S393 · QEMU S138 exact-ACK CALL production writer guard integration

#[cfg(feature = "board-qemu")]
extern "C" fn qemu_s137_runtime_pressure_completion() -> ! {
    use crate::mm::{PressureLevel, RuntimeOomCoordinatorError, RuntimeOomEventKind};
    use crate::ui::capability::{CapabilityRights, IpcMessage};

    const S138_EVENT_LABEL: u64 = 0x5331_3338;
    const S138_STALE_ACK_LABEL: u64 = 0x5354_4138;
    const S138_EXACT_ACK_LABEL: u64 = 0x4143_4b38;

    let state = QEMU_TIMER_PRESSURE_STATE
        .lock()
        .as_ref()
        .copied()
        .expect("S137 completion state");
    assert_eq!(crate::task::current_task_id(), Some(state.completion_task));
    assert!(state.first_scan_tick > state.installed_tick);
    assert!(state.second_scan_tick > state.first_scan_tick);
    assert_eq!(state.committed_scans, 2);

    let mut completion = loop {
        match unsafe { crate::task::service_deferred_current_runtime_oom() } {
            Ok(Some(completion)) => break completion,
            Ok(None) => unsafe { crate::task::yield_now() },
            Err(error) => panic!("S137 later-stack completion failed: {:?}", error),
        }
    };
    assert_eq!(completion.execution.task_id, state.victim_task);
    assert_eq!(completion.execution.domain, state.victim_domain);
    assert!(completion.execution.lifecycle_complete);
    assert_eq!(completion.execution.ipc_teardown.owned_endpoints, 0);
    assert_eq!(completion.execution.ipc_teardown.drained_calls, 0);
    assert_eq!(
        completion.execution.ipc_teardown.cancelled_responder_calls,
        0
    );

    let post_victim = crate::mm::with_boot_runtime_memory(|memory| memory.audited_snapshot())
        .expect("S138 post-victim RuntimeMemory authority")
        .expect("S138 post-victim RuntimeMemory audit");
    assert_eq!(post_victim.pmm.free_frames, state.spawned_free_frames);
    assert_eq!(
        post_victim.active_allocations,
        state.spawned_active_allocations
    );

    let event = completion
        .coordinator
        .deliver_next_event()
        .expect("S138 timer supervisor delivery");
    assert_eq!(event.id, completion.execution.event_id);
    assert_eq!(event.kind, RuntimeOomEventKind::TeardownComplete);
    assert_eq!(event.task_id, Some(state.victim_task));
    assert_eq!(event.domain, Some(state.victim_domain));
    assert_eq!(
        event.expected_reclaimable_frames,
        state.victim_frames_before
    );
    assert_eq!(event.observed_domain_frames, 0);

    let endpoint_authority = crate::task::current_task_cnode()
        .and_then(|cnode| cnode.lookup_capability_by_id(state.endpoint_id).copied())
        .filter(|capability| {
            capability.owner == state.completion_task
                && capability.parent.is_none()
                && capability.generation == state.endpoint_generation
                && capability.rights.contains(CapabilityRights::ENDPOINT_SEND)
        })
        .expect("S138 completion SEND authority");
    let packed_reclaim = event
        .expected_reclaimable_frames
        .checked_shl(32)
        .and_then(|expected| expected.checked_add(event.observed_domain_frames))
        .expect("S138 event projection overflow");
    let event_message = IpcMessage {
        label: S138_EVENT_LABEL,
        badge: state.completion_task,
        data: [
            event.id,
            state.victim_task,
            state.victim_domain.id() as u64,
            packed_reclaim,
        ],
    };

    let stale_reply_cap = crate::ui::capability::mint_reply_endpoint_for_call(
        state.completion_task,
        state.endpoint_id,
    )
    .expect("S138 stale transport reply mint");
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    let s394_irq_guard = crate::arch::aarch64::IrqGuard::new();
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    let s394_writer_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s394_qemu_s138_stale_ack_writer_guard_integration::acquire_s394_production_scheduler_writer_access()
        .unwrap_or_else(|error| {
            panic!(
                "S394 QEMU S138 stale-ACK CALL scheduler writer guard failed closed: {:?}",
                error
            )
        });
    let stale_ack = unsafe {
        (&mut *core::ptr::addr_of_mut!(crate::task::scheduler::SCHEDULER)).ipc_kernel_call_and_wait(
            state.endpoint_id,
            endpoint_authority.generation,
            stale_reply_cap.id,
            event_message,
        )
    }
    .expect("S138 stale EL0 ACK transport");
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    drop(s394_writer_access);
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    drop(s394_irq_guard);
    assert_eq!(stale_ack.label, S138_STALE_ACK_LABEL);
    assert_eq!(stale_ack.badge, state.supervisor_task);
    assert_eq!(stale_ack.data[0], event.id + 1);
    assert_eq!(stale_ack.data[1..], event_message.data[1..]);
    let before_stale = completion.coordinator.snapshot();
    assert_eq!(
        completion.coordinator.acknowledge(stale_ack.data[0]),
        Err(RuntimeOomCoordinatorError::AckMismatch {
            expected: event.id,
            provided: event.id + 1,
        })
    );
    assert_eq!(completion.coordinator.snapshot(), before_stale);
    assert_eq!(
        completion
            .coordinator
            .rearm_monitor(&mut completion.monitor),
        Err(RuntimeOomCoordinatorError::AttemptInFlight)
    );

    let exact_reply_cap = crate::ui::capability::mint_reply_endpoint_for_call(
        state.completion_task,
        state.endpoint_id,
    )
    .expect("S138 exact transport reply mint");
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    let s393_irq_guard = crate::arch::aarch64::IrqGuard::new();
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    let s393_writer_access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s393_qemu_s138_exact_ack_writer_guard_integration::acquire_s393_production_scheduler_writer_access()
        .unwrap_or_else(|error| {
            panic!(
                "S393 QEMU S138 exact-ACK CALL scheduler writer guard failed closed: {:?}",
                error
            )
        });
    let exact_ack = unsafe {
        (&mut *core::ptr::addr_of_mut!(crate::task::scheduler::SCHEDULER)).ipc_kernel_call_and_wait(
            state.endpoint_id,
            endpoint_authority.generation,
            exact_reply_cap.id,
            event_message,
        )
    }
    .expect("S138 exact EL0 ACK transport");
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    drop(s393_writer_access);
    #[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
    drop(s393_irq_guard);
    assert_eq!(exact_ack.label, S138_EXACT_ACK_LABEL);
    assert_eq!(exact_ack.badge, state.supervisor_task);
    assert_eq!(exact_ack.data, event_message.data);
    completion
        .coordinator
        .acknowledge(exact_ack.data[0])
        .expect("S138 exact EL0 supervisor ACK");
    let rearmed_epoch = completion
        .coordinator
        .rearm_monitor(&mut completion.monitor)
        .expect("S138 post-ACK monitor rearm");

    let policies = qemu_s137_pressure_policies(state);
    let recovered =
        crate::mm::with_boot_runtime_memory(|memory| completion.monitor.observe(memory, &policies))
            .expect("S137 recovery RuntimeMemory authority")
            .expect("S137 audited recovery observation");
    assert_eq!(recovered.observation.current, PressureLevel::Normal);

    let mut supervisor_reclaimed = false;
    for _ in 0..128 {
        let quota = crate::mm::with_boot_runtime_memory(|memory| {
            memory.audited_domain_quota(state.supervisor_domain)
        })
        .expect("S138 supervisor quota authority")
        .expect("S138 supervisor quota audit");
        if quota.allocated_frames == 0 {
            supervisor_reclaimed = true;
            break;
        }
        unsafe { crate::task::yield_now() };
    }
    assert!(
        supervisor_reclaimed,
        "S138 strict EL0 timer supervisor did not reach normal reclaim"
    );
    let _ = unsafe { crate::task::service_deferred_current_runtime_oom() }
        .expect("S138 later-stack normal-exit reap");

    let (victim_quota, supervisor_quota, final_snapshot) =
        crate::mm::with_boot_runtime_memory(|memory| {
            Ok::<_, crate::mm::RuntimeAllocationError>((
                memory.audited_domain_quota(state.victim_domain)?,
                memory.audited_domain_quota(state.supervisor_domain)?,
                memory.audited_snapshot()?,
            ))
        })
        .expect("S137 final RuntimeMemory authority")
        .expect("S137 final RuntimeMemory reconciliation");
    assert_eq!(victim_quota.allocated_frames, 0);
    assert_eq!(victim_quota.retired_frames, 0);
    assert_eq!(victim_quota.pin_references, 0);
    assert_eq!(supervisor_quota.allocated_frames, 0);
    assert_eq!(supervisor_quota.retired_frames, 0);
    assert_eq!(supervisor_quota.pin_references, 0);
    assert_eq!(final_snapshot.pmm.free_frames, state.baseline_free_frames);
    assert_eq!(
        final_snapshot.active_allocations,
        state.baseline_active_allocations
    );

    let endpoint_cleanup =
        crate::ui::capability::teardown_task_ipc_lifecycle(state.completion_task)
            .expect("S138 completion endpoint cleanup");
    assert_eq!(endpoint_cleanup.owned_endpoints, 1);
    assert_eq!(endpoint_cleanup.drained_calls, 0);
    assert_eq!(endpoint_cleanup.cancelled_responder_calls, 0);
    assert!(!crate::ui::capability::ENDPOINT_REGISTRY
        .lock()
        .iter()
        .any(|endpoint| endpoint.id == state.endpoint_id
            || endpoint.id == stale_reply_cap.id
            || endpoint.id == exact_reply_cap.id));

    kprintln!(
        "[K1-MEM2-S137] victim={} domain={} event={} expected={} observed={} ticks={}->{}->{} TIMER_DAEMON=YES DISTINCT_TICKS=YES SCANS=2 AUDITED=YES CALLER_COUNTERS=ABSENT SYS_WRITE_HOOK=ABSENT SAFE_SVC_BOUNDARY=YES free={}->{}->{} active={}->{}->{} CURRENT=YES LATER_STACK=YES IPC=YES QUIESCED=YES TABLES=YES ASID=YES TRANSPORT_DELEGATED=S138 EXECUTOR=PASS",
        state.victim_task,
        state.victim_domain.id(),
        event.id,
        event.expected_reclaimable_frames,
        event.observed_domain_frames,
        state.installed_tick,
        state.first_scan_tick,
        state.second_scan_tick,
        state.baseline_free_frames,
        state.spawned_free_frames,
        final_snapshot.pmm.free_frames,
        state.baseline_active_allocations,
        state.spawned_active_allocations,
        final_snapshot.active_allocations,
    );
    kprintln!(
        "[K1-MEM2-S138] event={} victim={} domain={} supervisor={} supervisor_domain={} endpoint={} stale_reply={} exact_reply={} ticks={}->{}->{} TIMER_TO_EL0=YES REAL_ENDPOINT=YES BOUNDED=8 KERNEL_CALL_BLOCKED=YES REAL_EL0_RECV_REPLY=YES STALE_ACK_REJECTED=YES EXACT_EL0_ACK=YES KERNEL_DIRECT_ACK=NO REAL_EL0_ACK=YES REPLY_ONESHOT=2/2 free={}->{}->{}->{}->{} active={}->{}->{}->{}->{} VICTIM_RECLAIM=5 SUPERVISOR_RECLAIM=5 OWNER_EP_CLEANUP=1 ACK=YES REARM={} LEVEL=NORMAL EXECUTOR=PASS",
        event.id,
        state.victim_task,
        state.victim_domain.id(),
        state.supervisor_task,
        state.supervisor_domain.id(),
        state.endpoint_id,
        stale_reply_cap.id,
        exact_reply_cap.id,
        state.installed_tick,
        state.first_scan_tick,
        state.second_scan_tick,
        state.baseline_free_frames,
        state.spawned_free_frames,
        state.transport_spawned_free_frames,
        post_victim.pmm.free_frames,
        final_snapshot.pmm.free_frames,
        state.baseline_active_allocations,
        state.spawned_active_allocations,
        state.transport_spawned_active_allocations,
        post_victim.active_allocations,
        final_snapshot.active_allocations,
        rearmed_epoch,
    );
    drop(completion);
    unsafe {
        run_qemu_s139_multi_event_transport(
            event,
            final_snapshot.pmm.free_frames,
            final_snapshot.active_allocations,
        )
    };
    unsafe { crate::task::task_exit() }
}

#[cfg(all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5"))]
pub fn acquire_s393_production_scheduler_writer_access(
) -> Result<G8lS393ProductionSchedulerWriterAccess, G8lS247WholeSchedulerAccessError> {
    let caller_cpu =
        crate::percpu::try_current_cpu_id().ok_or(G8lS247WholeSchedulerAccessError::InvalidCpu)?;
    if caller_cpu != crate::g8l_runtime_contract::CPU0 {
        return Err(G8lS247WholeSchedulerAccessError::InvalidCpu);
    }
    let access = crate::g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s246_whole_scheduler_read_access_guard::S247_PRODUCTION_WHOLE_SCHEDULER_ACCESS_GATE
        .try_acquire_exclusive_for_valid_cpu(caller_cpu)?;
    Ok(G8lS393ProductionSchedulerWriterAccess { _access: access })
}

#[test]
fn boundary_has_exactly_one_s393_acquire_and_success_release_pair() {
    let boundary = s138_boundary();
    assert_eq!(
        boundary
            .matches("acquire_s393_production_scheduler_writer_access")
            .count(),
        1
    );
    assert_eq!(boundary.matches("drop(s393_writer_access)").count(), 1);
    assert_eq!(boundary.matches("drop(s393_irq_guard)").count(), 1);
}

  {
    id: "g8l-s393-qemu-s138-exact-ack-call-writer-guard-integration-partial",
    date: "2026-08-29",
    sequence: 393,
    status: "passed",
    umbrella_status: "partial",
    title:
      "S393 · QEMU S138 exact-ACK CALL production writer guard integration",
    summary:
      "S393, qemu_s137_runtime_pressure_completion içindeki iki explicit mutable scheduler aliasından source-order sonra gelen exact-ACK CALL sınırını tek başına production guard'a bağlar. Nonzero completion task/state, completed victim lifecycle, post-victim RuntimePmm snapshot, fixed coordinator event, task-owned normal Endpoint SEND authority, immutable event message, önceki stale-ACK CALL, exact AckMismatch ile unchanged coordinator snapshot, AttemptInFlight monitor-rearm reddi ve linked exact reply writer'dan önce tamamlanır. Dedicated S393 IRQ guard ardından gerçek per-CPU kimliğiyle CPU0-only exclusive writer S392 ve 44 production reader'ın kullandığı aynı statik S247 state word üzerinde alınır. Exact tek mutable SCHEDULER aliası yalnız endpoint id/generation, exact-reply id ve immutable event message ile source-order second ipc_kernel_call_and_wait çağrısını kapsar. Owned exact_ack önce writer, sonra IRQ release sınırını geçer; exact label/badge/data doğrulaması iki release sonrasındadır. Coordinator acknowledge, monitor rearm, NORMAL observation, supervisor reclaim, later-stack service, RuntimePmm baseline ve endpoint cleanup downstream'da kalır. Tarihsel S323 exact ve S324 stale authority audit'leri model-only'dir; S394 stale-ACK production membership ayrı sıradaki kapıdır. Guarded writer 66/69, açık writer 3, provider authority 0 ve whole-scheduler exclusion false'dur. S138 fixture board-qemu, production wrapper RPi5-only olduğundan supported-profile runtime observation=0 açıkça korunur.",
    evidence: [
      "Canonical focused test S393 modülü, kernel/simulation registration'ı, CPU1 coverage service'i ve production S138 exact-ACK CALL membership'i yokken compile RED verdi; tarihsel S323 authority audit'i production entegrasyonu yerine geçirilmedi.",
      "İlk RED exit 101 verdi; /tmp/aselsanos-s393-initial-red.log 3642 B / 5ac67d8438fe7178707ff825be478cbd6cc0c266eaf31ab14cc916f4ef7f6091 SHA-256'dır.",
      "RED distinct S393 module include_str kaynağının ve simulation crate export'unun yokluğunu exact gösterdi; ayrıca S391 test şablonundan provisional çevrilmiş iki tarihsel include yolu henüz canonical S323/S324 kaynaklarına bağlı değildi.",
      "Provisional yollar var olan S323 exact-ACK ve S324 stale-ACK authority audit'lerine bağlandı; yeni sahte tarihsel dosya oluşturulmadı ve tarihsel model kanıtı production membership sayılmadı.",
      "İlk production-wired kaynak şekli 45/48 PASS verdi; üç RED yalnız unscoped event.id araması ve iki documentation whitespace varsayımıydı, product kodu değiştirilmedi.",
      "event.id araması immutable event_message bağlamına scope edildi; prose kontrolleri whitespace-normalized oldu, writer membership veya release-order assertion'ı gevşetilmedi.",
      "Final canonical focused koşu 48/48 PASS verdi; /tmp/aselsanos-s393-focused-green.log 3956 B / a64e827e68b3e3a08fb05a6a17a140bf3e8f2eb670ff2e55374b8f7773c5cdc9 SHA-256'dır.",
      "S393 guard modülü 12929 B / 1c28f134bb260a3f2169dff71316e41f5f4e09b013b004809331dc50efdf9898 SHA-256'dır.",
      "S393 focused test kaynağı 28161 B / 8dc93065e6da925ed7cd748eef2862305214d8b575b288c3fe13f548317f6507 SHA-256'dır.",
      "S393 modülü typed S392 preflight outcome'unu yeniden doğrular; inherited 44 reader + 65 guarded writer + 4 open writer snapshot'ı saparsa InventoryDrift ile fail-closed kapanır.",
      "S393 başarı outcome'u SixtySixthWriterGuardedAwaitingRemaining'dir ve exact 44 guarded reader + 66/69 guarded writer + 3 open writer envanterini sabitler.",
      "Outcome request id, reader/writer/open sayıları, S138 exact transaction, mutable alias, upstream completion/event/authority/stale-path alanları ve downstream ACK/rearm/reclaim/cleanup alanlarını typed raporlar.",
      'Production wrapper exact all(target_arch = "aarch64", target_os = "none", feature = "board-rpi5") cfg kesişimindedir; board-qemu fixture production runtime invocation diye sunulmaz.',
      "acquire_s393_production_scheduler_writer_access gerçek try_current_cpu_id sonucunu kullanır; caller-supplied production CPU parametresi yoktur ve CPU0 dışı mutation callback'inden önce InvalidCpu ile kapanır.",
      "Writer lease S247_PRODUCTION_WHOLE_SCHEDULER_ACCESS_GATE üzerinde try_acquire_exclusive_for_valid_cpu ile alınır; S393 yeni static, ikinci state word veya ayrı exclusion domain yaratmaz.",
      "Host executor callback'i exact bir kez çağırır; canlı reader writer'ı, canlı writer ikinci writer'ı ve yeni reader'ı aynı state word üzerinde reddeder; callback error RAII lease'ini exact bırakır.",
      "S392 ve S393 executor token'ları aynı shared gate üzerinde monoton ve ayrıdır; iki kapı tek transaction, range dispatcher veya toplu S335–S400 facade membership'i değildir.",
      "Production main.rs envanterinde S138 exact CALL source-order positions[3], yani 17 explicit main aliasının dördüncüsüdür; S393 yalnız bu aliası sahiplenir.",
      "Aynı qemu_s137_runtime_pressure_completion öğesinde exact iki mutable scheduler aliası korunur: first stale-ACK CALL S394 için açık, second exact-ACK CALL S393 guarded'dır.",
      "QEMU_TIMER_PRESSURE_STATE completion task id, endpoint id/generation, supervisor task/domain, victim lifecycle ve scan tick kimliklerini exact completion fonksiyonuna taşır.",
      "current_task_id yalnız state.completion_task ile eşleştiğinde ilerlenir; zero veya başka caller identity writer acquisition'a ulaşamaz.",
      "service_deferred_current_runtime_oom bounded yield döngüsü exact lifecycle completion üretmeden coordinator event teslim edilmez.",
      "Completed victim task/domain, lifecycle_complete ve boş IPC teardown özeti writer'dan önce doğrulanır.",
      "Post-victim audited RuntimeMemory snapshot spawned free-frame ve active-allocation değerleriyle writer'dan önce eşitlenir.",
      "Coordinator deliver_next_event exact TeardownComplete event'i üretir; id, victim task/domain, expected reclaim ve observed zero domain frames immutable doğrulanır.",
      "Completion task CNode lookup'ı state.endpoint_id üzerinde owner, parent=None, exact generation ve ENDPOINT_SEND right şartlarını writer'dan önce yeniden doğrular.",
      "packed_reclaim checked shift/add ile overflow fail-closed kurulur; event_message event id, victim, domain ve reclaim tuple'ını immutable taşır.",
      "stale_reply_cap exact completion-task/endpoint ilişkisiyle mint edilir ve source-order first stale ipc_kernel_call_and_wait S393 writer'dan önce yürür.",
      "Stale continuation yalnız S138_STALE_ACK_LABEL, exact supervisor badge, deliberately event.id+1 ve unchanged message tail ile kabul edilir.",
      "before_stale coordinator snapshot'ı AckMismatch sonrasında byte-semantik unchanged kalır; yanlış ACK event'i consume etmez.",
      "Monitor rearm exact AttemptInFlight ile kapanır; stale yol S393 exact writer'a geçmeden başarı veya NORMAL state yayımlayamaz.",
      "exact_reply_cap writer'dan önce completion-task/endpoint ilişkisiyle mint edilir; exact reply id S393 CALL'e owned scalar olarak aktarılır.",
      "Dedicated s393_irq_guard writer acquire'dan önce kurulur; acquire_s393_production_scheduler_writer_access, drop(s393_writer_access) ve drop(s393_irq_guard) exact birer kez görünür.",
      "Exact mutable alias ipc_kernel_call_and_wait(state.endpoint_id, endpoint_authority.generation, exact_reply_cap.id, event_message) çağrısını bir kez yapar.",
      "CALL terminal sonucu borrowed Scheduler referansı dışarı taşınmadan owned exact_ack değerine alınır; guard release sonrasında Scheduler üzerinden sonuç okunmaz.",
      "S393 focus tek mutable SCHEDULER aliası ve tek ipc_kernel_call_and_wait içerir; stale_reply_cap.id ve let stale_ack bu nested focus'a girmez.",
      "drop(s393_writer_access), drop(s393_irq_guard), exact label, badge ve data assertions bu kesin source sırasındadır.",
      "Exact ACK yalnız S138_EXACT_ACK_LABEL, state.supervisor_task badge ve event_message.data bütünü değişmeden döndüğünde kabul edilir.",
      "Coordinator acknowledge(exact_ack.data[0]) S393 release ve exact validation sonrasındadır; writer coordinator state'ini kapsamına almaz.",
      "Monitor rearm exact coordinator ACK sonrasında yeni epoch üretir; stale AttemptInFlight sonucu rearm başarısı yerine geçirilmez.",
      "Recovery observation RuntimeMemory authority altında policy setiyle yürür ve yalnız PressureLevel::Normal kabul edilir.",
      "Supervisor domain quota en fazla 128 bounded yield içinde allocated_frames=0'a dönmelidir; reclaim döngüsü writer lease dışında kalır.",
      "Deferred later-stack normal-exit reap S393 release sonrasında yürür; exact CALL transaction'ına lifecycle cleanup eklenmez.",
      "Victim ve supervisor quota allocated/retired/pin değerleri sıfır; final RuntimePmm free frames ve active allocations baseline ile exact eşittir.",
      "teardown_task_ipc_lifecycle completion owner için exact bir owned endpoint, sıfır drained call ve sıfır cancelled responder call raporlar.",
      "Endpoint registry cleanup state.endpoint_id, stale_reply_cap.id ve exact_reply_cap.id'nin tamamını S393 release sonrasında yok sayar.",
      "Scheduler helper aynı IRQ/IPC transaction altında caller SEND authority, normal Endpoint object ve linked one-shot reply ilişkisini commit'ten önce yeniden doğrular.",
      "Optional receiver authority/generation ve exact receive deadline ile ready queue, blocked call, reply table ve endpoint queue kapasitesi CALL publish öncesinde fail-closed sınanır.",
      "CALL envelope publish, caller context park ve optional immediate receiver delivery aynı helper transaction'ındadır; transaction release edilmeden context switch yapılmaz.",
      "Continuation transaction release ve resume sonrasında aynı caller task'ı bulur ve yalnız owned IpcMessage veya exact stored IPC error terminal sonucunu yeniden kurar.",
      "Focused source testi complete qemu_s137_runtime_pressure_completion Rust öğesini ve exact S393 acquire→single mutable alias→second CALL→writer drop nested focus'unu birlikte doğrular.",
      "Focused test complete S138 öğesinde exact iki mutable alias sayar, S393 focus'unda yalnız second aliası ve tek ipc_kernel_call_and_wait görür.",
      "Argument-forwarding testi state.endpoint_id, endpoint_authority.generation, exact_reply_cap.id ve event_message değerlerinin exact second CALL'e eksiksiz aktarıldığını doğrular.",
      "Focused test stale_reply_cap.id ve stale_ack'in S393 focus'una girmediğini; exact_reply_cap.id ile immutable event_message'in ise girdiğini ayrı assertion'larla sabitler.",
      "Focused grup request yokken Idle, exact pending request ile SixtySixthWriterGuardedAwaitingRemaining ve yanlış CPU'da inherited S392 hatasını ayrı test eder.",
      "S245 request preflight sonrasında state.pending_request_id()==Some(1) kalır; take, publish, consume veya authority promotion yapılmaz.",
      "Reader-vs-writer, writer-vs-writer, nested reader/writer, callback-error release ve exact-once callback yolları birbirinden bağımsız test edilir.",
      "Production-only sembollerin tamamı aynı RPi5 AArch64 bare-metal cfg'sine bağlıdır; hostta sahte yarım production yolu oluşturulmaz.",
      "S393 modül kaynak testi provider constructor, S244 publisher ve request-state take adlarını reddeder; provider authority=0 ve exclusion=false kaynak yüzeyiyle korunur.",
      "Kernel main ve simulation lib registration'ları exact uzun S393 modül adıyla ayrı doğrulanır; sıra tablosundaki model satırı production membership yerine geçirilmez.",
      "CPU1 coverage service exceptions.rs içinde S392 service çağrısından sonra ve tarihsel S242 consumer'dan önce çalışır; mutable SCHEDULER veya S393 acquire çağırmaz.",
      "Tarihsel S323 exact-ACK ve S324 stale-ACK audit'leri model-level kalır; production S392 S140 controlled membership de ayrı prior source unit'tir.",
      "S394 acquire sembolü S393 modülünde ve guarded focus'ta yoktur; QEMU S138 stale-ACK CALL sonraki kapı olarak açık kalır.",
      "Final selected regression S393, S392, tarihsel S323/S324 ve runtime_oom_supervisor_recovery ile 5 grup / 133 PASS / 0 fail verdi.",
      "Selected log /tmp/aselsanos-s393-selected.log 12372 B / 727f1431357523400a00c8d74bc73cb663ad860e535d935762248c8376cad180 SHA-256'dır.",
      "S238–S392 dependency hedef listesi korunup yalnız S393 sona eklendi; iki bağımsız seri koşu 157 grup / 4003/4003 PASS verdi.",
      "Dependency timing-normalized ve LC_ALL=C sıralı özetlerin her biri 33862 B / d7cf5a3035b6692368553e5cf535f2d5f7328c3eec55e55427357caea1e57c9f SHA-256 ile byte-exact eşittir.",
      "Dependency artifact root /tmp/aselsanos-s393-dependency.eOFmKZ; raw run1 406417 B / 3b03598b45cecdb517d9d338e9afdc8bf6a4be59185b75aada7fd09b2333391a ve run2 390352 B / 87b85f9bb06c51a6bc9336634d382a6bd8dbcbe4dce082abe1a43be2d7a227e7'dir.",
      "Yalnız finished in süre suffix'i normalization kapsamındadır; test isimleri, hedef sırası, pass/fail adetleri ve durum payload'ı canonical özette kalır.",
      "Yedi exact frozen assertion dışındaki serial workspace 356 result group / 5884 PASS / 0 fail / 7 filtered verdi.",
      "Filtered workspace raw log 573410 B / 078deaa62d6d999eef6ad4bed6ae0a43bb92b8378dc18c46fea4405d5661088e ve summary 33702 B / bab1afdf7dffb2fc6851a94cffb990f53fec8cca10e78b664a3e4c41183de086'dir.",
      "Filtresiz workspace exit 101 ile yalnız frozen S96 wiring_does_not_mutate_timer_gic_boot_or_expand_runtime_scope assertion'ında durdu; 309 result group / 5629 PASS / 1 fail ve global workspace GREEN claimed=false'dur.",
      "Filtresiz raw log 541761 B / 612a5cfce2368a8879d24be405f07cce83cba8dac0b4a63a8b51f17050d684b1 ve summary 29283 B / 449f5033b5b441af2b7e3f0431041664150e9c96109a31626ca420f9ecdfd4e8'dir.",
      "Yanlış --all-targets host denemesi bare-metal kernel bin test=false sınırını override edip panic_impl ile std'yi bağlamaya çalıştığı için kabul kanıtı sayılmadı; canonical plain --workspace komutu kullanıldı.",
      "Dört fresh canonical AArch64 profil kernel çalışma dizininden CARGO_INCREMENTAL=0, explicit feature ve birbirinden ayrı target dizinleriyle 4/4 exit 0 verdi; zero-warning iddiası yoktur.",
      "Fresh board-qemu logu 112143 B / 3e0ec634f6f52a4581210a8201972b66ec74e331353f320f5b7108daa45ffb6b ve 293 warning header; ELF 16814008 B / a7baa0053e025b43a32e80ad893ea5b0d3df31ad12afcfd50113a1601ebd279c'dir.",
      "Fresh board-rpi4 logu 150883 B / 33c969ade7a66c7702c0fe7cc66990be842f577ea35cb04c56672c71828e8428 ve 391 warning header; ELF 11925512 B / 2fbe3856bd5b123b0bdfe1224abe3cc1d16f8030c39b25171eb00fd5b1fadd02'dir.",
      "Fresh board-rpi5 logu 670831 B / 976cac0d3bd635d848257c8e228ee0bac9a01c94fba2e7314c914f0c8367b387 ve 1538 warning header; ELF 15430280 B / 3bebdf0a41d8a213deeb8fa8022868e1e8d5996806a5b40dc629fdfce68076bb'dir.",
      "Fresh board-rpi5+smp logu 670565 B / 584fd77d93c8dd3e2722ce58132e8a6c0746baecd41019dde0d0e6bff8ebd2ff ve 1538 warning header; ELF 15436296 B / 4c1c51893704510ee1be8f58a30fb10e9b54492ea6ec54e63eb41681676445ce'dir.",
      "Dört profil /tmp/aselsanos-s393-profiles.vYA0La altında tutulur; build log ve ELF byte/hash ölçüleri birbirine karıştırılmaz.",
      "CARGO_INCREMENTAL=0 make verify-qemu 116354 B / 30b3ade417f2b7d31262a90bb2ed527a614a4f1ba216fe9857fcbb00706ecf1e SHA-256 ile strict ELF W^X 31/31, S130–S154 + S271, IPC 20/20 ve scheduler SEC5 PASS verdi.",
      "QEMU logunda S138 timer-driven stale rejection ve exact EL0 ACK transport gözlendi; board-qemu guest RPi5-only S393 lease'ini compile etmediği için bu writer runtime observation değildir.",
      "Final cargo fmt --all -- --check ve git diff --check exit 0 ve boş çıktı verdi; 0 B / e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 SHA-256'dır.",
      "S393 proof owned boundary, coverage, source identities, TDD, selected regression, dependency reproducibility, workspace, profiles, QEMU/format ve Code publication contract bölümlerini ayrı taşır.",
      "Code yayın hedefi S1–S393 393/393 ayrı kapıdır; kullanıcının özellikle istediği S328 öncesi S1–S327 aralığı 327/327 tekil kalmalı, missing=none ve duplicate=0 olmalıdır.",
      "S393 Code kartı complete qemu_s137_runtime_pressure_completion Rust öğesini, yalnız second exact CALL'e ait nested acquire→release focus'unu, complete S393 guard modülünü, complete 48-test target'ını, proof'u ve complete Operations object'ini yayımlar.",
      "Complete production excerpt iki S138 CALL'i bağlamıyla gösterirken nested focus yalnız s393_writer_access acquisition'dan drop(s393_writer_access)'e kadar kesilir; S394 stale transaction bu focus'a katılmaz.",
      "S1, S327, S328, S392 ve S393 kartlarının exact birer kez görünmesi; S394'ün pre-publish edilmemesi website kabulünde sayılacaktır.",
      "Her Code kartı mappingStrategy, kind, sourcePath, complete excerpt, satır aralığı ve SHA-256 kimliği taşır; test komutu asıl uygulama/model kodunun yerine geçirilmez.",
      "S393 için güç, SD kart, Mac kart erişimi, UART capture, raw validation, archive veya promotion işlemi yapılmadı: physical/device operations=0 ve RUNBOOK_EXECUTED_IN_S393=NO.",
      "Bağlayıcı olmayan S393 projeksiyonu R1 S393–S423, R2 S448–S498, R3 S577+, risk aralığı S553–S603 ve merkez yaklaşık S578'dir; sıra veya ürün taahhüdü değildir.",
      "İlk production publication registry'si S1–S393 393/393 unique kapı, 1140 exact excerpt ve özellikle S328 öncesi S1–S327 327/327 tekil kart üretti; missing=none, duplicate=0, S1/S327/S328/S392/S393 exact birer ve S394=0'dır.",
      "İlk registry mapping'i 66 writer-guard + 225 focused-test + 94 command-contract + 8 operation-record = 393'tür; generated JSON 8941513 B / 708eb816764ad27059e287f0400ce2fea170ba5a75bb436c5ecbe7ce42910cfe dosya SHA-256 ve 45a97463cfb92d11a32fd93776e90f4a9ef849a92557015b77bf3aa030d90bcc registry SHA-256 taşır.",
      "S393 Code kartı complete qemu_s137_runtime_pressure_completion öğesi içinde iki S138 CALL'i bağlam olarak korur; nested focus yalnız source-order second exact-ACK acquire_s393_production_scheduler_writer_access→drop(s393_writer_access) üyeliğidir ve S394 stale-ACK transaction'ını kapsamaz.",
      "Website production kabulü 715/715 test PASS, lint PASS, boş TypeScript çıktısı ve 24/24 static page verdi; export 200 dosya, Timeline ve yol-haritasi ayrı ayrı 232 data-gate-policy kartıdır.",
      "Publication öncesi S393 core Operations policy 17580 karakter / 18191 UTF-8 byte, 91 evidence satırı, 3 teknik terminal session ve 8 limitation taşıdı; S324 tabanı 5965 karakter / 6122 byte'dır.",
      "İlk production/main deployment d62e4646 ile 115 uploaded + 84 existing = 199 asset ve _headers yayımladı; deploy logu 1715 B / c2a5bcf0affe1bd01dcd7c0e2b9d19a2c9e82b21007ce6089c5158d69e55e676 SHA-256'dır.",
      "Cache-busted custom-domain readback /code/ 25035058 B / 86570baecfa56d95bf822a72cb054504c14bf9698ee9ab94029395d1a71ccb55, /operations/ 15420029 B / a14d6267063ea8dc36813787fbb3dfae8081f13d1027289c47adcba3d854f97f, /timeline/ 6486489 B / c2e59c44bda654b6d2ea87e6c2a829556a9a91beda7b8cd722e2f2ffdd909571 ve /yol-haritasi/ 6486237 B / 5ba53a1a7e5381fcc1f604fafdd1e9150d83d61fa52d326447983280ec4b035d SHA-256 ile HTTP 200 ve deployment out'una raw byte-exact=true verdi.",
      "Canlı /code/ total=393, unique=393, pre-S328=327, S1=1, S327=1, S328=1, S392=1, S393=1 ve S394=0 ölçtü; cache-control no-transform ve x-content-type-options nosniff başlıkları doğrulandı.",
      "İlk readback artifact root /tmp/aselsanos-s393-readback-initial.048khb'dir; immutable d62e4646 hostname probe'u curl exit 28 / HTTP 000 verdi ve custom-domain PASS yerine geçirilmedi.",
    ],
    commands: [
      "CARGO_INCREMENTAL=0 cargo test -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s393_qemu_s138_exact_ack_writer_guard_integration -- --test-threads=1",
      "run S393, S392, S323, S324 and runtime_oom_supervisor_recovery serially",
      "run S238-S393 dependency list twice and normalize timing fields",
      "run filtered and unfiltered serial workspace audits",
      "run four fresh isolated AArch64 profile builds",
      "CARGO_INCREMENTAL=0 make verify-qemu",
      "cargo fmt --all -- --check && git diff --check",
      "npm run code:generate && npm run code:check",
      "npm test && npm run lint && npx tsc --noEmit && npm run build",
      "npm run deploy",
      "cache-busted curl + cmp for /code/, /operations/, /timeline/ and /yol-haritasi/",
    ],
    terminalSessions: [
      {
        id: "g8l-s393-focused-source-contract",
        title: "S393 focused S138 exact-ACK CALL writer membership",
        commandLines: [
          "CARGO_INCREMENTAL=0 cargo test -p aselsan_microkernel_simulation --test g8l_target_dispatch_scheduler_owner_scheduler_mutation_production_migration_lifecycle_s393_qemu_s138_exact_ack_writer_guard_integration -- --test-threads=1",
        ],
        outputLines: [
          "initial result: compile RED; distinct S393 module/export and production S138 exact-call boundary missing",
          "first wired result: 45/48 PASS; three context/whitespace slicers corrected, product code unchanged",
          "final result: 48/48 PASS; exact second alias and owned ACK release order",
          "shared S247 gate: 44 guarded readers + 66/69 guarded writers; 3 writers open",
          "board-qemu fixture / board-rpi5 wrapper supported-profile intersection=0; provider authority=0",
        ],
        exitCode: 0,
        outputMode: "complete",
      },
      {
        id: "g8l-s393-selected-regression",
        title: "S393 selected S138 exact/stale and S140 controlled regression",
        commandLines: [
          "run S393, S392, S323, S324 and runtime_oom_supervisor_recovery serially",
        ],
        outputLines: [
          "historical S323/S324 model audits remain separate from production membership",
          "final result: 5 groups / 133 passed / 0 failed",
          "S393 exact-ACK guarded; S394 stale-ACK remains open",
        ],
        exitCode: 0,
        outputMode: "complete",
      },
      {
        id: "g8l-s393-full-acceptance",
        title:
          "S393 dependency, workspace, profiles, QEMU and format acceptance",
        commandLines: [
          "run S238-S393 dependency list twice and normalize timing fields",
          "run filtered and unfiltered serial workspace audits",
          "run four fresh isolated AArch64 profile builds",
          "CARGO_INCREMENTAL=0 make verify-qemu",
          "cargo fmt --all -- --check && git diff --check",
        ],
        outputLines: [
          "dependency 157 groups / 4003/4003 twice; normalized 33862-byte summaries are SHA-256 identical",
          "filtered workspace 356 groups / 5884 PASS / 7 filtered; unfiltered frozen-S96 remains RED at 5629 PASS / 1 fail",
          "four fresh profiles 4/4 exit 0; build-log and ELF identities measured separately; zero-warning claim=false",
          "QEMU W^X 31/31 + S130-S154 + S271 + IPC 20/20 + SEC5 PASS; not an S393 writer runtime observation",
          "final rustfmt and diff whitespace checks exit 0 with empty output",
        ],
        exitCode: 0,
        outputMode: "complete",
      },
      {
        id: "g8l-s393-production-publication",
        title:
          "S393 Operations, Timeline, Roadmap and Code production publication",
        commandLines: [
          "npm run code:generate && npm run code:check",
          "npm test && npm run lint && npx tsc --noEmit && npm run build",
          "npm run deploy",
          "cache-busted curl + cmp for /code/, /operations/, /timeline/ and /yol-haritasi/",
        ],
        outputLines: [
          "registry S1-S393 393/393 unique; 1140 excerpts; S1-S327 327/327; missing=none; duplicate=0; S394=0",
          "website 715/715 PASS; lint PASS; TypeScript empty; 24/24 static pages; export files=200; Timeline cards=232",
          "deployment d62e4646; 115 uploaded + 84 existing; _headers published",
          "custom-domain four routes HTTP 200 and raw byte-exact=true; /code no-transform + nosniff",
          "immutable deployment hostname curl exit 28 / HTTP 000; custom-domain result remains canonical",
        ],
        exitCode: 0,
        outputMode: "complete",
      },
    ],
    terminalSessionsNote:
      "S393 altmış altıncı production writer'ın dar kaynak entegrasyonudur. Yalnız S138 source-order second exact-ACK CALL mutable scheduler aliası guarded'dır; upstream stale mismatch ve downstream ACK/rearm/reclaim/cleanup dışında kalır. Teknik kanıt GREEN, bütün scheduler exclusion ve ürün kabulü PARTIAL'dır.",
    limitations: [
      "Üç production writer aynı shared gate dışında kaldığı için whole-scheduler exclusion ve provider authority açık kalır.",
      "Board-qemu S138 fixture ile board-rpi5-only S393 wrapper aynı supported profilde kesişmez; production writer runtime invocation/observation kanıtı yoktur.",
      "QEMU S138 kabulü stale rejection ve exact EL0 ACK ürün senaryosunu doğrular, fakat RPi5-only writer lease'in runtime'da alındığını doğrulamaz.",
      "Source-order first stale-ACK S138 CALL ayrı S394 membership'idir; S393 iki aliası tek range guard altında birleştirmez.",
      "S394 QEMU S138 stale-ACK CALL ayrı sıradaki kapıdır ve S393 tarafından completed sayılmaz.",
      "S245 request tüketilmez, S244 admission yayınlanmaz ve provider authority kurulmaz.",
      "Generic SMP arbitration, transient-contention liveness/soak ve fiziksel RPi kabulü açık kalır.",
      "S393 fiziksel/device operasyonu yapmadı; RUNBOOK_EXECUTED_IN_S393=NO.",
    ],
  },