S329 · Capability-insert production writer guard integration

pub(crate) fn insert_cap_for_task_under_ipc_transaction(
    task_id: u64,
    cap: crate::ui::capability::Capability,
) -> Result<(usize, u64), &'static str> {
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    let irq_guard = crate::arch::aarch64::IrqGuard::new();
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    let s329_writer_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s329_capability_insert_writer_guard_integration::acquire_s329_production_scheduler_writer_access()
        .unwrap_or_else(|error| panic!("S329 capability-insert scheduler writer guard failed closed: {:?}", error));
    let result = unsafe {
        let sched = &mut *core::ptr::addr_of_mut!(SCHEDULER);
        sched.insert_cap_for_task(task_id, cap)
    };
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    drop(s329_writer_access);
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    drop(irq_guard);
    result
}

/// Acquire from the exact static gate used by all routed readers and S328.
/// The caller must already mask local IRQs; CPU identity is read here rather
/// than accepted from a caller-provided scalar.
#[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
pub fn acquire_s329_production_scheduler_writer_access(
) -> Result<G8lS329ProductionSchedulerWriterAccess, G8lS247WholeSchedulerAccessError> {
    let caller_cpu =
        crate::percpu::try_current_cpu_id().ok_or(G8lS247WholeSchedulerAccessError::InvalidCpu)?;
    let access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s246_whole_scheduler_read_access_guard::S247_PRODUCTION_WHOLE_SCHEDULER_ACCESS_GATE
        .try_acquire_exclusive_for_valid_cpu(caller_cpu)?;
    Ok(G8lS329ProductionSchedulerWriterAccess { _access: access })
}

#[test]
fn target_function_contains_one_exact_scheduler_writer() {
    let source = include_str!("../../kernel/src/task/scheduler.rs");
    let target = source
        .split("pub(crate) fn insert_cap_for_task_under_ipc_transaction")
        .nth(1)
        .unwrap()
        .split("/// M5 — Bir task'in CNode'undan capability kaldırır")
        .next()
        .unwrap();
    assert_eq!(target.matches("addr_of_mut!(SCHEDULER)").count(), 1);
    assert_eq!(
        target
            .matches("acquire_s329_production_scheduler_writer_access()")
            .count(),
        1
    );
}

  {
    id: "g8l-s329-capability-insert-writer-guard-integration-partial",
    date: "2026-08-27",
    sequence: 329,
    status: "passed",
    umbrella_status: "partial",
    title: "S329 · Capability-insert production writer guard integration",
    summary:
      "S329, insert_cap_for_task_under_ipc_transaction içindeki mutable SCHEDULER writer'ını RPi5 kaynağında local IRQ guard altında 44 production reader ve S328 writer'ın kullandığı aynı statik S247 gate'e bağlar. CPU kimliği caller scalarından değil gerçek per-CPU durumundan alınır; guarded writer 2/69, açık writer 67 ve provider authority 0'dır. S245 request tüketilmez, S244 admission üretilmez.",
    evidence: [
      "Focused capability-insert writer-integration kapısı iki bağımsız koşuda 20/20 PASS: 135 B / SHA-256 06878ee064d49d6285d934c38c36a7bcb7a442f99e8781ba978e519789eb5481.",
      "Aynı S247 state word üzerinde CPU0–CPU3 geçerli writer membership modeli, reader→writer ve writer→reader exclusion, invalid-CPU pre-callback rejection, exact-once commit-error release ve S328→S329 token monotonluğu doğrulandı; tarihsel S328 girişi CPU1-only kaldı.",
      "Production kaynak sırası IrqGuard → acquire_s329_production_scheduler_writer_access → addr_of_mut!(SCHEDULER) → real capability insert → writer drop → IRQ restore olarak kilitlendi; wrapper try_current_cpu_id ve exact S247_PRODUCTION_WHOLE_SCHEDULER_ACCESS_GATE kullanır.",
      "QEMU, RPi4, RPi5 ve RPi5+SMP AArch64 compile profilleri exit 0 verdi; warning header'ları 292/390/1098/1098, zero-warning iddiası yoktur.",
      "Operations komut haritasından türetilen S238–S329 matrisi iki bağımsız koşuda 93 grup / 1328/1328 PASS; süre-normalize çıktılar 12207 B / SHA-256 d9fb567672985e9eeab58013a196a8dab40a0e0daef48681412387500e5cf78c ile byte-eşittir.",
      "Exact yedi tarihsel G8h assertion adı dışlandığında tam workspace iki koşuda 291 sonuç grubu / 3145 PASS / 0 fail / 7 filtered verdi; süre-normalize sonuç özetleri 28108 B / SHA-256 82bdac89011c5dde177ccc992efac8e38e54f42b1f079db786f72c3a59814cc5 ile byte-eşittir. Filtresiz audit yalnız frozen S96 exceptions.S identity kapısında RED kaldığı için global workspace GREEN iddia edilmez.",
      "make verify-qemu iki bağımsız PASS verdi: strict ELF W^X 31/31 ve aynı 1551 B / SHA-256 527ef12c2bc56140e14e13be445f78c8e38872febc9849afcfacd499238ff966 smoke özeti korundu. Bu ortak regresyon board-rpi5-only S329 writer invocation kanıtı değildir.",
      "Yerel website 504/504 test ile PASS; lint, TypeScript ve static build ayrıca doğrulanır. S329 kaydı yereldir, deployment yapılmadı.",
      "S245 request ve S244 admission dokunulmadan kalır; production provider authority=0, whole-scheduler exclusion=false ve 67 production writer açık kalır.",
      "Fiziksel/device işlem yapılmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S329=NO.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s329_capability_insert_writer_guard_integration -- --test-threads=1",
      "cargo check -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
    ],
    terminalSessions: [
      {
        id: "g8l-s329-capability-insert-writer-guard-integration",
        title: "G8l S329 capability-insert writer guard integration",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s329_capability_insert_writer_guard_integration -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; S329 focused 1 group / 20 passed; 0 failed",
          "shared S247 gate: 44 guarded readers + 2/69 guarded writers; 67 writers open",
          "real per-CPU identity; provider authority=0; S245 not taken; S244 not published",
        ],
        exitCode: 0,
        outputMode: "complete",
      },
    ],
    terminalSessionsNote:
      "S329 ikinci production writer'ın kaynak entegrasyonudur; desteklenen RPi5 üzerinde runtime/cihaz gözlemi yapılmadı ve global exclusion oluşmadı.",
    limitations: [
      "67 production writer aynı shared gate dışında kaldığı için whole-scheduler exclusion ve provider authority açık kalır.",
      "Geçici reader/writer çakışması fail-closed reddedilir; ürün liveness, saturation/soak ve latency kabulü henüz kanıtlanmamıştır.",
      "Supported-profile runtime gözlemi, Generic SMP ve fiziksel RPi kabulü açık kalır.",
      "Yerel kayıt henüz deployment değildir; canlı site bu değişiklikle güncellenmemiştir.",
    ],
  },