Skip to content

Operations

Current Snapshot

  • Latest published edge release: v0.2.0-zig-edge.29
  • Latest local test gate: zig build test --summary all -> 361/361 passed
  • Latest parity gate: scripts/check-go-method-parity.ps1 -> GO_MISSING_IN_ZIG=0, ORIGINAL_MISSING_IN_ZIG=0, ORIGINAL_BETA_MISSING_IN_ZIG=0, UNION_MISSING_IN_ZIG=0, UNION_EVENTS_MISSING_IN_ZIG=0, ZIG_COUNT=175, ZIG_EVENTS_COUNT=19, union baseline 141/141
  • Current head: local source-of-truth on fs55-ethernet-integration (exact pushed head is tracked in issue #1 and the latest branch GitHub Actions runs)
  • License posture: repo-wide GPL-2.0-only with Linux-style SPDX headers on repo-owned source and script files
  • Toolchain lane: Codeberg master is canonical; adybag14-cyber/zig is the Windows release mirror with rolling latest-master plus immutable upstream-<sha> releases.
  • CI split: hosted validation stays on Zig master, while the freestanding bare-metal smoke/probe and bare-metal asset lanes are pinned to the known-good Linux build 0.16.0-dev.2736+3b515fbed until the upstream Linux master compiler crash on zig build baremetal -Doptimize=ReleaseFast is no longer reproducible.
  • Strict hosted-phase order is now locked to FS1 -> FS4 -> FS2 -> FS3 -> FS5.
  • FS1 runtime/core closure is reached locally.
  • FS4 security/trust closure is also reached locally.
  • FS2 provider/channel closure is also reached locally.
  • FS3 memory/knowledge closure is also reached locally through the hard matrix at docs/zig-port/FS3_MEMORY_KNOWLEDGE_MATRIX.md.
  • FS5 edge/wasm/finetune closure is now reached locally through the hard matrix at docs/zig-port/FS5_EDGE_WASM_FINETUNE_MATRIX.md.
  • scripts/edge-wasm-lifecycle-smoke-check.ps1 and scripts/edge-finetune-lifecycle-smoke-check.ps1 are now part of the strict hosted CI/release lane.
  • FS5.5 hardware-driver closure is now reached locally through docs/zig-port/FS5_5_HARDWARE_DRIVERS_SYSTEMS.md.
  • framebuffer/console is now locally strict-closed in FS5.5:
  • src/baremetal/framebuffer_console.zig programs a real Bochs/QEMU BGA linear framebuffer surface with bounded mode support for 640x400, 800x600, 1024x768, 1280x720, and 1280x1024
  • src/baremetal/pci.zig discovers the display BAR and enables decode on the selected PCI function
  • src/baremetal/edid.zig, src/baremetal/display_output.zig, and src/baremetal/virtio_gpu.zig now add the first real EDID-backed controller-capability path over virtio-gpu-pci, including exported digital-input, preferred-timing, CEA, DisplayID, HDMI-vendor-data, and basic-audio flags when present, plus a bounded render/present/flush proof over the same controller path
  • src/baremetal/display_output.zig now infers the exported connector type from EDID capability flags instead of leaving the virtio-gpu path hard-coded as always virtual
  • src/pal/framebuffer.zig exposes the framebuffer surface, supported-mode table, and exported display-output state through the bare-metal PAL
  • scripts/baremetal-qemu-framebuffer-console-probe-check.ps1 proves live MMIO banner pixels over the freestanding PVH image at 640x400, 1024x768, and 1280x720
  • scripts/baremetal-qemu-virtio-gpu-display-probe-check.ps1 proves live virtio-gpu-pci EDID/controller capability export plus resource-create/attach/set-scanout/flush behavior with non-zero scanout pixel readback over the freestanding PVH image
  • real HDMI/DisplayPort connector-specific scanout paths are still future depth and are not claimed by this branch
  • keyboard/mouse is now locally strict-closed in FS5.5:
  • src/baremetal/ps2_input.zig now has a real x86 port-I/O backed PS/2 controller path
  • scripts/baremetal-qemu-ps2-input-probe-check.ps1 plus its wrapper probes are the live bare-metal proof for IRQ-driven keyboard/mouse updates
  • disk/block I/O is now on a real shared backend path in FS5.5:
  • src/baremetal/storage_backend.zig selects between RAM-disk and ATA PIO backends
  • src/baremetal/ata_pio_disk.zig now performs real x86 ATA PIO IDENTIFY / READ / WRITE / FLUSH plus bounded multi-partition MBR/GPT discovery/export, first-usable-MBR and protective-MBR GPT partition mounting, and logical LBA translation
  • src/pal/storage.zig and src/baremetal/tool_layout.zig now route through the backend facade instead of directly targeting the RAM disk
  • src/pal/storage.zig plus the oc_storage_* ABI exports now carry logical base-LBA plus bounded partition count/info/select over the same mounted storage view
  • partition selection now invalidates stale tool-layout/filesystem state and the bare-metal seam now exposes explicit oc_tool_layout_format plus oc_filesystem_format control on the selected partition
  • scripts/baremetal-qemu-ata-storage-probe-check.ps1 now proves live ATA-backed raw block mutation + readback plus ATA-backed tool-layout and filesystem persistence over the freestanding PVH image on top of a real MBR-partitioned raw disk, verifying both primary and secondary partition export/selection plus physical-on-disk offsets behind the mounted logical partition view
  • src/baremetal/disk_installer.zig now seeds the canonical persisted install layout (/boot, /system, /runtime/install, bootstrap package) on the active backend
  • scripts/baremetal-qemu-ata-gpt-installer-probe-check.ps1 now proves the freestanding PVH path mounts a protective-MBR GPT partition, preserves logical-to-physical LBA translation, seeds the install layout, and runs the persisted bootstrap package from disk
  • Ethernet L2 is now also on a real device path in FS5.5:
  • src/baremetal/rtl8139.zig provides real RTL8139 PCI-discovered bring-up, MAC readout, RX/TX setup, and loopback-friendly datapath validation
  • src/baremetal/pci.zig now discovers the RTL8139 I/O BAR and IRQ line and enables I/O plus bus mastering on the selected PCI function
  • src/pal/net.zig and src/baremetal_main.zig now expose the raw-frame PAL/export seam through the same driver path
  • scripts/baremetal-qemu-rtl8139-probe-check.ps1 now proves live MAC readout, TX, RX loopback, payload validation, and counter advance over the freestanding PVH image
  • TCP/IP is now also strict-closed for the FS5.5 acceptance bar above that L2 proof:
  • src/protocol/ethernet.zig + src/protocol/arp.zig implement Ethernet/ARP framing
  • src/protocol/ipv4.zig implements IPv4 framing plus checksum validation
  • src/protocol/udp.zig implements UDP framing plus pseudo-header checksum validation
  • src/protocol/tcp.zig now implements a real strict TCP framing/checksum slice plus a minimal client/server handshake, payload-exchange, and bounded four-way teardown state machine with client-side SYN retransmission, established-payload retransmission, bounded FIN retransmission/timeout recovery during teardown, a bounded multi-flow session table, bounded cumulative-ACK advancement across multiple in-flight payload chunks, strict remote-window enforcement for bounded sequential payload chunking, and zero-window blocking until a pure ACK reopens the remote window
  • src/pal/net.zig now also exposes sendTcpPacket / pollTcpPacketStrictInto, explicit DNS server configuration, a real freestanding bounded http:// POST path, and a real freestanding bounded https:// POST transport path on top of the RTL8139/TCP stack via src/pal/tls_client_light.zig
  • src/pal/net.zig host regressions now also prove two TCP flows can handshake, exchange payloads, and teardown independently through the mock RTL8139 path
  • that same PAL surface now also proves hostname resolution through DNS, ARP resolution, TCP connect, HTTP request framing, and HTTP response parsing for freestanding plain HTTP, and that the freestanding TLS client emits a real ClientHello through the same mock RTL8139 transport seam
  • scripts/baremetal-qemu-rtl8139-http-post-probe-check.ps1 now proves the freestanding PAL http:// POST path live over RTL8139 with DNS, TCP, HTTP, and allocator-owned response buffering
  • scripts/baremetal-qemu-rtl8139-https-post-probe-check.ps1 now proves the freestanding PAL https:// POST transport path live over RTL8139 with direct-IP transport (https://10.0.2.2:8443/...), TCP, TLS handshake, persistent filesystem-backed trust-store selection plus bounded CA-bundle verification, fixed probe time, and allocator-owned response buffering against a deterministic self-hosted TLS harness
  • src/baremetal/tool_service.zig now exposes a bounded framed request/response shim on top of the bare-metal tool substrate for the TCP path, with typed CMD, EXEC, GET, PUT, STAT, LIST, INSTALL, MANIFEST, PKG, PKGLIST, PKGINFO, PKGRUN, PKGAPP, PKGDISPLAY, PKGPUT, PKGLS, PKGGET, PKGDELETE, APPLIST, APPINFO, APPSTATE, APPHISTORY, APPSTDOUT, APPSTDERR, APPTRUST, APPCONNECTOR, APPRUN, APPDELETE, DISPLAYINFO, DISPLAYMODES, DISPLAYSET, TRUSTPUT, TRUSTLIST, TRUSTINFO, TRUSTACTIVE, TRUSTSELECT, and TRUSTDELETE requests plus bounded batched request parsing/execution on one flow
  • host/module validation now also proves typed TCP file-service, package-service, and app-lifecycle behavior on top of the bare-metal filesystem, including structured EXEC exit/stdout/stderr responses, PUT, GET, STAT, LIST, INSTALL, MANIFEST, PKG, PKGLIST, PKGINFO, PKGRUN, PKGAPP, PKGDISPLAY, PKGPUT, PKGLS, PKGGET, PKGDELETE, APPLIST, APPINFO, APPSTATE, APPHISTORY, APPSTDOUT, APPSTDERR, APPTRUST, APPCONNECTOR, APPRUN, APPDELETE, DISPLAYINFO, DISPLAYMODES, DISPLAYSET, TRUSTPUT, TRUSTLIST, TRUSTINFO, TRUSTACTIVE, TRUSTSELECT, TRUSTDELETE, persisted run-script, canonical run-package, persisted app-run state receipts, persisted app-history receipts, persisted app stdout/stderr receipts, package manifest readback, package app-manifest readback, package display-profile persistence, package asset install/list/get, direct-child directory introspection, recursive package-tree delete, app-state cleanup on uninstall, display capability/mode export, live display-mode application during run-package, explicit display-set mode changes, trust-bundle rotation/revocation, and mixed typed batch handling with concatenated framed responses through that service seam
  • scripts/baremetal-qemu-rtl8139-arp-probe-check.ps1, scripts/baremetal-qemu-rtl8139-ipv4-probe-check.ps1, scripts/baremetal-qemu-rtl8139-udp-probe-check.ps1, and scripts/baremetal-qemu-rtl8139-tcp-probe-check.ps1 prove live ARP, IPv4, UDP, and TCP handshake/payload exchange plus bounded four-way close over the freestanding PVH image, including dropped-first-SYN recovery, dropped-first-payload recovery, dropped-first-FIN recovery on both close sides, bounded two-flow session isolation, zero-window block/reopen behavior, bounded sequential payload chunking, bounded cumulative-ACK advancement across in-flight payload chunks, framed multi-request command-service exchange, typed EXEC exchange, bounded typed batch request multiplexing on one TCP flow, typed TCP PUT upload with direct filesystem readback, typed INSTALL / MANIFEST runtime-layout service exchange with /boot/loader.cfg readback, typed PKG / PKGLIST / PKGINFO / PKGRUN / PKGAPP / PKGDISPLAY package-service exchange, typed PKGPUT / PKGLS / PKGGET / PKGDELETE package-asset and uninstall exchange, typed APPLIST / APPINFO / APPSTATE / APPHISTORY / APPSTDOUT / APPSTDERR / APPTRUST / APPCONNECTOR / APPRUN / APPDELETE app-lifecycle exchange with persisted runtime-state readback, persisted history-log readback, persisted stdout/stderr readback, and uninstall cleanup, typed DISPLAYINFO / DISPLAYMODES / DISPLAYSET display query/control exchange, typed TRUSTPUT / TRUSTLIST / TRUSTINFO / TRUSTACTIVE / TRUSTSELECT / TRUSTDELETE trust-store exchange, selected trust-bundle query/path readback, trust-bundle deletion, post-delete remaining-list readback, canonical /packages/<name>/bin/main.oc readback, package manifest readback, package app-manifest readback, package display-profile persistence, package-directory listing, package asset readback, package output readback, live run-package display-mode application, explicit DISPLAYSET mode change/readback, and display capability/mode payload readback over the attached disk-backed bare-metal path
  • DHCP framing/decode is now also proven on the real RTL8139 path:
  • src/protocol/dhcp.zig provides strict DHCP discover encode/decode
  • src/pal/net.zig exposes DHCP send/poll helpers for the hosted/mock path
  • scripts/baremetal-qemu-rtl8139-dhcp-probe-check.ps1 now proves real RTL8139 TX/RX of a DHCP discover payload over a loopback-safe UDP transport envelope, followed by strict DHCP decode and TX/RX counter advance
  • DNS framing/decode is now also proven on the real RTL8139 path:
  • src/protocol/dns.zig implements strict DNS query + A-response encode/decode
  • src/pal/net.zig now exposes sendDnsQuery, pollDnsPacket, and pollDnsPacketStrictInto
  • scripts/baremetal-qemu-rtl8139-dns-probe-check.ps1 proves live RTL8139 DNS query transport and strict A-response decode over the freestanding PVH image
  • ARP cache + gateway routing are now also proven on the real RTL8139 path:
  • src/protocol/arp.zig now also encodes ARP reply frames
  • src/pal/net.zig now exposes configureIpv4Route, configureIpv4RouteFromDhcp, resolveNextHop, learnArpPacket, and sendUdpPacketRouted
  • hosted regressions prove DHCP-driven route configuration, gateway ARP learning, routed off-subnet UDP delivery, and direct-subnet gateway bypass
  • scripts/baremetal-qemu-rtl8139-gateway-probe-check.ps1 proves live ARP-reply learning, ARP-cache population, gateway next-hop selection, direct-subnet bypass, and routed UDP delivery over the freestanding PVH image
  • deeper networking depth remains future work above the FS5.5 closure bar:
  • sliding-window and congestion-control behavior beyond the current bounded zero-window reopen + sequential chunk-and-ACK session model
  • higher-level service/runtime layers beyond the current bounded typed batch + EXEC / LIST / INSTALL / MANIFEST / PKGAPP / PKGDISPLAY / PKGPUT / PKGLS / PKGGET / PKGVERIFY / PKGRELEASELIST / PKGRELEASEINFO / PKGRELEASESAVE / PKGRELEASEACTIVATE / PKGRELEASEDELETE / PKGRELEASEPRUNE / PKGDELETE / APPLIST / APPINFO / APPSTATE / APPHISTORY / APPSTDOUT / APPSTDERR / APPTRUST / APPCONNECTOR / APPRUN / APPDELETE / DISPLAYINFO / DISPLAYMODES / DISPLAYSET / file/package/trust/display/app metadata seam on the bare-metal TCP path
  • persistent multi-root trust-store lifecycle is now proven through TRUSTPUT / TRUSTLIST / TRUSTINFO / TRUSTACTIVE / TRUSTSELECT / TRUSTDELETE on the live TCP path, and the live https:// transport now consumes the persisted selected bundle from that same trust store
  • filesystem usage is now also on a real shared-backend path in FS5.5:
  • src/baremetal/filesystem.zig implements path-based directory creation plus file read/write/stat
  • src/pal/fs.zig routes the freestanding PAL filesystem surface through that layer
  • hosted and host validation now prove persistence over both RAM-disk and ATA PIO backends
  • the filesystem entry budget is now 64, which is the current bounded baseline that keeps the deeper FS5.5 package/trust/app/autorun runtime state fitting on the persisted filesystem surface
  • bare-metal tool execution is now also on a real freestanding path in FS5.5:
  • src/baremetal/tool_exec.zig provides the builtin command substrate used by the bare-metal PAL instead of a hosted-process stub, including persisted run-script execution, canonical run-package, package-verify, package-release-list, package-release-info, package-release-save, package-release-activate, package-release-delete, package-release-prune, package-app, package-display, package-ls, package-cat, package-delete, app-list, app-info, app-state, app-history, app-stdout, app-stderr, app-trust, app-connector, app-run, app-delete, display-info, display-modes, and display-set
  • src/pal/proc.zig now exposes the explicit freestanding capture path
  • src/baremetal/package_store.zig provides the canonical persisted package layout under /packages/<name>/..., including /packages/<name>/assets/..., persisted release snapshots under /packages/<name>/releases/<release>/..., manifest script_checksum, app_manifest_checksum, and asset_tree_checksum fields, and /packages/<name>/meta/app.txt launch/display metadata
  • src/baremetal/tool_service.zig provides the bounded typed request/response service shim used by the TCP proof, including structured EXEC responses, typed PKGVERIFY, typed PKGRELEASELIST / PKGRELEASEINFO / PKGRELEASESAVE / PKGRELEASEACTIVATE / PKGRELEASEDELETE / PKGRELEASEPRUNE, and typed app lifecycle verbs on top of the freestanding tool-exec substrate
  • scripts/baremetal-qemu-tool-exec-probe-check.ps1 proves help, mkdir, write-file, cat, stat, run-script, direct filesystem readback, persisted script readback after filesystem reset/re-init, and echo over the freestanding PVH image with attached disk media
  • hosted/module validation also proves ATA-backed package persistence plus run-package, package-verify, package-release-list, package-release-info, package-release-save, package-release-activate, package-release-delete, package-release-prune, PKG, PKGLIST, PKGINFO, PKGRUN, PKGAPP, PKGDISPLAY, PKGPUT, PKGLS, PKGGET, PKGVERIFY, PKGRELEASELIST, PKGRELEASEINFO, PKGRELEASESAVE, PKGRELEASEACTIVATE, PKGRELEASEDELETE, PKGRELEASEPRUNE, PKGDELETE, APPLIST, APPINFO, APPSTATE, APPHISTORY, APPSTDOUT, APPSTDERR, APPTRUST, APPCONNECTOR, APPRUN, APPDELETE, DISPLAYINFO, DISPLAYMODES, DISPLAYSET, package manifests, app manifests, manifest checksum fields, persisted package display profiles, package assets, direct-child directory listing, deterministic tamper detection on package script checksum mismatch, recursive uninstall cleanup, persisted app runtime-state receipts, persisted app stdout/stderr receipts, package release info/delete/prune with deterministic sequence metadata and retained newest-release activation, and live display-mode application during run-package
  • the current FS5.5 autorun slice now adds persisted /runtime/apps/autorun.txt state through src/baremetal/app_runtime.zig, new tool_exec builtins (app-autorun-list, app-autorun-add, app-autorun-remove, app-autorun-run), new typed TCP verbs (APPAUTORUNLIST, APPAUTORUNADD, APPAUTORUNREMOVE, APPAUTORUNRUN), ATA/RAM-backed autorun registry tests, and live RTL8139 TCP proof for add/list/run/remove plus /runtime/apps/autorun.txt, /runtime/apps/aux/last_run.txt, and /runtime/apps/aux/stdout.log readback
  • the current FS5.5 package-release slice now adds persisted /packages/<name>/releases/<release>/... snapshots plus deterministic saved_seq / saved_tick metadata through src/baremetal/package_store.zig, new tool_exec builtins (package-release-list, package-release-info, package-release-save, package-release-activate, package-release-delete, package-release-prune), new typed TCP verbs (PKGRELEASELIST, PKGRELEASEINFO, PKGRELEASESAVE, PKGRELEASEACTIVATE, PKGRELEASEDELETE, PKGRELEASEPRUNE), ATA/RAM-backed release info/delete/prune tests, and live RTL8139 TCP proof for save/mutate/info/list/activate/delete/prune plus restored PKGRUN, /packages/<name>/bin/main.oc, config/app.json, and asset readback with deterministic newest-release retention
  • scripts/package-registry-status.ps1 now performs default npmjs/PyPI visibility checks even when invoked with only -ReleaseTag, so local package diagnostics no longer silently skip unresolved public-registry state.
  • Latest CI:
  • latest pushed main head is tracked in issue #1
  • zig-ci + docs-pages must both be green before a slice is considered complete

License

  • The repo now carries GPL-2.0-only as the project-wide license posture.
  • Root release evidence and package metadata now declare GPL-2.0-only.
  • Repo-owned source and script files use Linux-style SPDX headers.

Local Validation Matrix

Recommended sequence:

./scripts/zig-syntax-check.ps1
./scripts/check-go-method-parity.ps1
./scripts/docs-status-check.ps1 -RefreshParity
./scripts/docker-smoke-check.ps1
./scripts/runtime-smoke-check.ps1
./scripts/baremetal-smoke-check.ps1
./scripts/baremetal-qemu-smoke-check.ps1
./scripts/baremetal-qemu-runtime-oc-tick-check.ps1
./scripts/baremetal-qemu-command-loop-check.ps1
./scripts/baremetal-qemu-mailbox-header-validation-probe-check.ps1
./scripts/baremetal-qemu-mailbox-invalid-magic-preserve-state-probe-check.ps1
./scripts/baremetal-qemu-mailbox-invalid-api-version-preserve-state-probe-check.ps1
./scripts/baremetal-qemu-mailbox-header-ack-sequence-probe-check.ps1
./scripts/baremetal-qemu-mailbox-header-tick-batch-recovery-probe-check.ps1
./scripts/baremetal-qemu-mailbox-valid-recovery-probe-check.ps1
./scripts/baremetal-qemu-mailbox-stale-seq-probe-check.ps1
./scripts/baremetal-qemu-mailbox-stale-seq-preserve-state-probe-check.ps1
./scripts/baremetal-qemu-mailbox-seq-wraparound-probe-check.ps1
./scripts/baremetal-qemu-mailbox-seq-wraparound-recovery-probe-check.ps1
./scripts/baremetal-qemu-feature-flags-tick-batch-probe-check.ps1
./scripts/baremetal-qemu-feature-flags-tick-batch-baseline-probe-check.ps1
./scripts/baremetal-qemu-feature-flags-tick-batch-valid-update-probe-check.ps1
./scripts/baremetal-qemu-feature-flags-tick-batch-invalid-preserve-probe-check.ps1
./scripts/baremetal-qemu-feature-flags-tick-batch-mailbox-state-probe-check.ps1
./scripts/baremetal-qemu-feature-flags-tick-batch-state-preserve-probe-check.ps1
./scripts/baremetal-qemu-descriptor-bootdiag-probe-check.ps1
./scripts/baremetal-qemu-ps2-input-probe-check.ps1
./scripts/baremetal-qemu-ps2-input-baseline-probe-check.ps1
./scripts/baremetal-qemu-ps2-keyboard-event-payload-probe-check.ps1
./scripts/baremetal-qemu-ps2-keyboard-modifier-queue-probe-check.ps1
./scripts/baremetal-qemu-ps2-mouse-accumulator-state-probe-check.ps1
./scripts/baremetal-qemu-ps2-mouse-packet-payload-probe-check.ps1
./scripts/baremetal-qemu-descriptor-table-content-probe-check.ps1
./scripts/baremetal-qemu-descriptor-dispatch-probe-check.ps1
./scripts/baremetal-qemu-vector-counter-reset-probe-check.ps1
./scripts/baremetal-qemu-vector-history-overflow-probe-check.ps1
./scripts/baremetal-qemu-scheduler-probe-check.ps1
./scripts/baremetal-qemu-scheduler-priority-budget-probe-check.ps1
./scripts/baremetal-qemu-timer-wake-probe-check.ps1
./scripts/baremetal-qemu-timer-cancel-probe-check.ps1
./scripts/baremetal-qemu-timer-cancel-task-interrupt-timeout-probe-check.ps1
./scripts/baremetal-qemu-timer-cancel-task-interrupt-timeout-arm-preservation-probe-check.ps1
./scripts/baremetal-qemu-timer-cancel-task-interrupt-timeout-cancel-clear-probe-check.ps1
./scripts/baremetal-qemu-task-resume-timer-clear-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-timeout-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-timeout-wait-clear-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-timeout-manual-wake-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-timeout-ready-state-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-timeout-no-stale-timeout-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-timeout-telemetry-preserve-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-ready-state-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-wait-clear-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-manual-wake-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-no-late-interrupt-probe-check.ps1
./scripts/baremetal-qemu-task-resume-interrupt-telemetry-preserve-probe-check.ps1
./scripts/baremetal-qemu-scheduler-wake-timer-clear-probe-check.ps1
./scripts/baremetal-qemu-scheduler-wake-timer-clear-manual-wake-probe-check.ps1
./scripts/baremetal-qemu-timer-cancel-task-interrupt-timeout-interrupt-recovery-probe-check.ps1
./scripts/baremetal-qemu-timer-cancel-task-interrupt-timeout-no-stale-timeout-probe-check.ps1
./scripts/baremetal-qemu-timer-cancel-task-interrupt-timeout-telemetry-preserve-probe-check.ps1
./scripts/baremetal-qemu-task-terminate-mixed-state-survivor-probe-check.ps1
./scripts/baremetal-qemu-periodic-timer-probe-check.ps1
./scripts/baremetal-qemu-periodic-timer-clamp-probe-check.ps1
./scripts/baremetal-qemu-periodic-timer-clamp-baseline-probe-check.ps1
./scripts/baremetal-qemu-periodic-timer-clamp-first-fire-probe-check.ps1
./scripts/baremetal-qemu-periodic-timer-clamp-saturated-rearm-probe-check.ps1
./scripts/baremetal-qemu-periodic-timer-clamp-post-wrap-hold-probe-check.ps1
./scripts/baremetal-qemu-periodic-timer-clamp-telemetry-preserve-probe-check.ps1
./scripts/baremetal-qemu-interrupt-timeout-probe-check.ps1
./scripts/baremetal-qemu-timer-disable-reenable-probe-check.ps1
./scripts/baremetal-qemu-timer-disable-paused-state-probe-check.ps1
./scripts/baremetal-qemu-timer-disable-reenable-oneshot-recovery-probe-check.ps1
./scripts/baremetal-qemu-interrupt-timeout-disable-enable-probe-check.ps1
./scripts/baremetal-qemu-interrupt-timeout-disable-reenable-timer-probe-check.ps1
./scripts/baremetal-qemu-interrupt-timeout-disable-interrupt-probe-check.ps1
./scripts/baremetal-qemu-interrupt-timeout-disable-interrupt-recovery-probe-check.ps1
./scripts/baremetal-qemu-timer-reset-wait-kind-isolation-probe-check.ps1
./scripts/baremetal-qemu-task-terminate-interrupt-timeout-probe-check.ps1
./scripts/baremetal-qemu-panic-wake-recovery-probe-check.ps1
./scripts/baremetal-qemu-wake-queue-selective-probe-check.ps1
./scripts/baremetal-qemu-wake-queue-reason-overflow-probe-check.ps1
./scripts/baremetal-qemu-wake-queue-fifo-probe-check.ps1
./scripts/baremetal-qemu-allocator-syscall-probe-check.ps1
./scripts/baremetal-qemu-allocator-syscall-baseline-probe-check.ps1
./scripts/baremetal-qemu-allocator-syscall-alloc-stage-probe-check.ps1
./scripts/baremetal-qemu-allocator-syscall-invoke-stage-probe-check.ps1
./scripts/baremetal-qemu-allocator-syscall-guard-stage-probe-check.ps1
./scripts/baremetal-qemu-allocator-syscall-final-reset-state-probe-check.ps1
./scripts/baremetal-qemu-syscall-saturation-probe-check.ps1
./scripts/baremetal-qemu-syscall-control-probe-check.ps1
./scripts/baremetal-qemu-syscall-reregister-preserve-count-probe-check.ps1
./scripts/baremetal-qemu-syscall-blocked-invoke-preserve-state-probe-check.ps1
./scripts/baremetal-qemu-syscall-disabled-invoke-preserve-state-probe-check.ps1
./scripts/baremetal-qemu-syscall-saturation-overflow-preserve-full-probe-check.ps1
./scripts/baremetal-qemu-syscall-saturation-reuse-slot-probe-check.ps1
./scripts/baremetal-qemu-syscall-saturation-reset-restart-probe-check.ps1
./scripts/baremetal-qemu-allocator-syscall-failure-probe-check.ps1
./scripts/baremetal-qemu-reset-counters-probe-check.ps1
./scripts/baremetal-qemu-interrupt-mask-profile-probe-check.ps1
./scripts/baremetal-qemu-interrupt-mask-profile-external-all-probe-check.ps1
./scripts/baremetal-qemu-interrupt-mask-profile-unmask-recovery-probe-check.ps1
./scripts/baremetal-qemu-interrupt-mask-profile-custom-profile-probe-check.ps1
./scripts/baremetal-qemu-interrupt-mask-profile-reset-ignored-counts-probe-check.ps1
./scripts/baremetal-qemu-interrupt-mask-profile-none-clear-all-probe-check.ps1
./scripts/baremetal-qemu-interrupt-mask-clear-all-recovery-probe-check.ps1
./scripts/appliance-control-plane-smoke-check.ps1
./scripts/appliance-restart-recovery-smoke-check.ps1
./scripts/appliance-rollout-boundary-smoke-check.ps1
./scripts/appliance-minimal-profile-smoke-check.ps1
./scripts/gateway-auth-smoke-check.ps1
./scripts/security-secret-store-smoke-check.ps1
./scripts/websocket-smoke-check.ps1
./scripts/web-login-smoke-check.ps1
./scripts/browser-request-success-smoke-check.ps1
./scripts/browser-request-direct-provider-success-smoke-check.ps1
./scripts/browser-request-openrouter-direct-provider-success-smoke-check.ps1
./scripts/browser-request-opencode-direct-provider-success-smoke-check.ps1
./scripts/telegram-reply-loop-smoke-check.ps1
./scripts/telegram-webhook-receive-smoke-check.ps1
./scripts/telegram-bot-send-delivery-smoke-check.ps1
./scripts/npm-pack-check.ps1
./scripts/python-pack-check.ps1

CI Workflows

zig-ci.yml

  • Zig master build/test gates
  • Zig master freshness snapshot (scripts/zig-codeberg-master-check.ps1, Codeberg primary + GitHub mirror fallback)
  • GitHub mirror release snapshot (scripts/zig-github-mirror-release-check.ps1) for Windows asset URL/digest/target-commit evidence
  • parity gate enforcement (Go latest + original stable latest + original beta latest, including gateway event parity)
  • docs status drift gate (scripts/docs-status-check.ps1)
  • runtime + gateway-auth + websocket smoke checks
  • appliance control-plane smoke check (system.boot.*, system.rollback.*, secure-boot update gate)
  • appliance restart recovery smoke check (persisted control-plane replay + recovery actionability)
  • appliance rollout boundary smoke check (real canary lane selection + canary-to-stable promotion)
  • appliance minimal profile smoke check (persisted state + auth + secure-boot/readiness contract)
  • FS6 appliance/bare-metal closure gate (scripts/appliance-baremetal-closure-smoke-check.ps1, composed appliance acceptance plus the optional bare-metal QEMU smoke/runtime/command-loop lane)
  • optional bare-metal QEMU scheduler probe (scheduler reset/timeslice/task-create/policy-enable against the freestanding PVH artifact)
  • optional bare-metal QEMU descriptor bootdiag probe (boot-diagnostics reset/stack capture/boot-phase transition and descriptor reinit/load telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU descriptor bootdiag wrapper probes (baremetal-qemu-descriptor-bootdiag-baseline-probe-check.ps1, baremetal-qemu-descriptor-bootdiag-reset-capture-probe-check.ps1, baremetal-qemu-descriptor-bootdiag-set-init-probe-check.ps1, baremetal-qemu-descriptor-bootdiag-invalid-phase-probe-check.ps1, and baremetal-qemu-descriptor-bootdiag-final-state-probe-check.ps1) reuse the broad probe and fail directly on the bootstrap baseline, reset/capture sequence, init-transition state, invalid-phase preservation, and final descriptor-load plus mailbox-state boundaries
  • bare-metal optimized smoke artifacts now preserve the .multiboot section because the final freestanding executable disables section garbage collection; the generic baremetal-smoke-check.ps1 and baremetal-qemu-smoke-check.ps1 paths validate the same optimized build mode used for packaging
  • optional bare-metal QEMU bootdiag/history-clear probe (boot-diagnostics reset plus live command_clear_command_history and command_clear_health_history control semantics against the freestanding PVH artifact)
  • optional bare-metal QEMU bootdiag/history-clear wrapper probes (baremetal-qemu-bootdiag-history-clear-baseline-probe-check.ps1, baremetal-qemu-bootdiag-history-clear-pre-reset-payloads-probe-check.ps1, baremetal-qemu-bootdiag-history-clear-post-reset-state-probe-check.ps1, baremetal-qemu-bootdiag-history-clear-command-event-probe-check.ps1, and baremetal-qemu-bootdiag-history-clear-health-preserve-probe-check.ps1) reuse the broad probe and fail directly on the baseline/source marker, pre-reset boot-diagnostics payloads, post-reset collapse, command-history clear-event shape, and health-history preservation boundaries
  • optional bare-metal QEMU descriptor table content probe (live gdtr/idtr limits+bases, code/data gdt entry fields, and idt[0]/idt[255] selector/type/stub wiring against the freestanding PVH artifact)
  • optional bare-metal QEMU descriptor table content wrapper probes (baremetal-qemu-descriptor-table-content-baseline-probe-check.ps1, baremetal-qemu-descriptor-table-content-pointer-metadata-probe-check.ps1, baremetal-qemu-descriptor-table-content-gdt-entry-fields-probe-check.ps1, baremetal-qemu-descriptor-table-content-idt-entry-fields-probe-check.ps1, and baremetal-qemu-descriptor-table-content-interrupt-stub-mailbox-probe-check.ps1) reuse the broad probe and fail directly on the baseline mailbox envelope, descriptor pointer metadata, exact GDT entry fields, exact IDT entry fields, and final interrupt-stub plus mailbox-state invariants
  • optional bare-metal QEMU descriptor dispatch probe (descriptor reinit/load plus post-load interrupt and exception dispatch coherence, including interrupt/exception history rings, against the freestanding PVH artifact)
  • optional bare-metal QEMU descriptor-dispatch wrapper probes (baremetal-qemu-descriptor-dispatch-baseline-probe-check.ps1, baremetal-qemu-descriptor-dispatch-telemetry-probe-check.ps1, baremetal-qemu-descriptor-dispatch-aggregate-state-probe-check.ps1, baremetal-qemu-descriptor-dispatch-interrupt-history-probe-check.ps1, and baremetal-qemu-descriptor-dispatch-exception-history-mailbox-probe-check.ps1) reuse the broad probe and fail directly on the bootstrap baseline, descriptor telemetry deltas, aggregate interrupt/exception state, exact interrupt-history payloads, and final exception-history plus mailbox receipt boundaries
  • optional bare-metal QEMU feature-flags/tick-batch probe (command_set_feature_flags updates the live flag mask, command_set_tick_batch_hint raises runtime tick progression from 1 to 4, and an invalid zero hint is rejected without changing the active batch size against the freestanding PVH artifact)
  • optional bare-metal QEMU feature-flags/tick-batch wrapper probes (baremetal-qemu-feature-flags-tick-batch-baseline-probe-check.ps1, baremetal-qemu-feature-flags-tick-batch-valid-update-probe-check.ps1, baremetal-qemu-feature-flags-tick-batch-invalid-preserve-probe-check.ps1, baremetal-qemu-feature-flags-tick-batch-mailbox-state-probe-check.ps1, and baremetal-qemu-feature-flags-tick-batch-state-preserve-probe-check.ps1) reuse the broad probe and fail directly on the narrow baseline, valid update, invalid preserve, mailbox-state, and final preserved-state boundaries
  • optional bare-metal QEMU vector counter reset probe (command_reset_vector_counters after live interrupt+exception dispatch, proving vectors 10/200/14 and exception vectors 10/14 zero while aggregate counts stay at 4/3 against the freestanding PVH artifact)
  • optional bare-metal QEMU vector history overflow probe (interrupt/exception counter resets plus repeated dispatch saturation, proving history-ring overflow and per-vector telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU vector history overflow wrapper probes (baremetal-qemu-vector-history-overflow-baseline-probe-check.ps1, baremetal-qemu-vector-history-overflow-interrupt-overflow-probe-check.ps1, baremetal-qemu-vector-history-overflow-exception-overflow-probe-check.ps1, baremetal-qemu-vector-history-overflow-vector-telemetry-probe-check.ps1, and baremetal-qemu-vector-history-overflow-mailbox-state-probe-check.ps1) reuse the broad saturation lane and fail directly on the final mailbox baseline, phase-A interrupt overflow, phase-B exception overflow, phase-B vector telemetry, and final mailbox-state invariants
  • optional bare-metal QEMU vector history clear probe (dedicated mailbox clear-path proof for command_reset_interrupt_counters / command_reset_exception_counters plus command_clear_interrupt_history / command_clear_exception_history, validating that aggregate counters reset first without disturbing retained history/vector tables and that the later clear only zeroes history-ring/overflow state against the freestanding PVH artifact)
  • optional bare-metal QEMU vector history clear wrapper probes (baremetal-qemu-vector-history-clear-baseline-probe-check.ps1, baremetal-qemu-vector-history-clear-pre-interrupt-payloads-probe-check.ps1, baremetal-qemu-vector-history-clear-pre-exception-payload-probe-check.ps1, baremetal-qemu-vector-history-clear-interrupt-reset-preserve-probe-check.ps1, and baremetal-qemu-vector-history-clear-exception-reset-final-state-probe-check.ps1) reuse the broad clear-path probe and fail directly on the final mailbox baseline, retained pre-clear interrupt payloads, retained pre-clear exception payload, interrupt-reset preservation plus interrupt-clear boundary, and exception-reset preservation plus final clear-state boundary
  • optional bare-metal QEMU interrupt/exception reset-isolation wrappers (baremetal-qemu-reset-interrupt-counters-preserve-history-probe-check.ps1, baremetal-qemu-reset-exception-counters-preserve-history-probe-check.ps1, baremetal-qemu-clear-interrupt-history-preserve-exception-probe-check.ps1, baremetal-qemu-reset-vector-counters-preserve-aggregate-probe-check.ps1, and baremetal-qemu-reset-vector-counters-preserve-last-vector-probe-check.ps1) reuse the broad vector probes and fail on the narrow preservation boundaries directly
  • optional bare-metal QEMU command-health history probe (repeated command_set_health_code mailbox execution, proving command-history overflow, health-history overflow, and retained oldest/newest payload ordering against the freestanding PVH artifact)
  • optional bare-metal QEMU command-health history wrapper probes (five isolated checks over the same lane: final mailbox baseline, command-ring shape, command oldest/newest payloads, health-ring shape, and health oldest/newest payloads against the freestanding PVH artifact)
  • optional bare-metal QEMU vector-counter-reset wrapper validation (seven isolated wrappers over the same lane, failing directly on the baseline artifact/mailbox state, dirty aggregate counts, dirty pre-reset vector tables, preserved aggregate totals, preserved last-vector telemetry, zeroed post-reset vector tables, and final reset-mailbox receipt after command_reset_vector_counters)
  • optional bare-metal QEMU mailbox header validation probe (invalid magic / api_version rejection with ack advancement but no command execution, followed by clean recovery on the next valid mailbox command against the freestanding PVH artifact)
  • optional bare-metal QEMU mailbox stale-seq probe (stale command_seq replay stays no-op, preserves prior ack/history state, and the next fresh sequence executes exactly once against the freestanding PVH artifact)
  • optional bare-metal QEMU mailbox seq-wraparound probe (live mailbox progression across u64::max wrap, preserving deterministic ack rollover and command-history ordering over the freestanding PVH artifact)
  • optional bare-metal QEMU mailbox wrapper probes (baremetal-qemu-mailbox-invalid-magic-preserve-state-probe-check.ps1, baremetal-qemu-mailbox-invalid-api-version-preserve-state-probe-check.ps1, baremetal-qemu-mailbox-header-ack-sequence-probe-check.ps1, baremetal-qemu-mailbox-header-tick-batch-recovery-probe-check.ps1, baremetal-qemu-mailbox-valid-recovery-probe-check.ps1, baremetal-qemu-mailbox-stale-seq-preserve-state-probe-check.ps1, baremetal-qemu-mailbox-stale-seq-baseline-probe-check.ps1, baremetal-qemu-mailbox-stale-seq-first-state-probe-check.ps1, baremetal-qemu-mailbox-stale-seq-stale-preserve-probe-check.ps1, baremetal-qemu-mailbox-stale-seq-fresh-recovery-state-probe-check.ps1, baremetal-qemu-mailbox-stale-seq-final-mailbox-state-probe-check.ps1, baremetal-qemu-mailbox-seq-wraparound-recovery-probe-check.ps1, baremetal-qemu-mailbox-seq-wraparound-baseline-probe-check.ps1, baremetal-qemu-mailbox-seq-wraparound-pre-wrap-state-probe-check.ps1, baremetal-qemu-mailbox-seq-wraparound-pre-wrap-mailbox-sequence-probe-check.ps1, baremetal-qemu-mailbox-seq-wraparound-post-wrap-state-probe-check.ps1, and baremetal-qemu-mailbox-seq-wraparound-post-wrap-mailbox-state-probe-check.ps1) reuse the broad mailbox probes and fail directly on the narrow invalid-header, header-stage sequencing, header-stage tick-batch recovery, staged stale-replay boundaries, and staged wraparound boundaries
  • optional bare-metal QEMU command-history overflow clear probe (combined overflow + clear + restart proof for the command-history ring, validating retained seq 4 -> 35, single-receipt clear collapse, and clean restart semantics without disturbing health-history overflow state)
  • optional bare-metal QEMU command-history overflow clear wrapper probes (baremetal-qemu-command-history-overflow-clear-baseline-probe-check.ps1, baremetal-qemu-command-history-overflow-clear-overflow-window-probe-check.ps1, baremetal-qemu-command-history-overflow-clear-overflow-payloads-probe-check.ps1, baremetal-qemu-command-history-overflow-clear-clear-event-probe-check.ps1, and baremetal-qemu-command-history-overflow-clear-restart-event-probe-check.ps1) reuse the broad overflow-clear probe and fail directly on the broad-lane baseline, overflow-window shape, oldest/newest overflow payloads, clear-event collapse plus preserved health-history length, and post-clear restart-event payloads
  • optional bare-metal QEMU health-history overflow clear probe (combined overflow + clear + restart proof for the health-history ring, validating retained seq 8 -> 71, single-receipt clear collapse at seq 1, and clean restart semantics without disturbing command-history overflow state)
  • optional bare-metal QEMU health-history overflow clear wrapper probes (baremetal-qemu-health-history-overflow-clear-baseline-probe-check.ps1, baremetal-qemu-health-history-overflow-clear-overflow-window-probe-check.ps1, baremetal-qemu-health-history-overflow-clear-overflow-payloads-probe-check.ps1, baremetal-qemu-health-history-overflow-clear-clear-event-probe-check.ps1, and baremetal-qemu-health-history-overflow-clear-command-preserve-probe-check.ps1) reuse the broad overflow-clear probe and fail directly on the broad-lane baseline, overflow-window shape, retained oldest/newest health payloads plus trailing ack telemetry, clear-event collapse (seq=1, code=200, mode=running, tick=6, ack=6), and preserved command-history tail state
  • optional bare-metal QEMU mode/boot-phase history probe (command/runtime/panic reason ordering plus post-clear saturation of the 64-entry mode-history and boot-phase-history rings against the freestanding PVH artifact)
  • optional bare-metal QEMU mode/boot-phase history wrapper probes (baseline, semantic mode ordering, semantic boot ordering, and retained overflow-window shape for both rings against the freestanding PVH artifact)
  • optional bare-metal QEMU mode/boot-phase setter probe (direct command_set_boot_phase / command_set_mode proof, validating same-value idempotence, invalid boot-phase 99 and invalid mode 77 rejection without state/history clobbering, and direct mode_panicked / mode_running transitions without panic-counter or boot-phase side effects against the freestanding PVH artifact)
  • optional bare-metal QEMU mode/boot-phase setter wrapper probes (five isolated checks for final mailbox baseline, boot no-op + invalid preservation, invalid mode preservation, exact mode-history payload ordering, and exact boot-history payload ordering against the freestanding PVH artifact)
  • optional bare-metal QEMU allocator/syscall failure wrapper probes (five isolated checks for final mailbox baseline, invalid-alignment allocator-state preservation, no-space allocator-state preservation, blocked-syscall state preservation, and final disabled-syscall/result-counter invariants against the freestanding PVH artifact)
  • optional bare-metal QEMU mode/boot-phase history clear probe (dedicated mailbox clear-path proof for command_clear_mode_history and command_clear_boot_phase_history, validating clear-state reset of len/head/overflow/seq and seq=1 restart semantics against the freestanding PVH artifact)
  • optional bare-metal QEMU mode/boot-phase history clear wrapper probes (five isolated checks for the clear-lane baseline, retained pre-clear panic semantics, mode-history collapse with preserved boot-history state, boot-history collapse, and dual-ring restart semantics against the freestanding PVH artifact)
  • optional bare-metal QEMU mode-history overflow clear probe (combined overflow + clear + restart proof for the mode-history ring, validating retained seq 3 -> 66, dedicated clear collapse, and seq=1 restart semantics while the boot-phase ring stays intact until its own clear)
  • optional bare-metal QEMU mode-history overflow clear wrapper probes (baremetal-qemu-mode-history-overflow-clear-baseline-probe-check.ps1, baremetal-qemu-mode-history-overflow-clear-overflow-window-probe-check.ps1, baremetal-qemu-mode-history-overflow-clear-overflow-payloads-probe-check.ps1, baremetal-qemu-mode-history-overflow-clear-clear-collapse-probe-check.ps1, and baremetal-qemu-mode-history-overflow-clear-restart-event-probe-check.ps1) reuse the broad overflow-clear lane and fail directly on the final mailbox baseline, wrapped overflow-window shape, retained oldest/newest mode payloads, dedicated clear collapse with preserved boot-history length, and post-clear restart-event ordering
  • optional bare-metal QEMU boot-phase-history overflow clear probe (combined overflow + clear + restart proof for the boot-phase-history ring, validating retained seq 3 -> 66, dedicated clear collapse, and seq=1 restart semantics while the mode ring stays intact until its own clear)
  • optional bare-metal QEMU boot-phase-history overflow clear wrapper probes (baremetal-qemu-boot-phase-history-overflow-clear-baseline-probe-check.ps1, baremetal-qemu-boot-phase-history-overflow-clear-overflow-window-probe-check.ps1, baremetal-qemu-boot-phase-history-overflow-clear-overflow-payloads-probe-check.ps1, baremetal-qemu-boot-phase-history-overflow-clear-clear-collapse-probe-check.ps1, and baremetal-qemu-boot-phase-history-overflow-clear-restart-event-probe-check.ps1) reuse the broad overflow-clear lane and fail directly on the final mailbox baseline, wrapped overflow-window shape, retained oldest/newest boot-phase payloads, dedicated clear collapse with preserved mode-history length, and post-clear restart-event ordering
  • optional bare-metal QEMU scheduler priority budget probe (live command_scheduler_set_default_budget plus command_task_set_priority proof, including zero-budget task inheritance and dispatch-order flip under the priority scheduler against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler priority budget wrapper probes (five isolated checks over the same broad lane: baseline scheduler/task bootstrap, zero-budget default-budget inheritance, initial high-priority dominance, low-task takeover after reprioritize, and invalid-input preservation against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler default-budget invalid probe (live command_scheduler_set_default_budget(0) rejection with active default-budget preservation and clean zero-budget task inheritance after the rejected update against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler round-robin probe (default scheduler policy remains round-robin under live QEMU execution, rotating dispatch 1/0 -> 1/1 -> 2/1 across a lower-priority first task and higher-priority second task while budgets decrement deterministically)
  • optional bare-metal QEMU scheduler round-robin wrapper probes (five isolated checks over the same broad lane: baseline task/policy bootstrap, first-dispatch first-task-only delivery, second-dispatch rotation, third-dispatch return to the first task, and final scheduler/task-state telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler timeslice-update probe (live command_scheduler_set_timeslice updates under active load, proving budget consumption immediately follows timeslice 1 -> 4 -> 2 and invalid zero is rejected without changing the active timeslice against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler timeslice wrapper probes (five isolated checks over the same broad lane: baseline timeslice=1, first update timeslice=4, second update timeslice=2, invalid-zero preservation, and final dispatch/task-state telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler disable-enable probe (live command_scheduler_disable and command_scheduler_enable under active load, proving dispatch count and task budget stay frozen across idle disabled ticks and resume immediately after re-enable against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler disable-enable wrapper probes (five isolated checks over the same broad lane: baseline pre-disable state, disabled freeze-state, idle disabled preservation, re-enable resume metadata, and final task-state telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler reset probe (live command_scheduler_reset under active load, proving scheduler state returns to defaults, active task state is cleared, task IDs restart at 1, and a fresh task dispatches cleanly after re-enable against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler reset wrapper probes (five isolated checks over the same broad lane: dirty pre-reset active baseline, immediate reset collapse, task-ID restart at 1, restored scheduler defaults, and final resumed task-state telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler reset mixed-state probe (live command_scheduler_reset against stale mixed load, proving queued wakes and armed task timers are scrubbed alongside the task table, timeout arms are cleared, timer quantum is preserved, and fresh timer scheduling resumes from the preserved next_timer_id against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler reset mixed-state wrapper probes (baremetal-qemu-scheduler-reset-mixed-state-baseline-probe-check.ps1, baremetal-qemu-scheduler-reset-mixed-state-post-reset-collapse-probe-check.ps1, baremetal-qemu-scheduler-reset-mixed-state-preserved-config-probe-check.ps1, baremetal-qemu-scheduler-reset-mixed-state-idle-stability-probe-check.ps1, and baremetal-qemu-scheduler-reset-mixed-state-rearm-state-probe-check.ps1) reuse the broad mixed-state lane and fail directly on dirty mixed baseline, immediate reset collapse, preserved timer configuration, idle stability, and fresh timer re-arm state
  • optional bare-metal QEMU scheduler policy-switch probe (live round-robin to priority to round-robin transitions under active load, proving dispatch order flips immediately, low-task reprioritization takes effect on the next priority tick, and invalid policy 9 is rejected without changing the active round-robin policy against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler saturation probe (fills the 16-slot scheduler task table, proves the 17th command_task_create returns result_no_space, then terminates one slot and reuses it with a fresh task ID plus replacement priority/budget against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler saturation wrapper probes (baremetal-qemu-scheduler-saturation-baseline-probe-check.ps1, baremetal-qemu-scheduler-saturation-overflow-preserve-probe-check.ps1, baremetal-qemu-scheduler-saturation-terminate-state-probe-check.ps1, baremetal-qemu-scheduler-saturation-reuse-state-probe-check.ps1, and baremetal-qemu-scheduler-saturation-final-state-probe-check.ps1) reuse the broad pressure lane and fail directly on the 16-slot baseline fill, overflow rejection without task-count drift, terminated-slot capture, reuse-slot replacement semantics, and final scheduler state
  • optional bare-metal QEMU timer wake probe (timer reset/quantum/task-wait to fired timer entry + wake queue telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU timer-wake wrapper probes (baremetal-qemu-timer-wake-baseline-probe-check.ps1, baremetal-qemu-timer-wake-task-state-probe-check.ps1, baremetal-qemu-timer-wake-timer-telemetry-probe-check.ps1, baremetal-qemu-timer-wake-wake-payload-probe-check.ps1, and baremetal-qemu-timer-wake-mailbox-state-probe-check.ps1) reuse the broad one-shot timer-wake lane and fail directly on the bootstrap baseline, final task-state telemetry, fired timer telemetry, exact timer wake payload, and final mailbox receipt
  • optional bare-metal QEMU timer quantum probe (one-shot command_timer_schedule respects command_timer_set_quantum, keeps the task waiting with wake_queue_len=0 at the pre-boundary tick, and only wakes on the next quantum boundary against the freestanding PVH artifact)
  • optional bare-metal QEMU timer quantum wrapper probes (baremetal-qemu-timer-quantum-baseline-probe-check.ps1, baremetal-qemu-timer-quantum-boundary-probe-check.ps1, baremetal-qemu-timer-quantum-preboundary-blocked-probe-check.ps1, baremetal-qemu-timer-quantum-wake-payload-probe-check.ps1, and baremetal-qemu-timer-quantum-final-state-probe-check.ps1) reuse the broad one-shot quantum lane and fail directly on the armed baseline, computed boundary hold, blocked pre-boundary state, exact timer wake payload, and final timer/task-state telemetry
  • optional bare-metal QEMU timer cancel probe (capture the live timer ID from the armed entry, cancel that exact timer via command_timer_cancel, preserve the canceled slot state, and get result_not_found on a second cancel against the freestanding PVH artifact)
  • optional bare-metal QEMU timer cancel wrapper validation (armed baseline capture, cancel collapse to zero live timer entries, preserved canceled-slot metadata, second-cancel result_not_found, and zero wake/dispatch telemetry on the dedicated timer-cancel lane)
  • optional bare-metal QEMU timer cancel-task interrupt-timeout probe (command_timer_cancel_task on a task_wait_interrupt_for waiter clears the timeout arm back to steady state, keeps wait_timeout=0, and still allows the later real interrupt wake to land exactly once against the freestanding PVH artifact)
  • optional bare-metal QEMU timer cancel-task interrupt-timeout wrapper probes (baremetal-qemu-timer-cancel-task-interrupt-timeout-arm-preservation-probe-check.ps1, baremetal-qemu-timer-cancel-task-interrupt-timeout-cancel-clear-probe-check.ps1, baremetal-qemu-timer-cancel-task-interrupt-timeout-interrupt-recovery-probe-check.ps1, baremetal-qemu-timer-cancel-task-interrupt-timeout-no-stale-timeout-probe-check.ps1, and baremetal-qemu-timer-cancel-task-interrupt-timeout-telemetry-preserve-probe-check.ps1) reuse the broad timeout-backed task-cancel lane and fail directly on the armed timeout snapshot, immediate cancel-clear state, preserved interrupt-only recovery, no-stale-timeout settle window, and final mailbox/interrupt telemetry
  • optional bare-metal QEMU timer cancel task probe (one-shot + periodic task timer arming followed by command_timer_cancel_task, proving the first cancel collapses timer_entry_count to 0, preserves the canceled timer slot state, and the second cancel returns result_not_found against the freestanding PVH artifact)
  • optional bare-metal QEMU timer cancel task wrapper probes (baremetal-qemu-timer-cancel-task-baseline-probe-check.ps1, baremetal-qemu-timer-cancel-task-cancel-collapse-probe-check.ps1, baremetal-qemu-timer-cancel-task-canceled-entry-preserve-probe-check.ps1, baremetal-qemu-timer-cancel-task-second-cancel-notfound-probe-check.ps1, and baremetal-qemu-timer-cancel-task-zero-wake-telemetry-probe-check.ps1) reuse the broad task-cancel lane and fail directly on the live armed baseline, first-cancel collapse, preserved canceled-slot metadata, second-cancel result_not_found, and zero wake/dispatch telemetry invariants
  • optional bare-metal QEMU timer pressure probe (fills the 16 runnable task slots with live one-shot timers, proves timer IDs 1 -> 16, cancels one task timer, then reuses that exact slot with fresh timer ID 17 and no stray wake/dispatch activity against the freestanding PVH artifact)
  • optional bare-metal QEMU timer pressure wrapper probes (baseline saturation, cancel-collapse, reuse-slot, reuse-next-fire, and quiet-telemetry isolation over the same dedicated PVH artifact)
  • optional bare-metal QEMU timer reset recovery probe (dirty live timer entries plus task_wait_interrupt_for timeout state, then command_timer_reset proving timer state collapses back to baseline, stale timeout wakes do not leak after reset, manual/interrupt wake recovery still works, and the next timer re-arms from timer_id=1 against the freestanding PVH artifact)
  • optional bare-metal QEMU timer reset recovery wrapper probes (baremetal-qemu-timer-reset-recovery-baseline-probe-check.ps1, baremetal-qemu-timer-reset-recovery-post-reset-collapse-probe-check.ps1, baremetal-qemu-timer-reset-recovery-wait-isolation-probe-check.ps1, baremetal-qemu-timer-reset-recovery-manual-wake-payload-probe-check.ps1, and baremetal-qemu-timer-reset-recovery-interrupt-rearm-probe-check.ps1) reuse the broad timer-reset lane and fail directly on the dirty armed baseline, immediate post-reset collapse, preserved wait isolation after reset, exact manual wake payload semantics, and final interrupt wake plus rearm telemetry
  • optional bare-metal QEMU task-resume timer-clear probe (command_task_resume on a timer-backed wait cancels the armed timer entry, queues exactly one manual wake, prevents a later ghost timer wake after idle ticks, preserves timer quantum, and restarts fresh timer scheduling from the preserved next_timer_id against the freestanding PVH artifact)
  • optional bare-metal QEMU task-resume timer-clear wrapper probes (baremetal-qemu-task-resume-timer-clear-baseline-probe-check.ps1, baremetal-qemu-task-resume-timer-clear-wait-clear-probe-check.ps1, baremetal-qemu-task-resume-timer-clear-canceled-entry-preserve-probe-check.ps1, baremetal-qemu-task-resume-timer-clear-manual-wake-payload-probe-check.ps1, and baremetal-qemu-task-resume-timer-clear-rearm-telemetry-probe-check.ps1) reuse the broad timer-backed resume lane and fail directly on the pre-resume waiting baseline, cleared wait-kind/timeout state, preserved canceled-slot metadata, exact manual wake payload, and final no-stale-timer plus rearm/telemetry invariants
  • optional bare-metal QEMU task-terminate mixed-state wrapper probes (baremetal-qemu-task-terminate-mixed-state-baseline-probe-check.ps1, baremetal-qemu-task-terminate-mixed-state-target-clear-probe-check.ps1, baremetal-qemu-task-terminate-mixed-state-survivor-wake-probe-check.ps1, baremetal-qemu-task-terminate-mixed-state-wait-clear-probe-check.ps1, and baremetal-qemu-task-terminate-mixed-state-idle-stability-probe-check.ps1) reuse the broad mixed terminate lane and fail directly on the pre-terminate wrapped baseline, immediate target-clear collapse, survivor wake preservation, explicit wait-kind/timeout clearing, and settled idle no-stale-dispatch plus preserved quantum/next-timer invariants
  • optional bare-metal QEMU task-resume interrupt-timeout probe (command_task_resume on a task_wait_interrupt_for waiter clears the pending timeout to none, queues exactly one manual wake, prevents any delayed timer wake after additional slack ticks, and leaves the timer subsystem at next_timer_id=1 against the freestanding PVH artifact)
  • optional bare-metal QEMU task-resume interrupt-timeout wrapper probes (baremetal-qemu-task-resume-interrupt-timeout-wait-clear-probe-check.ps1, baremetal-qemu-task-resume-interrupt-timeout-manual-wake-probe-check.ps1, baremetal-qemu-task-resume-interrupt-timeout-ready-state-probe-check.ps1, baremetal-qemu-task-resume-interrupt-timeout-no-stale-timeout-probe-check.ps1, and baremetal-qemu-task-resume-interrupt-timeout-telemetry-preserve-probe-check.ps1) reuse the broad timeout-backed resume lane and fail directly on the cleared wait state, manual wake payload, ready-task baseline, settled no-stale-timeout window, and final mailbox/interrupt telemetry invariants
  • optional bare-metal QEMU scheduler-wake timer-clear probe (command_scheduler_wake_task on a pure timer waiter cancels the armed timer entry, queues exactly one manual wake, prevents a later ghost timer wake after idle ticks, and preserves fresh timer scheduling from the current next_timer_id against the freestanding PVH artifact)
  • optional bare-metal QEMU scheduler-wake timer-clear wrapper probes (baremetal-qemu-scheduler-wake-timer-clear-baseline-probe-check.ps1, baremetal-qemu-scheduler-wake-timer-clear-wait-clear-probe-check.ps1, baremetal-qemu-scheduler-wake-timer-clear-canceled-entry-preserve-probe-check.ps1, baremetal-qemu-scheduler-wake-timer-clear-manual-wake-probe-check.ps1, and baremetal-qemu-scheduler-wake-timer-clear-rearm-telemetry-probe-check.ps1) reuse the broad pure-timer wake lane and fail directly on the armed baseline, cleared wait/timer state, preserved canceled timer-entry state, exact manual wake payload, and final rearm/dispatch telemetry invariants
  • optional bare-metal QEMU task-resume interrupt probe (command_task_resume on a pure task_wait_interrupt waiter clears the interrupt wait back to none, queues exactly one manual wake, prevents a later interrupt from creating a second wake, and leaves the timer subsystem idle at next_timer_id=1 against the freestanding PVH artifact)
  • optional bare-metal QEMU task-resume interrupt wrapper probes (baremetal-qemu-task-resume-interrupt-ready-state-probe-check.ps1, baremetal-qemu-task-resume-interrupt-wait-clear-probe-check.ps1, baremetal-qemu-task-resume-interrupt-manual-wake-probe-check.ps1, baremetal-qemu-task-resume-interrupt-no-late-interrupt-probe-check.ps1, and baremetal-qemu-task-resume-interrupt-telemetry-preserve-probe-check.ps1) reuse the broad pure-interrupt resume lane and fail directly on ready-task baseline, cleared interrupt wait state, exact manual wake payload, preserved single-wake state after the later real interrupt, and final mailbox/interrupt telemetry invariants
  • optional bare-metal QEMU periodic timer probe (periodic schedule + timer disable/enable pause-resume, capturing the first resumed periodic fire and queued wake telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU periodic timer wrapper probes (baremetal-qemu-periodic-timer-baseline-probe-check.ps1, baremetal-qemu-periodic-timer-first-fire-probe-check.ps1, baremetal-qemu-periodic-timer-paused-window-probe-check.ps1, baremetal-qemu-periodic-timer-resumed-cadence-probe-check.ps1, and baremetal-qemu-periodic-timer-telemetry-preserve-probe-check.ps1) reuse the broad periodic-timer lane and fail directly on scheduler/task/timer baseline capture, first-fire payload + counters, disabled-window counter hold, resumed periodic cadence, and final command/wake/task telemetry preservation
  • optional bare-metal QEMU periodic timer clamp probe (periodic timer armed at u64::max-1, proving the first fire lands at 18446744073709551615, the periodic deadline re-arms to the same saturated tick instead of wrapping, and the runtime holds stable after the tick counter wraps to 0)
  • optional bare-metal QEMU periodic timer clamp wrapper probes (baremetal-qemu-periodic-timer-clamp-baseline-probe-check.ps1, baremetal-qemu-periodic-timer-clamp-first-fire-probe-check.ps1, baremetal-qemu-periodic-timer-clamp-saturated-rearm-probe-check.ps1, baremetal-qemu-periodic-timer-clamp-post-wrap-hold-probe-check.ps1, and baremetal-qemu-periodic-timer-clamp-telemetry-preserve-probe-check.ps1) reuse the broad clamp lane and fail directly on near-u64::max arm state, first-fire wrap semantics, saturated re-arm invariants, post-wrap hold stability, and final wake telemetry
  • optional bare-metal QEMU periodic interrupt probe (mixed periodic timer + interrupt wake ordering, proving the interrupt arrives before deadline while the periodic source keeps cadence and timer cancellation prevents a later timeout leak against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt timeout probe (task_wait_interrupt_for wakes on interrupt before deadline, clears the timeout arm, and does not later leak a second timer wake against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt timeout manual-wake probe (command_scheduler_wake_task clears a pending task_wait_interrupt_for timeout, queues exactly one manual wake, and no delayed timer wake appears after additional slack ticks against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt timeout manual-wake wrapper probes (narrow wrappers over the broad manual-wake probe that fail directly on preserved pre-wake interrupt-timeout arm state, single manual wake-queue delivery, cleared wait-kind/vector/timeout state after command_scheduler_wake_task, no stale timer wake after additional slack ticks, and preserved zero-interrupt plus last-wake telemetry)
  • optional bare-metal QEMU interrupt manual-wake probe (command_scheduler_wake_task on a pure task_wait_interrupt waiter clears the interrupt wait back to none, queues exactly one manual wake, and a later interrupt only advances telemetry without adding a second wake against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt manual-wake wrapper probes (baremetal-qemu-interrupt-manual-wake-baseline-probe-check.ps1, baremetal-qemu-interrupt-manual-wake-wait-clear-probe-check.ps1, baremetal-qemu-interrupt-manual-wake-manual-wake-payload-probe-check.ps1, baremetal-qemu-interrupt-manual-wake-no-second-wake-probe-check.ps1, and baremetal-qemu-interrupt-manual-wake-telemetry-preserve-probe-check.ps1) reuse the broad pure-interrupt manual-wake lane and fail directly on ready-task baseline, cleared wait state, exact manual wake payload, preserved single-wake state after the later real interrupt, and final mailbox plus timer/interrupt telemetry invariants
  • optional bare-metal QEMU interrupt timeout timer probe (task_wait_interrupt_for remains blocked with no wake queue entry at the deadline-preceding boundary, then wakes on the timer path with reason=timer, vector=0, and zero interrupt telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt timeout timer wrapper probes (narrow wrappers over the broad timer-only probe that fail directly on preserved armed timeout identity, deadline-edge blocked state with zero wake queue, timer wake payload semantics, no duplicate timer wake after additional slack ticks, and preserved zero-interrupt telemetry through the full timeout-only recovery path)
  • optional bare-metal QEMU masked interrupt timeout probe (command_interrupt_mask_apply_profile(external_all) suppresses vector 200, preserves the waiting task with no wake queue entry and zero interrupt telemetry, and then allows the timeout path to wake with reason=timer, vector=0 against the freestanding PVH artifact)
  • optional bare-metal QEMU masked interrupt timeout wrapper probes (narrow wrappers over the broad masked probe that fail directly on preserved external_all mask profile, zero-wake masked interrupt behavior, preserved armed wait/deadline, timer-only fallback wake semantics, and preserved zero-interrupt plus masked-vector telemetry)
  • optional bare-metal QEMU interrupt timeout clamp probe (near-u64::max task_wait_interrupt_for deadline saturates to 18446744073709551615, the queued wake records that saturated tick, and the live wake boundary wraps cleanly to 0 under the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt-timeout clamp wrappers (baseline, arm-preservation, saturated-boundary, wake-payload, final-telemetry)
  • optional bare-metal QEMU timer-disable reenable probe (a pure one-shot timer waiter survives command_timer_disable, remains blocked after idling past the original deadline, then wakes exactly once after command_timer_enable with a single queued reason=timer wake against the freestanding PVH artifact)
  • optional bare-metal QEMU timer-disable paused-state probe (wrapper over the broad timer-disable reenable path that fails specifically when the disabled pause window stops preserving the armed entry, waiting task state, or zero wake/dispatch counts)
  • optional bare-metal QEMU timer-disable reenable one-shot recovery probe (wrapper over the broad timer-disable reenable path that fails specifically when the pure one-shot wake stops recovering as a single reason=timer, vector=0, timer_id=1 wake after command_timer_enable)
  • optional bare-metal QEMU interrupt-timeout disable-enable probe (command_task_wait_interrupt_for survives command_timer_disable, remains blocked after idling past the original deadline, then emits exactly one overdue reason=timer, vector=0 wake after command_timer_enable against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt-timeout disable-enable arm-preservation probe (wrapper over the broad interrupt-timeout disable-enable path that fails specifically when the timeout arm, interrupt wait-kind, waiting task state, zero wake queue, or zero interrupt telemetry stop being preserved immediately after command_timer_disable)
  • optional bare-metal QEMU interrupt-timeout disable-enable deadline-hold probe (wrapper over the broad interrupt-timeout disable-enable path that fails specifically when the waiter stops remaining blocked after the original timeout deadline while timers stay disabled)
  • optional bare-metal QEMU interrupt-timeout disable-enable paused-window probe (wrapper over the broad interrupt-timeout disable-enable path that fails specifically when the disabled pause window stops preserving zero queued wakes, zero timer-entry usage, zero interrupt telemetry, or zero timer-dispatch drift)
  • optional bare-metal QEMU interrupt-timeout disable-enable deferred-timer-wake probe (wrapper over the broad interrupt-timeout disable-enable path that fails specifically when the deferred wake stops targeting the original waiting task, clearing wait state to none, and arriving only as a timer wake after command_timer_enable)
  • optional bare-metal QEMU interrupt-timeout disable-enable telemetry-preserve probe (wrapper over the broad interrupt-timeout disable-enable path that fails specifically when the final timer-only wake stops preserving zero interrupt count, zero timer last-interrupt count, or zero last-interrupt vector)
  • optional bare-metal QEMU interrupt-timeout disable-reenable timer probe (wrapper over the broad interrupt-timeout disable-enable path that fails specifically when the overdue wake stops being timer-only with zero interrupt telemetry and no remaining armed entries after command_timer_enable)
  • optional bare-metal QEMU interrupt-timeout disable-interrupt probe (command_task_wait_interrupt_for survives command_timer_disable, wakes immediately on a real interrupt while timers stay disabled, clears the timeout arm, and does not leak a stale timer wake after command_timer_enable against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt-timeout disable-interrupt immediate-wake probe (wrapper over the broad interrupt-timeout disable-interrupt path that fails specifically when the first queued wake stops being the real interrupt wake, the task stops becoming ready immediately, or interrupt telemetry stops incrementing while timers stay disabled)
  • optional bare-metal QEMU interrupt-timeout disable-interrupt timeout-clear probe (wrapper over the broad interrupt-timeout disable-interrupt path that fails specifically when the interrupt wake stops clearing wait kind, wait vector, timeout arm, or timer-entry state immediately)
  • optional bare-metal QEMU interrupt-timeout disable-interrupt disabled-state probe (wrapper over the broad interrupt-timeout disable-interrupt path that fails specifically when timers stop remaining disabled, timer dispatch stops staying at 0, or disabled-window pending-wake state drifts after the interrupt wake)
  • optional bare-metal QEMU interrupt-timeout disable-interrupt reenable-no-stale-timer probe (wrapper over the broad interrupt-timeout disable-interrupt path that fails specifically when command_timer_enable adds a stale timer wake or changes the retained wake away from the original interrupt event)
  • optional bare-metal QEMU interrupt-timeout disable-interrupt telemetry-preserve probe (wrapper over the broad interrupt-timeout disable-interrupt path that fails specifically when interrupt counters, last-interrupt vector, or last-wake telemetry stop staying coherent across re-enable)
  • optional bare-metal QEMU interrupt-timeout disable-interrupt recovery probe (wrapper over the broad interrupt-timeout disable-interrupt path that fails specifically when the direct interrupt wake stops winning with reason=interrupt, matching vector telemetry, and zero timer dispatch after re-enable)
  • optional bare-metal QEMU timer-reset wait-kind isolation probe (wrapper over the broad timer-reset recovery path that fails specifically when command_timer_reset stops collapsing pure timer waits to manual while preserving interrupt-wait mode and clearing only the timeout arm)
  • optional bare-metal QEMU timer-reset pure-wait recovery probe (wrapper over the broad timer-reset recovery path that fails specifically when the recovered pure timer waiter stops waking via the first manual wake with reason=manual, vector=0, and timer_id=0)
  • optional bare-metal QEMU timer-reset timeout-interrupt recovery probe (wrapper over the broad timer-reset recovery path that fails specifically when the timeout-backed interrupt waiter stops preserving interrupt wait-kind, clearing only the timeout arm, and waking via the later real interrupt)
  • optional bare-metal QEMU scheduler reset wake-clear probe (wrapper over the broad scheduler-reset mixed-state path that fails specifically when stale queued wakes survive command_scheduler_reset or leak back after idle ticks)
  • optional bare-metal QEMU scheduler reset timer-clear probe (wrapper over the broad scheduler-reset mixed-state path that fails specifically when stale pending timer bookkeeping survives command_scheduler_reset or a fresh post-reset timer no longer rearms cleanly)
  • optional bare-metal QEMU scheduler reset config-preservation probe (wrapper over the broad scheduler-reset mixed-state path that fails specifically when timer quantum or next_timer_id drift across command_scheduler_reset, or the first fresh re-arm stops reusing the preserved next_timer_id)
  • optional bare-metal QEMU interrupt filter probe (task_wait_interrupt(any) wakes on vector 200, vector-scoped task_wait_interrupt(13) ignores non-matching 200, then wakes on matching 13, and invalid vector 65536 is rejected with -22 against the freestanding PVH artifact)
  • optional bare-metal QEMU task-terminate interrupt-timeout probe (command_task_terminate on a task_wait_interrupt_for waiter clears the timeout arm and wait state, leaves no wake-queue residue, prevents later ghost interrupt/timeout wake delivery for the terminated task, and keeps timer_dispatch_count=0 against the freestanding PVH artifact)
  • optional bare-metal QEMU task-terminate interrupt-timeout wrapper probes (wrapper over that broad terminate lane that fails specifically when the armed interrupt-timeout baseline drifts, terminate no longer collapses the target wait state immediately, the later interrupt stops being telemetry-only, slack ticks start leaking a stale timeout wake, or the final mailbox plus budget state for the terminated task stops matching the validated contract)
  • optional bare-metal QEMU task-terminate mixed-state probe (live mixed command_task_wait_for, command_scheduler_wake_task, survivor wake, and command_task_terminate proof, validating current timer-cancel-on-manual-wake semantics plus targeted wake-queue cleanup for the terminated task against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt-timeout arm-preservation probe (wrapper over the broad interrupt-timeout interrupt-wins path that fails specifically when the waiter stops preserving its armed timeout identity, interrupt wait-kind, and zero wake-queue state immediately before the interrupt lands)
  • optional bare-metal QEMU interrupt-timeout interrupt-wake-payload probe (wrapper over the broad interrupt-timeout interrupt-wins path that fails specifically when the first wake stops being the exact interrupt@31 payload for the waiting task with timer_id=0)
  • optional bare-metal QEMU interrupt-timeout wait-clear probe (wrapper over the broad interrupt-timeout interrupt-wins path that fails specifically when the interrupt wake stops clearing wait-kind/vector/timeout state and the timer table back to idle)
  • optional bare-metal QEMU interrupt-timeout no-stale-timer probe (wrapper over the broad interrupt-timeout interrupt-wins path that fails specifically when extra slack ticks after the interrupt start leaking a second wake or timer dispatch activity)
  • optional bare-metal QEMU interrupt-timeout telemetry-preserve probe (wrapper over the broad interrupt-timeout interrupt-wins path that fails specifically when the interrupt-first recovery stops preserving interrupt count/vector telemetry and the shared last-wake tick)
  • optional bare-metal QEMU timer-disable interrupt probe (command_timer_disable suppresses timer dispatch while command_trigger_interrupt still wakes an interrupt waiter immediately, and the deferred one-shot timer wake is only delivered after command_timer_enable against the freestanding PVH artifact)
  • optional bare-metal QEMU timer-disable interrupt immediate-wake probe (wrapper over the broad timer-disable interrupt path that fails specifically when the interrupt waiter stops waking first with reason=interrupt, vector=200, timer_id=0, and zero timer-first misclassification)
  • optional bare-metal QEMU timer-disable interrupt arm-preservation probe (wrapper over the broad timer-disable interrupt path that fails specifically when the pure one-shot waiter stops preserving its armed timer entry immediately after the interrupt while timers remain disabled)
  • optional bare-metal QEMU timer-disable interrupt paused-window probe (wrapper over the broad timer-disable interrupt path that fails specifically when the disabled pause window stops preserving the armed entry, waiting task state, single queued interrupt wake, and zero timer-dispatch drift)
  • optional bare-metal QEMU timer-disable interrupt deferred-timer-wake probe (wrapper over the broad timer-disable interrupt path that fails specifically when the later one-shot wake stops appearing only after command_timer_enable with reason=timer, vector=0, and the original timer_id)
  • optional bare-metal QEMU timer-disable interrupt telemetry-preserve probe (wrapper over the broad timer-disable interrupt path that fails specifically when the deferred one-shot timer wake stops preserving the earlier interrupt count/vector telemetry)
  • optional bare-metal QEMU periodic-interrupt baseline-fire probe (wrapper over the broad periodic-interrupt path that fails specifically when the first queued wake stops being the timer-driven baseline periodic fire for task 1 before the interrupt lands)
  • optional bare-metal QEMU periodic-interrupt interrupt-wake-payload probe (wrapper over the broad periodic-interrupt path that fails specifically when the middle queued wake stops being the exact interrupt@31 payload for task 2 before the timeout deadline)
  • optional bare-metal QEMU periodic-interrupt periodic-cadence probe (wrapper over the broad periodic-interrupt path that fails specifically when the periodic source stops firing a second time after the interrupt wake or stops re-arming beyond the second fire tick)
  • optional bare-metal QEMU periodic-interrupt cancel-no-late-timeout probe (wrapper over the broad periodic-interrupt path that fails specifically when command_timer_cancel_task stops collapsing armed timer state to zero entries or the mixed lane starts leaking a late timeout wake after settlement)
  • optional bare-metal QEMU periodic-interrupt telemetry-ordering probe (wrapper over the broad periodic-interrupt path that fails specifically when mixed timer/interrupt telemetry or wake ordering stop remaining coherent across the full settle window)
  • optional bare-metal QEMU panic-recovery probe (command_trigger_panic_flag freezes dispatch and budget burn under active load, command_set_mode(mode_running) resumes the same task immediately, and command_set_boot_phase(runtime) restores boot diagnostics against the freestanding PVH artifact)
  • optional bare-metal QEMU panic-recovery wrapper probes (five isolated checks over the same broad lane: pre-panic baseline state, panic freeze-state, idle panic preservation, mode-recovery resume semantics, and final recovered task-state telemetry)
  • optional bare-metal QEMU panic-wake recovery probe (command_trigger_panic_flag preserves interrupt + timer wake delivery while dispatch stays frozen, then command_set_mode(mode_running) and command_set_boot_phase(runtime) resume the preserved ready queue in order against the freestanding PVH artifact)
  • optional bare-metal QEMU panic-wake recovery wrapper probes (five isolated checks over the same broad lane: pre-panic waiting baseline, panic freeze-state, preserved interrupt+timer wake queue delivery, mode-recovery dispatch resume, and final recovered task-state telemetry)
  • optional bare-metal QEMU interrupt-filter probe (command_task_wait_interrupt any-vector wake, vector-scoped non-match filtering, matching-vector wake, and invalid-vector rejection against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt-filter wrapper validation (five isolated wrappers over the same lane, failing directly on the interrupt-any waiting baseline, exact any-wake payload, blocked vector-scoped nonmatch state, exact matching-vector wake payload, and invalid-vector preserved mailbox/wake invariants)
  • optional bare-metal QEMU manual-wait interrupt probe (task_wait remains blocked with wake_queue_len=0 and manual wait-kind intact after interrupt 44, then recovers via explicit scheduler_wake_task against the freestanding PVH artifact)
  • optional bare-metal QEMU manual-wait interrupt wrapper validation (baremetal-qemu-manual-wait-interrupt-baseline-probe-check.ps1, baremetal-qemu-manual-wait-interrupt-wait-preserve-probe-check.ps1, baremetal-qemu-manual-wait-interrupt-interrupt-no-wake-probe-check.ps1, baremetal-qemu-manual-wait-interrupt-manual-wake-payload-probe-check.ps1, and baremetal-qemu-manual-wait-interrupt-final-telemetry-probe-check.ps1) reuse the broad manual-wait interrupt lane and fail directly on the waiting baseline, preserved manual wait-kind before the interrupt, blocked post-interrupt state with zero wake queue, exact manual wake payload, and final interrupt/mailbox invariants after slack ticks
  • optional bare-metal QEMU wake-queue selective probe (timer, interrupt, and manual wake generation plus pop_reason, pop_vector, pop_reason_vector, and pop_before_tick queue drains, with live vector/reason+vector/before-tick telemetry snapshot checks against the freestanding PVH artifact)
  • optional bare-metal QEMU wake-queue selective wrapper validation (five isolated wrappers over the same mixed queue lane, failing directly on baseline queue composition, reason drain, vector drain, exact reason+vector drain, and the final before-tick/invalid-pair preserved-state boundary against the freestanding PVH artifact)
  • optional bare-metal QEMU wake-queue reason-pop probe (dedicated command_wake_queue_pop_reason lane on a small mixed queue, proving FIFO removal of only the matching interrupt wakes and invalid-reason rejection without vector/overflow setup noise)
  • optional bare-metal QEMU wake-queue reason-pop wrapper validation (baseline queue composition, first matching-pop survivor ordering, final manual-only survivor ordering, invalid-reason rejection, and invalid-reason nonmutation on the dedicated four-entry mixed queue lane)
  • optional bare-metal QEMU wake-queue vector-pop probe (dedicated command_wake_queue_pop_vector lane on a small mixed queue, proving FIFO removal of only matching vector 13 wakes and invalid-vector rejection without overflow setup noise)
  • optional bare-metal QEMU wake-queue vector-pop wrapper validation (baseline queue composition, first matching-vector survivor ordering, final manual-plus-31 survivor ordering, invalid-vector rejection, and invalid-vector nonmutation on the dedicated four-entry mixed queue lane)
  • optional bare-metal QEMU wake-queue before-tick probe (dedicated command_wake_queue_pop_before_tick lane on a small mixed queue, proving single oldest stale removal, bounded deadline-window drain, and final result_not_found without overflow setup noise)
  • optional bare-metal QEMU wake-queue selective-overflow probe (wrapped 64-entry interrupt wake ring selective drain proof, preserving FIFO survivor ordering after pop_vector(13,31) and final pop_reason_vector(interrupt@13) against the freestanding PVH artifact)
  • optional bare-metal QEMU wake-queue selective-overflow wrapper probes (baremetal-qemu-wake-queue-selective-overflow-baseline-probe-check.ps1, baremetal-qemu-wake-queue-selective-overflow-vector-drain-probe-check.ps1, baremetal-qemu-wake-queue-selective-overflow-vector-survivors-probe-check.ps1, baremetal-qemu-wake-queue-selective-overflow-reason-vector-drain-probe-check.ps1, and baremetal-qemu-wake-queue-selective-overflow-reason-vector-survivors-probe-check.ps1) fail directly on the wrapped-ring baseline, post-vector collapse, lone retained interrupt@13 survivor ordering, post-reason+vector collapse, and final all-vector=31 survivor ordering against the freestanding PVH artifact
  • optional bare-metal QEMU wake-queue before-tick-overflow probe (wrapped 64-entry interrupt wake ring deadline-drain proof, preserving FIFO survivor ordering through two pop_before_tick threshold drains and a final empty-queue result_not_found against the freestanding PVH artifact)
  • optional bare-metal QEMU wake-queue before-tick-overflow wrapper probes (baremetal-qemu-wake-queue-before-tick-overflow-baseline-probe-check.ps1, baremetal-qemu-wake-queue-before-tick-overflow-first-cutoff-probe-check.ps1, baremetal-qemu-wake-queue-before-tick-overflow-first-survivor-window-probe-check.ps1, baremetal-qemu-wake-queue-before-tick-overflow-second-cutoff-probe-check.ps1, and baremetal-qemu-wake-queue-before-tick-overflow-final-empty-preserve-probe-check.ps1) reuse the broad wrapped deadline-drain lane and fail directly on the wrapped baseline, first threshold cutoff, first survivor window, second cutoff to only seq=66, and final empty/notfound preserved-state invariants
  • optional bare-metal QEMU wake-queue before-tick wrapper probes (baremetal-qemu-wake-queue-before-tick-baseline-probe-check.ps1, baremetal-qemu-wake-queue-before-tick-first-cutoff-probe-check.ps1, baremetal-qemu-wake-queue-before-tick-bounded-drain-probe-check.ps1, baremetal-qemu-wake-queue-before-tick-notfound-probe-check.ps1, and baremetal-qemu-wake-queue-before-tick-notfound-preserve-state-probe-check.ps1) reuse the broad stale-entry lane and fail directly on baseline queue composition, first stale cutoff, bounded second drain to the final survivor, final result_not_found, and preserved final survivor state after the rejected drain
  • optional bare-metal QEMU wake-queue reason-overflow probe (wrapped 64-entry mixed manual/interrupt wake ring drain proof, preserving FIFO survivor ordering through pop_reason(manual,31) and final pop_reason(manual,99) against the freestanding PVH artifact)
  • optional bare-metal QEMU wake-queue reason-overflow wrapper probes (baremetal-qemu-wake-queue-reason-overflow-baseline-probe-check.ps1, baremetal-qemu-wake-queue-reason-overflow-manual-drain-probe-check.ps1, baremetal-qemu-wake-queue-reason-overflow-manual-survivors-probe-check.ps1, baremetal-qemu-wake-queue-reason-overflow-interrupt-drain-probe-check.ps1, and baremetal-qemu-wake-queue-reason-overflow-interrupt-survivors-probe-check.ps1) reuse the broad wrapped mixed-reason lane and fail directly on the overflow baseline, post-manual drain collapse, lone retained manual survivor ordering, post-final manual drain collapse, and final all-interrupt survivor ordering
  • optional bare-metal QEMU wake-queue FIFO probe (command_wake_queue_pop removes the logical oldest wake first, preserves the second queued manual wake as the new head, and returns result_not_found once the queue is empty)
  • optional bare-metal QEMU wake-queue FIFO wrapper probes (baremetal-qemu-wake-queue-fifo-baseline-probe-check.ps1, baremetal-qemu-wake-queue-fifo-first-pop-probe-check.ps1, baremetal-qemu-wake-queue-fifo-survivor-probe-check.ps1, baremetal-qemu-wake-queue-fifo-drain-empty-probe-check.ps1, and baremetal-qemu-wake-queue-fifo-notfound-preserve-probe-check.ps1) reuse the broad FIFO lane and fail directly on the two-entry baseline, first-pop oldest-first removal, survivor payload preservation, drained-empty collapse, and final result_not_found plus empty-state invariants
  • optional bare-metal QEMU wake-queue summary/age probe (exported oc_wake_queue_summary_ptr and oc_wake_queue_age_buckets_ptr_quantum_2 snapshots before and after selective queue drains against the freestanding PVH artifact)
  • optional bare-metal QEMU wake-queue summary/age wrapper probes (baremetal-qemu-wake-queue-summary-age-baseline-probe-check.ps1, baremetal-qemu-wake-queue-summary-age-pre-summary-probe-check.ps1, baremetal-qemu-wake-queue-summary-age-pre-age-probe-check.ps1, baremetal-qemu-wake-queue-summary-age-post-summary-probe-check.ps1, and baremetal-qemu-wake-queue-summary-age-post-age-probe-check.ps1) reuse the broad exported-summary lane and fail directly on the five-entry baseline shape, pre-drain summary snapshot, pre-drain age-bucket snapshot, post-drain summary snapshot, and post-drain age-bucket plus final-stability invariants
  • optional bare-metal QEMU wake-queue count snapshot probe (live oc_wake_queue_count_query_ptr / oc_wake_queue_count_snapshot_ptr proof over a mixed timer/interrupt/manual queue, validating vector, before-tick, and reason+vector counts at three query points against the freestanding PVH artifact)
  • optional bare-metal QEMU wake-queue count snapshot wrapper probes (baremetal-qemu-wake-queue-count-snapshot-baseline-probe-check.ps1, baremetal-qemu-wake-queue-count-snapshot-query1-probe-check.ps1, baremetal-qemu-wake-queue-count-snapshot-query2-probe-check.ps1, baremetal-qemu-wake-queue-count-snapshot-query3-probe-check.ps1, and baremetal-qemu-wake-queue-count-snapshot-nonmutating-read-probe-check.ps1) reuse the broad count-snapshot lane and fail directly on baseline ordering, staged query deltas, and nonmutating mailbox-read invariants
  • optional bare-metal QEMU wake-queue overflow probe (sustained manual wake pressure over one waiting task, proving the 64-entry ring retains the newest window with overflow=2 against the freestanding PVH artifact)
  • optional bare-metal QEMU wake-queue overflow wrapper probes (baremetal-qemu-wake-queue-overflow-baseline-probe-check.ps1, baremetal-qemu-wake-queue-overflow-shape-probe-check.ps1, baremetal-qemu-wake-queue-overflow-oldest-entry-probe-check.ps1, baremetal-qemu-wake-queue-overflow-newest-entry-probe-check.ps1, and baremetal-qemu-wake-queue-overflow-mailbox-state-probe-check.ps1) reuse the broad sustained-manual-pressure lane and fail directly on the 66-wake baseline, wrapped ring shape, oldest retained payload, newest retained payload, and final mailbox receipt
  • optional bare-metal QEMU wake-queue clear wrapper probes (baremetal-qemu-wake-queue-clear-baseline-probe-check.ps1, baremetal-qemu-wake-queue-clear-collapse-probe-check.ps1, baremetal-qemu-wake-queue-clear-pending-reset-probe-check.ps1, baremetal-qemu-wake-queue-clear-reuse-shape-probe-check.ps1, and baremetal-qemu-wake-queue-clear-reuse-payload-probe-check.ps1) reuse the broad clear-and-reuse lane and fail directly on the wrapped baseline, post-clear ring collapse, post-clear pending-wake reset, post-reuse queue shape, and post-reuse payload invariants
  • optional bare-metal QEMU wake-queue batch-pop probe (post-overflow batch-drain and refill proof over one waiting task, proving survivor ordering 65/66, empty recovery, and reuse at seq=67 against the freestanding PVH artifact)
  • optional bare-metal QEMU wake-queue batch-pop wrapper probes (baremetal-qemu-wake-queue-batch-pop-overflow-baseline-probe-check.ps1, baremetal-qemu-wake-queue-batch-pop-survivor-pair-probe-check.ps1, baremetal-qemu-wake-queue-batch-pop-single-survivor-probe-check.ps1, baremetal-qemu-wake-queue-batch-pop-drain-empty-probe-check.ps1, and baremetal-qemu-wake-queue-batch-pop-refill-reuse-probe-check.ps1) reuse the broad batch-pop lane and fail directly on overflow baseline, survivor-pair, single-survivor, drained-empty, and refill/reuse boundaries
  • optional bare-metal QEMU wake-queue reason-vector-pop probe (dedicated exact-pair drain proof over a four-entry manual / interrupt@13 / interrupt@13 / interrupt@19 queue, preserving surrounding FIFO survivors while rejecting reason+vector=0 against the freestanding PVH artifact)
  • optional bare-metal QEMU wake-queue reason-vector-pop wrapper probes (baremetal-qemu-wake-queue-reason-vector-pop-baseline-probe-check.ps1, baremetal-qemu-wake-queue-reason-vector-pop-first-match-probe-check.ps1, baremetal-qemu-wake-queue-reason-vector-pop-survivor-order-probe-check.ps1, baremetal-qemu-wake-queue-reason-vector-pop-invalid-pair-probe-check.ps1, and baremetal-qemu-wake-queue-reason-vector-pop-invalid-preserve-state-probe-check.ps1) reuse the broad exact-pair lane and fail directly on baseline composition, first exact-pair removal, final survivor ordering, invalid-pair rejection, and invalid-pair nonmutation
  • optional bare-metal QEMU wake-queue vector-pop probe (dedicated command_wake_queue_pop_vector proof over a four-entry mixed queue, proving only vector 13 wakes are removed in FIFO order and the final vector 255 drain returns result_not_found against the freestanding PVH artifact)
  • optional bare-metal QEMU allocator syscall probe (alloc/free plus syscall register/invoke/block/disable/re-enable/clear-flags/unregister, then live command_allocator_reset + command_syscall_reset recovery proof against the freestanding PVH artifact)
  • optional bare-metal QEMU allocator syscall wrapper probes (baremetal-qemu-allocator-syscall-baseline-probe-check.ps1, baremetal-qemu-allocator-syscall-alloc-stage-probe-check.ps1, baremetal-qemu-allocator-syscall-invoke-stage-probe-check.ps1, baremetal-qemu-allocator-syscall-guard-stage-probe-check.ps1, and baremetal-qemu-allocator-syscall-final-reset-state-probe-check.ps1) reuse the broad allocator/syscall lane and fail directly on final mailbox baseline, allocation-stage page/bitmap state, invoke-stage dispatch/result state, blocked/disabled/re-enabled guard semantics, and final post-reset allocator/syscall baseline
  • optional bare-metal QEMU allocator syscall reset probe (dirty allocator alloc plus syscall register/invoke state, then dedicated command_allocator_reset + command_syscall_reset recovery proof showing both subsystems collapse independently back to steady baseline against the freestanding PVH artifact)
  • optional bare-metal QEMU syscall saturation probe (fill the 64-entry syscall table, reject the 65th register, reclaim one slot with unregister, reuse it with a fresh syscall ID/token, and prove the reused slot invokes cleanly against the freestanding PVH artifact)
  • optional bare-metal QEMU syscall saturation reset probe (fill the 64-entry syscall table, dirty dispatch telemetry with a real invoke, run command_syscall_reset, prove the fully saturated table returns to steady state, and then prove a fresh syscall restarts cleanly from slot 0 against the freestanding PVH artifact)
  • optional bare-metal QEMU syscall saturation reset wrapper probes (baremetal-qemu-syscall-saturation-reset-baseline-probe-check.ps1, baremetal-qemu-syscall-saturation-reset-pre-reset-shape-probe-check.ps1, baremetal-qemu-syscall-saturation-reset-post-reset-baseline-probe-check.ps1, baremetal-qemu-syscall-saturation-reset-restart-probe-check.ps1, and baremetal-qemu-syscall-saturation-reset-fresh-invoke-probe-check.ps1) reuse the broad reset lane but fail directly on final mailbox baseline, dirty saturated pre-reset state, zero-entry post-reset baseline, slot-0 restart, and first fresh invoke telemetry
  • optional bare-metal QEMU allocator saturation reset probe (fill all 64 allocator records, reject the next command_allocator_alloc with no_space, run command_allocator_reset, prove counters/bitmap/records collapse to steady state, and then prove a fresh 2-page allocation restarts cleanly from slot 0 against the freestanding PVH artifact)
  • optional bare-metal QEMU allocator saturation reuse probe (fill all 64 allocator records, reject the next command_allocator_alloc with no_space, free allocator record slot 5, prove the slot becomes reusable while the table returns to full occupancy, and prove first-fit page search lands on pages 64-65 against the freestanding PVH artifact)
  • optional bare-metal QEMU allocator free failure probe (allocate 2 pages, prove wrong-pointer command_allocator_free returns result_not_found, wrong-size returns result_invalid_argument, successful free updates last_free_*, double-free returns result_not_found, and a fresh allocation restarts from page 0 against the freestanding PVH artifact)
  • optional bare-metal QEMU allocator free failure wrapper validation batch (wrapper probes over the broad allocator-free lane, isolating initial allocation baseline, wrong-pointer not_found preservation, wrong-size invalid_argument preservation, successful free metadata update, and double-free plus clean realloc restart)
  • optional bare-metal QEMU syscall control probe (isolated live command_syscall_register re-register, command_syscall_set_flags, blocked invoke, disable/enable, successful invoke, unregister, and missing-entry mutation proof against the freestanding PVH artifact)
  • optional bare-metal QEMU syscall control wrapper probes (baremetal-qemu-syscall-control-baseline-probe-check.ps1, baremetal-qemu-syscall-control-register-stage-probe-check.ps1, baremetal-qemu-syscall-control-reregister-stage-probe-check.ps1, baremetal-qemu-syscall-control-blocked-state-probe-check.ps1, baremetal-qemu-syscall-control-enabled-invoke-stage-probe-check.ps1, baremetal-qemu-syscall-control-unregister-cleanup-stage-probe-check.ps1, and baremetal-qemu-syscall-control-final-state-probe-check.ps1) reuse the broad mutation lane and fail directly on the register baseline, re-register token update without growth, blocked invoke state, enabled invoke telemetry, unregister cleanup, and final steady-state invariants
  • optional bare-metal QEMU syscall wrapper validation batch (wrapper probes over the broad syscall lanes, isolating re-register token-update/no-growth, blocked invoke preservation, disabled invoke preservation, saturation overflow full-table retention, slot reuse semantics, post-reset slot-zero restart, and final unregister/missing-entry cleanup)
  • optional bare-metal QEMU allocator syscall failure probe (invalid-alignment, no-space, blocked-syscall, and disabled-syscall result semantics plus command-result counters against the freestanding PVH artifact)
  • optional bare-metal QEMU command-result counters probe (live mailbox result-category accounting plus command_reset_command_result_counters reset semantics against the freestanding PVH artifact)
  • optional bare-metal QEMU command-result counter wrapper probes (five isolated checks over the same broad lane: baseline pre-reset envelope, ok bucket, invalid_argument bucket, not_supported bucket, and other_error bucket against the freestanding PVH artifact)
  • optional bare-metal QEMU reset counters probe (live command_reset_counters proof after dirtying interrupt, exception, scheduler, allocator, syscall, timer, wake-queue, mode, boot-phase, command-history, and health-history state against the freestanding PVH artifact)
  • optional bare-metal QEMU task lifecycle probe (live task_wait -> scheduler_wake_task -> task_resume -> task_terminate control path plus post-terminate rejected wake semantics, including queue purge for the terminated task, against the freestanding PVH artifact)
  • optional bare-metal QEMU task-lifecycle wrapper probes (five isolated checks over the same broad lane: initial wait baseline, first manual wake delivery, second wait baseline, second manual wake delivery after command_task_resume, and final terminate plus rejected-wake telemetry with queue purge for the terminated task against the freestanding PVH artifact)
  • optional bare-metal QEMU active-task terminate probe (live command_task_terminate against the currently running high-priority task, proving immediate failover to the remaining ready task, idempotent repeat terminate semantics, and final empty-run collapse against the freestanding PVH artifact)
  • optional bare-metal QEMU active-task terminate wrapper probes (five isolated checks over the same broad lane: pre-terminate active baseline, immediate failover after the first terminate, repeat-idempotent receipt, survivor low-task progress after the repeat terminate, and final empty-run collapse telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt mask exception probe (masked external vector remains blocked while an exception vector still wakes the waiting task and records history telemetry against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt mask exception wrapper probes (five isolated checks over the same broad lane: masked baseline, blocked external suppression, exception wake delivery, history capture, and final ready-state wake payload against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt mask profile probe (external-all, custom unmask/remask, ignored-count reset, external-high, invalid profile rejection, and clear-all recovery against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt mask control probe (direct command_interrupt_mask_set, invalid vector/state rejection, ignored-count reset, and final clear_all recovery against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt mask control wrapper probes (five isolated checks over the same direct-control lane: direct-mask baseline, unmask wake delivery, invalid vector/state preserve custom-profile state, ignored-count reset after secondary direct mask, and final clear-all steady-state recovery against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt mask clear-all recovery probe (dedicated command_interrupt_mask_clear_all proof after direct mask manipulation, showing wake delivery resumes, ignored-count telemetry collapses back to 0, and the runtime returns to profile none against the freestanding PVH artifact)
  • optional bare-metal QEMU interrupt mask clear-all recovery wrapper probes (fail directly on masked baseline, clear-collapse state, restored wake delivery, preserved interrupt-history payload, and final mailbox invariants for the same live PVH run)
  • optional bare-metal QEMU interrupt mask custom-profile preserve probe (wrapper over the profile probe that isolates the custom profile drift contract, per-vector ignored counts, and last-masked vector retention without relying on later cleanup stages)
  • optional bare-metal QEMU interrupt mask invalid-input preserve-state probe (wrapper over the control probe that isolates invalid vector/state rejection and proves those failures do not clobber the live custom-profile mask state)
  • optional bare-metal QEMU interrupt mask reset-ignored preserve-mask probe (wrapper over the profile probe that isolates command_interrupt_mask_reset_ignored_counts and proves it clears ignored-count telemetry without mutating the active custom mask table)
  • optional bare-metal QEMU interrupt mask profile boundary probe (wrapper over the profile probe that isolates the external_high 63/64 boundary and invalid-profile rejection while preserving the active profile)
  • optional bare-metal QEMU interrupt mask exception-delivery probe (wrapper over the exception probe that isolates masked external suppression plus non-maskable exception wake delivery and matching interrupt/exception telemetry)
  • parity evidence artifacts
  • websocket smoke validates /ws and root compatibility route /, including binary-frame RPC dispatch
  • gateway-auth and websocket smokes use bounded receive timeouts to prevent hanging CI jobs
  • dispatcher coverage test now fails on both missing methods (-32601) and registered-method dispatcher gaps (-32603 fallback guard)

release-preview.yml

  • validate stage before artifact matrix
  • duplicate release-tag protection
  • preview artifact publishing with parity evidence
  • docs status drift gate (scripts/docs-status-check.ps1) in validate stage
  • zig master freshness snapshot capture + publish (zig-master-freshness.json)
  • release trust evidence generation and publishing (release-manifest.json, sbom.spdx.json, provenance.intoto.json)
  • gateway-auth + websocket smoke checks in validate stage
  • appliance control-plane smoke check in validate stage
  • appliance restart recovery smoke check in validate stage
  • appliance rollout boundary smoke check in validate stage
  • appliance minimal profile smoke check in validate stage
  • bare-metal optional QEMU feature-flags/tick-batch probe in validate stage
  • bare-metal optional QEMU feature-flags set-success probe in validate stage
  • bare-metal optional QEMU tick-batch valid-update probe in validate stage
  • bare-metal optional QEMU tick-batch invalid-preserve probe in validate stage
  • bare-metal optional QEMU feature-flags tick-batch mailbox-state probe in validate stage
  • bare-metal optional QEMU feature-flags tick-batch state-preserve probe in validate stage
  • bare-metal optional QEMU scheduler probe in validate stage
  • bare-metal optional QEMU scheduler timeslice-update probe in validate stage
  • bare-metal optional QEMU scheduler timeslice baseline probe in validate stage
  • bare-metal optional QEMU scheduler timeslice update-4 probe in validate stage
  • bare-metal optional QEMU scheduler timeslice update-2 probe in validate stage
  • bare-metal optional QEMU scheduler timeslice invalid-zero preserve probe in validate stage
  • bare-metal optional QEMU scheduler timeslice final task-state probe in validate stage
  • bare-metal optional QEMU scheduler baseline probe in validate stage
  • bare-metal optional QEMU scheduler config-state probe in validate stage
  • bare-metal optional QEMU scheduler task-shape probe in validate stage
  • bare-metal optional QEMU scheduler progress-telemetry probe in validate stage
  • bare-metal optional QEMU scheduler mailbox-state probe in validate stage
  • bare-metal optional QEMU scheduler disable-enable probe in validate stage
  • bare-metal optional QEMU scheduler disable-enable baseline probe in validate stage
  • bare-metal optional QEMU scheduler disable-enable disabled-freeze probe in validate stage
  • bare-metal optional QEMU scheduler disable-enable idle-preserve probe in validate stage
  • bare-metal optional QEMU scheduler disable-enable resume probe in validate stage
  • bare-metal optional QEMU scheduler disable-enable final task-state probe in validate stage
  • bare-metal optional QEMU scheduler reset probe in validate stage
  • bare-metal optional QEMU scheduler reset baseline probe in validate stage
  • bare-metal optional QEMU scheduler reset collapse probe in validate stage
  • bare-metal optional QEMU scheduler reset id-restart probe in validate stage
  • bare-metal optional QEMU scheduler reset defaults-preserve probe in validate stage
  • bare-metal optional QEMU scheduler reset final task-state probe in validate stage
  • bare-metal optional QEMU scheduler reset mixed-state probe in validate stage
  • bare-metal optional QEMU scheduler reset wake-clear probe in validate stage
  • bare-metal optional QEMU scheduler reset timer-clear probe in validate stage
  • bare-metal optional QEMU scheduler reset config-preservation probe in validate stage
  • bare-metal optional QEMU scheduler policy-switch probe in validate stage
  • bare-metal optional QEMU scheduler policy-switch rr-baseline probe in validate stage
  • bare-metal optional QEMU scheduler policy-switch priority-dominance probe in validate stage
  • bare-metal optional QEMU scheduler policy-switch reprioritize-low probe in validate stage
  • bare-metal optional QEMU scheduler policy-switch rr-return probe in validate stage
  • bare-metal optional QEMU scheduler policy-switch invalid-preserve probe in validate stage
  • bare-metal optional QEMU scheduler saturation probe in validate stage
  • bare-metal optional QEMU scheduler saturation wrapper probes in validate stage
  • bare-metal optional QEMU timer wake probe in validate stage
  • bare-metal optional QEMU timer quantum probe in validate stage
  • bare-metal optional QEMU timer quantum wrapper probes in validate stage
  • bare-metal optional QEMU timer cancel probe in validate stage
  • bare-metal optional QEMU timer cancel wrapper probes in validate stage
  • bare-metal optional QEMU timer cancel-task interrupt-timeout probe in validate stage
  • bare-metal optional QEMU timer cancel task probe in validate stage
  • bare-metal optional QEMU timer cancel task wrapper probes in validate stage
  • bare-metal optional QEMU timer pressure wrapper probes in validate stage
  • bare-metal optional QEMU timer reset recovery probe in validate stage
  • bare-metal optional QEMU timer-disable reenable arm-preservation probe in validate stage
  • bare-metal optional QEMU timer-disable reenable deadline-hold probe in validate stage
  • bare-metal optional QEMU timer-disable reenable deferred-wake-order probe in validate stage
  • bare-metal optional QEMU timer-disable reenable wake-payload probe in validate stage
  • bare-metal optional QEMU timer-disable reenable dispatch-drain probe in validate stage
  • bare-metal optional QEMU timer-reset wait-kind isolation probe in validate stage
  • bare-metal optional QEMU task-resume timer-clear probe in validate stage
  • bare-metal optional QEMU task-resume interrupt-timeout probe in validate stage
  • bare-metal optional QEMU scheduler-wake timer-clear probe in validate stage
  • bare-metal optional QEMU scheduler-wake timer-clear wrapper probes in validate stage
  • bare-metal optional QEMU task-resume interrupt probe in validate stage
  • bare-metal optional QEMU periodic timer probe in validate stage
  • bare-metal optional QEMU periodic timer wrapper probes in validate stage
  • bare-metal optional QEMU periodic interrupt probe in validate stage
  • bare-metal optional QEMU interrupt timeout probe in validate stage
  • bare-metal optional QEMU interrupt timeout manual-wake probe in validate stage
  • bare-metal optional QEMU interrupt manual-wake probe in validate stage
  • bare-metal optional QEMU interrupt timeout timer probe in validate stage
  • bare-metal optional QEMU masked interrupt timeout probe in validate stage
  • bare-metal optional QEMU masked interrupt timeout wrapper probes in validate stage
  • bare-metal optional QEMU interrupt timeout clamp probe in validate stage
  • bare-metal optional QEMU timer-disable reenable probe in validate stage
  • bare-metal optional QEMU timer-disable paused-state probe in validate stage
  • bare-metal optional QEMU timer-disable reenable one-shot recovery probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-enable probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-enable arm-preservation probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-enable deadline-hold probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-enable paused-window probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-enable deferred-timer-wake probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-enable telemetry-preserve probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-reenable timer probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-interrupt probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-interrupt immediate-wake probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-interrupt timeout-clear probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-interrupt disabled-state probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-interrupt reenable-no-stale-timer probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-interrupt telemetry-preserve probe in validate stage
  • bare-metal optional QEMU interrupt-timeout disable-interrupt recovery probe in validate stage
  • bare-metal optional QEMU timer-disable interrupt immediate-wake probe in validate stage
  • bare-metal optional QEMU timer-disable interrupt arm-preservation probe in validate stage
  • bare-metal optional QEMU timer-disable interrupt paused-window probe in validate stage
  • bare-metal optional QEMU timer-disable interrupt deferred-timer-wake probe in validate stage
  • bare-metal optional QEMU timer-disable interrupt telemetry-preserve probe in validate stage
  • bare-metal optional QEMU interrupt-timeout arm-preservation probe in validate stage
  • bare-metal optional QEMU interrupt-timeout interrupt-wake-payload probe in validate stage
  • bare-metal optional QEMU interrupt-timeout wait-clear probe in validate stage
  • bare-metal optional QEMU interrupt-timeout no-stale-timer probe in validate stage
  • bare-metal optional QEMU interrupt-timeout telemetry-preserve probe in validate stage
  • bare-metal optional QEMU interrupt filter probe in validate stage
  • bare-metal optional QEMU task-terminate interrupt-timeout probe in validate stage
  • bare-metal optional QEMU task-terminate interrupt-timeout baseline probe in validate stage
  • bare-metal optional QEMU task-terminate interrupt-timeout target-clear probe in validate stage
  • bare-metal optional QEMU task-terminate interrupt-timeout interrupt-telemetry probe in validate stage
  • bare-metal optional QEMU task-terminate interrupt-timeout no-stale-timeout probe in validate stage
  • bare-metal optional QEMU task-terminate interrupt-timeout mailbox-state probe in validate stage
  • bare-metal optional QEMU task-terminate mixed-state probe in validate stage
  • bare-metal optional QEMU interrupt-filter probe in validate stage
  • bare-metal optional QEMU interrupt-filter wrappers in validate stage
  • bare-metal optional QEMU manual-wait interrupt probe in validate stage
  • bare-metal optional QEMU manual-wait interrupt wrappers in validate stage
  • bare-metal optional QEMU descriptor bootdiag probe in validate stage
  • bare-metal optional QEMU descriptor bootdiag wrappers in validate stage
  • bare-metal optional QEMU bootdiag/history-clear probe in validate stage
  • bare-metal optional QEMU descriptor table content probe in validate stage
  • bare-metal optional QEMU descriptor dispatch probe in validate stage
  • bare-metal optional QEMU vector counter reset probe in validate stage
  • bare-metal optional QEMU vector history overflow probe in validate stage
  • bare-metal optional QEMU vector history clear probe in validate stage
  • bare-metal optional QEMU vector history clear wrapper probes in validate stage
  • bare-metal optional QEMU command-health history probe in validate stage
  • bare-metal optional QEMU command-history overflow clear probe in validate stage
  • bare-metal optional QEMU command-history overflow clear wrapper probes in validate stage
  • bare-metal optional QEMU health-history overflow clear probe in validate stage
  • bare-metal optional QEMU health-history overflow clear wrapper probes in validate stage
  • bare-metal optional QEMU mailbox header validation probe in validate stage
  • bare-metal optional QEMU mailbox stale-seq probe in validate stage
  • bare-metal optional QEMU mailbox seq-wraparound probe in validate stage
  • bare-metal optional QEMU mode/boot-phase history probe in validate stage
  • bare-metal optional QEMU mode/boot-phase history wrapper probes in validate stage
  • bare-metal optional QEMU mode/boot-phase history clear probe in validate stage
  • bare-metal optional QEMU mode-history overflow clear probe in validate stage
  • bare-metal optional QEMU mode-history overflow clear wrapper probes in validate stage
  • bare-metal optional QEMU boot-phase-history overflow clear probe in validate stage
  • bare-metal optional QEMU scheduler priority budget probe in validate stage
  • bare-metal optional QEMU scheduler priority budget wrapper probes in validate stage
  • bare-metal optional QEMU scheduler default-budget invalid probe in validate stage
  • bare-metal optional QEMU scheduler round-robin probe in validate stage
  • bare-metal optional QEMU scheduler round-robin wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue selective probe in validate stage
  • bare-metal optional QEMU wake-queue selective wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue reason-pop probe in validate stage
  • bare-metal optional QEMU wake-queue reason-pop wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue vector-pop probe in validate stage
  • bare-metal optional QEMU wake-queue vector-pop wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue before-tick probe in validate stage
  • bare-metal optional QEMU wake-queue selective-overflow probe in validate stage
  • bare-metal optional QEMU wake-queue selective-overflow wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue before-tick-overflow probe in validate stage
  • bare-metal optional QEMU wake-queue before-tick-overflow wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue before-tick wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue reason-overflow probe in validate stage
  • bare-metal optional QEMU wake-queue reason-overflow wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue reason-vector-pop probe in validate stage
  • bare-metal optional QEMU wake-queue reason-vector-pop wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue FIFO probe in validate stage
  • bare-metal optional QEMU wake-queue FIFO wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue summary/age probe in validate stage
  • bare-metal optional QEMU wake-queue summary/age wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue overflow probe in validate stage
  • bare-metal optional QEMU wake-queue overflow wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue clear probe in validate stage
  • bare-metal optional QEMU wake-queue clear wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue batch-pop probe in validate stage
  • bare-metal optional QEMU wake-queue batch-pop wrapper probes in validate stage
  • bare-metal optional QEMU wake-queue vector-pop probe in validate stage
  • bare-metal optional QEMU allocator syscall probe in validate stage
  • bare-metal optional QEMU allocator syscall reset probe in validate stage
  • bare-metal optional QEMU syscall saturation probe in validate stage
  • bare-metal optional QEMU syscall saturation reset probe in validate stage
  • bare-metal optional QEMU syscall saturation reset wrapper probes in validate stage
  • bare-metal optional QEMU allocator saturation reset probe in validate stage
  • bare-metal optional QEMU allocator saturation reset wrapper probes in validate stage
  • bare-metal optional QEMU allocator saturation reuse probe in validate stage
  • bare-metal optional QEMU allocator saturation reuse wrapper probes in validate stage
  • bare-metal optional QEMU allocator free failure probe in validate stage
  • bare-metal optional QEMU allocator free failure wrapper probes in validate stage
  • bare-metal optional QEMU syscall control probe in validate stage
  • bare-metal optional QEMU syscall control register-stage probe in validate stage
  • bare-metal optional QEMU syscall control reregister-stage probe in validate stage
  • bare-metal optional QEMU syscall control blocked-state probe in validate stage
  • bare-metal optional QEMU syscall control enabled-invoke-stage probe in validate stage
  • bare-metal optional QEMU syscall control unregister-cleanup-stage probe in validate stage
  • bare-metal optional QEMU syscall saturation overflow preserve-full probe in validate stage
  • bare-metal optional QEMU syscall saturation reuse-slot probe in validate stage
  • bare-metal optional QEMU syscall saturation-reset restart probe in validate stage
  • bare-metal optional QEMU allocator syscall failure probe in validate stage
  • bare-metal optional QEMU allocator/syscall reset wrapper probes in validate stage
  • bare-metal optional QEMU command-result counters probe in validate stage
  • bare-metal optional QEMU reset counters probe in validate stage
  • bare-metal optional QEMU reset-command-result preserve-runtime probe in validate stage
  • bare-metal optional QEMU reset-counters preserve-config probe in validate stage
  • bare-metal optional QEMU reset-counters baseline probe in validate stage
  • bare-metal optional QEMU reset-counters vector-reset probe in validate stage
  • bare-metal optional QEMU reset-counters history-reset probe in validate stage
  • bare-metal optional QEMU reset-counters subsystem-reset probe in validate stage
  • bare-metal optional QEMU reset-counters command-result probe in validate stage
  • bare-metal optional QEMU reset-bootdiag preserve-state probe in validate stage
  • bare-metal optional QEMU clear-command-history preserve-health probe in validate stage
  • bare-metal optional QEMU clear-health-history preserve-command probe in validate stage
  • command-result / bootdiag-history-clear / reset-counters wrapper probes now enforce isolated reset-preservation and full reset-collapse boundaries for runtime state, histories, vectors, subsystems, config, and command-result receipts as dedicated workflow gates
  • bare-metal optional QEMU task lifecycle probe in validate stage
  • bare-metal optional QEMU active-task terminate probe in validate stage
  • bare-metal optional QEMU panic-recovery probe in validate stage
  • bare-metal optional QEMU panic-wake recovery probe in validate stage
  • bare-metal optional QEMU interrupt mask exception probe in validate stage
  • bare-metal optional QEMU interrupt mask exception baseline probe in validate stage
  • bare-metal optional QEMU interrupt mask exception masked-interrupt blocked probe in validate stage
  • bare-metal optional QEMU interrupt mask exception history-capture probe in validate stage
  • bare-metal optional QEMU interrupt mask exception final-state probe in validate stage
  • bare-metal optional QEMU interrupt mask profile probe in validate stage
  • bare-metal optional QEMU interrupt mask control probe in validate stage
  • bare-metal optional QEMU interrupt mask control wrappers in validate stage
  • bare-metal optional QEMU interrupt mask clear-all recovery probe in validate stage
  • bare-metal optional QEMU interrupt mask custom-profile preserve probe in validate stage
  • bare-metal optional QEMU interrupt mask invalid-input preserve-state probe in validate stage
  • bare-metal optional QEMU interrupt mask reset-ignored preserve-mask probe in validate stage
  • bare-metal optional QEMU interrupt mask profile boundary probe in validate stage
  • bare-metal optional QEMU interrupt mask exception-delivery probe in validate stage
  • npm package dry-run validation in release validate stage
  • python package validation (unit tests + build + twine check) in release validate stage
  • local scripts/release-preview.ps1 mirrors parity/docs/freshness gates before artifact packaging

npm-release.yml

  • publishes @adybag14-cyber/openclaw-zig-rpc-client to npm
  • supports manual version/dist-tag dispatch and release-triggered publish
  • uses NPM_TOKEN when present for npmjs publish
  • falls back to GitHub Packages publish when NPM_TOKEN is not configured
  • attaches built npm tarball to the matching GitHub release tag when available

python-release.yml

  • builds and validates python/openclaw-zig-rpc-client
  • supports manual dispatch with explicit PEP 440 version
  • maps release tags to Python versions for release.published trigger
  • publishes to PyPI when PYPI_API_TOKEN is configured
  • uploads and optionally attaches wheel/sdist assets to matching GitHub release tags

Release Notes

  • do not cut release until parity gate is green and validation matrix passes
  • include parity artifacts in release output
  • keep tracking docs and issue comments updated with validation evidence

Toolchain Freshness

Run:

./scripts/zig-codeberg-master-check.ps1
./scripts/zig-github-mirror-release-check.ps1
./scripts/zig-bootstrap-from-github-mirror.ps1 -DryRun

Track local/remote mismatch in:

  • docs/zig-port/ZIG_TOOLCHAIN_LOCAL.md

Policy:

  • Use Codeberg master as the canonical freshness target.
  • Use adybag14-cyber/zig latest-master when the goal is a fast Windows toolchain refresh.
  • Use adybag14-cyber/zig upstream-<sha> when the goal is reproducible CI, bisects, or release recreation.