G8l: production migration-lifecycle exact S179 execution-caller notification intent

/// Arm one notification intent after S235 has successfully published.
#[cfg(all(target_arch = "aarch64", target_os = "none"))]
pub fn arm_production_s179_execution_caller_notification_from_cpu1(
) -> Result<(), G8lProductionS179ExecutionCallerNotificationArmError> {
    use crate::g8l_runtime_contract::CPU1;

    if crate::percpu::try_current_cpu_id() != Some(CPU1) {
        return Err(G8lProductionS179ExecutionCallerNotificationArmError::WrongTargetCpu);
    }
    let _irq_guard = crate::arch::aarch64::IrqGuard::new();
    G8L_PRODUCTION_S179_CPU1_TO_CPU0_NOTIFICATION
        .lock()
        .arm()
        .map_err(|error| match error {
            G8lS179ExecutionCallerNotificationArmError::Armed(()) => {
                G8lProductionS179ExecutionCallerNotificationArmError::AlreadyArmed
            }
            G8lS179ExecutionCallerNotificationArmError::Consumed(()) => {
                G8lProductionS179ExecutionCallerNotificationArmError::Consumed
            }
        })
}

#[test]
fn s237_notification_is_allocation_free_and_terminal() {
    let source = include_str!("../../kernel/src/g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s179_execution_caller_notification.rs");
    for forbidden in ["Box<", "Vec<", "alloc::", "pub fn reset", "fn clear"] {
        assert!(
            !source.contains(forbidden),
            "forbidden S237 marker: {forbidden}"
        );
    }
    assert!(source.contains("Idle -> Armed -> Consumed"));
}

  {
    id: "g8l-s237-production-migration-lifecycle-s179-execution-caller-notification-partial",
    date: "2026-08-25",
    sequence: 237,
    status: "passed",
    umbrella_status: "partial",
    title:
      "G8l: production migration-lifecycle exact S179 execution-caller notification intent",
    summary:
      "S237 16/16 PASS ile S235 exact caller publication'ından sonra allocation-free Idle→Armed→Consumed notification intent'i CPU1'de arm edip live CPU0'da bir kez aldı ve S236 consumer sırasına bağladı. Bu typed ordering token'ı gerçek GIC/SGI/IPI delivery, CPU0 wake, runtime-authority transportu, scheduler mutation, ERET veya fiziksel runtime değildir.",
    evidence: [
      "S237 focused grubu iki bağımsız byte-equal koşuda 16/16 PASS verdi: 131 B / SHA-256 15a7e46ffcfb80e4e2e064396f9c9ae1e218c34c5d775ddeec493f8d588c0d23.",
      "S236 consumer + S237 notification matrisi iki byte-equal koşuda 2 grup / 30/30 PASS verdi: 260 B / SHA-256 a8b65eacaa2a961329e86d52e595fc1a4b94730ffdfedc4e4c016de53265177f.",
      "RPi5 AArch64 compile PASS: 645 warning envanterlendi; 315944 B / SHA-256 4af1bf1b26cc6a293d66b180fe9cb51418ef7bef4b7d84c99f6ebdc06cd5197c. smp: 645 warning, 315886 B / SHA-256 4777cf59b4e41a773905a07038e40b65306a2d4e861028cbc5dac2439144ec6c. Zero-warning iddiası yoktur.",
      "Kalıcı kapsam: docs/M8.1-RPi5-G8l-S237-Migration-Lifecycle-S179-Execution-Caller-Notification-Proof.md.",
      "S237 source/ABI sırası exact S235 publish → S237 notification arm → live CPU0 notification take → S236 consumer'dır; slot Idle→Armed→Consumed terminaldir, retry/replacement/reset yoktur.",
      "S237 fiziksel/device operasyonu yapmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S237=NO.",
      "Canlı marker: S237_16_OF_16_MIGRATION_LIFECYCLE_S179_EXECUTION_CALLER_NOTIFICATION_INTENT_S235_PUBLISH_ONCE_S237_ARM_IDLE_ARMED_CONSUMED_CPU1_ARM_CPU0_TAKE_S236_CONSUMER_ORDER_NO_GIC_SGI_IPI_NO_CPU0_WAKE_NO_RUNTIME_AUTHORITY_TRANSPORT_NO_RETRY_NO_REPLACEMENT_NO_RESET_AARCH64_COMPILED_PRESENT_REQUEST_NOT_OBSERVED_SCHEDULER_MUTATION_NOT_OBSERVED_ERET_HARDWARE_QEMU_PHYSICAL_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S397_TO_S447_S422_NO_RUNBOOK_EXECUTED_IN_S237_VERIFIED; deployment-specific route/hash evidence is recorded in the project-status manifest.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s179_execution_caller_notification -- --test-threads=1",
      "cargo check -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
    ],
    terminalSessions: [
      {
        id: "s237-g8l-production-migration-lifecycle-s179-execution-caller-notification",
        title: "G8l S237 one-shot S179 notification intent",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s179_execution_caller_notification -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; 16 passed; 0 failed",
          "S235 publication precedes the allocation-free Idle → Armed → Consumed intent",
          "live CPU1 arm and live CPU0 take mask local IRQs around one synchronized slot",
          "CPU0 takes the intent before entering S236; no GIC/SGI/IPI, wake, scheduler or physical path",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "Terminal özeti S237'nin S235→S236 arasında typed notification ordering token'ı bağladığını gösterir; gerçek interrupt delivery veya production scheduler/hardware execution kanıtı değildir.",
    limitations: [
      "S237 yalnızca notification intent arm/take sınırıdır; GIC/SGI/IPI delivery ve CPU0 wake/dispatch bağlı değildir.",
      "S236/S231 typed S187 handoff sınırında durur; scheduler mutation, ERET/context-switch, QEMU present-tuple, fiziksel RPi, CPU2/CPU3, hotplug, soak ve Generic SMP açıktır.",
      "S237 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S237=NO.",
    ],
  },