G8l: production migration-lifecycle exact S179 execution-caller CPU0 consumer callsite

/// Take the exact S179 caller on live CPU0 and enter the existing S231 path.
///
/// Every error is terminal for the supplied runtime/owner authority pair. No
/// replacement or retry handle is returned. The S235 slot itself remains
/// `Empty` if called before publication, or terminal `Consumed` after a
/// successful take.
///
/// # Safety
/// The caller must satisfy the existing S231/S180-to-S187 runtime, scheduler
/// exclusion, authority-lifetime and TTBR0-root invariants. S236 only joins
/// the already-typed transport and consumer boundaries; it does not establish
/// those invariants or a notification/interrupt callsite.
#[cfg(all(target_arch = "aarch64", target_os = "none"))]
pub unsafe fn consume_production_s179_execution_caller_transport_on_cpu0(
    runtime: G8lRuntimeAuthority,
    authority: G8lSchedulerOwnerAuthority,
) -> Result<
    crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s186_mapping_retirement::G8lProductionMigrationLifecycleS187Handoff,
    G8lProductionMigrationLifecycleS179TransportConsumerError,
>{
    let execution_caller =
        crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s179_execution_caller_transport::take_production_s179_execution_caller_on_cpu0()
            .map_err(G8lProductionMigrationLifecycleS179TransportConsumerError::Transport)?;

    unsafe {
        crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s179_execution_caller::prepare_production_s187_handoff_from_production_s179_execution_caller(
            runtime,
            authority,
            execution_caller,
        )
    }
    .map_err(G8lProductionMigrationLifecycleS179TransportConsumerError::S231)
}

#[test]
fn s236_does_not_notify_or_mutate_scheduler_gic_eret_or_physical_paths() {
    for forbidden in [
        "send_sgi",
        "trigger_sgi",
        "notify_cpu0",
        "task::scheduler",
        "SCHEDULER",
        "gic::",
        "eret()",
        "power_on",
        "sd_card",
    ] {
        assert!(
            !SOURCE.contains(forbidden),
            "forbidden S236 marker: {forbidden}"
        );
    }
}

  {
    id: "g8l-s236-production-migration-lifecycle-s179-execution-caller-cpu0-consumer-partial",
    date: "2026-08-25",
    sequence: 236,
    status: "passed",
    umbrella_status: "partial",
    title:
      "G8l: production migration-lifecycle exact S179 execution-caller CPU0 consumer callsite",
    summary:
      "S236 14/14 PASS ile S235 one-shot transportundan exact non-Copy S179 execution caller'ı live CPU0 take kapısından alıp mevcut S231 CPU0 source adapter'ına by-value tek kez bağladı. S231 üzerinden S180 scheduler admission ve typed S187 handoff sınırı korunur. Bu adım notification/wake, runtime/authority transportu, scheduler mutation, GIC/ERET veya fiziksel runtime değildir.",
    evidence: [
      "S236 focused grubu iki bağımsız byte-equal koşuda 14/14 PASS verdi: 129 B / SHA-256 d50e861f1dfd8fdd2073cabf26227d26186302c2793942941ffd436c5ff90d25.",
      "S235 one-shot transport + S236 CPU0 consumer matrisi iki byte-equal koşuda 2 grup / 29/29 PASS verdi: 259 B / SHA-256 c46b8aa3bc9ba26bd10f44af7f5ec5634a30e8cc938942723f6502529e07fa35.",
      "S166–S178 target execution bağımlılıkları + S233/S234/S235/S236 matrisi iki byte-equal koşuda 17 grup / 158/158 PASS verdi: 2093 B / SHA-256 0a42c2e67c088d3499bbad56e5eb96ec9fc54702d1f9e23fb60b9ac4bacc178c.",
      "RPi5 AArch64 compile PASS: 632 warning envanterlendi; 310758 B / SHA-256 5eef2d0adc032af41ed1d29fa99710d513dc5236e23499163f5b0581f2f40085. smp: 632 warning, 310700 B / SHA-256 34ac6153f97a9ff124209090c5d1747fabe7848293003d99498774194e89c549. Zero-warning iddiası yoktur.",
      "Tam workspace 150 tamamen yeşil grup / 1457 test ve kırılan grubun diğer 8 PASS'inden sonra yalnız frozen S96 exceptions.S identity assertion'ında kırmızı kaldı; S236 beklentiyi değiştirmedi ve full GREEN iddia edilmedi.",
      "Kalıcı kapsam: docs/M8.1-RPi5-G8l-S236-Migration-Lifecycle-S179-Execution-Caller-CPU0-Consumer-Proof.md.",
      "S236 source/ABI sırası exact S235 take → mevcut S231 consumer → S180 admission → typed S187 handoff'tır; transport ve S231 hataları terminaldir, retry/replacement/second-take authority yoktur.",
      "S236 fiziksel/device operasyonu yapmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S236=NO.",
      "Canlı marker: S236_14_OF_14_MIGRATION_LIFECYCLE_S179_EXECUTION_CALLER_CPU0_CONSUMER_S235_TAKE_ONCE_LIVE_CPU0_GATE_S231_ONCE_S180_ADMISSION_S187_HANDOFF_RETURNED_NO_NOTIFICATION_NO_RUNTIME_AUTHORITY_TRANSPORT_NO_RETRY_NO_REPLACEMENT_NO_SECOND_TAKE_AARCH64_COMPILED_PRESENT_REQUEST_NOT_OBSERVED_SCHEDULER_MUTATION_NOT_OBSERVED_GIC_ERET_HARDWARE_QEMU_PHYSICAL_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S396_TO_S446_S421_NO_RUNBOOK_EXECUTED_IN_S236_VERIFIED; deployment-specific route/hash evidence is recorded in the project-status manifest.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s179_execution_caller_transport_consumer -- --test-threads=1",
      "cargo check -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
    ],
    terminalSessions: [
      {
        id: "s236-g8l-production-migration-lifecycle-s179-execution-caller-cpu0-consumer",
        title: "G8l S236 exact S179 CPU0 consumer callsite",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s179_execution_caller_transport_consumer -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; 14 passed; 0 failed",
          "S235 live CPU0 transport take precedes the existing S231 adapter exactly once",
          "S231 continues through S180 admission and returns the typed S187 handoff boundary",
          "no notification/wake, runtime-authority transport, scheduler mutation, GIC/ERET or physical operation",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "Terminal özeti S236'nın S235 ownership take sınırını mevcut S231 CPU0 consumer'a bağladığını gösterir; interrupt bildirimi veya production scheduler/hardware execution kanıtı değildir.",
    limitations: [
      "S236 bir callable CPU0 consumer boundary'sidir; CPU0 notification/wake ve gerçek interrupt delivery bağlı değildir.",
      "S231'in typed S187 handoff'u scheduler mutation, GIC/SGI delivery, ERET/context-switch, QEMU present-tuple veya fiziksel RPi runtime kanıtı değildir; CPU2/CPU3, hotplug, soak ve Generic SMP açıktır.",
      "S236 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S236=NO.",
    ],
  },