; G06F 21/57 Cost-aware EP selection — G06F 9/50 ; G06F 9/5093 Attested tensor delta format — G06F 8/65 ; G06F 8/77 Extended AI SBOM (SPDX) — G06F 21/64 ; G06F 21/628 Encrypted OS-native vector store — G06F 21/62 ; G06F 21/6284 Inline PII privacy filter — G06F 21/62 ; G06F 21/63 Modular AI guardrails — G06N 20/00 ; G06F 21/57 PII-aware request router — G06F 21/62 ; G06F 9/54 TEE-based RAG pipeline — G06F 21/78 ; G06F 21/75 Joules-per-token metric — G01R 21/06 ; G06F 11/36 Multi-ring AI sandbox — G06F 21/57 ; G06F 21/56 Read-only model sharing — G06F 12/02 ; G06F 12/02 Lazy layer loading — G06F 12/0875 ; G06F 12/0873 Offline ASR/TTS pipeline — G10L 25/03 ; G10L 25/84 Edge vision OCR — G06T 7/246 ; G06V 10/764 Secure dev copilot — G06F 11/36 ; G06F 8/65 Auto-tuning EP profiler — G06F 11/36 ; G06F 9/5096 User-controlled AI logs — G06F 21/62 ; G06F 21/63 Adversarial CI suite — G06F 11/36 ; G06F 8/72 OS AI API (D-Bus/gRPC) — G06F 13/42 ; G06F 21/57 Child/ethics mode — G06F 21/62 ; G06F 21/63 Graceful fallbacks — G06F 11/14 ; G06F 11/30 Portable AI profile export — G06F 17/30 ; G06F 16/24576 In-toto for models — G06F 21/57 ; G06F 21/57 Lightweight text watermark — G06F 21/64 ; G06F 21/63 UI-first QoS scheduler — G06F 9/50 ; G06F 9/5098 Selective indexing — G06F 21/62 ; G06F 21/63 VRAM delta hot-update — G06F 8/65 ; G06F 8/80 Standard energy test plan — G06F 11/36 ; G06F 11/369 Multi-model task router — G06N 3/08 ; G06N 3/08 System actions dry-run — G06F 11/36 ; G06F 21/57 Thermal-aware profiling — H05K 7/20 ; G06F 1/3293 AI call quotas — G06F 21/55 ; G06F 21/57 In-kernel PII redaction — G06F 21/62 ; G06F 21/63 TEE on-load weight decrypt — G06F 21/78 ; G06F 21/75 Attested LoRA deltas — G06F 8/65 ; G06F 8/80 LLM VRAM partitioner — G06F 12/02 ; G06F 12/0843 Shadow-token safety gate — G06N 20/00 ; G06F 21/57 Token-bound preemption — G06F 9/50 ; G06F 9/5098 CPU/NPU op partitioning — G06F 9/455 ; G06F 9/5096 EWS-guided model prefetch — G06F 12/087 ; G06F 12/0873 DP federated telemetry — G06F 21/62 ; G06F 16/24576 Prompt provenance chain — G06F 21/64 ; G06F 21/64 Capability-scoped WASM tools — G06F 21/57 ; G06F 13/42 Auto seccomp profiler — G06F 21/57 ; G06F 21/56 Geo-regulatory gating — G06F 21/62 ; G06F 21/63 VRAM defragmentation — G06F 12/02 ; G06F 12/084 Model notarization — G06F 21/64 ; G06F 21/57 OCI model packaging — G06F 8/65 ; G06F 8/70 Energy-aware retriever — G06F 16/23 ; G06F 16/2484 Minimal Bloom index — G06F 17/30 ; G06F 16/24582 Local synthetic data — G06N 3/08 ; G06N 3/08 Anti-jitter streaming ASR — G10L 25/18 ; G10L 25/84 Adaptive few-shot OCR — G06V 40/16 ; G06V 40/16 Typed intent contracts — G06F 8/481 ; G06F 8/4818 Safe KV write-ahead log — G06F 11/14 ; G06F 11/3037 Attested P2P deltas — H04L 67/10 ; H04L 67/10 M.2 “SE-Model” module — G06F 21/79 ; G06F 21/76 Hardware J/token probe — G01R 21/06 ; G01R 21/06 EMI-shielded AI enclosure — H05K 9/00 ; H05K 9/00 “LLM-duty” TIM — C09K 5/14 ; C09K 5/14 NPU/EP QA jig — G01R 31/28 ; G06F 11/36 “Bench-in-a-box” kit — G06F 11/36 ; G06F 11/369 EM imaging anti-leak — G06V 20/56 ; G01R 31/50 Closed-loop energy control — G05B 13/02 ; G06F 1/3293 LAN model cache — H04L 67/10 ; H04L 67/10 Notarized install key — G06F 21/79 ; G06F 21/57 NFC privacy-state tag — G06K 19/07 ; G06K 7/10 E-ink AI activity indicator — G02F 1/133 ; G09G 5/02 Standard FL capsule — G06N 3/08 ; G06F 9/455 WASI-LLM ABI — G06F 9/44 ; G06F 9/455 Calibration-as-a-Service — G06F 11/36 ; G06Q 10/063 FEC-sharded model depot — H04L 1/00 ; H04L 67/10 Thermal airflow vision — G01J 5/06 ; G06V 20/56 Capacitive presence sensor — G06F 3/033 ; G06F 3/041 Attested shipping seal — G06F 21/64 ; G06K 19/07 “Model safe” rack — H05K 7/14 ; G06F 21/78 Context budget allocator — G06F 9/50 ; G06F 9/5098 Semantic eco truncation — G06N 20/00 ; G06F 11/36 Verified speculative decoding — G06N 3/08 ; G06N 3/08 Hot adaptive quantization — G06F 11/36 ; G06F 9/5096 Migrating NUMA-aware KV — G06F 12/0893 ; G06F 13/35 Per-app embedding vault — G06F 21/62 ; G06F 21/6284 DMA-BUF privacy path — G06F 21/62 ; G06T 7/20 TEE wake-word detector — G10L 15/26 ; G06F 21/78 Time-scoped capabilities — G06F 21/57 ; G06F 21/55 Tensor-level LSM labels — G06F 21/57 ; G06F 21/56 On-device A/B for models — G06F 11/36 ; G06F 16/635 EP calibration registry — G06F 11/36 ; G06F 9/5096 Consent dataflow DSL — G06F 21/62 ; G06F 8/35 OS-side GPU preemption — G06F 3/0481 ; G06F 9/505 Isolated RAG compute — G06F 9/50 ; G06F 11/30 Local watermark detection — G06F 21/64 ; G06T 1/00 Forward-secure sync — H04L 9/08 ; G06F 21/62 Battery-aware prompt shaping — G06N 20/00 ; G06F 11/36 Adaptive two-pass ASR — G10L 25/18 ; G10L 25/84 Private DP voice clone — G10L 13/02 ; G10L 25/90 Predictive EP health — G06F 11/36 ; G06F 9/5096 Hygienic AI crash-dumps — G06F 11/00 ; G06F 11/36 eBPF token accounting — G06F 21/55 ; G06F 3/0481 Thermal DMA governor — G06F 1/3293 ; H05K 7/20 Dataset lineage registry — G06F 17/30 ; G06F 16/635 Attested uninstall — G06F 21/57 ; G06F 21/64 Keywordsdvfs, paged-attention, kv-cache, quantization, ebpf, differential-privacy, guardrails, onnx-runtime, execution-provider, cosign, merkle, sbom, slsa, hnsw, tee, attestation, rapl, sandbox, selinux, openvino, asr, tts, ocr, auto-tuning, pareto, transparency, watermark, qos, failover, data-act, in-toto, bandit, dry-run, throttling, rate-limit, kernel-redaction, sealed-keys, hot-swap, vram-allocator, token-veto, preemption, graph-partition, dma-buf, ews, federated-telemetry, hash-chain, wasm-sandbox, seccomp-profiler, geofencing, vram-defrag, transparency-log, oci-model, ttl-retrieval, bloom-filter, synthetic-data, ctc-streaming, few-shot-ocr, intent-contracts, wal-recovery, p2p-delta, secure-element, power-sensing, emi-shielding, thermal-interface, qa-jig, diagnostic-kit, em-imaging, control-loop, lan-cache, secure-usb, nfc-privacy, e-ink-indicator, federated-capsule, wasi-llm, calibration-service, fec-sharding, thermal-vision, presence-sensor, tamper-evident, model-safe, context-budget, early-exit, speculative-decoding, dynamic-quant, numa-placement, embedding-vault, dmabuf-privacy, wakeword-tee, capability-tokens, tensor-labels, ab-testing, ep-registry, consent-dsl, gpu-preemption, rag-isolation, watermark-detection, crdt-sync, battery-prompt, two-pass-asr, private-tts, ep-health, sanitized-minidump, ebpf-accounting, dma-governor, dataset-lineage, secure-uninstall.