G8l: owned CNode snapshot read-access guard genişletmesi

pub fn preflight_s263_whole_scheduler_read_coverage(
    caller_cpu: usize,
    request: Option<G8lS245WholeSchedulerExclusionAdmissionRequestView>,
) -> Result<
    G8lS263WholeSchedulerReadCoveragePreflightOutcome,
    G8lS263WholeSchedulerReadCoveragePreflightError,
> {
    match preflight_s261_whole_scheduler_read_coverage(caller_cpu, request)
        .map_err(G8lS263WholeSchedulerReadCoveragePreflightError::S261)?
    {
        G8lS261WholeSchedulerReadCoveragePreflightOutcome::Idle => {
            return Ok(G8lS263WholeSchedulerReadCoveragePreflightOutcome::Idle);
        }
        G8lS261WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } if guarded_sites == S261_WHOLE_SCHEDULER_GUARDED_SITES
            && unrouted_sites
                == S246_DIRECT_SCHEDULER_ACCESS_SITES - S261_WHOLE_SCHEDULER_GUARDED_SITES => {}
        G8lS261WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } => {
            return Err(
                G8lS263WholeSchedulerReadCoveragePreflightError::PriorCoverageDrift {
                    guarded_sites,
                    unrouted_sites,
                },
            );
        }
    }

    let outcome = preflight_s246_whole_scheduler_exclusion_provider(
        caller_cpu,
        request,
        G8lS246WholeSchedulerCoverageAudit::new(
            S246_SOURCE_AUDIT_UNITS,
            S246_DIRECT_SCHEDULER_ACCESS_SITES,
            S263_WHOLE_SCHEDULER_GUARDED_SITES,
        ),
    )
    .map_err(G8lS263WholeSchedulerReadCoveragePreflightError::S246)?;
    match outcome {
        G8lS246WholeSchedulerProviderPreflightOutcome::Idle => {
            Ok(G8lS263WholeSchedulerReadCoveragePreflightOutcome::Idle)
        }
        G8lS246WholeSchedulerProviderPreflightOutcome::AwaitingCoverage {
            request_id,
            guarded_sites,
            unrouted_sites,
        } => Ok(
            G8lS263WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
                request_id,
                guarded_sites,
                unrouted_sites,
            },
        ),
        G8lS246WholeSchedulerProviderPreflightOutcome::CoverageCompleteAwaitingProvider {
            ..
        } => Err(G8lS263WholeSchedulerReadCoveragePreflightError::UnexpectedCoverageComplete),
    }
}

#[test]
fn s263_coverage_adds_exactly_one_read_and_keeps_76_open() {
    assert_eq!(S263_ADDITIONAL_WHOLE_SCHEDULER_READ_SITES, 1);
    assert_eq!(S263_WHOLE_SCHEDULER_GUARDED_SITES, 35);
    assert_eq!(S263_WHOLE_SCHEDULER_UNROUTED_SITES, 76);
}

  {
    id: "g8l-s263-owned-cnode-snapshot-read-access-guard-expansion-partial",
    date: "2026-08-25",
    sequence: 263,
    status: "passed",
    umbrella_status: "partial",
    title: "G8l: owned CNode snapshot read-access guard genişletmesi",
    summary:
      "S263 12/12 PASS ile get_task_cnode_capabilities içindeki immutable scheduler okumasını S261 production reader gate'ine aldı. Current/ready task CNode'u fixed-size owned kopya olarak guard altında çıkarılıyor; guard bırakıldıktan sonra 16-slot capability snapshot taranıyor ve Vec toplanıyor. Scheduler veya CNode referansı lease dışına kaçmıyor. Coverage 34/111'den 35/111'e çıktı, 76 site unrouted kaldı. İlk QEMU wrapper koşusundaki kernel panic RED korunur; aynı birleşik kaynakta uzun ham koşu, kanonik tekrar ve üç erken-faz tekrar temiz PASS verdi. Bu adım RPi5 runtime invocation, exclusive wrapper veya whole-scheduler exclusion kanıtı değildir.",
    evidence: [
      "S263 focused kaynak kapısı iki bağımsız byte-equal koşuda 12/12 PASS verdi: 127 B / SHA-256 7c5c027e04834587141f9fff89aea670906490a9f834012d2adbd7279dba720b.",
      "Exact source coverage: 7 audit unit / 111 direct SCHEDULER site; previous=34, additional=1, guarded=35, unrouted=76. Routed işlev yalnız get_task_cnode_capabilities'tır.",
      "CNode, reader membership canlıyken owned fixed-size değer olarak kopyalanır. Reader explicit düşürüldükten sonra allocation-free [Option<Capability>; 16] snapshot taranır ve Vec toplanır; scheduler/CNode referans kaçışı yoktur.",
      "current_task_cnode() -> Option<&'static CNode> ile context-switch old-ASID scheduler okuması bilerek açık bırakıldı; S263 mutating veya context-switch-capable route eklemez.",
      "S238–S263 exact dependency matrisi iki byte-equal koşuda 27 grup / 363/363 PASS verdi: raw 3466 B / SHA-256 f0ae7f8e7a5c4c1b21f1aea5dd209f16ebe309e9d9a1c7ef4ac453ab4b52b1e4; süre-normalize 3601 B / SHA-256 fc7f47faceed05b23a875ba266a215f268c444f55ccdc9c4d315af83b959fbac.",
      "Default/QEMU AArch64 check iki byte-equal koşuda PASS: 110646 B / 291 warning başlığı / SHA-256 3564fab41a4e19a3cfed92d7c804d7e676c08d564477d00e5e580285c06281b8. Zero-warning iddiası yoktur.",
      "RPi5 normal/SMP profilleri ikişer byte-equal PASS: normal 359654 B / 699 warning / SHA-256 6eac502b6888a42ec29bf0d2c3bdd726005dcdf13cb622927abb09053fd0c1ba; SMP 359596 B / 699 warning / SHA-256 3cbe13b2f498b21c787c2238d52612a7e3d6d9ba2777370830f99d5d66a9225a.",
      "İlk make verify-qemu RED kaldı: 114791 B / SHA-256 a1c56d7b1176a630a75bd5c4508daad2ff9222533b0a950429799dab6d0c494b ve guest kernel panic marker'ı. Bu koşu silinmedi veya PASS sayılmadı.",
      "Aynı birleşik kaynakta 36 saniyelik ham koşu temizdi: 2409917 B / SHA-256 504adde130d736e7f4f6122b68bd0543fdca8296437f1ee6baf2cd99015cfc8d; strict spawn/W^X 31/31, S154 32 round/1024 retirement/SLA PASS, kernel panic/fault=0. Kanonik make verify-qemu tekrarı 116084 B / SHA-256 6602e6f8395b482a1c090975829826bd81bb93f79a3d32aa3c22ac76ab6a13e8 ile PASS verdi; ayrıca üç 10 saniyelik erken-faz tekrar panic/fault olmadan 31/31'e ulaştı.",
      "Birleşik manifest-aware workspace audit'i iki bağımsız koşuda 225 grup / 2116/2116 PASS, 0 fail ve exact 7 tarihsel G8h assertion filtered verdi. Her ham log 56720 B; süre-normalize test-result özeti byte-equal 22831 B / SHA-256 65122449e7fa0676c0b3e3d624b3ab2750f2eab7f6a0a4d4dc09a5ff9f3a835c'dir. Filtresiz koşu 52067 B / SHA-256 077cd2f93fd885cad89cd509ab5401b72a4439c9f72d66ad6e87ff4c4f97c4af ile exit 101 verdi; ilk hata frozen S96 exceptions.S identity mismatch'tir. Beklentiler gevşetilmedi ve full-workspace GREEN iddia edilmez.",
      "Web kapanış kapıları 378/378 test, lint, TypeScript ve 23/23 statik route ile PASS verdi; static artifact 191 dosyadır.",
      "S263 physical/device operations=0; RUNBOOK_EXECUTED_IN_S263=NO. Tarihsel S124 physical BOOT8H PASS ve tam operatör sırası görünür biçimde korunur.",
      "Canlı marker: S263_12_OF_12_OWNED_CNODE_SNAPSHOT_READ_ACCESS_GUARD_EXPANSION_ONE_ADDITIONAL_IMMUTABLE_GET_TASK_CNODE_CAPABILITIES_READ_FIXED_16_SLOT_OWNED_CNODE_COPY_READER_DROPPED_BEFORE_CAPABILITY_ARRAY_TRAVERSAL_AND_VEC_COLLECTION_NO_SCHEDULER_OR_CNODE_REFERENCE_ESCAPE_PREVIOUS_34_OF_111_TOTAL_35_OF_111_GUARDED_76_UNROUTED_CURRENT_TASK_CNODE_STATIC_REFERENCE_AND_CONTEXT_SWITCH_OLD_ASID_READ_OPEN_FIRST_QEMU_WRAPPER_RED_PANIC_RETAINED_THEN_RAW_AND_CANONICAL_PASS_THREE_EARLY_REPEATS_CLEAN_DEFAULT_RPI5_SMP_COMPILED_WORKSPACE_2116_PASS_7_HISTORICAL_G8H_ASSERTIONS_RED_NO_PRODUCTION_EXCLUSIVE_WRAPPER_NO_WHOLE_SCHEDULER_EXCLUSION_PHYSICAL_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S423_TO_S473_S448_NO_RUNBOOK_EXECUTED_IN_S263_VERIFIED.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s262_owned_cnode_snapshot_read_access_guard_expansion",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
      "make verify-qemu",
    ],
    terminalSessions: [
      {
        id: "s263-g8l-owned-cnode-snapshot-read-access-guard-expansion",
        title: "G8l S263 owned CNode snapshot read-access guard genişletmesi",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s262_owned_cnode_snapshot_read_access_guard_expansion",
          "make verify-qemu",
        ],
        outputLines: [
          "test result: ok; S263 focused 1 group / 12 passed; 0 failed",
          "coverage: previous 34 + additional 1 = 35/111 guarded; 76 unrouted",
          "owned CNode copy under reader; fixed 16-slot snapshot and Vec collection after guard drop",
          "QEMU history: first wrapper RED panic retained; 36 s raw + canonical repeat + 3 early repeats clean",
          "canonical QEMU PASS: W^X 31/31 · S130–S154 · S154 retired 1024 · IPC 20/20 · SEC5 · kernel faults 0",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "S263 bir immutable owned-snapshot route'unu guard'lar; ilk QEMU RED ayrıca korunur ve sonraki PASS'ler RPi5-only reader gate'inin runtime kanıtı değildir.",
    limitations: [
      "Toplam 35/111 scheduler erişimi guarded, 76 erişim unrouted kalır.",
      "current_task_cnode referans döndürür; context-switch old-ASID okuması da guard dışındadır.",
      "Production exclusive wrapper, provider authority ve whole-scheduler exclusion proof yoktur.",
      "QEMU ortak runtime regresyonudur; board-rpi5-only S263 reader route'unu çalıştırmaz.",
      "Exact yedi tarihsel G8h assertion filtresiz workspace'i kırmızı tutar; full-workspace GREEN iddia edilmez.",
      "Fiziksel RPi, CPU2/CPU3, hotplug, soak ve Generic SMP açık kalır.",
      "S263 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S263=NO.",
    ],
  },