G8l: notification teardown read-access guard genişletmesi

pub fn preflight_s252_whole_scheduler_read_coverage(
    caller_cpu: usize,
    request: Option<G8lS245WholeSchedulerExclusionAdmissionRequestView>,
) -> Result<
    G8lS252WholeSchedulerReadCoveragePreflightOutcome,
    G8lS252WholeSchedulerReadCoveragePreflightError,
> {
    match preflight_s251_whole_scheduler_read_coverage(caller_cpu, request)
        .map_err(G8lS252WholeSchedulerReadCoveragePreflightError::S251)?
    {
        G8lS251WholeSchedulerReadCoveragePreflightOutcome::Idle => {
            return Ok(G8lS252WholeSchedulerReadCoveragePreflightOutcome::Idle);
        }
        G8lS251WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } if guarded_sites == S251_WHOLE_SCHEDULER_GUARDED_SITES
            && unrouted_sites
                == S246_DIRECT_SCHEDULER_ACCESS_SITES - S251_WHOLE_SCHEDULER_GUARDED_SITES => {}
        G8lS251WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } => {
            return Err(
                G8lS252WholeSchedulerReadCoveragePreflightError::PriorCoverageDrift {
                    guarded_sites,
                    unrouted_sites,
                },
            );
        }
    }

    let outcome = preflight_s246_whole_scheduler_exclusion_provider(
        caller_cpu,
        request,
        G8lS246WholeSchedulerCoverageAudit::new(
            S246_SOURCE_AUDIT_UNITS,
            S246_DIRECT_SCHEDULER_ACCESS_SITES,
            S252_WHOLE_SCHEDULER_GUARDED_SITES,
        ),
    )
    .map_err(G8lS252WholeSchedulerReadCoveragePreflightError::S246)?;
    match outcome {
        G8lS246WholeSchedulerProviderPreflightOutcome::Idle => {
            Ok(G8lS252WholeSchedulerReadCoveragePreflightOutcome::Idle)
        }
        G8lS246WholeSchedulerProviderPreflightOutcome::AwaitingCoverage {
            request_id,
            guarded_sites,
            unrouted_sites,
        } => Ok(
            G8lS252WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
                request_id,
                guarded_sites,
                unrouted_sites,
            },
        ),
        G8lS246WholeSchedulerProviderPreflightOutcome::CoverageCompleteAwaitingProvider {
            ..
        } => Err(G8lS252WholeSchedulerReadCoveragePreflightError::UnexpectedCoverageComplete),
    }
}

#[test]
fn s252_preflight_revalidates_s251_without_consuming_or_admitting() {
    let source = include_str!("../../kernel/src/g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s251_notification_teardown_read_access_guard_expansion.rs");
    let preflight = source
        .split("pub fn preflight_s252_whole_scheduler_read_coverage")
        .nth(1)
        .expect("S252 preflight");
    assert!(preflight.contains("preflight_s251_whole_scheduler_read_coverage"));
    assert!(preflight.contains("preflight_s246_whole_scheduler_exclusion_provider"));
    let service = source
        .split("pub fn service_s252_whole_scheduler_read_coverage_preflight_on_cpu1")
        .nth(1)
        .expect("S252 service");
    assert!(service.contains("inspect_s245_exclusion_admission_request_on_cpu1"));
    assert!(!service.contains("take_s245_exclusion_admission_request_on_cpu1"));
    assert!(!service.contains("S244_PRODUCTION_ADMISSION"));
}

  {
    id: "g8l-s252-notification-teardown-read-access-guard-expansion-partial",
    date: "2026-08-25",
    sequence: 252,
    status: "passed",
    umbrella_status: "partial",
    title: "G8l: notification teardown read-access guard genişletmesi",
    summary:
      "S252 11/11 PASS ile S251 production reader gate'ini notification-object teardown holder/wait-graph preflight ve task-lifecycle final notification-authority absence audit yollarındaki iki read-only snapshot'a taşıdı. İki snapshot mevcut local IRQ maskesi ve IPC transaction kilidi altında kalır; reader membership deadline, registry, CNode, wake-queue veya sonraki scheduler mutasyonundan önce düşer. Notification destroy yolunda guard sırasında canlı mutable Scheduler referansı bırakılmaz. Coverage 10/111'den 12/111'e ilerledi; 99 site unrouted kalır. Writer/context-switch-capable hiçbir site yeni kapsama alınmadı. Production exclusive wrapper hâlâ yoktur; S245 request non-consuming incelenir, alınmaz ve pending kalır.",
    evidence: [
      "S252 focused host grubu final kernel kaynağı üzerinde iki bağımsız koşuda 11/11 PASS verdi: canonical test-result 95 B / SHA-256 2c07f0a50574922424c491ec40d2a364ada2ad650cb922a2036d326c49b26e45.",
      "Exact source coverage: S251 guarded=10/111 başlangıcı yeniden doğrulandı; notification-object teardown holder/wait-graph preflight ve task-lifecycle final notification-authority absence audit snapshot'ları common reader membership altına alındı. Yeni toplam guarded=12/111, unrouted=99; additional read-only=2, mutating=0, context-switch-capable=0.",
      "İki route mevcut local IrqGuard ve IPC_TRANSACTION_LOCK kapsamını korur. Reader deadline/registry/CNode/wake-queue/scheduler mutasyonundan önce düşer; notification destroy raw pointer ve kısa reference scope'larıyla guard boyunca live mutable Scheduler alias bırakmaz. Prior S251 coverage drift fail-closed'dur ve production exclusive acquisition wrapper yayımlanmadı.",
      "S238'den S252'ye exact sıra-düzenli dependency matrisi 16 grup / 240/240 PASS verdi. Ham summary iki bağımsız koşuda byte-equal 1520 B / SHA-256 ed0c9c98901578d4cc2a4c5a98b00b6fcd7cfe9ddf3f4f9f6d1d8e1780e473c3; süre-normalize summary 1632 B / SHA-256 fde4c7edccb7ee48ec85b7845770b9d5eecb0e8972d32579a876cf10bf171e8e oldu. S240 receipt ve SGI gruplarının ikisi de dahildir.",
      "RPi5 AArch64 normal/SMP profilleri ikişer koşuda byte-equal PASS verdi. Normal: 356029 B / 689 warning başlığı / SHA-256 017ae9dad71985011233175afbe67caae2c64224e5012c0d15e3ba0e07149639. SMP: 355971 B / 689 warning başlığı / SHA-256 0d088d32289f67d369495bfb8be24bedd8b829e5ce052064891e961dc6bb5437. Zero-warning iddiası yoktur.",
      "Exact production sırası: CPU1 timer IRQ → GIC EOI → S246 request preflight → S247 → S248 → S249 → S250 → S251 → S252 12/111 coverage preflight → S242 service → scheduler dispatch. Exact S245 request yalnız non-consuming metadata view ile incelenir, alınmaz ve pending kalır.",
      "Filtresiz workspace aynı frozen S96 identity kapısında exit 101 verdi: 50670 B / SHA-256 2bdb9926f820455840f9630a91b9c4a7907216224f81ad7eda027682080bdf22. Exact yedi tarihsel assertion dışlandığında final manifest-aware iki audit 214 grup / 1982 PASS / 0 fail / 7 filtered oldu. Süre-normalize test-result özetleri byte-equal 21710 B / SHA-256 99a79023a9f6811d2261ecc776e32f53ae7dff961a6db792343ab9085b75ae9f verdi; full-workspace GREEN iddia edilmez.",
      "S252 physical/device operations=0; RUNBOOK_EXECUTED_IN_S252=NO. Tarihsel S124 physical BOOT8H PASS ve tam operatör sırası görünür biçimde korunur.",
      "Canlı marker: S252_11_OF_11_NOTIFICATION_TEARDOWN_READ_ACCESS_GUARD_EXPANSION_TWO_ADDITIONAL_READ_ONLY_LOCAL_IRQ_AND_IPC_TRANSACTION_GUARDED_SNAPSHOTS_READER_DROPPED_BEFORE_DEADLINE_REGISTRY_CNODE_WAKE_QUEUE_OR_SCHEDULER_MUTATION_TOTAL_12_OF_111_GUARDED_99_UNROUTED_NO_LIVE_MUTABLE_SCHEDULER_ALIAS_DURING_READER_NO_CONTEXT_SWITCH_CAPABLE_OR_MUTATING_SITE_NEWLY_GUARDED_PRODUCTION_EXCLUSIVE_WRAPPER_ABSENT_S245_REQUEST_INSPECTED_NONCONSUMING_NOT_TAKEN_REMAINS_PENDING_AWAITING_COVERAGE_NO_PROVIDER_AUTHORITY_NO_EXCLUSION_PROOF_NO_S244_ADMISSION_NO_S243_S236_INVOCATION_NO_SGI_NO_SAFE_RUNTIME_EXECUTION_CLAIM_AARCH64_NORMAL_SMP_COMPILED_WORKSPACE_1982_PASS_7_HISTORICAL_G8H_ASSERTIONS_RED_PHYSICAL_QEMU_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S412_TO_S462_S437_NO_RUNBOOK_EXECUTED_IN_S252_VERIFIED.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s251_notification_teardown_read_access_guard_expansion -- --test-threads=1",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
      "cargo test --workspace --quiet -- --test-threads=1 --skip wiring_does_not_mutate_timer_gic_boot_or_expand_runtime_scope --skip s97_runtime_and_layout_identities_are_unchanged --skip clean_bridge_literal_include_closure_is_manifest_complete --skip clean_image_make_recipe_inputs_are_exact_and_manifested --skip s99_and_s98_are_narrowly_historically_versioned --skip s97_s98_inputs_and_make_history_are_narrowly_versioned --skip historical_s90_and_s100_inputs_remain_exact",
    ],
    terminalSessions: [
      {
        id: "s252-g8l-notification-teardown-read-access-guard-expansion",
        title: "G8l S252 notification teardown read-access guard genişletmesi",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s251_notification_teardown_read_access_guard_expansion -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; S252 focused 1 group / 11 passed; 0 failed",
          "source coverage: 7 units / 111 direct SCHEDULER sites / previous=10 / additional=2 / guarded=12 / unrouted=99",
          "new routes: notification teardown holder/wait-graph preflight + final task-lifecycle notification-authority absence audit / local IRQ + IPC transaction / read-only / no live mutable Scheduler alias",
          "production exclusive wrapper absent; S245 request inspected non-consuming, not taken, remains pending",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "S252 terminal özeti iki notification lifecycle read-only snapshot route'unu doğrular; 99 unrouted site nedeniyle whole-scheduler exclusion provider authority/proof/admission değildir.",
    limitations: [
      "S252 yalnız 2 ek read-only notification lifecycle route ile toplam 12/111 coverage'tır; 99 scheduler erişimi unrouted kalır.",
      "Reader membership deadline/registry/CNode/wake-queue/scheduler mutasyonundan önce düşer; context-switch-capable veya mutating hiçbir site S252'de yeni kapsama alınmadı.",
      "Production exclusive acquisition wrapper'ı coverage tamamlanmadan yayımlanmadı; provider authority, exclusion proof, lease veya S244 admission yoktur.",
      "Exact S245 request yalnız read-only view ile incelenir, alınmaz ve pending kalır; S243/S236 production girişi veya SGI yoktur.",
      "QEMU RPi5 whole-scheduler provider yolunu doğrulamaz; fiziksel RPi, CPU2/CPU3, hotplug, soak ve Generic SMP açıktır.",
      "S252 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S252=NO.",
    ],
  },