G8l: production migration-lifecycle S193 boundary callsite

/// Consume one completed lifecycle's exact S193 boundary and enter S216.
///
/// Runtime, owner authority and boundary are all consumed. S193, S194, S195,
/// S196, S197 and the downstream S213/S212 path are one terminal by-value
/// chain: a failure is not replayed, replaced or retried at this boundary.
pub fn publish_runtime_owner_tuple_from_s193_migration_boundary(
    queue: &mut G8lRuntimeOwnerS197TupleHandoffQueue,
    runtime: G8lRuntimeAuthority,
    authority: G8lSchedulerOwnerAuthority,
    boundary: G8lSchedulerOwnerSchedulerMutationBoundary,
    caller_cpu: usize,
    target_cpu: usize,
) -> Result<(), G8lMigrationLifecycleS193BoundaryCallsiteError> {
    if caller_cpu != CPU1 {
        return Err(G8lMigrationLifecycleS193BoundaryCallsiteError::InvalidCallerCpu);
    }
    let target = G8lSchedulerOwnerSchedulerMutationTarget::from_scheduler_mutation_boundary(
        &runtime, &authority, boundary, caller_cpu,
    )
    .map_err(G8lMigrationLifecycleS193BoundaryCallsiteError::Target)?;
    publish_runtime_owner_tuple_from_s194_migration_completion(
        queue, runtime, authority, target, caller_cpu, target_cpu,
    )
    .map_err(G8lMigrationLifecycleS193BoundaryCallsiteError::S194Callsite)
}

#[test]
fn s217_source_is_allocation_free_and_orders_s193_s194_s216() {
    let source = include_str!("../../kernel/src/g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s193_boundary_callsite.rs");
    assert!(!source.contains("Box<"));
    assert!(!source.contains("Vec<"));
    assert!(source
        .contains("G8lSchedulerOwnerSchedulerMutationTarget::from_scheduler_mutation_boundary"));
    assert!(source.contains("publish_runtime_owner_tuple_from_s194_migration_completion"));
    assert!(source.contains("S193 -> S194 -> S216"));
    assert!(!source.contains("task::scheduler"));
    assert!(!source.contains("send_sgi"));
}

  {
    id: "g8l-s217-production-migration-lifecycle-s193-boundary-callsite-partial",
    date: "2026-08-25",
    sequence: 217,
    status: "passed",
    umbrella_status: "partial",
    title: "G8l: production migration-lifecycle S193 boundary callsite",
    summary:
      "S217 11/11 PASS ile exact non-Copy S193 scheduler-mutation boundary'sini CPU1 caller sınırında by-value tüketip tek S194 target oluşturdu ve S216 üzerinden S215/S214/S213/S212 zincirine bağladı. Occupied slot replacement/retry açılmaz; migration runtime callsite'ı henüz invoke edilmedi.",
    evidence: [
      "S217 focused S193 boundary callsite grubu iki bağımsız koşuda 11/11 PASS: CPU1 caller gate, S193→S194→S195→S196→S214 source order, exact boundary consumption, S216/S215/S213/S212 ingress reuse, occupied ownership and no-retry boundaries.",
      "Focused koşular byte-eşit kaldı: 126 B / SHA-256 0d9a424720ba8dcdb80aa72dd7f87ea926ef1c95de05e316e305f19e7e0fe3c5.",
      "S206 callsite/readback + S207–S217 dependency matrix frozen S216 prefix'i üzerine 14 grup / 168/168 PASS ve 1776 B / SHA-256 0a5072a1278b6ef3a88bf7d68dd4c2e91fc6ad15da4c6821ac8c3fc21bd11221 verdi; ilk 1650 B exact S216 dependency prefix'idir.",
      "S155–S217 explicit sequence-ordered matrix frozen S216 prefix'i üzerine 66 grup / 651/651 PASS ve 8187 B / SHA-256 e75c528c385a94b8c8c503a343fd6de91a7738a3bd521ff1424575f1b2d09cf8 verdi; exact S216 8061 B prefix'i korundu.",
      "RPi5 AArch64 compile PASS: 552 warning envanterlendi; 280556 B / SHA-256 ba98a829d8cb92aa319f48730759a62b9ed7f2eb5462fed2a50f0378c5db4fda. `smp`: 552 warning, 280498 B / SHA-256 f7810d7c6d447f2f714f4cbbf1fbc0fadf2b6c97547741679bbacbdc0d862695. Zero-warning iddiası yoktur.",
      "Kalıcı kapsam: `docs/M8.1-RPi5-G8l-S217-Migration-Lifecycle-S193-Boundary-Callsite-Proof.md`.",
      "S193 boundary by-value tüketilir; CPU1 caller doğrulamasından sonra S194 target bir kez oluşturulur ve S216/S215/S214/S213/S212 zincirine geçilir. Wrong caller, foreign boundary, wrong target ve occupied slot fail-closed kalır; replacement/retry yoktur.",
      "S217 fiziksel/device operasyonu yapmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S217=NO.",
      "S193 boundary callsite wired/AArch64-compiled'dır fakat boot veya migration runtime callsite'ı henüz invoke edilmedi; present request, S207 invocation veya scheduler mutation gözlemi iddia edilmez.",
      "Canlı marker: S217_11_OF_11_MIGRATION_LIFECYCLE_S193_BOUNDARY_CALLSITE_CPU1_CALLER_S193_NONCOPY_BOUNDARY_CONSUMED_BY_VALUE_EXACT_S194_TARGET_CONSTRUCTED_ONCE_S216_S215_S214_S213_S212_SINGLE_SLOT_INGRESS_NO_REPLACEMENT_NO_RETRY_AARCH64_COMPILED_NOT_RUNTIME_INVOKED_PRESENT_REQUEST_NOT_OBSERVED_LEGACY_SCHEDULER_ACCESSES_UNCOVERED_WHOLE_SCHEDULER_GIC_HARDWARE_QEMU_PHYSICAL_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S377_TO_S427_S402_NO_RUNBOOK_EXECUTED_IN_S217_VERIFIED; deployment-specific route/hash evidence is recorded in the project-status manifest.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s193_boundary_callsite -- --test-threads=1",
      "cargo check --quiet --manifest-path kernel/Cargo.toml --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet --manifest-path kernel/Cargo.toml --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
    ],
    terminalSessions: [
      {
        id: "s217-g8l-production-migration-lifecycle-s193-boundary-callsite",
        title: "G8l S217 migration-lifecycle S193 boundary callsite",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s193_boundary_callsite -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; 11 passed; 0 failed",
          "CPU1 caller consumes S193 boundary and constructs S194 exactly once before S216",
          "S216 delegates through S215/S214/S213/S212 single-slot ingress with no replacement/retry",
          "production migration runtime callsite is not invoked; present request/scheduler mutation is not claimed",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "Terminal özeti S217 S193→S194→S216 source/target callsite sınırını gösterir; production migration runtime, QEMU veya fiziksel cihaz çalıştırması değildir.",
    limitations: [
      "S217 S193 boundary callsite'ını wired/AArch64-compiled yapar; gerçek boot/migration caller'ı henüz invoke edilmediği için present request veya S207 runtime invocation iddia edilmez.",
      "Whole-scheduler exclusion, legacy scheduler erişimleri, GIC/SGI capture, CPU1 ERET/context-switch assembly, QEMU present-tuple yolu, fiziksel RPi ve Generic SMP açıktır.",
      "S217 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S217=NO.",
    ],
  },