G8l: Running1 → scheduler-owner ledger CPU1

fn allocate_scheduler_owner_instance_id() -> Result<u64, G8lSchedulerOwnerError> {
    let mut current = NEXT_SCHEDULER_OWNER_INSTANCE_ID.load(Ordering::Relaxed);
    loop {
        let next = current
            .checked_add(1)
            .ok_or(G8lSchedulerOwnerError::InstanceIdExhausted)?;
        match NEXT_SCHEDULER_OWNER_INSTANCE_ID.compare_exchange_weak(
            current,
            next,
            Ordering::Relaxed,
            Ordering::Relaxed,
        ) {
            Ok(_) => return Ok(current),
            Err(observed) => current = observed,
        }
    }
}

#[test]
fn foreign_exclusion_cannot_commit_another_owner_ledger() {
    let (runtime, eret) = running1();
    let mut source = G8lSchedulerOwnerAuthority::new(TASK, CPU0, OWNER_EPOCH).unwrap();
    let foreign = source.begin_owner_transfer(CPU1, TASK, true).unwrap();
    let mut target = G8lSchedulerOwnerAuthority::new(TASK, CPU0, OWNER_EPOCH).unwrap();
    let _target_permit = target.begin_owner_transfer(CPU1, TASK, true).unwrap();

    assert_eq!(
        target.commit_eret_receipt(&runtime, foreign, eret),
        Err(G8lSchedulerOwnerError::ForeignExclusion)
    );
    assert_eq!(target.owner_cpu(), CPU0);
    assert_eq!(target.epoch(), OWNER_EPOCH);
    assert!(target.exclusion_active());
}

  {
    id: "g8l-s189-running1-scheduler-owner-ledger-partial",
    date: "2026-08-24",
    sequence: 189,
    status: "passed",
    umbrella_status: "partial",
    title: "G8l: Running1 → scheduler-owner ledger CPU1",
    summary:
      "S189, non-Copy S188 Running1 receipt'ini by-value tüketen 10/10 allocation-free boundary ile ayrı instance-scoped scheduler-owner ledger'ını CPU0→CPU1 ve epoch 23→24 commit etti. Exact canlı S166/S188 runtime instance, task, CPU1 owner, user-progress ve cleared-ticket sonucu yeniden doğrulanır. Tek aktif owner-ledger exclusion permit'i, foreign/duplicate/stale/runtime/task mismatch ve epoch-overflow yollarını owner/epoch değiştirmeden fail-closed tutar; başarısız exact yerel transaction permit'i liveness için serbest bırakılır.",
    evidence: [
      "g8l_target_dispatch_scheduler_owner: 10/10 PASS; exact non-Copy S188 receipt, CPU0→CPU1 owner-ledger ve epoch 23→24 commit sırası doğrulandı.",
      "Odaklı test iki bağımsız koşuda byte-eşit kaldı: 125 B / SHA-256 7742173cc9d98f4cbe90debabdf83ee6b5d3e9e965e25428a46d090582275222.",
      "S155–S189 birleşik matris iki bağımsız koşuda 35 grup / 303/303 PASS ve 4276 B / SHA-256 81140693b82d23b2f77c11937727e70ed92d5ab5a9025f057f4da4a40622eac8 verdi.",
      "RPi5 AArch64 source compile PASS: 459 warning envanterlendi, hata yok; 197981 B log / SHA-256 e101388acce253d311250e5ec1f75dbb19d10989bc0863ab8cf60219f1d9b81c. Zero-warning iddiası yoktur.",
      "Owner-ledger exclusion aynı authority instance'ında exact-once'dır; foreign permit başka ledger'ı commit edemez, duplicate permit reddedilir ve owned failed transaction owner/epoch mutasyonu olmadan release edilir.",
      "Production-callable constructor S188 receipt ve exclusion permit'ini by-value tüketir; gerçek task::scheduler::SCHEDULER nesnesine veya global scheduler lock'a dokunmaz.",
      "Kalıcı kapsam: `docs/M8.1-RPi5-G8l-S189-Running1-Scheduler-Owner-Proof.md`.",
      "S189 fiziksel/device operasyonu yapmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S189=NO.",
    ],
    commands: [
      "cargo test --quiet --test g8l_target_dispatch_scheduler_owner -- --test-threads=1",
      "cargo check --quiet --manifest-path kernel/Cargo.toml --target aarch64-unknown-none --no-default-features --features board-rpi5",
    ],
    terminalSessions: [
      {
        id: "s189-g8l-running1-scheduler-owner-ledger",
        title: "G8l S189 Running1 scheduler-owner ledger boundary",
        commandLines: [
          "cargo test --quiet --test g8l_target_dispatch_scheduler_owner -- --test-threads=1",
        ],
        outputLines: [
          "running 10 tests",
          "test result: ok; 10 passed; 0 failed",
          "owner ledger: CPU0 → CPU1; epoch 23 → 24",
          "production global scheduler exclusion / hardware ERET: not claimed",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "S189 dar owner-ledger kabulü PASS'tir; production global SCHEDULER lock/refactor, gerçek CPU1 ERET assembly, GIC/hardware runtime ve fiziksel çalışma açık kalır.",
    limitations: [
      "Instance-scoped owner ledger exclusion kanıtlandı; production task::scheduler::SCHEDULER mutasyonu veya cross-CPU global exclusion kanıtlanmadı.",
      "CPU1 ERET assembly/hardware observation, GIC/SGI delivery, QEMU, fiziksel RPi, CPU2/CPU3, hotplug, soak ve generic SMP açıktır.",
      "S189 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S189=NO.",
    ],
  },