G8l: scheduler-owner → scheduler mutation dispatch envelope

impl G8lSchedulerOwnerSchedulerMutationDispatch {
    /// Consume the exact S194 mutation target by value.
    pub fn from_scheduler_mutation_target(
        runtime: &G8lRuntimeAuthority,
        authority: &G8lSchedulerOwnerAuthority,
        target: G8lSchedulerOwnerSchedulerMutationTarget,
        caller_cpu: usize,
    ) -> Result<Self, G8lSchedulerOwnerSchedulerMutationDispatchError> {
        if caller_cpu != CPU1 {
            return Err(G8lSchedulerOwnerSchedulerMutationDispatchError::InvalidCallerCpu);
        }
        target.revalidate(authority, runtime)?;
        if runtime.phase() != RuntimePhase::Running1 {
            return Err(G8lSchedulerOwnerSchedulerMutationDispatchError::RuntimePhaseMismatch);
        }
        if runtime.migration_input().owner_cpu != CPU1
            || runtime.migration_input().task_id != target.task_id()
            || target.caller_cpu() != CPU1
            || target.target_cpu() != CPU1
            || target.owner_epoch() != authority.epoch()
        {
            return Err(G8lSchedulerOwnerSchedulerMutationDispatchError::RuntimeInputMismatch);
        }
        Ok(Self {
            runtime_instance_id: target.runtime_instance_id(),
            task_id: target.task_id(),
            caller_cpu,
            target_cpu: target.target_cpu(),
            owner_epoch: target.owner_epoch(),
            exact_s194_target_consumed: true,
        })
    }

    pub fn revalidate(
        &self,
        authority: &G8lSchedulerOwnerAuthority,
        runtime: &G8lRuntimeAuthority,
    ) -> Result<(), G8lSchedulerOwnerSchedulerMutationDispatchError> {
        if self.caller_cpu != CPU1
            || self.target_cpu != CPU1
            || self.owner_epoch == 0
            || self.task_id != authority.task_id()
            || authority.owner_cpu() != CPU1
            || authority.epoch() != self.owner_epoch
            || runtime.instance_id() != self.runtime_instance_id
            || runtime.phase() != RuntimePhase::Running1
            || runtime.migration_input().owner_cpu != CPU1
            || runtime.migration_input().task_id != self.task_id
        {
            return Err(G8lSchedulerOwnerSchedulerMutationDispatchError::RuntimeInputMismatch);
        }
        Ok(())
    }

    pub const fn runtime_instance_id(&self) -> u64 {
        self.runtime_instance_id
    }

    pub const fn task_id(&self) -> u64 {
        self.task_id
    }

    pub const fn caller_cpu(&self) -> usize {
        self.caller_cpu
    }

    pub const fn target_cpu(&self) -> usize {
        self.target_cpu
    }

    pub const fn owner_epoch(&self) -> u64 {
        self.owner_epoch
    }

    pub const fn exact_s194_target_consumed(&self) -> bool {
        self.exact_s194_target_consumed
    }

    pub const fn production_constructor_wired(&self) -> bool {
        true
    }

    pub const fn production_constructor_invoked(&self) -> bool {
        false
    }

    pub const fn scheduler_mutation_dispatch_published(&self) -> bool {
        true
    }

    pub const fn production_scheduler_mutated(&self) -> bool {
        false
    }

    pub const fn global_scheduler_exclusion_proven(&self) -> bool {
        false
    }

    pub const fn gic_delivery_wired(&self) -> bool {
        false
    }

    pub const fn hardware_execution_proven(&self) -> bool {
        false
    }

    pub const fn global_source_linearity_proven(&self) -> bool {
        false
    }
}

#[test]
fn publishes_exact_s194_target_as_cpu1_scheduler_mutation_dispatch() {
    let (runtime, authority, target) = scheduler_mutation_target();
    let dispatch = G8lSchedulerOwnerSchedulerMutationDispatch::from_scheduler_mutation_target(
        &runtime, &authority, target, CPU1,
    )
    .unwrap();

    assert_eq!(dispatch.runtime_instance_id(), runtime.instance_id());
    assert_eq!(dispatch.task_id(), TASK);
    assert_eq!(dispatch.caller_cpu(), CPU1);
    assert_eq!(dispatch.target_cpu(), CPU1);
    assert_eq!(dispatch.owner_epoch(), OWNER_EPOCH + 1);
    assert!(dispatch.exact_s194_target_consumed());
    dispatch.revalidate(&authority, &runtime).unwrap();
}

  {
    id: "g8l-s195-scheduler-owner-scheduler-mutation-dispatch-partial",
    date: "2026-08-24",
    sequence: 195,
    status: "passed",
    umbrella_status: "partial",
    title: "G8l: scheduler-owner → scheduler mutation dispatch envelope",
    summary:
      "S195, non-Copy S194 scheduler-mutation target'ını by-value tüketen 10/10 allocation-free scheduler-mutation dispatch sınırını kapattı. Aynı canlı Running1 runtime, task, CPU1 dispatch ve epoch 23→24 yeniden doğrulanıp source-model dispatch envelope yayınlandı; production scheduler özellikle çalıştırılmadı ve değiştirilmedi. Foreign authority/runtime ile CPU0 caller fail-closed kaldı.",
    evidence: [
      "g8l_target_dispatch_scheduler_owner_scheduler_mutation_dispatch: 10/10 PASS; exact S194 mutation-target by-value consumption, Running1/CPU1 dispatch revalidation and closed production claims.",
      "Odaklı test iki bağımsız koşuda 10/10 PASS ve byte-eşit kaldı: 125 B / SHA-256 7742173cc9d98f4cbe90debabdf83ee6b5d3e9e965e25428a46d090582275222.",
      "S155–S195 birleşik matris iki bağımsız koşuda 41 grup / 364/364 PASS ve 5027 B / SHA-256 5009b9e8d1f4a73f62f98f95f21ff56b41cae88a0981465ab4168369526bafa7 verdi.",
      "RPi5 AArch64 source compile PASS: 477 warning envanterlendi, hata yok; 213728 B log / SHA-256 a1160acc542c4b1b780d6c72feacf36cfcefe84cca0906d8a3822973f3366b4b. Zero-warning iddiası yoktur.",
      "Scheduler mutation dispatch yalnız source-model typed handoff'tur; production task::scheduler::SCHEDULER mutation/global exclusion, GIC/SGI, CPU1 ERET assembly ve hardware authority iddiası üretmez.",
      "Kalıcı kapsam: `docs/M8.1-RPi5-G8l-S195-Scheduler-Owner-Scheduler-Mutation-Dispatch-Proof.md`.",
      "İlk S195 production yayını: https://937fe092.aselsan-microkernel.pages.dev · full id 937fe092-22e2-49dc-a4e3-d0799d2b7b61.",
      "Cache-busted özel alan adı yerel statik çıktıyla byte-exact 3/3 doğrulandı: operations 6308506 B / SHA-256 60dcd1daed8f763c49b5deca6a2e847b2695c84d65ca82487904e143c9ce59f7; timeline 925403 B / SHA-256 85f727c03ddcbea4706ad23aa4272789cddcb61145530b8e91fb3bc86289f031; yol-haritasi 925151 B / SHA-256 7ae71919e7776f049729b8a988bea5c93c6919b04b46a1309a69bd6966450a64.",
      "Immutable pages.dev direct fetch current host'tan 10 saniyelik connect timeout verdi; bu probe PASS olarak sayılmadı.",
      "S195 fiziksel/device operasyonu yapmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S195=NO.",
      "Görünür fiziksel sıra: Gücü kapat → SD kartı Pi'den çıkar → SD kartı Mac'e tak → Yetkili write/verify/read-back işlemini tamamla → SD kartı Mac'ten güvenli çıkar → SD kartı güçsüz Pi'ye tak → UART capture pre-arm ve exact identity kapısını doğrula → Güç ver. Bu sıra yalnız tarihsel S124'te tamamlandı.",
      "Canlı marker: S195_10_OF_10_G8L_SCHEDULER_OWNER_SCHEDULER_MUTATION_DISPATCH_SOURCE_EXACT_S194_SCHEDULER_MUTATION_TARGET_CONSUMED_BY_VALUE_NONCOPY_LIVE_RUNNING1_CPU1_DISPATCH_TASK_EPOCH23_TO24_REVALIDATED_SCHEDULER_MUTATION_DISPATCH_PUBLISHED_WRONG_CALLER_FOREIGN_AUTHORITY_FOREIGN_RUNTIME_FAIL_CLOSED_PRODUCTION_CONSTRUCTOR_WIRED_NOT_INVOKED_PRODUCTION_SCHEDULER_MUTATION_GLOBAL_EXCLUSION_GIC_HARDWARE_GLOBAL_SOURCE_LINEARITY_QEMU_PHYSICAL_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S355_TO_S405_S380_NO_RUNBOOK_EXECUTED_IN_S195_VERIFIED; deployment-specific route/hash evidence is recorded in the project-status manifest.",
      "Production deployment: https://947d79b0.aselsan-microkernel.pages.dev · full id 947d79b0-9eb4-45ad-9866-20fd071a43af; immutable pages.dev direct fetch from current host timed out after 10 seconds.",
      "Custom domain byte-exact with cache-bust ?s195-final=947d79b0: /operations/ 6313917 B SHA-256 cacb0369e6916e04f70931bac2a822f812c40356088c81eeb03fa180ddb82225; /timeline/ 925403 B SHA-256 25c55226f0edcd38bb5b58ffbb35e8838895bce8e48405c193587bf571ced811; /yol-haritasi/ 925151 B SHA-256 d49abb5360894d7b01b466514efd8572219edf8c70b761a1021bdd228bcb17f3.",
    ],
    commands: [
      "cargo test --quiet --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_dispatch -- --test-threads=1",
      "cargo check --quiet --manifest-path kernel/Cargo.toml --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "npm run deploy",
    ],
    terminalSessions: [
      {
        id: "s195-g8l-scheduler-owner-scheduler-mutation-dispatch",
        title: "G8l S195 scheduler-owner scheduler mutation dispatch envelope",
        commandLines: [
          "cargo test --quiet --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_dispatch -- --test-threads=1",
        ],
        outputLines: [
          "running 10 tests",
          "test result: ok; 10 passed; 0 failed",
          "S194 mutation target consumed by value; scheduler mutation dispatch published",
          "production scheduler mutation/global exclusion/GIC/hardware: not invoked / not claimed",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "Terminal özeti dar S195 source sınırını gösterir; QEMU veya fiziksel cihaz çalıştırması değildir.",
    limitations: [
      "S195 dar typed scheduler-mutation dispatch envelope source-model kabulü PASS'tir; gerçek production scheduler mutation, global lock, GIC/hardware runtime ve fiziksel çalışma açık kalır.",
      "S195 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S195=NO.",
    ],
  },