S348 · Current-runtime-OOM binding-audit error restore production writer guard integration

/// If the armed S131 target is current, re-audit both authority boundaries,
/// close IPC, publish Dead, move the carrier back into static scheduler
/// storage, quiesce the address space and switch away. The active task and its
/// stack are deliberately never detached or reaped in this function.
pub unsafe fn execute_armed_current_runtime_oom_if_target(
) -> Result<(), RuntimeOomTaskExecutionError> {
    #[cfg(feature = "board-rpi5")]
    let s258_identity_scheduler_read_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s257_runtime_oom_preflight_read_access_guard_expansion::acquire_s258_production_scheduler_read_access()
        .unwrap_or_else(|error| {
            panic!(
                "S258 current OOM identity scheduler read access failed closed: {:?}",
                error
            )
        });
    let (armed_target, current_task_id) = {
        let sched = &*core::ptr::addr_of!(SCHEDULER);
        (
            sched
                .deferred_current_runtime_oom
                .as_ref()
                .map(|carrier| carrier.binding.task_id),
            sched.current_task.as_ref().map(|task| task.id),
        )
    };
    #[cfg(feature = "board-rpi5")]
    drop(s258_identity_scheduler_read_access);
    let Some(armed_target) = armed_target else {
        return Ok(());
    };
    if current_task_id != Some(armed_target) {
        return Ok(());
    }

    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    let s351_irq_guard = crate::arch::aarch64::IrqGuard::new();
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    let s351_writer_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s351_current_runtime_oom_carrier_take_writer_guard_integration::acquire_s351_production_scheduler_writer_access()
        .unwrap_or_else(|error| {
            panic!(
                "S351 current-runtime-OOM carrier-take writer guard failed closed: {:?}",
                error
            )
        });
    let carrier_result = (&mut *core::ptr::addr_of_mut!(SCHEDULER))
        .deferred_current_runtime_oom
        .take();
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    drop(s351_writer_access);
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    drop(s351_irq_guard);
    let mut carrier = carrier_result.ok_or(RuntimeOomTaskExecutionError::DeferredTargetMismatch)?;
    let ticket_preflight = match crate::mm::with_boot_runtime_memory(|memory| {
        carrier
            .coordinator
            .preflight_teardown(&carrier.ticket, memory)
    }) {
        Ok(Ok(preflight)) => preflight,
        Ok(Err(error)) => {
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            let s350_irq_guard = crate::arch::aarch64::IrqGuard::new();
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            let s350_writer_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s350_current_runtime_oom_coordinator_preflight_error_restore_writer_guard_integration::acquire_s350_production_scheduler_writer_access()
                .unwrap_or_else(|access_error| {
                    panic!(
                        "S350 current-runtime-OOM coordinator-preflight error carrier restore writer guard failed closed: {:?}",
                        access_error
                    )
                });
            (&mut *core::ptr::addr_of_mut!(SCHEDULER)).deferred_current_runtime_oom = Some(carrier);
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            drop(s350_writer_access);
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            drop(s350_irq_guard);
            return Err(RuntimeOomTaskExecutionError::CoordinatorPreflight(error));
        }
        Err(_) => {
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            let s349_irq_guard = crate::arch::aarch64::IrqGuard::new();
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            let s349_writer_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s349_current_runtime_oom_boot_memory_error_restore_writer_guard_integration::acquire_s349_production_scheduler_writer_access()
                .unwrap_or_else(|error| {
                    panic!(
                        "S349 current-runtime-OOM boot-memory error carrier restore writer guard failed closed: {:?}",
                        error
                    )
                });
            (&mut *core::ptr::addr_of_mut!(SCHEDULER)).deferred_current_runtime_oom = Some(carrier);
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            drop(s349_writer_access);
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            drop(s349_irq_guard);
            return Err(RuntimeOomTaskExecutionError::BootMemoryAuthority);
        }
    };
    #[cfg(feature = "board-rpi5")]
    let s258_binding_scheduler_read_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s257_runtime_oom_preflight_read_access_guard_expansion::acquire_s258_production_scheduler_read_access()
        .unwrap_or_else(|error| {
            panic!(
                "S258 current OOM binding scheduler read access failed closed: {:?}",
                error
            )
        });
    let binding_result =
        (&*core::ptr::addr_of!(SCHEDULER)).audit_runtime_oom_task_binding(ticket_preflight);
    #[cfg(feature = "board-rpi5")]
    drop(s258_binding_scheduler_read_access);
    let binding = match binding_result {
        Ok(binding) => binding,
        Err(error) => {
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            let s348_irq_guard = crate::arch::aarch64::IrqGuard::new();
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            let s348_writer_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s348_current_runtime_oom_binding_audit_error_restore_writer_guard_integration::acquire_s348_production_scheduler_writer_access()
                .unwrap_or_else(|access_error| {
                    panic!(
                        "S348 current-runtime-OOM binding-audit error carrier restore writer guard failed closed: {:?}",
                        access_error
                    )
                });
            (&mut *core::ptr::addr_of_mut!(SCHEDULER)).deferred_current_runtime_oom = Some(carrier);
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            drop(s348_writer_access);
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            drop(s348_irq_guard);
            return Err(error);
        }
    };
    if binding.location != RuntimeOomTaskLocation::Current
        || binding.task_id != carrier.binding.task_id
        || binding.domain != carrier.binding.domain
        || binding.asid != carrier.binding.asid
        || binding.frame_count != carrier.binding.frame_count
    {
        #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
        let s347_irq_guard = crate::arch::aarch64::IrqGuard::new();
        #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
        let s347_writer_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s347_current_runtime_oom_binding_mismatch_restore_writer_guard_integration::acquire_s347_production_scheduler_writer_access()
            .unwrap_or_else(|error| {
                panic!(
                    "S347 current-runtime-OOM binding-mismatch carrier restore writer guard failed closed: {:?}",
                    error
                )
            });
        (&mut *core::ptr::addr_of_mut!(SCHEDULER)).deferred_current_runtime_oom = Some(carrier);
        #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
        drop(s347_writer_access);
        #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
        drop(s347_irq_guard);
        return Err(RuntimeOomTaskExecutionError::DeferredTargetMismatch);
    }

    let ipc_teardown = match crate::ui::capability::teardown_task_ipc_lifecycle(binding.task_id) {
        Ok(lifecycle) => RuntimeOomIpcTeardown::from_lifecycle(lifecycle),
        Err(_) => {
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            let s346_irq_guard = crate::arch::aarch64::IrqGuard::new();
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            let s346_writer_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s346_current_runtime_oom_ipc_lifecycle_restore_writer_guard_integration::acquire_s346_production_scheduler_writer_access()
                .unwrap_or_else(|error| {
                    panic!(
                        "S346 current-runtime-OOM IPC-lifecycle carrier restore writer guard failed closed: {:?}",
                        error
                    )
                });
            (&mut *core::ptr::addr_of_mut!(SCHEDULER)).deferred_current_runtime_oom = Some(carrier);
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            drop(s346_writer_access);
            #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
            drop(s346_irq_guard);
            return Err(RuntimeOomTaskExecutionError::IpcLifecycle);
        }
    };
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    let s345_irq_guard = crate::arch::aarch64::IrqGuard::new();
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    let s345_writer_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s345_current_runtime_oom_commit_writer_guard_integration::acquire_s345_production_scheduler_writer_access()
        .unwrap_or_else(|error| {
            panic!(
                "S345 current-runtime-OOM final scheduler commit writer guard failed closed: {:?}",
                error
            )
        });
    let sched = &mut *core::ptr::addr_of_mut!(SCHEDULER);
    let Some(task) = sched.current_task.as_mut() else {
        sched.deferred_current_runtime_oom = Some(carrier);
        #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
        drop(s345_writer_access);
        #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
        drop(s345_irq_guard);
        return Err(RuntimeOomTaskExecutionError::SchedulerCommitMismatch);
    };
    if task.id != binding.task_id
        || task.runtime_allocation_domain() != Some(binding.domain)
        || task.asid != binding.asid
        || task
            .runtime_user_frames
            .as_ref()
            .map_or(0, |ledger| ledger.frame_count())
            != binding.frame_count
    {
        sched.deferred_current_runtime_oom = Some(carrier);
        #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
        drop(s345_writer_access);
        #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
        drop(s345_irq_guard);
        return Err(RuntimeOomTaskExecutionError::SchedulerCommitMismatch);
    }

    task.finished.store(true, Ordering::Release);
    task.state = TaskState::Dead;
    task.user_sp = 0;
    task.saved_user_elr = 0;
    task.saved_user_spsr = 0;
    task.saved_user_gprs = [0; 31];
    carrier.binding = binding;
    carrier.ipc_lifecycle_closed = true;
    carrier.ipc_teardown = Some(ipc_teardown);
    sched.deferred_current_runtime_oom = Some(carrier);
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    drop(s345_writer_access);
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    drop(s345_irq_guard);

    retire_current_asid_after_kernel_switch();
    yield_now();
    crate::arch::aarch64::disable_irqs();
    loop {
        core::arch::asm!("wfe", options(nomem, nostack));
    }
}

#[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
pub fn acquire_s348_production_scheduler_writer_access(
) -> Result<G8lS348ProductionSchedulerWriterAccess, G8lS247WholeSchedulerAccessError> {
    let caller_cpu =
        crate::percpu::try_current_cpu_id().ok_or(G8lS247WholeSchedulerAccessError::InvalidCpu)?;
    if caller_cpu != crate::g8l_runtime_contract::CPU0 {
        return Err(G8lS247WholeSchedulerAccessError::InvalidCpu);
    }
    let access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s246_whole_scheduler_read_access_guard::S247_PRODUCTION_WHOLE_SCHEDULER_ACCESS_GATE
        .try_acquire_exclusive_for_valid_cpu(caller_cpu)?;
    Ok(G8lS348ProductionSchedulerWriterAccess { _access: access })
}

#[test]
fn audit_error_branch_has_exactly_one_s348_acquire() {
    assert_eq!(
        binding_audit_error_boundary()
            .matches("acquire_s348_production_scheduler_writer_access")
            .count(),
        1
    );
}

  {
    id: "g8l-s348-current-runtime-oom-binding-audit-error-restore-writer-guard-integration-partial",
    date: "2026-08-28",
    sequence: 348,
    status: "passed",
    umbrella_status: "partial",
    title:
      "S348 · Current-runtime-OOM binding-audit error restore production writer guard integration",
    summary:
      "S348, execute_armed_current_runtime_oom_if_target içindeki kaynak sırasına göre S347 audited-tuple mismatch restore'dan hemen önce gelen binding-audit Err carrier-restore writer sınırını aynı statik S247 state word'e bağlar. İkinci S258 reader audit_runtime_oom_task_binding sonucunu owned Result olarak çıkardıktan ve reader membership'i explicit bıraktıktan sonra yalnız Err kolunda ayrı IrqGuard kurulur; gerçek per-CPU kimliğiyle CPU0-only S348 exclusive writer herhangi bir yeni mutable SCHEDULER aliasından önce alınır. Owned carrier exact deferred_current_runtime_oom slotuna geri yayınlanır; writer, ardından IRQ guard explicit bırakılır ve yalnız sonra özgün RuntimeOomTaskExecutionError değeri yeniden sınıflandırılmadan döner. Guarded writer 21/69, açık writer 48 ve provider authority 0'dır. İki board-qemu source callsite vardır, fakat RPi5-only wrapper supported-profile runtime observation=0'dır. Boot-memory error, coordinator-preflight error ve carrier-take aliasları S349–S351 için ayrı açık kalır; sıradaki kapı S349 boot-memory error restore entegrasyonudur.",
    evidence: [
      "Focused binding-audit error restore writer-integration kapısı 36/36 PASS verdi. Önceki S347 36/36, S346 36/36 ve S345 37/37; tarihsel S258 runtime-OOM preflight reader 11/11; current-deferred 5/5; effect 5/5; lifecycle recovery 7/7; live IPC teardown 5/5; scheduler executor 5/5; timer trigger 5/5; S341 31/31 ve S334 26/26 regresyonları ayrıca geçti.",
      "Aynı S247 state word üzerinde CPU0-only membership, non-CPU0 pre-restore rejection, reader→writer, writer→reader ve writer→writer exclusion, callback-error sonrası exact release ve S347→S348 token monotonluğu doğrulandı. Callback hiçbir fail-closed access reddinde çağrılmadı.",
      "Production audit-error sırası S258 binding reader acquire → audit sonucunu owned Result'a çıkarma → reader drop → match Err(error) → S348 IrqGuard → S348 writer acquire → tek mutable SCHEDULER alias → exact carrier restore → writer drop → IRQ drop → özgün Err(error) return olarak kaynak-kilitlidir.",
      "Audit Err kolunda exact bir S348 acquire, bir mutable alias ve bir explicit writer drop vardır. Audit Ok kolu S348 membership almaz; daha sonraki S347 mismatch restore, S346 IPC-lifecycle restore ve S345 final commit ayrı transaction'lar olarak kalır, nested writer lease oluşmaz.",
      "S349 boot-memory error restore, S350 coordinator-preflight error restore ve S351 carrier-take aliasları S348 acquisition'dan önce kalır ve bu kapıda guarded sayılmaz. S352 arm-current-runtime-OOM writer sınırı da ayrı bir sonraki kaynak kapısıdır.",
      "S348 preflight önce S347'nin 44 guarded reader / 20 guarded writer / 49 open envanterini exact doğrular; yalnız sonra 21/69 guarded writer ve 48 open sonucu üretir. Inventory drift fail-closed reddedilir. S245 request yalnız pending_view ile non-consuming incelenir; request take edilmez ve S244 admission/provider authority oluşturulmaz.",
      "kernel/src/arch/aarch64/exceptions.rs içinde execute_armed_current_runtime_oom_if_target için iki direct board-qemu source callsite sayıldı. Bu çağrılar RPi5-only S348 wrapper'ın runtime invocation kanıtı değildir; supported-profile runtime observations=0'dır.",
      "Fresh ve birbirinden yalıtılmış AArch64 profilleri 4/4 exit 0 verdi: board-qemu check 111595 B / 7e6d1d05…6f01 / 293 warning header; board-rpi4 150320 B / 313d519b…5e64 / 391; board-rpi5 549482 B / 21a93044…63b / 1228; board-rpi5+smp 549424 B / cd19298d…b8d8 / 1228. Warning başlıkları sayılmıştır; zero-warning iddiası yoktur.",
      "S238–S348 dependency matrisi exact sıra listesiyle iki bağımsız seri koşuda 112 ayrı grup / 1871/1871 PASS verdi. İki ham özet 26205 B olup 0784e426…09c ve a84a79e2…603 SHA-256 değerleri yalnız altı ölçülen 0.00/0.01 s alanında ayrışır; raw byte equality iddia edilmez. 26317 B süre-normalize kanonik özetler be1565ee…e1e58 ile byte-eşittir.",
      "Exact yedi tarihsel assertion adı dışlanıp --test-threads=1 kabulü kullanıldığında workspace 310 sonuç grubu / 3707 PASS / 0 fail / 7 filtered verdi; 68095 B log b809c296…9d8 SHA-256'dır.",
      "Filtresiz workspace exit 101 ile yalnız frozen S96 wiring_does_not_mutate_timer_gic_boot_or_expand_runtime_scope source-identity reddinde durdu; 263 sonuç grubunda 3452 PASS / 1 fail, 63317 B log d99f1d59…e5e8'dir ve global workspace GREEN iddia edilmez.",
      "make verify-qemu ortak regresyonu 116447 B / ceececcf…ec36 ile strict ELF W^X 31/31, S130–S154 Runtime-OOM/deadline zinciri, IPC reply 20/20, scheduler SEC5 ve kernel fault marker 0 PASS verdi. RPi5-only S348 writer bu board-qemu koşusunda runtime-observed değildir.",
      "Website S348 yüzeyi 544/544 test, lint, boş çıktılı TypeScript ve 23/23 static route build PASS verdi; çıktı 193 dosya ve Timeline 187 ayrı gate-policy kartıdır. İlk production/main içerik yayını b683e7c9-cf9e-40e9-86f9-f9918309bd9f kimliğiyle 109 upload + 84 mevcut = 193 dosya olarak tamamlandı; 355 B deploy logu b4915393a366f2cd4edcc6106ef60d85de6af70b6a026cf66ab5b37f1773d6ed SHA-256'dır. Cache-busted custom-domain Operations HTTP 200 / 10808790 B / 8bbeff4b785ab08b44f576925160ac4b4509f1bd3b1edec498ca8249e50500c5, Timeline HTTP 200 / 2970316 B / e64adb67febe87991d1583b5cdc092a9db9a20b2c440971cd1b0cb08ddf0e2e4 ve yol-haritasi HTTP 200 / 2970064 B / fe32b554aaa04df7093068bd78d1b0f990686d4b9885b77ed53993d9814a469a artifact'leri deployment build yerel out'u ile byte-exact PASS verdi. Immutable b683e7c9 hostname probe'u 10 saniyede curl exit 28 / HTTP 000 verdi; custom-domain PASS bu erişim sınırını gizlemez.",
      "S245 request yalnız non-consuming incelenir; S244 admission dokunulmadan kalır. Production provider authority=0, whole-scheduler exclusion=false ve toplam 48 production writer açık kalır.",
      "S348 için güç, SD kart, Mac kart erişimi, UART capture, raw validation, archive veya promotion işlemi yapılmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S348=NO.",
    ],
    commands: [
      "cargo test -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s348_current_runtime_oom_binding_audit_error_restore_writer_guard_integration -- --test-threads=1",
      "cargo check -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
      "make verify-qemu",
      "npm test && npm run lint && npx tsc --noEmit && npm run build && npm run deploy",
    ],
    terminalSessions: [
      {
        id: "g8l-s348-focused-binding-audit-error-restore-writer-guard",
        title: "S348 focused binding-audit error restore writer membership",
        commandLines: [
          "cargo test -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s348_current_runtime_oom_binding_audit_error_restore_writer_guard_integration -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; S348 focused 1 group / 36 passed; 0 failed",
          "shared S247 gate: 44 guarded readers + 21/69 guarded writers; 48 writers open",
          "S258 owned Result/drop < audit Err < S348 IRQ/writer < one carrier restore < writer/IRQ drop < original Err(error)",
          "production source callsites=2 board-qemu; supported-profile RPi5 runtime observations=0",
        ],
        exitCode: 0,
        outputMode: "complete",
      },
      {
        id: "g8l-s348-operations-timeline-production-publication",
        title: "S348 Operations/Timeline production publication",
        commandLines: [
          "npm test && npm run lint && npx tsc --noEmit && npm run build",
          "npx wrangler pages deploy out --project-name=aselsan-microkernel --branch=main --commit-dirty=true",
          "curl --cache-busted https://aselsan.kerege.net/{operations,timeline,yol-haritasi}/ and compare with local out",
        ],
        outputLines: [
          "website test 544/544; lint PASS; TypeScript PASS; static routes 23/23; files 193; Timeline cards=187",
          "initial production/main deployment b683e7c9-cf9e-40e9-86f9-f9918309bd9f; upload 109 + existing 84 = 193; deploy log 355 B; b4915393a366f2cd4edcc6106ef60d85de6af70b6a026cf66ab5b37f1773d6ed",
          "custom operations HTTP 200; 10808790 B; 8bbeff4b785ab08b44f576925160ac4b4509f1bd3b1edec498ca8249e50500c5; local cmp PASS",
          "custom timeline HTTP 200; 2970316 B; e64adb67febe87991d1583b5cdc092a9db9a20b2c440971cd1b0cb08ddf0e2e4; local cmp PASS",
          "custom yol-haritasi HTTP 200; 2970064 B; fe32b554aaa04df7093068bd78d1b0f990686d4b9885b77ed53993d9814a469a; local cmp PASS",
          "immutable b683e7c9 probe curl exit 28; HTTP 000; no immutable-host PASS claimed",
        ],
        exitCode: 0,
        outputMode: "selected",
        outputNote:
          "Bu oturum ilk içerik yayınının exact kimliğini, üç canlı artifact'in byte eşitliğini ve immutable-host erişim sınırını ayrı tutar; yayın kanıtını içeren final deployment ayrıca kaydedilecektir.",
      },
    ],
    terminalSessionsNote:
      "S348 yirmi birinci production writer'ın dar kaynak entegrasyonudur. Yalnız binding-audit Err restore kolu guarded'dır; sonraki mismatch/IPC/final writer'ları S347/S346/S345'te, daha erken restore/take aliasları S349–S351'de ayrı kalır.",
    limitations: [
      "48 production writer aynı shared gate dışında kaldığı için whole-scheduler exclusion ve provider authority açık kalır.",
      "İki board-qemu source callsite wiring kanıtıdır; RPi5-only S348 wrapper için supported-profile invocation/observation kanıtı yoktur.",
      "Boot-memory error carrier restore writer entegrasyonu sıradaki ayrı S349 kapısıdır.",
      "Coordinator-preflight restore ve carrier-take aliasları S350–S351 için açık bırakılmıştır.",
      "Default-parallel PTY determinism, transient-contention liveness/soak, Generic SMP ve fiziksel RPi kabulü açık kalır.",
    ],
  },