G8l: scheduler-owner → scheduler mutation dispatch receipt commit acknowledgement

impl G8lSchedulerOwnerSchedulerMutationDispatchReceiptCommitAck {
    /// Consume the exact S197 scheduler-mutation receipt commit by value.
    pub fn from_scheduler_mutation_dispatch_receipt_commit(
        runtime: &G8lRuntimeAuthority,
        authority: &G8lSchedulerOwnerAuthority,
        commit: G8lSchedulerOwnerSchedulerMutationDispatchReceiptCommit,
        caller_cpu: usize,
    ) -> Result<Self, G8lSchedulerOwnerSchedulerMutationDispatchReceiptCommitAckError> {
        if caller_cpu != CPU1 {
            return Err(
                G8lSchedulerOwnerSchedulerMutationDispatchReceiptCommitAckError::InvalidCallerCpu,
            );
        }
        commit.revalidate(authority, runtime)?;
        if runtime.phase() != RuntimePhase::Running1 {
            return Err(
                G8lSchedulerOwnerSchedulerMutationDispatchReceiptCommitAckError::RuntimePhaseMismatch,
            );
        }
        if runtime.migration_input().owner_cpu != CPU1
            || runtime.migration_input().task_id != commit.task_id()
            || commit.caller_cpu() != CPU1
            || commit.target_cpu() != CPU1
            || commit.owner_epoch() != authority.epoch()
        {
            return Err(
                G8lSchedulerOwnerSchedulerMutationDispatchReceiptCommitAckError::RuntimeInputMismatch,
            );
        }
        Ok(Self {
            runtime_instance_id: commit.runtime_instance_id(),
            task_id: commit.task_id(),
            caller_cpu,
            target_cpu: commit.target_cpu(),
            owner_epoch: commit.owner_epoch(),
            exact_s197_commit_consumed: true,
        })
    }

    pub fn revalidate(
        &self,
        authority: &G8lSchedulerOwnerAuthority,
        runtime: &G8lRuntimeAuthority,
    ) -> Result<(), G8lSchedulerOwnerSchedulerMutationDispatchReceiptCommitAckError> {
        if self.caller_cpu != CPU1
            || self.target_cpu != CPU1
            || self.owner_epoch == 0
            || self.task_id != authority.task_id()
            || authority.owner_cpu() != CPU1
            || authority.epoch() != self.owner_epoch
            || runtime.instance_id() != self.runtime_instance_id
            || runtime.phase() != RuntimePhase::Running1
            || runtime.migration_input().owner_cpu != CPU1
            || runtime.migration_input().task_id != self.task_id
        {
            return Err(
                G8lSchedulerOwnerSchedulerMutationDispatchReceiptCommitAckError::RuntimeInputMismatch,
            );
        }
        Ok(())
    }

    pub const fn runtime_instance_id(&self) -> u64 {
        self.runtime_instance_id
    }

    pub const fn task_id(&self) -> u64 {
        self.task_id
    }

    pub const fn caller_cpu(&self) -> usize {
        self.caller_cpu
    }

    pub const fn target_cpu(&self) -> usize {
        self.target_cpu
    }

    pub const fn owner_epoch(&self) -> u64 {
        self.owner_epoch
    }

    pub const fn exact_s197_commit_consumed(&self) -> bool {
        self.exact_s197_commit_consumed
    }

    pub const fn production_constructor_wired(&self) -> bool {
        true
    }

    pub const fn production_constructor_invoked(&self) -> bool {
        false
    }

    pub const fn scheduler_mutation_dispatch_receipt_commit_ack_published(&self) -> bool {
        true
    }

    pub const fn production_scheduler_mutated(&self) -> bool {
        false
    }

    pub const fn global_scheduler_exclusion_proven(&self) -> bool {
        false
    }

    pub const fn gic_delivery_wired(&self) -> bool {
        false
    }

    pub const fn hardware_execution_proven(&self) -> bool {
        false
    }

    pub const fn global_source_linearity_proven(&self) -> bool {
        false
    }
}

#[test]
fn publishes_exact_s197_commit_as_scheduler_mutation_ack() {
    let (runtime, authority, commit) = scheduler_mutation_dispatch_receipt_commit();
    let ack = G8lSchedulerOwnerSchedulerMutationDispatchReceiptCommitAck::from_scheduler_mutation_dispatch_receipt_commit(
        &runtime,
        &authority,
        commit,
        CPU1,
    )
    .unwrap();

    assert_eq!(ack.runtime_instance_id(), runtime.instance_id());
    assert_eq!(ack.task_id(), TASK);
    assert_eq!(ack.caller_cpu(), CPU1);
    assert_eq!(ack.target_cpu(), CPU1);
    assert_eq!(ack.owner_epoch(), OWNER_EPOCH + 1);
    assert!(ack.exact_s197_commit_consumed());
    ack.revalidate(&authority, &runtime).unwrap();
}

  {
    id: "g8l-s199-scheduler-owner-scheduler-mutation-dispatch-receipt-commit-ack-partial",
    date: "2026-08-24",
    sequence: 199,
    status: "passed",
    umbrella_status: "partial",
    title:
      "G8l: scheduler-owner → scheduler mutation dispatch receipt commit acknowledgement",
    summary:
      "S199, non-Copy S197 scheduler-mutation dispatch receipt commit'ini by-value tüketen 10/10 allocation-free scheduler-mutation dispatch receipt commit acknowledgement sınırını kapattı. Bu, S198 exclusion lease ile paralel ve onu tüketmeyen dar bir typed source koludur. Aynı canlı Running1 runtime, task, CPU1 dispatch ve epoch 23→24 yeniden doğrulanıp source-model acknowledgement yayınlandı; production scheduler özellikle çalıştırılmadı ve değiştirilmedi. Foreign authority/runtime ile CPU0 caller fail-closed kaldı.",
    evidence: [
      "g8l_target_dispatch_scheduler_owner_scheduler_mutation_dispatch_receipt_commit_ack: 10/10 PASS; exact S197 commit by-value consumption, Running1/CPU1 acknowledgement revalidation and closed production claims.",
      "Odaklı test iki bağımsız koşuda 10/10 PASS ve byte-eşit kaldı: 125 B / SHA-256 7742173cc9d98f4cbe90debabdf83ee6b5d3e9e965e25428a46d090582275222.",
      "S155–S199 sıra-düzenli birleşik matris, S198 exclusion lease ve S199 acknowledgement dahil, iki bağımsız koşuda 45 grup / 406/406 PASS ve 5529 B / SHA-256 c1d04ff9bb66304fe94990fc7980975a25c8606d2f1c06c55cf4b433fee2c5ce verdi.",
      "RPi5 AArch64 source compile PASS: 497 warning envanterlendi, hata yok; 227312 B log / SHA-256 e3f28e14c7c4d0e2546cfe1f9cf197eaa6c61a45eb9ff5e14e753e54f206cbc5. Zero-warning iddiası yoktur.",
      "RPi5 AArch64 smp compile PASS: 497 warning envanterlendi, hata yok; 227254 B log / SHA-256 7e608ddfb435cc26ae1e40864f83a5d0d2355f1026da9f2fc15334e6556dcdc2. Zero-warning iddiası yoktur.",
      "Scheduler mutation dispatch receipt commit acknowledgement yalnız source-model typed handoff'tur; production task::scheduler::SCHEDULER mutation/global exclusion, GIC/SGI, CPU1 ERET assembly ve hardware authority iddiası üretmez.",
      "Kalıcı kapsam: `docs/M8.1-RPi5-G8l-S199-Scheduler-Owner-Scheduler-Mutation-Dispatch-Receipt-Commit-Ack-Proof.md`.",
      "Production core publication ddcedf3a-0b54-4cfd-bdd5-97876f493619 ile yayınlandı; custom domain Operations/Timeline/Yol Haritası local static ile byte-exact doğrulandı: 6417034 B / f1ba5cb868c2710346c85e6fbb4d7c06e73239b20ef4b0f7f05f7423e969f826, 953336 B / 10508c0a4357c753f698785858de1998b2f8c6c25b6dc3736ed55ca5cadd5713 ve 953084 B / bff1fe0471ff9b228881aed76ba079d44c3a4a6c75ef0a3d0cd2b41743c543e1.",
      "Immutable pages.dev direct fetch current host'tan 10 saniyelik connect timeout verdi; bu probe PASS olarak sayılmadı.",
      "S199 fiziksel/device operasyonu yapmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S199=NO.",
      "Görünür fiziksel sıra: Gücü kapat → SD kartı Pi'den çıkar → SD kartı Mac'e tak → Yetkili write/verify/read-back işlemini tamamla → SD kartı Mac'ten güvenli çıkar → SD kartı güçsüz Pi'ye tak → UART capture pre-arm ve exact identity kapısını doğrula → Güç ver. Bu sıra yalnız tarihsel S124'te tamamlandı.",
      "Canlı marker: S199_10_OF_10_G8L_SCHEDULER_OWNER_SCHEDULER_MUTATION_DISPATCH_RECEIPT_COMMIT_ACK_SOURCE_EXACT_S197_COMMIT_CONSUMED_BY_VALUE_NONCOPY_PARALLEL_TO_S198_EXCLUSION_LEASE_LIVE_RUNNING1_CPU1_DISPATCH_TASK_EPOCH23_TO24_REVALIDATED_SCHEDULER_MUTATION_DISPATCH_RECEIPT_COMMIT_ACK_PUBLISHED_WRONG_CALLER_FOREIGN_AUTHORITY_FOREIGN_RUNTIME_FAIL_CLOSED_PRODUCTION_CONSTRUCTOR_WIRED_NOT_INVOKED_PRODUCTION_SCHEDULER_MUTATION_GLOBAL_EXCLUSION_GIC_HARDWARE_GLOBAL_SOURCE_LINEARITY_QEMU_PHYSICAL_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S359_TO_S409_S384_NO_RUNBOOK_EXECUTED_IN_S199_VERIFIED; deployment-specific route/hash evidence is recorded in the project-status manifest.",
    ],
    commands: [
      "cargo test --quiet --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_dispatch_receipt_commit_ack -- --test-threads=1",
      "cargo check --quiet --manifest-path kernel/Cargo.toml --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet --manifest-path kernel/Cargo.toml --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
    ],
    terminalSessions: [
      {
        id: "s199-g8l-scheduler-owner-scheduler-mutation-dispatch-receipt-commit-ack",
        title:
          "G8l S199 scheduler-owner scheduler mutation dispatch receipt commit acknowledgement",
        commandLines: [
          "cargo test --quiet --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_dispatch_receipt_commit_ack -- --test-threads=1",
        ],
        outputLines: [
          "running 10 tests",
          "test result: ok; 10 passed; 0 failed",
          "S197 receipt commit consumed by value; scheduler mutation dispatch receipt commit acknowledgement published",
          "production scheduler mutation/global exclusion/GIC/hardware: not invoked / not claimed",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "Terminal özeti dar S199 source sınırını gösterir; QEMU veya fiziksel cihaz çalıştırması değildir.",
    limitations: [
      "S199 dar typed scheduler-mutation dispatch receipt commit acknowledgement source-model kabulü PASS'tir; S198 exclusion lease'i tüketmez ve gerçek production scheduler mutation, global lock, GIC/hardware runtime ve fiziksel çalışma açık kalır.",
      "S199 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S199=NO.",
    ],
  },