G8l: production migration-lifecycle S178 execution-receipt target CPU1 → S179 execution-caller boundary

/// Consume one exact S178 receipt on CPU1 and construct one exact S179 caller.
///
/// The returned caller is an acceptance boundary only. S234 does not transport
/// it away from the target gate, invoke S232 or publish a scheduler-owned tuple.
#[cfg(all(target_arch = "aarch64", target_os = "none"))]
pub fn construct_production_s179_execution_caller_on_target_cpu1(
    runtime: &G8lRuntimeAuthority,
    execution_receipt: G8lTargetDispatchExecutionReceipt,
) -> Result<
    G8lTargetDispatchExecutionCaller,
    G8lProductionMigrationLifecycleS178ExecutionReceiptTargetCpu1Error,
> {
    if crate::percpu::try_current_cpu_id() != Some(CPU1) {
        return Err(
            G8lProductionMigrationLifecycleS178ExecutionReceiptTargetCpu1Error::WrongTargetCpu,
        );
    }
    G8lTargetDispatchExecutionCaller::from_execution_receipt(runtime, execution_receipt).map_err(
        G8lProductionMigrationLifecycleS178ExecutionReceiptTargetCpu1Error::ExecutionCaller,
    )
}

#[test]
fn s234_source_is_allocation_free_and_keeps_the_cpu1_target_boundary() {
    let source = include_str!("../../kernel/src/g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s178_execution_receipt_target_cpu1.rs");
    assert!(!source.contains("Box<"));
    assert!(!source.contains("Vec<"));
    assert!(source.contains("S234 target-CPU1 S178 execution-receipt to S179 execution-caller"));
    assert!(source.contains("construct_production_s179_execution_caller_on_target_cpu1"));
}

  {
    id: "g8l-s234-production-migration-lifecycle-s178-execution-receipt-target-cpu1-partial",
    date: "2026-08-25",
    sequence: 234,
    status: "passed",
    umbrella_status: "partial",
    title:
      "G8l: production migration-lifecycle S178 execution-receipt target CPU1 → S179 execution-caller boundary",
    summary:
      "S234 13/13 PASS ile exact non-Copy S178 execution receipt'in yalnızca target CPU1 kapısından by-value geçirilmesini ve mevcut S179 execution-caller constructor'ına tek kez teslim edilmesini source/ABI olarak sabitledi. Yanlış CPU terminal fail-closed'dur; CPU0 delivery, S232/downstream invoke, untrusted/bounded authority upgrade ve replacement/retry yoktur. Scheduler mutation, GIC/SGI, ERET ve fiziksel runtime bağlı değildir.",
    evidence: [
      "S234 focused grubu iki bağımsız koşuda 13/13 PASS: exact S178 receipt by-value ABI, CPU1 gate ordering, existing S179 constructor reuse, error surface ve no-delivery sınırları doğrulandı.",
      "Focused koşular byte-eşit kaldı: 128 B / SHA-256 02983f1a7d644519bfddb0884a6cd0ce69f40c4b845eb54b71ecdc6e19a8ff09.",
      "S166–S178 target execution bağımlılıkları + S233/S234 target callsite matrisi 15 grup / 129/129 PASS olarak korunup S234 focused grubu ile genişletildi. Bu matris CPU0 producer zinciri veya cross-CPU delivery kanıtı değildir.",
      "S155–S234 explicit sequence-ordered kaynak/regresyon envanteri S233'ün 82 grup / 851/851 PASS prefix'i üzerine S234 focused grubunu ekleyerek 83 grup / 864/864 PASS'tir.",
      "RPi5 AArch64 compile PASS: 630 warning envanterlendi; 309696 B / SHA-256 2505f7bf91dd3ed4771e5c72a905624f3c434e543f0c5b5f85dfe7d1896fd89a. smp: 630 warning, 309638 B / SHA-256 189465f9a634b84b12dd7ad6e91071f9fbe9606229157092ab2c15bcad7cb006. Zero-warning iddiası yoktur.",
      "Website 327/327 test, lint, TypeScript, 23/23 static route PASS; deployment d5073092-f92e-4308-8590-da3854cf0111 production_verified. Custom-domain Operations/Timeline/Yol Haritası HTTP 200 ve local out ile byte-exact: 7321335 B / d19e1a56, 1205525 B / 3e1f97c0, 1206511 B / 7963a56d.",
      "Kalıcı kapsam: docs/M8.1-RPi5-G8l-S234-Migration-Lifecycle-S178-Execution-Receipt-Target-CPU1-Proof.md.",
      "S234 yalnızca target CPU1 acceptance boundary'sidir: exact S178 receipt by-value tüketilir, live CPU1 gate yanlış hedefte terminal fail-closed döner ve mevcut S179 constructor exact caller üretir. CPU0 delivery, S232/downstream invoke edilmedi; scheduler mutation, GIC/SGI, ERET ve runtime callsite gözlenmedi.",
      "S234 fiziksel/device operasyonu yapmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S234=NO.",
      "Canlı marker: S234_13_OF_13_MIGRATION_LIFECYCLE_S178_EXECUTION_RECEIPT_TARGET_CPU1_GATE_S178_NONCOPY_BY_VALUE_EXACT_S179_EXECUTION_CALLER_CONSTRUCTED_S233_TARGET_ONLY_ADAPTER_S232_NOT_INVOKED_CPU0_DELIVERY_NOT_WIRED_NO_UNTRUSTED_OR_BOUNDED_UPGRADE_NO_REPLACEMENT_NO_RETRY_AARCH64_COMPILED_PRESENT_REQUEST_NOT_OBSERVED_LEGACY_SCHEDULER_ACCESSES_UNCOVERED_WHOLE_SCHEDULER_GIC_HARDWARE_QEMU_PHYSICAL_CPU0_CPU1_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S394_TO_S444_S419_NO_RUNBOOK_EXECUTED_IN_S234_VERIFIED; deployment-specific route/hash evidence is recorded in the project-status manifest.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s178_execution_receipt_target_cpu1 -- --test-threads=1",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
    ],
    terminalSessions: [
      {
        id: "s234-g8l-production-migration-lifecycle-s178-execution-receipt-target-cpu1",
        title: "G8l S234 migration-lifecycle S178 receipt target CPU1 boundary",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s178_execution_receipt_target_cpu1 -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; 13 passed; 0 failed",
          "exact non-Copy S178 receipt is consumed by value at the target-only CPU1 boundary",
          "live CPU1 gate precedes the existing S179 execution-caller constructor",
          "CPU0 delivery and S232/downstream invocation are not wired; untrusted/bounded upgrades are absent",
          "scheduler mutation, GIC/SGI, ERET, exact production runtime and physical operation are not invoked",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "Terminal özeti S234 exact target CPU1 S178→S179 source/ABI sınırını gösterir; CPU0 delivery, exact production scheduler runtime, QEMU veya fiziksel cihaz çalıştırması değildir.",
    limitations: [
      "S234 S178 receipt'i target CPU1 üzerinde mevcut S179 caller constructor'ına bağlar; CPU0 delivery ve S232/downstream invoke edilmez.",
      "Production scheduler mutation, whole-scheduler exclusion, GIC/SGI delivery, ERET/context-switch assembly, QEMU present-tuple yolu, fiziksel RPi, CPU2/CPU3, hotplug, soak ve Generic SMP açıktır.",
      "S234 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S234=NO.",
    ],
  },