İlk G8g-aware immutable BOOT8G package donduruldu

image-rpi5: verify-rpi5-g8h-image-input verify-rpi5-g7c-host verify-rpi5-g7d-host verify-rpi5-g8-host verify-rpi5-g8b-host verify-rpi5-g8c-host verify-rpi5-g8d-host verify-rpi5-g8e-host verify-rpi5-g8f-host $(RPI5_DTB) $(RPI5_CONFIG)
	@if [ -z "$(OBJCOPY)" ] || [ ! -x "$(OBJCOPY)" ]; then \
		echo "llvm-objcopy bulunamadı. rustup component add llvm-tools-preview"; \
		exit 1; \
	fi
	@if [ -z "$(READOBJ)" ] || [ ! -x "$(READOBJ)" ]; then \
		echo "llvm-readobj bulunamadı. rustup component add llvm-tools-preview"; \
		exit 1; \
	fi
	@if [ -z "$(OBJDUMP)" ] || [ ! -x "$(OBJDUMP)" ]; then \
		echo "llvm-objdump bulunamadı. rustup component add llvm-tools-preview"; \
		exit 1; \
	fi
	@ENTRY=$$($(READOBJ) --file-headers $(RPI5_ELF) | awk '/Entry:/ {print $$2; exit}'); \
		[ "$$ENTRY" = "$(RPI5_ENTRY)" ] || \
		(echo "HATA: RPi5 ELF entry $(RPI5_ENTRY) değil: $$ENTRY"; exit 1)
	@grep -qx 'arm_64bit=1' $(RPI5_CONFIG) || \
		(echo "HATA: RPi5 config arm_64bit=1 sözleşmesini taşımıyor"; exit 1)
	@grep -qx 'kernel_address=$(RPI5_ENTRY)' $(RPI5_CONFIG) || \
		(echo "HATA: RPi5 config kernel_address=$(RPI5_ENTRY) sözleşmesini taşımıyor"; exit 1)
	@sh scripts/verify-rpi5-pre-mmu-atomics.sh "$(OBJDUMP)" "$(RPI5_ELF)"
	@sh scripts/verify-rpi5-g7c-layout.sh "$(READOBJ)" "$(OBJDUMP)" \
		userspace/hello/target/$(TARGET)/release/hello "$(RPI5_ELF)"
	@sh scripts/verify-rpi5-g7d-layout.sh "$(OBJDUMP)" "$(RPI5_ELF)"
	@sh scripts/verify-rpi5-g8-layout.sh "$(READOBJ)" "$(OBJDUMP)" "$(RPI5_ELF)"
	@sh scripts/verify-rpi5-g8b-layout.sh "$(OBJDUMP)" "$(RPI5_ELF)"
	@sh scripts/verify-rpi5-g8c-layout.sh "$(OBJDUMP)" "$(RPI5_ELF)"
	@sh scripts/verify-rpi5-g8d-layout.sh "$(OBJDUMP)" "$(RPI5_ELF)"
	@sh scripts/verify-rpi5-g8e-layout.sh "$(OBJDUMP)" "$(RPI5_ELF)"
	@sh scripts/verify-rpi5-g8f-layout.sh "$(OBJDUMP)" "$(RPI5_ELF)"
	@sh scripts/verify-rpi5-g8g-layout.sh "$(OBJDUMP)" "$(RPI5_ELF)"
	@sh scripts/verify-rpi5-g8h-layout.sh "$(OBJDUMP)" "$(RPI5_ELF)"
	@strings $(RPI5_ELF) | grep -q "ASELSAN/BOOT0 BCM2712" || \
		(echo "HATA: RPi5 board marker ELF içinde yok"; exit 1)
	@for MARKER in \
		"ASELSAN/RAM0" \
		"ASELSAN/RAM1" \
		"ASELSAN/GIC0" \
		"ASELSAN/TIMER0" \
		"ASELSAN/IRQ0 INTID=27" \
		"ASELSAN/BOOT5 GIC+TIMER=OK" \
		"ASELSAN/BOOT6 DT+RAM+HEAP=OK" \
		"ASELSAN/G7S0" \
		"ASELSAN/BOOT7 SCHED=OK" \
		"ASELSAN/G7B0 RANGES=" \
		"ASELSAN/BOOT7B PMM=OK TIMER=OK ALLOC=1 BASE_TICKS=" \
		"ASELSAN/G7C0 CPU=0 MODE=EL0 ROOT=SHARED ASID=0 ELF=TRUSTED PMM_ALLOC=3" \
		"ASELSAN/G7C1 SVC=WRITE ELR=0x" \
		"ASELSAN/G7C2 SVC=EXIT ELR=0x" \
		"ASELSAN/BOOT7C EL0=OK SVC_WRITE=OK SVC_EXIT=OK SWITCH=EL1H TIMER=OK MAPS=OK" \
		"ASELSAN/G7D0 CPU=0 MODE=PREEMPT IRQ=PPI27 TASKS=2" \
		"ASELSAN/G7D1" \
		"ASELSAN/G7D2" \
		"ASELSAN/G7D3" \
		"ASELSAN/G7D4" \
		"ASELSAN/BOOT7D PREEMPT=OK IRQ=PPI27 ORDER=ABABA SWITCHES=4" \
		"ASELSAN/G8S0 CPU=0 DT=PSCI-1.0 CONDUIT=SMC CPUS=4 TARGET=0x" \
		"ASELSAN/G8S1 CPU=1 MPIDR=0x" \
		"ASELSAN/BOOT8 PSCI=OK CPU_ON=OK SECONDARY=CPU1" \
		"ASELSAN/G8B0 CPU=0 TARGET=CPU1 MPIDR=0x" \
		"ASELSAN/G8B1 CPU=1 MPIDR=0x" \
		"ASELSAN/BOOT8B GIC=OK TIMER=OK CPU1_IRQ=1" \
		"ASELSAN/G8C0 CPU=0 TARGET=CPU1 MPIDR=0x" \
		"ASELSAN/G8C1 CPU=1 MPIDR=0x" \
		"ASELSAN/BOOT8C SCHED=LOCAL CPU1_TASK=1" \
		"ASELSAN/G8D0 CPU=0 SOURCE=CPU0 TARGET=CPU1" \
		"ASELSAN/G8D1 CPU=1 MPIDR=0x" \
		"ASELSAN/G8D2 CPU=1 MPIDR=0x" \
		"ASELSAN/BOOT8D IPI=SGI1 CPU0_TO_CPU1=1" \
		"ASELSAN/G8E0 CPU=0 ROUND1=G8D ROUND2=G8E" \
		"ASELSAN/G8E1 ROUND=2 CPU=1 MPIDR=0x" \
		"ASELSAN/G8E2 ROUND=2 CPU=1 MPIDR=0x" \
		"ASELSAN/BOOT8E IPI=SGI1 CPU0_TO_CPU1=2" \
		"ASELSAN/G8F0 CPU=0 PREREQ=BOOT8E SOURCE=CPU0 TARGET=CPU1" \
		"ASELSAN/G8F1 REPORTER=CPU0 CPU=1 MPIDR=0x" \
		"ASELSAN/BOOT8F HANDOFF=POST_BOOT8E SOURCE=CPU0 TARGET=CPU1"; do \
		strings $(RPI5_ELF) | grep -Fq "$$MARKER" || \
			{ echo "HATA: RPi5 proof marker ELF içinde yok: $$MARKER"; exit 1; }; \
	done
	@for MARKER in \
		"ASELSAN/G8G0 " \
		"ASELSAN/G8G1 " \
		"ASELSAN/G8G2 " \
		"ASELSAN/BOOT8G "; do \
		COUNT=$$(LC_ALL=C strings "$(RPI5_ELF)" | grep -Fo -- "$$MARKER" | wc -l | tr -d '[:space:]'); \
		[ "$$COUNT" -eq 1 ] || \
			{ echo "HATA: G8g proof marker ELF exact-once değil: $$MARKER ($$COUNT)"; exit 1; }; \
	done
	@G8G_ERROR_MARKER="ASELSAN/G8GERR CODE="; \
		COUNT=$$(LC_ALL=C strings "$(RPI5_ELF)" | grep -Fo -- "$$G8G_ERROR_MARKER" | wc -l | tr -d '[:space:]'); \
		[ "$$COUNT" -eq 1 ] || \
			{ echo "HATA: G8g hata markerı ELF exact-once değil: $$COUNT"; exit 1; }
	@G8F_FIXTURE=simulation/tests/fixtures/rpi5_g8f_uart_suffix.log; \
		for MARKER in "ASELSAN/G8F0 " "ASELSAN/G8F1 " "ASELSAN/BOOT8F "; do \
			COUNT=$$(grep -Fc "$$MARKER" "$$G8F_FIXTURE" || true); \
			[ "$$COUNT" -eq 1 ] || \
				{ echo "HATA: canonical G8f UART marker exact-once değil: $$MARKER ($$COUNT)"; exit 1; }; \
		done; \
		if grep -Fq "ASELSAN/G8FERR" "$$G8F_FIXTURE"; then \
			echo "HATA: canonical G8f UART success fixture hata markerı içeriyor"; \
			exit 1; \
		fi
	@printf '%s  %s\n' "$(RPI5_G8G_FIXTURE_SHA256)" "$(RPI5_G8G_FIXTURE)" | \
		shasum -a 256 -c - >/dev/null || \
		{ echo "HATA: canonical G8g UART success fixture SHA256 uyuşmuyor"; exit 1; }
	@G8G_FIXTURE="$(RPI5_G8G_FIXTURE)"; \
		BYTES=$$(wc -c < "$$G8G_FIXTURE" | tr -d '[:space:]'); \
		[ "$$BYTES" -eq "$(RPI5_G8G_FIXTURE_BYTES)" ] || \
			{ echo "HATA: G8g UART success fixture byte sayısı exact değil: $$BYTES"; exit 1; }; \
		LINES=$$(wc -l < "$$G8G_FIXTURE" | tr -d '[:space:]'); \
		[ "$$LINES" -eq 4 ] || \
			{ echo "HATA: G8g UART success fixture satır sayısı exact değil: $$LINES"; exit 1; }; \
		for MARKER in "ASELSAN/G8G0 " "ASELSAN/G8G1 " "ASELSAN/G8G2 " "ASELSAN/BOOT8G "; do \
			COUNT=$$(grep -Fo -- "$$MARKER" "$$G8G_FIXTURE" | wc -l | tr -d '[:space:]'); \
			[ "$$COUNT" -eq 1 ] || \
				{ echo "HATA: canonical G8g UART marker exact-once değil: $$MARKER ($$COUNT)"; exit 1; }; \
		done; \
		if grep -Fq "ASELSAN/G8GERR" "$$G8G_FIXTURE"; then \
			echo "HATA: canonical G8g UART success fixture hata markerı içeriyor"; \
			exit 1; \
		fi
	@mkdir -p build/rpi5
	$(OBJCOPY) -O binary $(RPI5_ELF) $(RPI5_IMG)
	@for MARKER in \
		"ASELSAN/G8F0 CPU=0 PREREQ=BOOT8E SOURCE=CPU0 TARGET=CPU1" \
		"ASELSAN/G8F1 REPORTER=CPU0 CPU=1 MPIDR=0x" \
		"ASELSAN/BOOT8F HANDOFF=POST_BOOT8E SOURCE=CPU0 TARGET=CPU1"; do \
		COUNT=$$(strings $(RPI5_IMG) | grep -Fc "$$MARKER" || true); \
		[ "$$COUNT" -eq 1 ] || \
			{ echo "HATA: RPi5 paket marker exact-once değil: $$MARKER ($$COUNT)"; exit 1; }; \
	done
	@for MARKER in \
		"ASELSAN/G8G0 " \
		"ASELSAN/G8G1 " \
		"ASELSAN/G8G2 " \
		"ASELSAN/BOOT8G "; do \
		COUNT=$$(LC_ALL=C strings "$(RPI5_IMG)" | grep -Fo -- "$$MARKER" | wc -l | tr -d '[:space:]'); \
		[ "$$COUNT" -eq 1 ] || \
			{ echo "HATA: G8g proof marker raw image exact-once değil: $$MARKER ($$COUNT)"; exit 1; }; \
	done
	@G8G_ERROR_MARKER="ASELSAN/G8GERR CODE="; \
		COUNT=$$(LC_ALL=C strings "$(RPI5_IMG)" | grep -Fo -- "$$G8G_ERROR_MARKER" | wc -l | tr -d '[:space:]'); \
		[ "$$COUNT" -eq 1 ] || \
			{ echo "HATA: G8g hata markerı raw image exact-once değil: $$COUNT"; exit 1; }
	cp $(RPI5_DTB) $(RPI5_PACKAGE_DTB)
	cp $(RPI5_CONFIG) $(RPI5_PACKAGE_CONFIG)
	@cd build/rpi5 && shasum -a 256 \
		aselsanos-rpi5.img bcm2712-rpi-5-b.dtb config.txt > SHA256SUMS
	@cd build/rpi5 && \
		LINES=$$(wc -l < SHA256SUMS | tr -d '[:space:]'); \
		[ "$$LINES" -eq 3 ] || \
			{ echo "HATA: RPi5 SHA256SUMS exact üç kayıt taşımıyor: $$LINES"; exit 1; }; \
		for FILE in aselsanos-rpi5.img bcm2712-rpi-5-b.dtb config.txt; do \
			COUNT=$$(awk -v file="$$FILE" '$$2 == file { count++ } END { print count + 0 }' SHA256SUMS); \
			[ "$$COUNT" -eq 1 ] || \
				{ echo "HATA: RPi5 SHA256SUMS kaydı exact-once değil: $$FILE ($$COUNT)"; exit 1; }; \
		done; \
		awk 'NF != 2 || length($$1) != 64 || $$1 !~ /^[0-9a-f]+$$/ || \
			$$2 !~ /^(aselsanos-rpi5[.]img|bcm2712-rpi-5-b[.]dtb|config[.]txt)$$/ { bad = 1 } \
			END { exit bad }' SHA256SUMS || \
			{ echo "HATA: RPi5 SHA256SUMS beklenmeyen veya bozuk kayıt içeriyor"; exit 1; }
	@cd build/rpi5 && shasum -a 256 -c SHA256SUMS
	@echo ""
	@echo "✅ RPi5 imajı: $(RPI5_IMG)"
	@echo "   SHA256: $$(cat $(RPI5_SUMS))"
	@ls -lh $(RPI5_IMG) $(RPI5_PACKAGE_DTB) $(RPI5_PACKAGE_CONFIG) $(RPI5_SUMS)
	@echo ""
	@echo "Kart için: make flash-rpi5"

# Screen bring-up is intentionally a separate target.  It never runs the
# historical G8h layout gate and never overwrites build/rpi5 (S575/S570).

  {
    id: "rpi5-g8g-immutable-package-staged-green",
    date: "2026-08-22",
    sequence: 89,
    status: "verified",
    title: "İlk G8g-aware immutable BOOT8G package donduruldu",
    summary:
      "Sıra 88 deploy-payload reproducibility kabulünden sonra `image-rpi5` ilk kez G8g layout→integration→runtime→contract zincirine fail-closed bağlandı. Artifact-free 167-file source snapshot'ında tek clean `make image-rpi5` exit 0; G8g contract/runtime/integration 27/14/7, G8–G8g layout 7/7 ve ELF/raw G8G0/G8G1/G8G2/BOOT8G/G8GERR exact-once 5/5 PASS verdi. Canonical dört-satır fixture 1.734 B / 9996bfc9…13ab7, success marker 4/4 ve ERR=0'dır. Exact dört visible file taşıyan frozen evidence package'inin bütün dosyaları mode 0444; build/clean/evidence cmp 4/4 ve manifest 3/3 PASS. Image 292.256 B / 985fbe10…3c747; SHA256SUMS 248 B / fb112a41…3cb7a. Bağımsız salt-okunur audit negative fixture/checksum kapılarını da RED doğrulayıp final GO verdi. Bu immutable staged package kabulüdür: Sıra 90 microSD write, UART ve fiziksel BOOT8G STOP; karta yalnız frozen evidence dizini kaynak olabilir ve son fiziksel PASS Sıra 80 BOOT8F'tir.",
    evidence: [
      "Değişmeyen fiziksel prerequisite Sıra 80 BOOT8F raw'ıdır: 17.363 B, mode 0444, e70e1a9a2cf35f9079ee1b1a73d992106bf5ee9a19f1bbf2628582e836ea5068, direct validator PASS ve SCOPE=QUIESCENT_ATOMIC_HANDOFF_ONLY.",
      "Artifact-free source boundary exact 167 dosya / 2.813.885 B / 5de51108a9286a480429eebd3c72e282c207c52d7cf5d43329cbc6395918c375; source mode manifest f56d6cb8d929fe38fc26008cf88f38ca81325891bc09d2c25b5caad4d2158c0b.",
      "G8g-aware `image-rpi5` dependency graph'ını taşıyan Makefile exact 21.364 B / 1b8fa3e6e5f3c1ef3c0e67312bd50d9573cb262ea80210a57c550c34a2f109fa.",
      "Package-boundary source testi exact 9.894 B / c61dc48ae94e07d83d2fe134fc765e1454274d95a5fdf465c77e2df6fe417271 ve integration/source 7/7 PASS'tir.",
      "Tek artifact-free clean `make image-rpi5` exit 0; dependency exact image→G8g layout→integration→runtime→contract ve G8g test dağılımı 27/14/7 PASS'tir.",
      "Clean production image G8/G8b/G8c/G8d/G8e/G8f/G8g layout kapılarını 7/7 ve production entry 0x80000 kapısını PASS geçti.",
      "Production ELF exact 7.692.096 B / 91697a37a0f4cf07da9406184a2eba340fafc36f5955302043946ab69154f1b8; G8G0/G8G1/G8G2/BOOT8G/G8GERR prefixleri ELF ve raw içinde ayrı ayrı exact-once 5/5'tir.",
      "Canonical G8g success fixture exact 4 satır / 1.734 B / 9996bfc9e620e50be5ac288b103a488a60a1c2df940f2b80c0cdb69f2813ab7d; success marker 1/1/1/1 ve G8GERR=0.",
      "Frozen evidence path exact `evidence/rpi5/g8g/sequence-89-package-staged/package/`; exact dört visible regular file taşır ve mode kapısı 4/4 0444 PASS'tir.",
      "Frozen image exact 292.256 B / 985fbe1088566beb1f8a655dba7b06759f088256077446a1d542251f3683c747.",
      "Frozen DTB exact 78.703 B / 40a2fbe9c29e8b9a4912cf726a943068defb779fc052ec38e457a79c58abca00; config exact 501 B / 1248275cdc6f6ce951ce0ff2183471d194c5b9bb58c3dc3f66efa9156f91d76b.",
      "Frozen SHA256SUMS exact 248 B / fb112a41f2f55a2355e9a91d58fd2c2e74ad969a6fbf11b0a8ad6956fed3cb7a; deploy payload manifesti exact 3/3 OK'dir.",
      "Package content manifest c84ceee02b828f239a9f909b29a23b322e5b3088bf720e969fb42a8cb8bd7e51 ve mode manifest 0861bc4ea513a6ccba11d317aed416a6d2d20b1e796bc24f32977b844633c4e1.",
      "Current build, artifact-free clean build ve frozen evidence arasında image/DTB/config/SHA256SUMS karşılaştırmaları 4/4 cmp PASS'tir.",
      "Negative audit gerçek RED verdi: null fixture SHA mismatch exit 2, hash/bytes override edilmiş empty fixture line-count exit 2 ve unexpected dördüncü SHA256SUMS kaydı exit 1.",
      "Clean image dry-run/actual log SD/UART/web komutu taşımıyor; frozen evidence tree'de raw capture/UART dosyası yoktur.",
      "Evidence README exact 98 satır / 4.179 B / caccb85a03c1a4a81741de4b43c1ebcba73672235b3b54660e449efa5e064b98; owner gates PASS, independent read-only audit PASS ve final GO.",
      "Immutable package proof exact 7.181 B / dea54fabc4789d4e6a514a1b943c397994830b09344799cb641356248a8c1d9d.",
      "Updated staged proof exact 15.185 B / 2c5bd8fee054f1c25ae4d78d036edbb3048f064bd30fd6946d875b805d15694a.",
      "Güncellenmiş Sıra 90–93 roadmap exact 36.464 B / 5933acb4122c8b55f58f090c6e461c301505aca86339bd0516032300f0192805; sıradaki tek yetkili işlem Sıra 90 exact microSD write kapısıdır.",
      "Owner scratch recoverable Trash'a taşındı: `/Users/onderozturk/.Trash/aselsanos-g8g-s89-owner-20260822-0138`; frozen evidence ve main artefaktlar değişmedi.",
    ],
    terminalSessionsNote:
      "Oturumlar artifact-free clean image üretimini, marker/negative kapıları ve immutable evidence auditini gösterir. ELF/raw marker görünürlüğü fiziksel UART emission değildir; hiçbir oturum microSD, UART, Debug Probe veya Pi gücüne erişmez.",
    terminalSessions: [
      {
        id: "g8g-sequence89-clean-image-gates",
        title:
          "Artifact-free G8g-aware image-rpi5 dependency ve layout zinciri",
        commandLines: [
          "verify artifact-free 167-file source/content+mode manifests",
          "make image-rpi5 in one clean production workspace",
          "run G8g contract/runtime/integration and G8 through G8g layouts",
        ],
        outputLines: [
          "source=167 files · 2813885 B · content+mode exact",
          "contract/runtime/integration=27/14/7 PASS",
          "layouts=7/7 PASS · entry=0x80000",
          "clean make image-rpi5 exit=0",
        ],
        exitCode: 0,
        outputMode: "complete",
      },
      {
        id: "g8g-sequence89-marker-and-negative-gates",
        title: "ELF/raw/fixture exact markers ve fail-closed negative controls",
        commandLines: [
          "count G8G0/G8G1/G8G2/BOOT8G/G8GERR prefixes in production ELF and raw",
          "verify canonical four-line fixture hash/bytes/markers/no-error",
          "run null/empty fixture and extra-checksum negative controls",
        ],
        outputLines: [
          "ELF markers=5/5 exact-once · raw markers=5/5 exact-once",
          "fixture=4 lines/1734 B · success=4/4 · ERR=0",
          "null fixture SHA mismatch=RED exit2 · empty line-count=RED exit2",
          "unexpected fourth checksum record=RED exit1",
        ],
        exitCode: 0,
        outputMode: "complete",
      },
      {
        id: "g8g-sequence89-immutable-evidence-audit",
        title: "Build/clean/evidence exact package freeze ve salt-okunur audit",
        commandLines: [
          "compare build, clean and evidence image/DTB/config/SHA256SUMS",
          "verify exact visible-file set, modes, package manifests and README",
          "audit that no SD/UART/web command or capture artefact entered the package",
        ],
        outputLines: [
          "visible regular files=4 · modes0444=4/4",
          "build/clean/evidence cmp=4/4 PASS · SHA256SUMS=3/3 OK",
          "package content+mode manifests=PASS",
          "independent read-only audit=PASS · final verdict=GO",
        ],
        exitCode: 0,
        outputMode: "complete",
      },
    ],
    limitations: [
      "Bu kayıt immutable staged BOOT8G package PASS'idir; microSD write/read-back/eject veya fiziksel BOOT8G PASS değildir.",
      "Sıra 90 yalnız frozen evidence dizinindeki exact dört 0444 dosyayı kaynak alabilir; canlı `build/rpi5` veya başka workspace doğrudan karta yazılamaz.",
      "microSD, UART, Debug Probe ve Pi güç durumuna dokunulmadı. Son fiziksel PASS Sıra 80 BOOT8F'tir.",
      "ELF/raw içinde G8g markerlarının bulunması onların UART'ta yayımlandığını kanıtlamaz; fiziksel emission Sıra 92'ye aittir.",
      "Generic SMP, scheduler/runqueue ownership, migration, TLBI, CPU2/CPU3, soak ve hotplug kapalıdır.",
      "Production deployment dirty/untracked workspace ve stale 47d22c9 source etiketiyle yapılır; canlı artifact doğrulansa da Git-provider provenance kurulmuş sayılmaz.",
    ],
  },