S326 · QEMU S136 stale-ACK writer authority audit

pub const S326_WRITER_BOUNDARY_SITES: usize = 1;
pub const S326_WRITER_AUTHORITY_SITES: usize = 0;
pub const S326_MAIN_EXPLICIT_WRITER_SITES: usize = 17;
pub const S326_MAIN_PREVIOUSLY_AUDITED_WRITER_SITES: usize = 16;
pub const S326_MAIN_REMAINING_UNAUDITED_WRITER_SITES: usize = 0;
pub const S326_S136_EXPLICIT_WRITER_SITES: usize = 2;
pub const S326_S136_REMAINING_UNAUDITED_WRITER_SITES: usize = 0;
pub const S326_DIRECT_SCHEDULER_ACCESS_SITES: usize = S325_DIRECT_SCHEDULER_ACCESS_SITES;
pub const S326_IMMUTABLE_READ_SITES: usize = S325_IMMUTABLE_READ_SITES;
pub const S326_WHOLE_SCHEDULER_GUARDED_SITES: usize = S325_WHOLE_SCHEDULER_GUARDED_SITES;
pub const S326_WHOLE_SCHEDULER_UNROUTED_SITES: usize = S325_WHOLE_SCHEDULER_UNROUTED_SITES;
pub const S326_OPEN_WRITER_SITES: usize = S325_OPEN_WRITER_SITES;

#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub enum G8lS326SchedulerWriterAuthorityAuditOutcome {
    Idle,
    AwaitingWriterAuthority {
        request_id: u64,
        guarded_sites: usize,
        writer_sites: usize,
    },
}
#[derive(Clone, Copy, Debug, PartialEq, Eq)]
pub enum G8lS326SchedulerWriterAuthorityAuditError {
    S325(G8lS325SchedulerWriterAuthorityAuditError),
    S245(G8lS245ExclusionAdmissionRequestError),
    PriorCoverageDrift {
        guarded_sites: usize,
        unrouted_sites: usize,
    },
}

pub fn preflight_s326_scheduler_writer_authority(
    caller_cpu: usize,
    request: Option<G8lS245WholeSchedulerExclusionAdmissionRequestView>,
) -> Result<G8lS326SchedulerWriterAuthorityAuditOutcome, G8lS326SchedulerWriterAuthorityAuditError>
{
    match preflight_s325_scheduler_writer_authority(caller_cpu, request)
        .map_err(G8lS326SchedulerWriterAuthorityAuditError::S325)?
    {
        G8lS325SchedulerWriterAuthorityAuditOutcome::Idle => {
            Ok(G8lS326SchedulerWriterAuthorityAuditOutcome::Idle)
        }
        G8lS325SchedulerWriterAuthorityAuditOutcome::AwaitingWriterAuthority {
            request_id,
            guarded_sites,
            writer_sites,
        } if guarded_sites == S326_WHOLE_SCHEDULER_GUARDED_SITES
            && writer_sites == S326_OPEN_WRITER_SITES =>
        {
            Ok(
                G8lS326SchedulerWriterAuthorityAuditOutcome::AwaitingWriterAuthority {
                    request_id,
                    guarded_sites,
                    writer_sites,
                },
            )
        }
        G8lS325SchedulerWriterAuthorityAuditOutcome::AwaitingWriterAuthority {
            guarded_sites,
            ..
        } => Err(
            G8lS326SchedulerWriterAuthorityAuditError::PriorCoverageDrift {
                guarded_sites,
                unrouted_sites: S326_DIRECT_SCHEDULER_ACCESS_SITES - guarded_sites,
            },
        ),
    }
}

#[test]
fn target_is_the_first_of_all_seventeen_main_aliases() {
    let source = include_str!("../../kernel/src/main.rs");
    let body = s136(source);
    let alias = "addr_of_mut!(crate::task::scheduler::SCHEDULER)";
    let all = source
        .match_indices(alias)
        .map(|(p, _)| p)
        .collect::<Vec<_>>();
    assert_eq!(all.len(), S326_MAIN_EXPLICIT_WRITER_SITES);
    let marker = "extern \"C\" fn qemu_strict_el0_ipc_peers_oom_supervisor() -> ! {";
    let start = source.find(marker).unwrap() + marker.len();
    let target = start + body.find(alias).unwrap();
    assert_eq!(target, all[0]);
    assert_eq!(source[target..].matches(alias).count(), 17);
}

  {
    id: "g8l-s326-qemu-s136-stale-ack-writer-authority-audit-partial",
    date: "2026-08-27",
    sequence: 326,
    status: "passed",
    umbrella_status: "partial",
    title: "S326 · QEMU S136 stale-ACK writer authority audit",
    summary:
      "S326 focused 15/15 PASS ile S136 stale-ACK CALL sınırını main.rs içindeki daha önceki ipc_kernel_call_and_wait aliasına, pending S245 preflight zincirine ve aynı IRQ/IPC transaction helper'ına kilitler. Exact-ACK aliası bundan sonra kalır; canlı endpoint/authority zarfı ve supervisor RECV sırası korunur. main.rs 17 explicit writer / 16 previously audited / 0 remaining unaudited; S136 işlevi 2 / 0; 69 production writer açık ve authority yalnız model-level exclusive lease'tir.",
    evidence: [
      "S326 focused kaynak/model kapısı iki bağımsız koşuda 15/15 PASS verdi: 130 B / SHA-256 0447f2fe9dc6fdf30815a6962cf23d978425e51bef2acde1efb27e5da13a78b3.",
      "main.rs 17 explicit / 16 previously audited / 0 remaining; S136 2 explicit / 0 remaining. Daha önceki stale-ACK aliası kapanır ve S325 exact-ACK aliası kaynak sırasıyla korunur.",
      "S325 preflight zinciri, pending S245 request ve 113 direct / 44 immutable guarded / 69 open writer envanteri değişmeden korunur; S245 request tüketilmez.",
      "S238–S326 matrisi iki bağımsız koşuda 90 grup / 1274/1274 PASS ve süre-normalize byte-eşit çıktı verdi.",
      "QEMU, RPi4, RPi5 ve RPi5+SMP AArch64 compile profillerinin her biri exit 0 verdi; zero-warning veya runtime invocation iddia edilmez.",
      "Production exclusive wrapper/provider authority/scheduler mutation ve fiziksel/device execution yoktur: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S326=NO.",
    ],
    commands: [
      "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s326_qemu_s136_stale_ack_writer_authority_audit -- --test-threads=1",
    ],
    terminalSessions: [
      {
        id: "g8l-s326-qemu-s136-stale-ack-writer-authority-audit",
        title: "G8l S326 QEMU S136 stale-ACK writer-authority audit",
        commandLines: [
          "cargo test --quiet -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s326_qemu_s136_stale_ack_writer_authority_audit -- --test-threads=1",
        ],
        outputLines: [
          "test result: ok; S326 focused 1 group / 15 passed; 0 failed",
          "repeat-stable quiet output: 130 B / 0447f2fe9dc6fdf30815a6962cf23d978425e51bef2acde1efb27e5da13a78b3",
          "S136 stale/exact pair source-model covered; 69 production writers remain open",
        ],
        exitCode: 0,
        outputMode: "selected",
      },
    ],
    terminalSessionsNote:
      "S326 dar kaynak/model fail-closed authority boundary'sidir; global umbrella PARTIAL kalır.",
    limitations: [
      "69 production writer sitesi gerçek whole-scheduler exclusion/provider authority dışında açıktır.",
      "Supported-profile writer runtime, Generic SMP ve fiziksel RPi kabulü açık kalır.",
    ],
  },