G8l: production migration-lifecycle S191 mutation permit

/// Consume one completed lifecycle's exact S191 permit and enter S218.
///
/// Runtime, owner authority and permit are all consumed. S191, S192, S193,
/// S194, S195, S196, S197 and the downstream S213/S212 path are one terminal
/// by-value chain: a failure is not replayed, replaced or retried at this
/// boundary.
pub fn publish_runtime_owner_tuple_from_s191_migration_permit(
    queue: &mut G8lRuntimeOwnerS197TupleHandoffQueue,
    runtime: G8lRuntimeAuthority,
    authority: G8lSchedulerOwnerAuthority,
    permit: G8lSchedulerOwnerMutationPermit,
    caller_cpu: usize,
    target_cpu: usize,
) -> Result<(), G8lMigrationLifecycleS191PermitError> {
    if caller_cpu != CPU1 {
        return Err(G8lMigrationLifecycleS191PermitError::InvalidCallerCpu);
    }
    let callsite = G8lSchedulerOwnerMutationCallsite::from_mutation_permit(
        &runtime, &authority, permit, caller_cpu,
    )
    .map_err(G8lMigrationLifecycleS191PermitError::Callsite)?;
    publish_runtime_owner_tuple_from_s192_migration_callsite(
        queue, runtime, authority, callsite, caller_cpu, target_cpu,
    )
    .map_err(G8lMigrationLifecycleS191PermitError::S192Callsite)
}

#[test]
fn s219_source_is_allocation_free_and_orders_s191_s192_s218() {
    let source = include_str!("../../kernel/src/g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s191_permit.rs");
    assert!(!source.contains("Box<"));
    assert!(!source.contains("Vec<"));
    assert!(source.contains("G8lSchedulerOwnerMutationCallsite::from_mutation_permit"));
    assert!(source.contains("publish_runtime_owner_tuple_from_s192_migration_callsite"));
    assert!(source.contains("S191 -> S192 -> S218"));
    assert!(!source.contains("task::scheduler"));
    assert!(!source.contains("send_sgi"));
}

  {
    id: "g8l-s219-production-migration-lifecycle-s191-permit-partial",
    date: "2026-08-25",
    sequence: 219,
    status: "passed",
    umbrella_status: "partial",
    title: "G8l: production migration-lifecycle S191 mutation permit",
    summary:
      "S219 11/11 PASS ile exact non-Copy S191 scheduler-owner mutation permit'ini CPU1 caller sınırında by-value tüketip tek S192 callsite oluşturdu ve S218 üzerinden S217/S216/S215/S214/S213/S212 zincirine bağladı. Occupied slot replacement/retry açılmaz; migration runtime callsite'ı henüz invoke edilmedi.",
    evidence: [
      "S219 focused S191 permit callsite grubu iki bağımsız koşuda 11/11 PASS: CPU1 caller gate, S191→S192→S193→S194→S195→S196 source order, exact permit consumption, S218/S217/S216/S215/S214/S213/S212 ingress reuse, occupied ownership and no-retry boundaries.",
      "Focused koşular byte-eşit kaldı: 126 B / SHA-256 0d9a424720ba8dcdb80aa72dd7f87ea926ef1c95de05e316e305f19e7e0fe3c5.",
      "S206 callsite/readback + S207–S219 dependency matrix frozen S218 prefix'i üzerine 16 grup / 190/190 PASS ve 2028 B / SHA-256 d8861d0e4459ba19bfc12262720da0669c56b7081a0ac800a6c2b435f4fa01ac verdi; ilk 1902 B exact S218 dependency prefix'idir.",
      "S155–S219 explicit sequence-ordered matrix frozen S218 prefix'i üzerine 68 grup / 673/673 PASS ve 8439 B / SHA-256 d2c5a72aefaeaefd29c30d6b646c46ce987d5061501623711c2be1425b0863c5 verdi; exact S218 8313 B prefix'i korundu.",
      "RPi5 AArch64 compile PASS: 560 warning envanterlendi; 283360 B / SHA-256 6e24f18fef2d7f5951904cbe1b50f1bb9fe49822aba8f9946b6b2bc44a535c86. `smp`: 560 warning, 283302 B / SHA-256 22fc02dc105a5b0114ec46a37220bd151916a4a7615ec4df4b1cedf273b27ff2. Zero-warning iddiası yoktur.",
      "Kalıcı kapsam: `docs/M8.1-RPi5-G8l-S219-Migration-Lifecycle-S191-Permit-Proof.md`.",
      "S191 permit by-value tüketilir; CPU1 caller doğrulamasından sonra S192 callsite bir kez oluşturulur ve S218/S217/S216/S215/S214/S213/S212 zincirine geçilir. Wrong caller, foreign permit, wrong target ve occupied slot fail-closed kalır; replacement/retry yoktur.",
      "S219 fiziksel/device operasyonu yapmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S219=NO.",
      "S191 permit callsite wired/AArch64-compiled'dır fakat boot veya migration runtime callsite'ı henüz invoke edilmedi; present request, S207 invocation veya scheduler mutation gözlemi iddia edilmez.",
      "Canlı marker: S219_11_OF_11_MIGRATION_LIFECYCLE_S191_PERMIT_CPU1_CALLER_S191_NONCOPY_PERMIT_CONSUMED_BY_VALUE_EXACT_S192_CALLSITE_CONSTRUCTED_ONCE_S218_S217_S216_S215_S214_S213_S212_SINGLE_SLOT_INGRESS_NO_REPLACEMENT_NO_RETRY_AARCH64_COMPILED_NOT_RUNTIME_INVOKED_PRESENT_REQUEST_NOT_OBSERVED_LEGACY_SCHEDULER_ACCESSES_UNCOVERED_WHOLE_SCHEDULER_GIC_HARDWARE_QEMU_PHYSICAL_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S379_TO_S429_S404_NO_RUNBOOK_EXECUTED_IN_S219_VERIFIED; deployment-specific route/hash evidence is recorded in the project-status manifest.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s191_permit -- --test-threads=1",
      "cargo check --quiet --manifest-path kernel/Cargo.toml --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet --manifest-path kernel/Cargo.toml --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
    ],
    terminalSessions: [
      {
        id: "s219-g8l-production-migration-lifecycle-s191-permit",
        title: "G8l S219 migration-lifecycle S191 mutation permit",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s191_permit -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; 11 passed; 0 failed",
          "CPU1 caller consumes S191 permit and constructs S192 exactly once before S218",
          "S218 delegates through S217/S216/S215/S214/S213/S212 single-slot ingress with no replacement/retry",
          "production migration runtime callsite is not invoked; present request/scheduler mutation is not claimed",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "Terminal özeti S219 S191→S192→S218 callsite sınırını gösterir; production migration runtime, QEMU veya fiziksel cihaz çalıştırması değildir.",
    limitations: [
      "S219 S191 mutation permit callsite'ını wired/AArch64-compiled yapar; gerçek boot/migration caller'ı henüz invoke edilmediği için present request veya S207 runtime invocation iddia edilmez.",
      "Whole-scheduler exclusion, legacy scheduler erişimleri, GIC/SGI capture, CPU1 ERET/context-switch assembly, QEMU present-tuple yolu, fiziksel RPi ve Generic SMP açıktır.",
      "S219 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S219=NO.",
    ],
  },