G8l: runtime-OOM arm/non-current preflight read-access guard genişletmesi

pub fn preflight_s259_whole_scheduler_read_coverage(
    caller_cpu: usize,
    request: Option<G8lS245WholeSchedulerExclusionAdmissionRequestView>,
) -> Result<
    G8lS259WholeSchedulerReadCoveragePreflightOutcome,
    G8lS259WholeSchedulerReadCoveragePreflightError,
> {
    match preflight_s258_whole_scheduler_read_coverage(caller_cpu, request)
        .map_err(G8lS259WholeSchedulerReadCoveragePreflightError::S258)?
    {
        G8lS258WholeSchedulerReadCoveragePreflightOutcome::Idle => {
            return Ok(G8lS259WholeSchedulerReadCoveragePreflightOutcome::Idle);
        }
        G8lS258WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } if guarded_sites == S258_WHOLE_SCHEDULER_GUARDED_SITES
            && unrouted_sites
                == S246_DIRECT_SCHEDULER_ACCESS_SITES - S258_WHOLE_SCHEDULER_GUARDED_SITES => {}
        G8lS258WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } => {
            return Err(
                G8lS259WholeSchedulerReadCoveragePreflightError::PriorCoverageDrift {
                    guarded_sites,
                    unrouted_sites,
                },
            );
        }
    }

    let outcome = preflight_s246_whole_scheduler_exclusion_provider(
        caller_cpu,
        request,
        G8lS246WholeSchedulerCoverageAudit::new(
            S246_SOURCE_AUDIT_UNITS,
            S246_DIRECT_SCHEDULER_ACCESS_SITES,
            S259_WHOLE_SCHEDULER_GUARDED_SITES,
        ),
    )
    .map_err(G8lS259WholeSchedulerReadCoveragePreflightError::S246)?;
    match outcome {
        G8lS246WholeSchedulerProviderPreflightOutcome::Idle => {
            Ok(G8lS259WholeSchedulerReadCoveragePreflightOutcome::Idle)
        }
        G8lS246WholeSchedulerProviderPreflightOutcome::AwaitingCoverage {
            request_id,
            guarded_sites,
            unrouted_sites,
        } => Ok(
            G8lS259WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
                request_id,
                guarded_sites,
                unrouted_sites,
            },
        ),
        G8lS246WholeSchedulerProviderPreflightOutcome::CoverageCompleteAwaitingProvider {
            ..
        } => Err(G8lS259WholeSchedulerReadCoveragePreflightError::UnexpectedCoverageComplete),
    }
}

#[test]
fn s259_preflight_revalidates_s258_without_consuming_or_admitting() {
    let source = include_str!("../../kernel/src/g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s258_runtime_oom_arm_read_access_guard_expansion.rs");
    let preflight = source
        .split("pub fn preflight_s259_whole_scheduler_read_coverage")
        .nth(1)
        .expect("S259 preflight");
    assert!(preflight.contains("preflight_s258_whole_scheduler_read_coverage"));
    assert!(preflight.contains("preflight_s246_whole_scheduler_exclusion_provider"));
    let service = source
        .split("pub fn service_s259_whole_scheduler_read_coverage_preflight_on_cpu1")
        .nth(1)
        .expect("S259 service");
    assert!(service.contains("inspect_s245_exclusion_admission_request_on_cpu1"));
    assert!(!service.contains("take_s245_exclusion_admission_request_on_cpu1"));
    assert!(!service.contains("S244_PRODUCTION_ADMISSION"));
}

  {
    id: "g8l-s259-runtime-oom-arm-noncurrent-preflight-read-access-guard-expansion-partial",
    date: "2026-08-25",
    sequence: 259,
    status: "passed",
    umbrella_status: "partial",
    title:
      "G8l: runtime-OOM arm/non-current preflight read-access guard genişletmesi",
    summary:
      "S259 11/11 PASS ile S258 production reader gate'ini arm_current_runtime_oom_teardown içindeki deferred-carrier-busy bool snapshot'ına ve execute_runtime_oom_teardown içindeki audited non-current RuntimeOomTaskBinding sonucuna taşıdı. İlk reader RuntimeMemory preflight veya mutable scheduler erişiminden; ikinci reader IPC teardown, mutable scheduler erişimi, task detachment veya reclaim'den önce explicit düşer. Coverage 24/111'den 26/111'e ilerledi; 85 site unrouted kalır. RPi5 yolları source-routed/AArch64-compiled fakat runtime-invoked değildir; production exclusive wrapper yoktur.",
    evidence: [
      "S259 focused host grubu final kernel kaynağı üzerinde iki bağımsız koşuda 11/11 PASS verdi: canonical test-result 95 B / SHA-256 2c07f0a50574922424c491ec40d2a364ada2ad650cb922a2036d326c49b26e45.",
      "Exact source coverage: S258 guarded=24/111 başlangıcı yeniden doğrulandı; deferred-carrier-busy bool snapshot'ı ile audited non-current RuntimeOomTaskBinding result iki ayrı common reader membership altına alındı. Yeni toplam guarded=26/111, unrouted=85; additional immutable=2, mutating-while-reader-live=0.",
      "İlk route bool kopyasıdır ve guard RuntimeMemory preflight ile mutable scheduler erişiminden önce düşer. İkinci route Copy RuntimeOomTaskBinding Result'ıdır ve guard IPC lifecycle teardown, mutable scheduler alias, task detachment ve reclaim'den önce düşer. Scheduler referansı kaçmaz; bu route'lar IPC transaction kilidi altında değildir.",
      "S238'den S259'a exact sıra-düzenli dependency matrisi 23 grup / 317/317 PASS verdi. Ham summary iki bağımsız koşuda byte-equal 2185 B / SHA-256 8c925915132108e18b92e2c674ea8f76ac376d5f40777abd196f48448c22acb0; süre-normalize summary 2300 B / SHA-256 bdab5d13a5e3cda42b838e0d7a94849c20f37cf0e6e61b0482ff98429ea91fac oldu. S240 receipt ve SGI gruplarının ikisi de dahildir.",
      "RPi5 AArch64 normal/SMP profilleri ikişer koşuda byte-equal PASS verdi. Normal: 359243 B / 698 warning başlığı / SHA-256 992e7f15d707b77ce98fd9a1ad20f38064111002134b21409016a4b6977f06b4. SMP: 359185 B / 698 warning başlığı / SHA-256 256235bd6fd1fbc20d51d2621c36b37e5e2e10f97f6ffa16a40e5ff3b6eb410d. Zero-warning iddiası yoktur.",
      "Exact production sırası: CPU1 timer IRQ → GIC EOI → S246 request preflight → S247 → S248 → S249 → S250 → S251 → S252 → S253 → S254 → S255 → S256 → S257 → S258 → S259 26/111 coverage preflight → S242 service → scheduler dispatch. Exact S245 request yalnız non-consuming metadata view ile incelenir, alınmaz ve pending kalır.",
      "Filtresiz workspace aynı frozen S96 identity kapısında exit 101 verdi: 51559 B / SHA-256 f0af831d7bf1baec44dcc69d54dc915ac4c6a12348e17494643bf587dd86f486. Exact yedi tarihsel assertion dışlandığında iki audit 221 grup / 2066 PASS / 0 fail / 7 filtered oldu. Süre-normalize test-result özetleri byte-equal 21982 B / SHA-256 fe9b7648b4b9e3cf6826fdf87500af9dd127faf158dd5b8073379db751120b4c verdi; full-workspace GREEN iddia edilmez.",
      "S259 physical/device operations=0; RUNBOOK_EXECUTED_IN_S259=NO. Tarihsel S124 physical BOOT8H PASS ve tam operatör sırası görünür biçimde korunur.",
      "Canlı marker: S259_11_OF_11_RUNTIME_OOM_ARM_NONCURRENT_PREFLIGHT_READ_ACCESS_GUARD_EXPANSION_TWO_ADDITIONAL_COPY_RETURNING_IMMUTABLE_LOCAL_IRQ_GUARDED_SCHEDULER_ACCESSES_DEFERRED_CARRIER_BUSY_BOOL_AND_AUDITED_NONCURRENT_RUNTIME_OOM_TASK_BINDING_CARRIER_READER_DROPPED_BEFORE_RUNTIME_MEMORY_OR_MUTABLE_SCHEDULER_BINDING_READER_DROPPED_BEFORE_IPC_TEARDOWN_MUTABLE_SCHEDULER_TASK_DETACHMENT_OR_RECLAIM_TOTAL_26_OF_111_GUARDED_85_UNROUTED_NO_SCHEDULER_REFERENCE_ESCAPES_NO_CONTEXT_SWITCH_CAPABLE_OR_MUTATING_SITE_GUARDED_WHILE_READER_LIVE_RPI5_RUNTIME_NOT_INVOKED_PRODUCTION_EXCLUSIVE_WRAPPER_ABSENT_S245_REQUEST_INSPECTED_NONCONSUMING_NOT_TAKEN_REMAINS_PENDING_AWAITING_COVERAGE_NO_PROVIDER_AUTHORITY_NO_EXCLUSION_PROOF_NO_S244_ADMISSION_NO_S243_S236_INVOCATION_NO_SGI_NO_SAFE_RUNTIME_EXECUTION_CLAIM_AARCH64_NORMAL_SMP_COMPILED_WORKSPACE_2066_PASS_7_HISTORICAL_G8H_ASSERTIONS_RED_PHYSICAL_QEMU_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S419_TO_S469_S444_NO_RUNBOOK_EXECUTED_IN_S259_VERIFIED.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s258_runtime_oom_arm_read_access_guard_expansion -- --test-threads=1",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
      "cargo test --workspace --quiet -- --test-threads=1 --skip wiring_does_not_mutate_timer_gic_boot_or_expand_runtime_scope --skip s97_runtime_and_layout_identities_are_unchanged --skip clean_bridge_literal_include_closure_is_manifest_complete --skip clean_image_make_recipe_inputs_are_exact_and_manifested --skip s99_and_s98_are_narrowly_historically_versioned --skip s97_s98_inputs_and_make_history_are_narrowly_versioned --skip historical_s90_and_s100_inputs_remain_exact",
    ],
    terminalSessions: [
      {
        id: "s259-g8l-runtime-oom-arm-noncurrent-preflight-read-access-guard-expansion",
        title:
          "G8l S259 runtime-OOM arm/non-current preflight read-access guard genişletmesi",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s258_runtime_oom_arm_read_access_guard_expansion -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; S259 focused 1 group / 11 passed; 0 failed",
          "source coverage: 7 units / 111 direct SCHEDULER sites / previous=24 / additional=2 / guarded=26 / unrouted=85",
          "new routes: deferred-carrier-busy bool + audited non-current RuntimeOomTaskBinding result / local IRQ / copy-returning immutable",
          "carrier reader drop precedes RuntimeMemory/mutable scheduler; binding reader drop precedes IPC/mutation/detachment/reclaim",
          "RPi5 runtime not invoked; production exclusive wrapper absent; S245 request inspected non-consuming, not taken, remains pending",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "S259 terminal özeti runtime-OOM arm/non-current preflight içindeki iki Copy snapshot'ı ve her reader'ın kendi sonraki memory/IPC/mutasyon/reclaim sınırından önce düşmesini doğrular; 85 unrouted site nedeniyle whole-scheduler exclusion provider authority/proof/admission değildir.",
    limitations: [
      "S259 yalnız 2 ek copy-returning immutable scheduler erişimiyle toplam 26/111 coverage'tır; 85 scheduler erişimi unrouted kalır.",
      "İlk reader RuntimeMemory/mutable scheduler öncesinde, ikinci reader IPC teardown/mutable scheduler/task detachment/reclaim öncesinde explicit düşer; scheduler referansı guard dışına çıkmaz.",
      "RPi5 runtime-OOM arm/non-current yolları source-routed ve AArch64-compiled'dır; runtime invocation, QEMU veya fiziksel RPi kanıtı değildir.",
      "Production exclusive acquisition wrapper'ı coverage tamamlanmadan yayımlanmadı; provider authority, exclusion proof, lease veya S244 admission yoktur.",
      "Exact S245 request yalnız read-only view ile incelenir, alınmaz ve pending kalır; S243/S236 production girişi veya SGI yoktur.",
      "S259 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S259=NO.",
    ],
  },