G8l: current-runtime-OOM preflight read-access guard genişletmesi

pub fn preflight_s258_whole_scheduler_read_coverage(
    caller_cpu: usize,
    request: Option<G8lS245WholeSchedulerExclusionAdmissionRequestView>,
) -> Result<
    G8lS258WholeSchedulerReadCoveragePreflightOutcome,
    G8lS258WholeSchedulerReadCoveragePreflightError,
> {
    match preflight_s257_whole_scheduler_read_coverage(caller_cpu, request)
        .map_err(G8lS258WholeSchedulerReadCoveragePreflightError::S257)?
    {
        G8lS257WholeSchedulerReadCoveragePreflightOutcome::Idle => {
            return Ok(G8lS258WholeSchedulerReadCoveragePreflightOutcome::Idle);
        }
        G8lS257WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } if guarded_sites == S257_WHOLE_SCHEDULER_GUARDED_SITES
            && unrouted_sites
                == S246_DIRECT_SCHEDULER_ACCESS_SITES - S257_WHOLE_SCHEDULER_GUARDED_SITES => {}
        G8lS257WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } => {
            return Err(
                G8lS258WholeSchedulerReadCoveragePreflightError::PriorCoverageDrift {
                    guarded_sites,
                    unrouted_sites,
                },
            );
        }
    }

    let outcome = preflight_s246_whole_scheduler_exclusion_provider(
        caller_cpu,
        request,
        G8lS246WholeSchedulerCoverageAudit::new(
            S246_SOURCE_AUDIT_UNITS,
            S246_DIRECT_SCHEDULER_ACCESS_SITES,
            S258_WHOLE_SCHEDULER_GUARDED_SITES,
        ),
    )
    .map_err(G8lS258WholeSchedulerReadCoveragePreflightError::S246)?;
    match outcome {
        G8lS246WholeSchedulerProviderPreflightOutcome::Idle => {
            Ok(G8lS258WholeSchedulerReadCoveragePreflightOutcome::Idle)
        }
        G8lS246WholeSchedulerProviderPreflightOutcome::AwaitingCoverage {
            request_id,
            guarded_sites,
            unrouted_sites,
        } => Ok(
            G8lS258WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
                request_id,
                guarded_sites,
                unrouted_sites,
            },
        ),
        G8lS246WholeSchedulerProviderPreflightOutcome::CoverageCompleteAwaitingProvider {
            ..
        } => Err(G8lS258WholeSchedulerReadCoveragePreflightError::UnexpectedCoverageComplete),
    }
}

#[test]
fn s258_preflight_revalidates_s257_without_consuming_or_admitting() {
    let source = include_str!("../../kernel/src/g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s257_runtime_oom_preflight_read_access_guard_expansion.rs");
    let preflight = source
        .split("pub fn preflight_s258_whole_scheduler_read_coverage")
        .nth(1)
        .expect("S258 preflight");
    assert!(preflight.contains("preflight_s257_whole_scheduler_read_coverage"));
    assert!(preflight.contains("preflight_s246_whole_scheduler_exclusion_provider"));
    let service = source
        .split("pub fn service_s258_whole_scheduler_read_coverage_preflight_on_cpu1")
        .nth(1)
        .expect("S258 service");
    assert!(service.contains("inspect_s245_exclusion_admission_request_on_cpu1"));
    assert!(!service.contains("take_s245_exclusion_admission_request_on_cpu1"));
    assert!(!service.contains("S244_PRODUCTION_ADMISSION"));
}

  {
    id: "g8l-s258-current-runtime-oom-preflight-read-access-guard-expansion-partial",
    date: "2026-08-25",
    sequence: 258,
    status: "passed",
    umbrella_status: "partial",
    title: "G8l: current-runtime-OOM preflight read-access guard genişletmesi",
    summary:
      "S258 11/11 PASS ile S257 production reader gate'ini execute_armed_current_runtime_oom_if_target içindeki iki immutable direct scheduler erişimine taşıdı. İlk erişim armed/current task-id tuple kopyasını çıkarıp carrier take ve RuntimeMemory preflight öncesinde; ikinci erişim audited RuntimeOomTaskBinding sonucunu çıkarıp error reinsert, IPC teardown, scheduler mutasyonu ve context switch öncesinde reader'ı explicit düşürür. Coverage 22/111'den 24/111'e ilerledi; 87 site unrouted kalır. RPi5 yolu source-routed/AArch64-compiled fakat runtime-invoked değildir; production exclusive wrapper yoktur.",
    evidence: [
      "S258 focused host grubu final kernel kaynağı üzerinde iki bağımsız koşuda 11/11 PASS verdi: canonical test-result 95 B / SHA-256 2c07f0a50574922424c491ec40d2a364ada2ad650cb922a2036d326c49b26e45.",
      "Exact source coverage: S257 guarded=22/111 başlangıcı yeniden doğrulandı; armed/current task-id tuple snapshot'ı ile audited RuntimeOomTaskBinding result iki ayrı common reader membership altına alındı. Yeni toplam guarded=24/111, unrouted=87; additional immutable=2, mutating-while-reader-live=0.",
      "İlk route (Option<u64>, Option<u64>) kopyasıdır ve guard carrier take ile RuntimeMemory preflight'tan önce düşer. İkinci route Copy RuntimeOomTaskBinding Result'ıdır ve guard error carrier reinsert, IPC lifecycle teardown, mutable scheduler alias ve context switch'ten önce düşer. Scheduler referansı kaçmaz; bu route'lar IPC transaction kilidi altında değildir.",
      "S238'den S258'e exact sıra-düzenli dependency matrisi 22 grup / 306/306 PASS verdi. Ham summary iki bağımsız koşuda byte-equal 2090 B / SHA-256 f4c3d9a1ac2bb8de6b9f7e6c4db9d8212fbef42a9e54655a8ac982b9ef1e7ba5; süre-normalize summary 2200 B / SHA-256 c5ad51a372ddb6ce80d9cfe0a618920d965275f29af2db09535f06ede9878056 oldu. S240 receipt ve SGI gruplarının ikisi de dahildir.",
      "RPi5 AArch64 normal/SMP profilleri ikişer koşuda byte-equal PASS verdi. Normal: 358515 B / 696 warning başlığı / SHA-256 e4b6a602dbce20f324da0f7ae5bf9eb36a1796df15356eebd1fcd62f695d56dc. SMP: 358457 B / 696 warning başlığı / SHA-256 37920f5e54d18047b01273b9a399c79fc1f7d45baaa7510e41f3a66b55b55bf4. Zero-warning iddiası yoktur.",
      "Exact production sırası: CPU1 timer IRQ → GIC EOI → S246 request preflight → S247 → S248 → S249 → S250 → S251 → S252 → S253 → S254 → S255 → S256 → S257 → S258 24/111 coverage preflight → S242 service → scheduler dispatch. Exact S245 request yalnız non-consuming metadata view ile incelenir, alınmaz ve pending kalır.",
      "Filtresiz workspace aynı frozen S96 identity kapısında exit 101 verdi: 51432 B / SHA-256 4613d3fd371d4a9f4adeff8c4d12d529fa6dc087a13ba2c9e1964dc56f4b56ed. Exact yedi tarihsel assertion dışlandığında iki audit 220 grup / 2054 PASS / 0 fail / 7 filtered oldu. Süre-normalize test-result özetleri byte-equal 21882 B / SHA-256 109d34054be16f4b30c6b037c41df5bd0fe342284e02c37f6c8cb64a2ea5c24f verdi; full-workspace GREEN iddia edilmez.",
      "S258 physical/device operations=0; RUNBOOK_EXECUTED_IN_S258=NO. Tarihsel S124 physical BOOT8H PASS ve tam operatör sırası görünür biçimde korunur.",
      "Canlı marker: S258_11_OF_11_CURRENT_RUNTIME_OOM_PREFLIGHT_READ_ACCESS_GUARD_EXPANSION_TWO_ADDITIONAL_COPY_RETURNING_IMMUTABLE_LOCAL_IRQ_GUARDED_SCHEDULER_ACCESSES_ARMED_CURRENT_TASK_ID_TUPLE_AND_AUDITED_RUNTIME_OOM_TASK_BINDING_IDENTITY_READER_DROPPED_BEFORE_CARRIER_TAKE_AND_RUNTIME_MEMORY_PREFLIGHT_BINDING_READER_DROPPED_BEFORE_ERROR_REINSERT_IPC_TEARDOWN_SCHEDULER_MUTATION_OR_CONTEXT_SWITCH_TOTAL_24_OF_111_GUARDED_87_UNROUTED_NO_SCHEDULER_REFERENCE_ESCAPES_NO_CONTEXT_SWITCH_CAPABLE_OR_MUTATING_SITE_GUARDED_WHILE_READER_LIVE_RPI5_RUNTIME_NOT_INVOKED_PRODUCTION_EXCLUSIVE_WRAPPER_ABSENT_S245_REQUEST_INSPECTED_NONCONSUMING_NOT_TAKEN_REMAINS_PENDING_AWAITING_COVERAGE_NO_PROVIDER_AUTHORITY_NO_EXCLUSION_PROOF_NO_S244_ADMISSION_NO_S243_S236_INVOCATION_NO_SGI_NO_SAFE_RUNTIME_EXECUTION_CLAIM_AARCH64_NORMAL_SMP_COMPILED_WORKSPACE_2054_PASS_7_HISTORICAL_G8H_ASSERTIONS_RED_PHYSICAL_QEMU_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S418_TO_S468_S443_NO_RUNBOOK_EXECUTED_IN_S258_VERIFIED.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s257_runtime_oom_preflight_read_access_guard_expansion -- --test-threads=1",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
      "cargo test --workspace --quiet -- --test-threads=1 --skip wiring_does_not_mutate_timer_gic_boot_or_expand_runtime_scope --skip s97_runtime_and_layout_identities_are_unchanged --skip clean_bridge_literal_include_closure_is_manifest_complete --skip clean_image_make_recipe_inputs_are_exact_and_manifested --skip s99_and_s98_are_narrowly_historically_versioned --skip s97_s98_inputs_and_make_history_are_narrowly_versioned --skip historical_s90_and_s100_inputs_remain_exact",
    ],
    terminalSessions: [
      {
        id: "s258-g8l-current-runtime-oom-preflight-read-access-guard-expansion",
        title:
          "G8l S258 current-runtime-OOM preflight read-access guard genişletmesi",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s257_runtime_oom_preflight_read_access_guard_expansion -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; S258 focused 1 group / 11 passed; 0 failed",
          "source coverage: 7 units / 111 direct SCHEDULER sites / previous=22 / additional=2 / guarded=24 / unrouted=87",
          "new routes: armed/current task-id tuple + audited RuntimeOomTaskBinding result / local IRQ / copy-returning immutable",
          "identity reader drop precedes carrier take and RuntimeMemory; binding reader drop precedes error reinsert / IPC / mutation / context switch",
          "RPi5 runtime not invoked; production exclusive wrapper absent; S245 request inspected non-consuming, not taken, remains pending",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "S258 terminal özeti iki current-runtime-OOM preflight kopyasını ve her reader'ın kendi sonraki carrier/RuntimeMemory/IPC/mutasyon/context-switch sınırından önce düşmesini doğrular; 87 unrouted site nedeniyle whole-scheduler exclusion provider authority/proof/admission değildir.",
    limitations: [
      "S258 yalnız 2 ek copy-returning immutable scheduler erişimiyle toplam 24/111 coverage'tır; 87 scheduler erişimi unrouted kalır.",
      "İlk reader carrier take/RuntimeMemory öncesinde, ikinci reader error reinsert/IPC teardown/scheduler mutation/context switch öncesinde explicit düşer; scheduler referansı guard dışına çıkmaz.",
      "RPi5 current-runtime-OOM yolu source-routed ve AArch64-compiled'dır; runtime invocation, QEMU veya fiziksel RPi kanıtı değildir.",
      "Production exclusive acquisition wrapper'ı coverage tamamlanmadan yayımlanmadı; provider authority, exclusion proof, lease veya S244 admission yoktur.",
      "Exact S245 request yalnız read-only view ile incelenir, alınmaz ve pending kalır; S243/S236 production girişi veya SGI yoktur.",
      "S258 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S258=NO.",
    ],
  },