G8l: whole-scheduler read-access guard foundation

pub fn preflight_s247_whole_scheduler_read_coverage(
    caller_cpu: usize,
    request: Option<G8lS245WholeSchedulerExclusionAdmissionRequestView>,
) -> Result<
    G8lS247WholeSchedulerReadCoveragePreflightOutcome,
    G8lS247WholeSchedulerReadCoveragePreflightError,
> {
    let outcome = preflight_s246_whole_scheduler_exclusion_provider(
        caller_cpu,
        request,
        G8lS246WholeSchedulerCoverageAudit::new(
            S246_SOURCE_AUDIT_UNITS,
            S246_DIRECT_SCHEDULER_ACCESS_SITES,
            S247_WHOLE_SCHEDULER_GUARDED_SITES,
        ),
    )
    .map_err(G8lS247WholeSchedulerReadCoveragePreflightError::S246)?;
    match outcome {
        G8lS246WholeSchedulerProviderPreflightOutcome::Idle => {
            Ok(G8lS247WholeSchedulerReadCoveragePreflightOutcome::Idle)
        }
        G8lS246WholeSchedulerProviderPreflightOutcome::AwaitingCoverage {
            request_id,
            guarded_sites,
            unrouted_sites,
        } => Ok(
            G8lS247WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
                request_id,
                guarded_sites,
                unrouted_sites,
            },
        ),
        G8lS246WholeSchedulerProviderPreflightOutcome::CoverageCompleteAwaitingProvider {
            ..
        } => Err(G8lS247WholeSchedulerReadCoveragePreflightError::UnexpectedCoverageComplete),
    }
}

#[test]
fn s247_production_exposes_reader_guard_but_no_exclusive_provider_wrapper() {
    let source = include_str!("../../kernel/src/g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s246_whole_scheduler_read_access_guard.rs");
    let production = source
        .split("static S247_PRODUCTION_WHOLE_SCHEDULER_ACCESS_GATE")
        .nth(1)
        .expect("S247 production gate");
    assert!(production.contains("acquire_s247_production_scheduler_read_access"));
    assert!(!production.contains("acquire_s247_production_scheduler_exclusive"));
    assert!(source.contains("no production acquisition wrapper"));
    assert!(source.contains("cannot manufacture provider authority"));
}

  {
    id: "g8l-s247-production-whole-scheduler-read-access-guard-foundation-partial",
    date: "2026-08-25",
    sequence: 247,
    status: "passed",
    umbrella_status: "partial",
    title: "G8l: whole-scheduler read-access guard foundation",
    summary:
      "S247 14/14 PASS ile allocation-free, lineerleştirilebilir tek-state-word reader/exclusive guard çekirdeğini ekledi ve 111 doğrudan SCHEDULER erişiminin yalnız iki kısa read-only exception yolunu yerel IRQ guard altında route etti. Kapsam 0/111'den 2/111'e ilerledi; 109 site unrouted kalır. Guard canlıyken context switch yapabilen veya scheduler state'i değiştiren hiçbir site bu adımda kapsanmadı. Production exclusive acquisition wrapper'ı coverage tamamlanmadan bilerek yayımlanmadı. CPU1 timer-IRQ S245 request'ini yeniden non-consuming inceler; request alınmaz ve pending kalır.",
    evidence: [
      "S247 focused host grubu final kaynak üzerinde iki bağımsız koşuda 14/14 PASS verdi: canonical test-result 95 B / SHA-256 d8b327f290a968cf8f5378c8f8da3c53792f64a5982022ac815dc438eb338319.",
      "Exact source coverage: önceki 0/111 common guard kapsamından handle_el0_data_abort current-task/stack read ve scheduler_tracks_current_el0_task read yolları route edildi; guarded=2/111, unrouted=109. İki yol da local IrqGuard taşır, read-only'dir ve guard canlıyken context switch yapmaz. S247 mutating-site coverage=0.",
      "S237'den S247'ye exact sıra-düzenli dependency matrisi 11 grup / 185/185 PASS verdi; canonical summary 1045 B / SHA-256 656392fa054fa5554af748d54adbaf60345ee8d0535572a4975185da99ad6297 ve iki bağımsız koşuda byte-equal.",
      "RPi5 AArch64 normal/SMP profilleri ikişer koşuda byte-equal PASS verdi. Normal: 353697 B / 683 warning başlığı / SHA-256 ce21f362f7b80e9c3167d214d7e5bbac2f319f479ca45bc5f8ca58412e35d0f2. SMP: 353639 B / 683 warning başlığı / SHA-256 4340e18c38b5a7d0c589c460712691d30c72f111807ecdd5f9f6d51c541ceb38. Zero-warning iddiası yoktur.",
      "Exact production sırası: CPU1 timer IRQ → GIC EOI → S246 request preflight → S247 reader-guard coverage preflight → S242 service → scheduler dispatch. S245 request yalnız non-consuming metadata view ile incelenir, alınmaz ve pending kalır.",
      "Filtresiz workspace aynı frozen S96 identity kapısında exit 101 verdi: 50035 B / SHA-256 835b05cdbdcc7bcd44f07d9a2c775eab6f9196b05adbd046ede34ee931b5c33d. Exact yedi tarihsel assertion dışlandığında 209 grup / 1922 PASS / 0 fail / 7 filtered oldu. Ham loglar yalnız libtest sürelerinde değişti; süre-normalize iki log byte-equal 56149 B / SHA-256 fc6b7716713f98148876b054fd57d5c2e9437d1c7ab3e73eda8084cc528cdffc verdi. Full-workspace GREEN iddia edilmez.",
      "S247 physical/device operations=0; RUNBOOK_EXECUTED_IN_S247=NO. Tarihsel S124 physical BOOT8H PASS ve tam operatör sırası görünür biçimde korunur.",
      "Canlı marker: S247_14_OF_14_WHOLE_SCHEDULER_READ_ACCESS_GUARD_FOUNDATION_ALLOCATION_FREE_LINEARIZABLE_SINGLE_STATE_WORD_READER_COUNT_EXACT_RELEASE_EXCLUSIVE_EXACT_NONZERO_TOKEN_READERS_BLOCK_EXCLUSIVE_EXCLUSIVE_BLOCKS_READERS_INVALID_CPU_TOKEN_EXHAUSTION_FAIL_CLOSED_TWO_SHORT_READ_ONLY_EXCEPTION_SITES_ROUTED_UNDER_LOCAL_IRQ_GUARD_2_OF_111_GUARDED_109_UNROUTED_NO_CONTEXT_SWITCH_CAPABLE_OR_MUTATING_SITE_NEWLY_GUARDED_PRODUCTION_EXCLUSIVE_WRAPPER_ABSENT_S245_REQUEST_INSPECTED_NONCONSUMING_NOT_TAKEN_REMAINS_PENDING_AWAITING_COVERAGE_NO_PROVIDER_AUTHORITY_NO_EXCLUSION_PROOF_NO_S244_ADMISSION_NO_S243_S236_INVOCATION_NO_SGI_NO_SAFE_RUNTIME_EXECUTION_CLAIM_AARCH64_NORMAL_SMP_COMPILED_WORKSPACE_1922_PASS_7_HISTORICAL_G8H_ASSERTIONS_RED_PHYSICAL_QEMU_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S407_TO_S457_S432_NO_RUNBOOK_EXECUTED_IN_S247_VERIFIED.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s246_whole_scheduler_read_access_guard -- --test-threads=1",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
      "cargo test --workspace --quiet -- --test-threads=1 --skip wiring_does_not_mutate_timer_gic_boot_or_expand_runtime_scope --skip s97_runtime_and_layout_identities_are_unchanged --skip clean_bridge_literal_include_closure_is_manifest_complete --skip clean_image_make_recipe_inputs_are_exact_and_manifested --skip s99_and_s98_are_narrowly_historically_versioned --skip s97_s98_inputs_and_make_history_are_narrowly_versioned --skip historical_s90_and_s100_inputs_remain_exact",
    ],
    terminalSessions: [
      {
        id: "s247-g8l-whole-scheduler-read-access-guard-foundation",
        title: "G8l S247 whole-scheduler read-access guard foundation",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s246_whole_scheduler_read_access_guard -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; S247 focused 1 group / 14 passed; 0 failed",
          "source coverage: 7 units / 111 direct SCHEDULER sites / guarded=2 / unrouted=109",
          "routed sites: 2 short read-only exception paths / local IRQ guard / context-switch-capable=0 / mutating=0",
          "production exclusive wrapper absent; S245 request inspected non-consuming, not taken, remains pending",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "S247 terminal özeti guard çekirdeğini ve iki dar read-only route'u doğrular; 109 unrouted site nedeniyle whole-scheduler exclusion provider authority/proof/admission değildir.",
    limitations: [
      "S247 yalnız guard foundation ve 2/111 read-only coverage'tır; 109 scheduler erişimi unrouted kalır.",
      "Guard canlıyken context switch yapabilen veya scheduler state'i değiştiren hiçbir site S247'de yeni kapsama alınmadı; mutating coverage=0.",
      "Production exclusive acquisition wrapper'ı coverage tamamlanmadan yayımlanmadı; provider authority, exclusion proof, lease veya S244 admission yoktur.",
      "Exact S245 request yalnız read-only view ile incelenir, alınmaz ve pending kalır; S243/S236 production girişi veya SGI yoktur.",
      "QEMU RPi5 whole-scheduler provider yolunu doğrulamaz; fiziksel RPi, CPU2/CPU3, hotplug, soak ve Generic SMP açıktır.",
      "S247 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S247=NO.",
    ],
  },