G8l: production scheduler-mutation guard → typed acknowledgement bridge

/// Acquire the real CPU1 production guard and transfer its exact lease through
/// the complete S200 -> S201 -> S202 typed chain while keeping IRQs masked.
#[cfg(all(target_arch = "aarch64", target_os = "none"))]
pub fn acquire_production_scheduler_mutation_guarded_ack(
    runtime: &G8lRuntimeAuthority,
    authority: &G8lSchedulerOwnerAuthority,
    commit: crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_dispatch_receipt_commit::G8lSchedulerOwnerSchedulerMutationDispatchReceiptCommit,
) -> Result<G8lProductionSchedulerMutationGuardedAck, G8lProductionSchedulerMutationGuardedAckError>
{
    let production_guard = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_exclusion::acquire_production_scheduler_mutation_exclusion(
        runtime,
        authority,
        commit,
    )?;
    let (lease, irq_guard) = production_guard.into_lease_and_irq_guard();
    let bridge = G8lSchedulerMutationProductionGuardedAckBridge::from_exclusion_lease(
        runtime, authority, lease, CPU1,
    )?;
    Ok(G8lProductionSchedulerMutationGuardedAck {
        bridge,
        _irq_guard: irq_guard,
    })
}

#[test]
fn s203_source_is_wired_without_importing_or_mutating_the_legacy_scheduler() {
    let source = include_str!(
        "../../kernel/src/g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_guarded_ack.rs"
    );
    let kernel = include_str!("../../kernel/src/main.rs");
    let simulation = include_str!("../src/lib.rs");
    assert!(source.contains("S203"));
    assert!(!source.contains("use crate::task"));
    assert!(!source.contains("SCHEDULER"));
    assert!(kernel.contains(
        "mod g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_guarded_ack;"
    ));
    assert!(simulation.contains(
        "pub mod g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_guarded_ack;"
    ));
}

  {
    id: "g8l-s203-scheduler-mutation-production-guarded-ack-partial",
    date: "2026-08-25",
    sequence: 203,
    status: "passed",
    umbrella_status: "partial",
    title:
      "G8l: production scheduler-mutation guard → typed acknowledgement bridge",
    summary:
      "S203, gerçek AArch64 S198 production guard seam'ini S200 → S201 → S202 typed zincirine bağlayan 10/10 allocation-free bridge sınırını kapattı. Exact S198 lease by-value tüketiliyor; S202 acknowledgement token'ı bridge drop'una kadar taşıyor; Running1/CPU1 owner/task ve epoch 23→24 yeniden doğrulanıyor. Production scheduler mutation ve whole-scheduler kapsamı açılmadı.",
    evidence: [
      "g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_guarded_ack: 10/10 PASS; exact S198 lease by-value consumption, S200 → S201 → S202 order, live envelope revalidation and fail-closed claims.",
      "Exact-token lifecycle: bridge yaşarken S198 token tutuluyor; bridge drop ve wrong-caller error sonrasında token serbest kalıyor.",
      "Production-only AArch64 wrapper IrqGuard + MPIDR-derived CPU1 path'ini wired eder; typed bridge field'ı IRQ restore'dan önce drop sırasını korur.",
      "Production task::scheduler::SCHEDULER import edilmedi, invoke edilmedi veya değiştirilmedi; whole-scheduler access coverage, GIC/SGI ve hardware execution açık kaldı.",
      "Odaklı test iki bağımsız koşuda byte-eşit kaldı: 125 B / SHA-256 7742173cc9d98f4cbe90debabdf83ee6b5d3e9e965e25428a46d090582275222.",
      "S155–S203 sıra-düzenli birleşik matris iki bağımsız koşuda 49 grup / 447/447 PASS ve 6030 B / SHA-256 aa2a3ab2e6507494d66d9b7bfab22c0e7e417e21e3d3f3e97538c1c76829b5cb verdi.",
      "RPi5 AArch64 compile PASS: 512 warning envanterlendi, hata yok; 240102 B / SHA-256 91ca89382f9f301dec80db3d4da2cc5ca2141b3a2352d94bb64a3596bca30c6b. Zero-warning iddiası yoktur.",
      "RPi5 AArch64 smp compile PASS: 512 warning envanterlendi, hata yok; 240044 B / SHA-256 0135a853f8664496cef2a7d36c6cfe2f57f38485b433b75d286ab498b128d266. Zero-warning iddiası yoktur.",
      "Kalıcı kapsam: `docs/M8.1-RPi5-G8l-S203-Scheduler-Mutation-Production-Guarded-Ack-Proof.md`.",
      "S203 fiziksel/device operasyonu yapmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S203=NO.",
      "Görünür fiziksel sıra: Gücü kapat → SD kartı Pi'den çıkar → SD kartı Mac'e tak → Yetkili write/verify/read-back işlemini tamamla → SD kartı Mac'ten güvenli çıkar → SD kartı güçsüz Pi'ye tak → UART capture pre-arm ve exact identity kapısını doğrula → Güç ver. Bu sıra yalnız tarihsel S124'te tamamlandı; S203'te uygulanmadı.",
      "Canlı marker: S203_10_OF_10_G8L_PRODUCTION_SCHEDULER_MUTATION_GUARDED_ACK_BRIDGE_SOURCE_EXACT_S198_LEASE_CONSUMED_BY_VALUE_S200_S201_S202_ORDER_EXACT_TOKEN_RETAINED_UNTIL_BRIDGE_DROP_AND_RELEASED_ON_ERROR_LIVE_RUNNING1_CPU1_OWNER_TASK_EPOCH23_TO24_REVALIDATED_PRODUCTION_IRQGUARD_MPIDR_CPU1_PATH_WIRED_NOT_INVOKED_PRODUCTION_SCHEDULER_NOT_IMPORTED_NOT_MUTATED_WHOLE_SCHEDULER_GIC_HARDWARE_QEMU_PHYSICAL_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S363_TO_S413_S388_NO_RUNBOOK_EXECUTED_IN_S203_VERIFIED; deployment-specific route/hash evidence is recorded in the project-status manifest.",
    ],
    commands: [
      "cargo test --quiet --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_guarded_ack -- --test-threads=1",
      "cargo check --quiet --manifest-path kernel/Cargo.toml --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet --manifest-path kernel/Cargo.toml --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
    ],
    terminalSessions: [
      {
        id: "s203-g8l-scheduler-mutation-production-guarded-ack",
        title: "G8l S203 production guarded acknowledgement bridge",
        commandLines: [
          "cargo test --quiet --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_guarded_ack -- --test-threads=1",
        ],
        outputLines: [
          "running 10 tests",
          "test result: ok; 10 passed; 0 failed",
          "S198 lease consumed by value through S200 → S201 → S202; exact token retained until bridge drop",
          "production scheduler mutation/global exclusion/GIC/hardware: not invoked / not claimed",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "Terminal özeti S203 production-guard source bridge kabulünü gösterir; QEMU veya fiziksel cihaz çalıştırması değildir.",
    limitations: [
      "S203 gerçek production guard constructor'ını kaynakta wired eder; production runtime invocation ve scheduler mutation yapmaz.",
      "Legacy static mut SCHEDULER erişimleri, whole-scheduler global exclusion, GIC/SGI ve CPU1 ERET assembly kapsam dışıdır.",
      "S203 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S203=NO.",
    ],
  },