G8l: whole-scheduler read-access guard genişletmesi

pub fn preflight_s248_whole_scheduler_read_coverage(
    caller_cpu: usize,
    request: Option<G8lS245WholeSchedulerExclusionAdmissionRequestView>,
) -> Result<
    G8lS248WholeSchedulerReadCoveragePreflightOutcome,
    G8lS248WholeSchedulerReadCoveragePreflightError,
> {
    match preflight_s247_whole_scheduler_read_coverage(caller_cpu, request)
        .map_err(G8lS248WholeSchedulerReadCoveragePreflightError::S247)?
    {
        G8lS247WholeSchedulerReadCoveragePreflightOutcome::Idle => {
            return Ok(G8lS248WholeSchedulerReadCoveragePreflightOutcome::Idle);
        }
        G8lS247WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } if guarded_sites == S247_WHOLE_SCHEDULER_GUARDED_SITES
            && unrouted_sites
                == S246_DIRECT_SCHEDULER_ACCESS_SITES - S247_WHOLE_SCHEDULER_GUARDED_SITES => {}
        G8lS247WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } => {
            return Err(
                G8lS248WholeSchedulerReadCoveragePreflightError::PriorCoverageDrift {
                    guarded_sites,
                    unrouted_sites,
                },
            );
        }
    }

    let outcome = preflight_s246_whole_scheduler_exclusion_provider(
        caller_cpu,
        request,
        G8lS246WholeSchedulerCoverageAudit::new(
            S246_SOURCE_AUDIT_UNITS,
            S246_DIRECT_SCHEDULER_ACCESS_SITES,
            S248_WHOLE_SCHEDULER_GUARDED_SITES,
        ),
    )
    .map_err(G8lS248WholeSchedulerReadCoveragePreflightError::S246)?;
    match outcome {
        G8lS246WholeSchedulerProviderPreflightOutcome::Idle => {
            Ok(G8lS248WholeSchedulerReadCoveragePreflightOutcome::Idle)
        }
        G8lS246WholeSchedulerProviderPreflightOutcome::AwaitingCoverage {
            request_id,
            guarded_sites,
            unrouted_sites,
        } => Ok(
            G8lS248WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
                request_id,
                guarded_sites,
                unrouted_sites,
            },
        ),
        G8lS246WholeSchedulerProviderPreflightOutcome::CoverageCompleteAwaitingProvider {
            ..
        } => Err(G8lS248WholeSchedulerReadCoveragePreflightError::UnexpectedCoverageComplete),
    }
}

#[test]
fn s248_pending_request_reports_four_guarded_without_taking_it() {
    let state = pending_request();
    assert_eq!(
        preflight_s248_whole_scheduler_read_coverage(
            S245_TARGET_CPU1,
            Some(pending_request_view(&state)),
        ),
        Ok(
            G8lS248WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
                request_id: 1,
                guarded_sites: 4,
                unrouted_sites: 107,
            }
        )
    );
    assert_eq!(state.pending_request_id(), Some(1));
}

  {
    id: "g8l-s248-production-whole-scheduler-read-access-guard-expansion-partial",
    date: "2026-08-25",
    sequence: 248,
    status: "passed",
    umbrella_status: "partial",
    title: "G8l: whole-scheduler read-access guard genişletmesi",
    summary:
      "S248 11/11 PASS ile S247 production reader gate'ini local IRQ maskesini zaten koruyan iki ek read-only SCHEDULER snapshot'ına taşıdı: current EL0 user-copy domain ve CPU1 runtime-owned request publication current-task görünümü. Coverage 2/111'den 4/111'e ilerledi; 107 site unrouted kalır. Reader canlıyken context switch yapabilen veya scheduler state'i değiştiren hiçbir site yeni kapsama alınmadı. Production exclusive wrapper hâlâ yoktur. S245 request non-consuming incelenir, alınmaz ve pending kalır.",
    evidence: [
      "S248 focused host grubu final kernel kaynağı üzerinde iki bağımsız koşuda 11/11 PASS verdi: canonical test-result 95 B / SHA-256 2c07f0a50574922424c491ec40d2a364ada2ad650cb922a2036d326c49b26e45.",
      "Exact source coverage: S247 guarded=2/111 başlangıcı önce yeniden doğrulandı; copy_from_current_user current EL0 copy-domain snapshot'ı ile CPU1 runtime-owned request publication current-task snapshot'ı common reader membership altına alındı. Yeni toplam guarded=4/111, unrouted=107; additional read-only=2, mutating=0, context-switch-capable=0.",
      "Her iki yeni callsite kendi local IrqGuard'ını reader membership boyunca taşır. Prior S247 coverage drift fail-closed'dur; production exclusive acquisition wrapper'ı coverage tamamlanmadan yayımlanmadı.",
      "S237'den S248'e exact sıra-düzenli dependency matrisi 12 grup / 196/196 PASS verdi. Ham summary yalnız libtest süresinde değişti; süre-normalize summary iki bağımsız koşuda byte-equal 1224 B / SHA-256 90116fcefce8963fbd52938d5e0b0c35efe0aaeb0ce7405ac16825c770289829 oldu.",
      "RPi5 AArch64 normal/SMP profilleri ikişer koşuda byte-equal PASS verdi. Normal: 354045 B / 684 warning başlığı / SHA-256 4a2fc4b56c552fef74d623821ef7b33f903b0a9ae40c971040e70bc743cbe471. SMP: 353987 B / 684 warning başlığı / SHA-256 3d8c0e6df21aabba85d25939220512100b78dc99d8915ec320668653e503246e. Zero-warning iddiası yoktur.",
      "Exact production sırası: CPU1 timer IRQ → GIC EOI → S246 request preflight → S247 reader-guard coverage preflight → S248 4/111 coverage preflight → S242 service → scheduler dispatch. Exact S245 request yalnız non-consuming metadata view ile incelenir, alınmaz ve pending kalır.",
      "Filtresiz workspace aynı frozen S96 identity kapısında exit 101 verdi: 50161 B / SHA-256 250a75f2714641141bd0d4fc291f553ffe1b962c3fbfd558f066189507ac3867. Exact yedi tarihsel assertion dışlandığında final manifest-aware iki audit 210 grup / 1934 PASS / 0 fail / 7 filtered oldu. Süre-normalize test-result özetleri byte-equal 21302 B / SHA-256 89ab9d82905439c02f55fdb9636dedb9702f56d3a0ac14f4c7a6f73658daf21d verdi; full-workspace GREEN iddia edilmez.",
      "S248 physical/device operations=0; RUNBOOK_EXECUTED_IN_S248=NO. Tarihsel S124 physical BOOT8H PASS ve tam operatör sırası görünür biçimde korunur.",
      "Canlı marker: S248_11_OF_11_WHOLE_SCHEDULER_READ_ACCESS_GUARD_EXPANSION_TWO_ADDITIONAL_READ_ONLY_LOCAL_IRQ_GUARDED_SITES_TOTAL_4_OF_111_GUARDED_107_UNROUTED_NO_CONTEXT_SWITCH_CAPABLE_OR_MUTATING_SITE_NEWLY_GUARDED_PRODUCTION_EXCLUSIVE_WRAPPER_ABSENT_S245_REQUEST_INSPECTED_NONCONSUMING_NOT_TAKEN_REMAINS_PENDING_AWAITING_COVERAGE_NO_PROVIDER_AUTHORITY_NO_EXCLUSION_PROOF_NO_S244_ADMISSION_NO_S243_S236_INVOCATION_NO_SGI_NO_SAFE_RUNTIME_EXECUTION_CLAIM_AARCH64_NORMAL_SMP_COMPILED_WORKSPACE_1934_PASS_7_HISTORICAL_G8H_ASSERTIONS_RED_PHYSICAL_QEMU_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S408_TO_S458_S433_NO_RUNBOOK_EXECUTED_IN_S248_VERIFIED.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s247_whole_scheduler_read_access_guard_expansion -- --test-threads=1",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
      "cargo test --workspace --quiet -- --test-threads=1 --skip wiring_does_not_mutate_timer_gic_boot_or_expand_runtime_scope --skip s97_runtime_and_layout_identities_are_unchanged --skip clean_bridge_literal_include_closure_is_manifest_complete --skip clean_image_make_recipe_inputs_are_exact_and_manifested --skip s99_and_s98_are_narrowly_historically_versioned --skip s97_s98_inputs_and_make_history_are_narrowly_versioned --skip historical_s90_and_s100_inputs_remain_exact",
    ],
    terminalSessions: [
      {
        id: "s248-g8l-whole-scheduler-read-access-guard-expansion",
        title: "G8l S248 whole-scheduler read-access guard genişletmesi",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s247_whole_scheduler_read_access_guard_expansion -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; S248 focused 1 group / 11 passed; 0 failed",
          "source coverage: 7 units / 111 direct SCHEDULER sites / previous=2 / additional=2 / guarded=4 / unrouted=107",
          "new routes: current EL0 user-copy snapshot + CPU1 request-publication current-task snapshot / local IRQ / read-only / context-switch-capable=0 / mutating=0",
          "production exclusive wrapper absent; S245 request inspected non-consuming, not taken, remains pending",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "S248 terminal özeti iki ek read-only route'u doğrular; 107 unrouted site nedeniyle whole-scheduler exclusion provider authority/proof/admission değildir.",
    limitations: [
      "S248 yalnız 2 ek read-only route ile toplam 4/111 coverage'tır; 107 scheduler erişimi unrouted kalır.",
      "Reader canlıyken context switch yapabilen veya scheduler state'i değiştiren hiçbir site S248'de yeni kapsama alınmadı; mutating coverage=0.",
      "Production exclusive acquisition wrapper'ı coverage tamamlanmadan yayımlanmadı; provider authority, exclusion proof, lease veya S244 admission yoktur.",
      "Exact S245 request yalnız read-only view ile incelenir, alınmaz ve pending kalır; S243/S236 production girişi veya SGI yoktur.",
      "QEMU RPi5 whole-scheduler provider yolunu doğrulamaz; fiziksel RPi, CPU2/CPU3, hotplug, soak ve Generic SMP açıktır.",
      "S248 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S248=NO.",
    ],
  },