admin/LithosAnanake
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Stage K-3: drain and channel-open policy self-tests retargeted to Hestia (FABRIC-3.10.8 §4.3)

Browse Source 
- Both looked up the retired Hermes VM and printed SKIPPED on every boot.
  Drain test: target Hestia, nested VM-EXEC of "1 DROP". Policy test:
  Hestia is the no-policy VM (never loads ACL.4th). A missing target now
  prints FAIL, not SKIPPED.
- Both PASS on amd64/aarch64/riscv64; standard sequence passes (hash, G,
  MINT/WIREBIND/USE, conserved, 0 idle growth). Ledger baseline now
  pulled 262144 / returned 259359 (the drain test's real message).
- Found, not fixed: ARTEMIS-ANNOUNCE-READY, doe_log's "Hermes" heat
  column and CONNECT-HERMES still reference the retired Hermes VM.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Robert Allan James
2026-09-26 03:52:55 -04:00
co-authored by Claude Opus 5.5
parent c9c97cf769
commit 9e41fb03ab
8 changed files with 27501 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/starkernel/kernel_main.c
+14 -5
View File
@@ -1458,6 +1458,11 @@ static void kernel_main_deep(BootInfo *boot_info) {
* disk-backed state (`block_subsystem.c`) that a throwaway
* diagnostic has no business touching -- VM-EXEC's cross-VM nesting
* proves the same depth gate without it. */
/* FABRIC-3.10.8 K-3: retargeted from the Hermes VM, which no longer
* exists (the test printed SKIPPED on every boot since the Phase 4
* reshuffle), to Hestia -- a live Tripod VM with a genuine dictionary.
* The nested call VM-EXECs a harmless "1 DROP" into her instead of
* Hermes's WELCOME word. Same assertions otherwise. */
{
VMUuid pub_id3, hermes_id;
VMRegistryEntry hermes_drain_entry;
@@ -1469,9 +1474,9 @@ static void kernel_main_deep(BootInfo *boot_info) {
pub_id3.lo = 11;
console_puts("Kernel-Hermes drain self-test: ");
if (capsule_vm_find_by_name_nocase("Hermes", &hermes_drain_entry) != 0 ||
if (capsule_vm_find_by_name_nocase("Hestia", &hermes_drain_entry) != 0 ||
hermes_drain_entry.state != VM_STATE_LIVE || !hermes_drain_entry.vm_ptr) {
console_println("SKIPPED (Hermes not live)");
console_println("FAIL (Hestia not live)");
} else {
hermes_id = hermes_drain_entry.vm_id;
grant_rc = stadium_grant_quota(pub_id3, vm_uuid_hera());
@@ -1487,7 +1492,7 @@ static void kernel_main_deep(BootInfo *boot_info) {
/* Nested (depth 2 during VM-EXEC's own call): must not drain. */
if (drain_ok) {
vm_interpret(mama, "S\" WELCOME\" S\" Hermes\" VM-EXEC");
vm_interpret(mama, "S\" 1 DROP\" S\" Hestia\" VM-EXEC");
if (mama->error) { mama->error = 0; drain_ok = 0; }
}
if (drain_ok && sk_hermes_pending_count(hermes_id) != 1) drain_ok = 0;
@@ -1764,6 +1769,10 @@ static void kernel_main_deep(BootInfo *boot_info) {
* wires the policy result straight into sk_hermes_channel_respond()
* (task 3.6) end to end: a denied policy really produces a NACK and
* no channel, exactly like task 3.6's own deny path. */
/* FABRIC-3.10.8 K-3: the no-policy VM is now Hestia -- like the Hermes
* VM this used, she never loads ACL.4th (capsules/hestia/init.4th loads
* fabric/font/lib only), so she has no HERMES-CHANNEL-OPEN? word. The
* Hermes VM no longer exists, so this printed SKIPPED on every boot. */
{
VMRegistryEntry hera_pol_entry, hermes_pol_entry;
VMUuid requester_pol;
@@ -1773,9 +1782,9 @@ static void kernel_main_deep(BootInfo *boot_info) {
console_puts("Kernel-Hermes channel-open policy self-test: ");
if (capsule_vm_find_by_name_nocase("Hera", &hera_pol_entry) != 0 || !hera_pol_entry.vm_ptr ||
capsule_vm_find_by_name_nocase("Hermes", &hermes_pol_entry) != 0 ||
capsule_vm_find_by_name_nocase("Hestia", &hermes_pol_entry) != 0 ||
hermes_pol_entry.state != VM_STATE_LIVE || !hermes_pol_entry.vm_ptr) {
console_println("SKIPPED (Hera/Hermes not available)");
console_println("FAIL (Hera/Hestia not available)");
} else {
VM *hera_vm = (VM *)hera_pol_entry.vm_ptr;
VM *hermes_vm = (VM *)hermes_pol_entry.vm_ptr;