G8l: QEMU IPC-cancellation witness read-access guard genişletmesi

pub fn preflight_s266_whole_scheduler_read_coverage(
    caller_cpu: usize,
    request: Option<G8lS245WholeSchedulerExclusionAdmissionRequestView>,
) -> Result<
    G8lS266WholeSchedulerReadCoveragePreflightOutcome,
    G8lS266WholeSchedulerReadCoveragePreflightError,
> {
    match preflight_s265_whole_scheduler_read_coverage(caller_cpu, request)
        .map_err(G8lS266WholeSchedulerReadCoveragePreflightError::S265)?
    {
        G8lS265WholeSchedulerReadCoveragePreflightOutcome::Idle => {
            return Ok(G8lS266WholeSchedulerReadCoveragePreflightOutcome::Idle);
        }
        G8lS265WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } if guarded_sites == S265_WHOLE_SCHEDULER_GUARDED_SITES
            && unrouted_sites
                == S246_DIRECT_SCHEDULER_ACCESS_SITES - S265_WHOLE_SCHEDULER_GUARDED_SITES => {}
        G8lS265WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
            guarded_sites,
            unrouted_sites,
            ..
        } => {
            return Err(
                G8lS266WholeSchedulerReadCoveragePreflightError::PriorCoverageDrift {
                    guarded_sites,
                    unrouted_sites,
                },
            );
        }
    }

    let outcome = preflight_s246_whole_scheduler_exclusion_provider(
        caller_cpu,
        request,
        G8lS246WholeSchedulerCoverageAudit::new(
            S246_SOURCE_AUDIT_UNITS,
            S246_DIRECT_SCHEDULER_ACCESS_SITES,
            S266_WHOLE_SCHEDULER_GUARDED_SITES,
        ),
    )
    .map_err(G8lS266WholeSchedulerReadCoveragePreflightError::S246)?;
    match outcome {
        G8lS246WholeSchedulerProviderPreflightOutcome::Idle => {
            Ok(G8lS266WholeSchedulerReadCoveragePreflightOutcome::Idle)
        }
        G8lS246WholeSchedulerProviderPreflightOutcome::AwaitingCoverage {
            request_id,
            guarded_sites,
            unrouted_sites,
        } => Ok(
            G8lS266WholeSchedulerReadCoveragePreflightOutcome::AwaitingCoverage {
                request_id,
                guarded_sites,
                unrouted_sites,
            },
        ),
        G8lS246WholeSchedulerProviderPreflightOutcome::CoverageCompleteAwaitingProvider {
            ..
        } => Err(G8lS266WholeSchedulerReadCoveragePreflightError::UnexpectedCoverageComplete),
    }
}

#[test]
fn s266_coverage_guards_one_existing_read_and_keeps_73_open() {
    assert_eq!(S266_ADDITIONAL_WHOLE_SCHEDULER_READ_SITES, 1);
    assert_eq!(S266_WHOLE_SCHEDULER_GUARDED_SITES, 38);
    assert_eq!(S266_WHOLE_SCHEDULER_UNROUTED_SITES, 73);
}

  {
    id: "g8l-s266-qemu-ipc-cancellation-witness-read-access-guard-expansion-partial",
    date: "2026-08-26",
    sequence: 266,
    status: "passed",
    umbrella_status: "partial",
    title: "G8l: QEMU IPC-cancellation witness read-access guard genişletmesi",
    summary:
      "S266 12/12 PASS ile qemu_ipc_cancellation_witness içindeki tek immutable scheduler snapshot'ını mevcut production reader gate zincirine aldı. Register cancellation ve owned-CNode purge sonuçları reader canlıyken iki owned boolean'a kopyalanıyor; reader ENDPOINT_REGISTRY lock'undan önce explicit düşüyor ve scheduler/CNode referansı kaçmıyor. Coverage 37/111'den 38/111'e çıktı, 73 site unrouted kaldı. Writer'lar, exclusive wrapper ve whole-scheduler exclusion açık olduğundan umbrella PARTIAL kalır.",
    evidence: [
      "S266 focused kaynak kapısı iki byte-equal koşuda 12/12 PASS verdi: 127 B / SHA-256 7c5c027e04834587141f9fff89aea670906490a9f834012d2adbd7279dba720b.",
      "Exact source coverage: 7 audit unit / 111 direct SCHEDULER site; previous=37, additional=1, guarded=38, unrouted=73. Routed read yalnız qemu_ipc_cancellation_witness içindeki immutable snapshot'tır.",
      "Register cancellation ve owned-CNode absence/purge sonuçları reader membership canlıyken iki bool değere çevrilir. Reader ENDPOINT_REGISTRY lock'undan önce explicit düşer; scheduler veya CNode referansı lease dışına çıkmaz.",
      "S238–S266 exact dependency matrisi iki bağımsız koşuda 30 grup / 399/399 PASS verdi: raw 2849 B / SHA-256 3df250308f52f6f005fa76cc3fd7a2af491e54bb9930dd93dfdcd61e3453b701; süre-normalize 2909 B / SHA-256 df60359164c15741b37a7790d0d2c24d85c2b50d6e230e1f33963c091d9411bf.",
      "Default/QEMU AArch64 check iki byte-equal koşuda PASS: 110646 B / 291 warning başlığı / SHA-256 5a6281a281cf9ae6a785ce596d04222d1310d9f044faa660fcc69aadbd5c060f. Zero-warning iddiası yoktur.",
      "RPi5 normal/SMP profilleri ikişer byte-equal PASS: normal 361117 B / 703 warning / SHA-256 64f124975b43cbd846add6f093ea0ab8618aa42655c44e51a368a5b7bb241819; SMP 361059 B / 703 warning / SHA-256 bfbda0f81d36dee61f680da2f591b75077538ba34b68237f78133a3d354ba125.",
      "make verify-qemu iki bağımsız koşuda PASS verdi: ilk 116167 B / SHA-256 4ca231e998afec8a8b782fc390015321d030a980b77ac374eb7fc21a8211cef3, ikinci 116292 B / SHA-256 40066043ff116e054695a5392d713ea6e3147498ec783c1e27bfc33859922d5c. W^X 31/31, S130–S154, S154 1024 retirement, IPC 20/20, SEC5 ve kernel faults=0 korunur. Ortak QEMU regresyonu board-rpi5-only S266 reader guard'ını çalıştırmaz.",
      "Manifest-aware workspace audit'i iki bağımsız koşuda exact 7 tarihsel G8h assertion filtrelenerek 228 grup / 2154 PASS, 0 fail verdi; süre-normalize özet 21997 B / SHA-256 d7abb9b2f7bc5655420c85808b7908a1c77d3ce251f369d4f144c4fe04d5f3a1'dir. Filtresiz koşu 52450 B / SHA-256 3969f980081f1f0cff51b6d57e51e158c17314c79150e7ac7a361f6a8acdeac7 ile frozen S96 exceptions.S identity mismatch'te exit 101 kaldı. Beklentiler gevşetilmedi ve full-workspace GREEN iddia edilmez.",
      "S266 physical/device operations=0; RUNBOOK_EXECUTED_IN_S266=NO. Tarihsel S124 physical BOOT8H PASS ve tam operatör sırası görünür biçimde korunur.",
      "Canlı marker: S266_12_OF_12_QEMU_IPC_CANCELLATION_WITNESS_READ_ACCESS_GUARD_ONE_ADDITIONAL_IMMUTABLE_SCHEDULER_SNAPSHOT_REGISTER_AND_CNODE_RESULTS_OWNED_BOOLEANS_READER_DROPPED_BEFORE_ENDPOINT_REGISTRY_LOCK_NO_REFERENCE_ESCAPE_PREVIOUS_37_OF_111_TOTAL_38_OF_111_GUARDED_73_UNROUTED_QEMU_COMMON_REGRESSION_DOES_NOT_EXERCISE_BOARD_RPI5_ONLY_GUARD_WORKSPACE_2154_PASS_7_HISTORICAL_G8H_ASSERTIONS_RED_NO_WRITER_COVERAGE_NO_PRODUCTION_EXCLUSIVE_WRAPPER_NO_WHOLE_SCHEDULER_EXCLUSION_PHYSICAL_CPU2_CPU3_HOTPLUG_SOAK_GENERIC_SMP_OPEN_FULL_PHYSICAL_RUNBOOK_VISIBLE_S426_TO_S476_S451_NO_RUNBOOK_EXECUTED_IN_S266_VERIFIED.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s265_qemu_ipc_cancellation_witness_read_access_guard_expansion -- --test-threads=1",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5",
      "cargo check --quiet -p aselsan_kernel --target aarch64-unknown-none --no-default-features --features board-rpi5,smp",
      "make verify-qemu",
    ],
    terminalSessions: [
      {
        id: "s266-g8l-qemu-ipc-cancellation-witness-read-access-guard-expansion",
        title:
          "G8l S266 QEMU IPC-cancellation witness read-access guard genişletmesi",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s265_qemu_ipc_cancellation_witness_read_access_guard_expansion -- --test-threads=1",
          "make verify-qemu",
        ],
        outputLines: [
          "test result: ok; S266 focused 1 group / 12 passed; 0 failed",
          "coverage: previous 37 + additional 1 = 38/111 guarded; 73 unrouted",
          "register/CNode results copied as owned booleans; reader dropped before ENDPOINT_REGISTRY lock",
          "QEMU common regression PASS: W^X 31/31 · S130–S154 · S154 retired 1024 · IPC 20/20 · SEC5 · kernel faults 0",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "S266 yalnız bir immutable QEMU witness snapshot route'unu guard'lar; ortak QEMU regresyonu board-rpi5-only reader route'unun runtime invocation kanıtı değildir.",
    limitations: [
      "Toplam 38/111 scheduler erişimi guarded, 73 erişim unrouted kalır.",
      "Bütün scheduler writer yolları, production exclusive wrapper, provider authority ve whole-scheduler exclusion proof yoktur.",
      "QEMU ortak runtime regresyonudur; board-rpi5-only S266 reader route'unu çalıştırmaz.",
      "Exact yedi tarihsel G8h assertion filtresiz workspace'i kırmızı tutar; full-workspace GREEN iddia edilmez.",
      "Fiziksel RPi, CPU2/CPU3, hotplug, soak ve Generic SMP açık kalır.",
      "S266 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S266=NO.",
    ],
  },