File Lock Pea (2027)

Input: File path F, Request R (principal, process_hash, mode) Output: Lock granted (true/false) 1. Retrieve extended attribute `pea_policy` from F. 2. If `pea_policy` does not exist → fallback to standard lock. 3. Compute trust_score = (process_hash in whitelist ? 10 : 5) - (recent audit_violations * 2). 4. If trust_score < policy.min_trust → return false. 5. If mode == WRITE and principal not in allowed_principals → return false. 6. Acquire kernel lock + apply encryption anchor. 7. Log event to `/var/log/pea_audit.json`. 8. Return true. We tested PEA against three scenarios using a 100GB corpus of mixed files (logs, source code, binaries).

[2] Linux man-pages. (2023). fcntl(2) – file locks. File Lock PEA

[3] NIST Special Publication 800-209: Security Guidelines for Storage Infrastructure . Input: File path F, Request R (principal, process_hash,