starkernel: item 3.8 -- VM identifiers as UUID/GUID
Punch list §25 item 3.8 complete. Added after starting item 4.1
surfaced the need to thread a vm_id into stadium_admit()'s new quota
parameter; Captain Bob ruled UUID/GUID rather than keeping the
narrower uint32_t.
New VMUuid type (vm_uuid.h/vm_uuid.c): two uint64_t halves, RFC-4122-
shaped for logging. Not real randomness -- checked directly against
QEMU 10.2.1's actual CPU feature set: amd64 RDRAND and riscv64 Zkr are
both real, available features here; aarch64 has no RNG property on any
CPU model including "max" (verified exhaustively via QMP
query-cpu-model-expansion). Captain Bob ruled a uniform fallback
across all three ISAs rather than a per-architecture split.
Fallback is a deterministic PRNG (splitmix64) seeded from the Mama
capsule's content hash, pre-filling a 16-entry FIFO pool at boot and
refilling with another batch of the same stream when exhausted --
exactly the shape requested. Same capsule booted twice produces the
same id sequence, preserving the dict_hash reproducibility this
session has relied on throughout.
Hera keeps a fixed, reserved all-zero id, not drawn from the pool --
capsule_birth.c uses vm_id == 0 as a load-bearing sentinel in three
places (KILL protection x2, fleet heat-fanout parent-chain
terminator), found by reading before writing any code.
Two real sentinel-collision bugs caught before shipping, same class as
STADIUM_CONTAINS_NONE: vm_uuid_none() (all-ones, not all-zero) for
"not yet assigned"/"no VM" placeholders; confirmed item 3.7's quota
table already used an in_use boolean rather than a vm_id sentinel, so
no second collision was actually possible there -- the dead,
never-referenced STADIUM_QUOTA_SLOT_EMPTY macro was removed.
Blast radius larger than first scoped, flagged mid-work rather than
silently absorbed: capsule_vm_physics.c/.h (the fleet heat-transfer
layer item 2.1 modified earlier this session) has its own vm_id-keyed
node table and walks parent_vm_id chains through the same identity
space, so it needed the same change, plus its callers in
mama_forth_words.c and sk_vm_bootstrap.c.
One live FORTH word contract changed, by explicit ruling: CAPSULE-BIRTH
was ( capsule-id -- vm-id ), a single cell -- can't hold 128 bits.
Captain Bob picked pushing two cells ("there is doubles support in the
FORTH std word set anyway"): ( capsule-id -- vm-id-hi vm-id-lo ).
MAMA-VM-ID changed the same way: ( -- 0 0 ).
Verified: full (not standalone-file) kernel rebuild to catch cross-file
breakage given the size of this change -- it surfaced the
capsule_vm_physics.c blast radius a narrower check would have missed.
Three-architecture boot (amd64, aarch64, riscv64), all reaching ok>
with identical dict_hash=0x3d4e1daf289da94f matching the item-3.7
baseline.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Robert Allan James
co-authored by
Claude Sonnet 5
Claude Sonnet 5
parent
ec2c97ef70
commit
9b305a5be7
@@ -3010,7 +3010,82 @@ document and committing that amendment as its own item.*
|
||||
> cells (M KB)` boot line is unaffected in format — amd64 (`logs/20260804-180453`, `74234
|
||||
> cells (4639 KB)`), aarch64 (`logs/20260804-180541`), riscv64 (`logs/20260804-180637`).
|
||||
>
|
||||
> **Phase 3 core complete, for real this time.** Items 3.1–3.7 close out §25.4.
|
||||
> **Correction, 2026-08-04, same day:** starting work on item 4.1 surfaced a further
|
||||
> prerequisite — see item 3.8 below. §25.4 gained an eighth item.
|
||||
|
||||
- [x] **3.8 — VM identifiers as UUID/GUID.** Replaces `capsule_birth.c`'s monotonic
|
||||
`uint32_t vm_id` with a wider, RFC-4122-shaped 128-bit identifier. Added 2026-08-04 after
|
||||
starting item 4.1 surfaced the need to thread a `vm_id` into `stadium_admit()`'s new
|
||||
quota parameter, and Captain Bob ruled UUID/GUID rather than keeping the narrower type.
|
||||
*Refs:* §22.3 (item 3.7's quota table), capsule_birth.c's VM registry.
|
||||
|
||||
> **DONE 2026-08-04.** New `VMUuid` type (`include/starkernel/vm_uuid.h`,
|
||||
> `src/starkernel/capsule/vm_uuid.c`): two `uint64_t` halves, formatted
|
||||
> RFC-4122-shaped (`xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx`) for logging.
|
||||
>
|
||||
> **Not real randomness — checked directly, not assumed.** This kernel has no RNG source
|
||||
> at all. Verified empirically against QEMU 10.2.1 rather than guessed: amd64's `RDRAND`
|
||||
> and riscv64's `Zkr` entropy extension are both real, available CPU features here (QEMU
|
||||
> accepts `-cpu qemu64,+rdrand` and `-cpu rv64,zkr=true` without error); aarch64 has
|
||||
> **no** RNG/RNDR property on any CPU model including `max` — checked exhaustively via
|
||||
> QMP's `query-cpu-model-expansion` against all 23 of `max`'s exposed properties, none
|
||||
> RNG-related. Captain Bob ruled a uniform fallback across all three ISAs rather than a
|
||||
> per-architecture split (real RNG on two, something else on the third).
|
||||
>
|
||||
> **The fallback is a deterministic PRNG (splitmix64 — public-domain, minimal), seeded
|
||||
> from the Mama capsule's content hash**, pre-filling a 16-entry FIFO pool at boot
|
||||
> (`vm_uuid_pool_init()`, called from `capsule_birth_mama()` right after the capsule hash
|
||||
> is known), refilled with another batch continuing the same stream when exhausted
|
||||
> (`vm_uuid_next()`) — exactly the shape Captain Bob asked for. Same capsule booted twice
|
||||
> produces the same id sequence, preserving the run-to-run reproducibility this session's
|
||||
> `dict_hash` regression check has relied on for every prior item.
|
||||
>
|
||||
> **Hera keeps a fixed, reserved id — all-zero — not drawn from the pool.**
|
||||
> `capsule_birth.c` uses `vm_id == 0` as a load-bearing sentinel in three places, found by
|
||||
> reading before writing any code: "Hera cannot be killed" (`capsule_vm_kill`), the same
|
||||
> check in `capsule_vm_kill_all_nonmama`, and the fleet heat-fanout parent-chain
|
||||
> terminator (`capsule_run.h`'s `parent_vm_id` comment: "self-referential, `parent_vm_id
|
||||
> == vm_id == 0`"). `vm_uuid_hera()` (all-zero) preserves all three with a cheap
|
||||
> equality check (`vm_uuid_is_hera()`).
|
||||
>
|
||||
> **Two real sentinel-collision bugs caught before they shipped, both the same class of
|
||||
> mistake `STADIUM_CONTAINS_NONE` was already fixed for once this session:**
|
||||
> - `vm_uuid_none()` (all-ones) is deliberately **not** all-zero, since all-zero is now
|
||||
> Hera's reserved value — used for "not yet assigned" placeholders
|
||||
> (`vm_registry_alloc()`'s embryo `vm_id` before birth completes) and "no VM" logging
|
||||
> (item 2.2's `FLEET_FULL` refusal, which happens before any VM is allocated).
|
||||
> - `StadiumVMQuota`'s "slot empty" state was already tracked by an `in_use` boolean
|
||||
> (item 3.7), not a `vm_id` sentinel value — so no second collision was actually
|
||||
> possible there; confirmed by re-reading item 3.7's own code rather than assumed, and
|
||||
> the dead, never-referenced `STADIUM_QUOTA_SLOT_EMPTY` macro item 3.7 defined "just in
|
||||
> case" was removed as part of this item's cleanup.
|
||||
>
|
||||
> **Blast radius, larger than first scoped — flagged mid-work rather than silently
|
||||
> absorbed:** beyond the originally-flagged `capsule_run.*`/`capsule_birth.*`/`stadium.*`,
|
||||
> compiling surfaced that `capsule_vm_physics.c`/`.h` (the fleet heat-transfer layer item
|
||||
> 2.1 modified earlier this session) has its own `vm_id`-keyed node table and walks
|
||||
> `parent_vm_id` chains via `capsule_vm_registry_get()` — the same identity space, so it
|
||||
> had to change too (`vm_physics_init`/`_retire`/`_touch`/`_heat_of`/`_find`/
|
||||
> `_find_root_id`), plus its callers in `mama_forth_words.c` and
|
||||
> `sk_vm_bootstrap.c`.
|
||||
>
|
||||
> **One live FORTH word contract changed, by explicit ruling:** `CAPSULE-BIRTH` was
|
||||
> `( capsule-id -- vm-id )`, a single cell — can't hold 128 bits. Options were two cells,
|
||||
> a silent 64-bit truncation, or a separate small FORTH-only handle; Captain Bob picked
|
||||
> two cells ("there is doubles support in the FORTH std word set anyway"). New contract:
|
||||
> `( capsule-id -- vm-id-hi vm-id-lo )`, high cell on top, `vm_uuid_none()`'s hi/lo (both
|
||||
> all-ones) on any failure path including the early bounds-check return. `MAMA-VM-ID`
|
||||
> changed the same way: `( -- 0 0 )`, both cells zero since Hera's id is all-zero.
|
||||
>
|
||||
> **Regression: clean, across a genuinely large diff.** All three architectures boot to
|
||||
> `ok>` with identical `dict_hash=0x3d4e1daf289da94f`, matching the item-3.7 baseline —
|
||||
> amd64 (`logs/20260804-194631`), aarch64 (`logs/20260804-194711`), riscv64
|
||||
> (`logs/20260804-194810`). A full (not standalone-file) kernel rebuild was used to catch
|
||||
> cross-file breakage before the boot run, given the size of this change; it surfaced the
|
||||
> `capsule_vm_physics.c` blast radius above that a narrower compile check would have
|
||||
> missed.
|
||||
>
|
||||
> **Phase 3 core complete.** Items 3.1–3.8 close out §25.4.
|
||||
|
||||
---
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# Capsule Block Manifest — Auto-generated
|
||||
<!-- Generated by mkcapsule --manifest 2026-08-04T22:06:22Z -->
|
||||
<!-- Generated by mkcapsule --manifest 2026-08-04T23:47:55Z -->
|
||||
<!-- DO NOT EDIT — re-run mkcapsule --manifest to refresh. -->
|
||||
<!-- Hand-written justifications and immutability notes live -->
|
||||
<!-- in MANIFEST.md alongside this auto-generated index. -->
|
||||
|
||||
@@ -0,0 +1,59 @@
|
||||
tick_number,elapsed_ns,tick_interval_ns,cache_hits_delta,bucket_hits_delta,word_executions_delta,hot_word_count,avg_word_heat_q48,window_width,actual_window_size,predicted_label_hits,jitter_bits,apic_ticks,time_trust_q48,variance_q48,vm_call_depth_max,hera_heat_q48,hermes_heat_q48,artemis_heat_q48
|
||||
1,10000,10000,0,0,183,4,45,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
2,20000,10000,0,0,173,5,44,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
3,30000,10000,0,0,184,6,60,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
4,40000,10000,0,0,174,8,71,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
5,50000,10000,0,0,150,9,78,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
6,60000,10000,0,0,159,11,73,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
7,70000,10000,0,0,188,15,71,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
8,80000,10000,0,0,214,16,83,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
9,90000,10000,0,0,216,19,82,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
10,100000,10000,0,0,222,21,84,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
11,110000,10000,0,0,207,23,86,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
12,120000,10000,0,0,189,26,83,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
13,130000,10000,0,0,221,28,80,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
14,140000,10000,0,0,204,29,83,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
15,150000,10000,0,0,203,30,82,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
16,160000,10000,0,0,201,32,83,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
17,170000,10000,0,0,190,34,86,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
18,180000,10000,0,0,170,35,73,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
19,190000,10000,0,0,154,28,44,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
20,200000,10000,0,0,154,28,41,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
21,210000,10000,0,0,153,32,39,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
22,220000,10000,0,0,167,35,42,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
23,230000,10000,0,0,176,37,41,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
24,240000,10000,0,0,175,37,39,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
25,250000,10000,0,0,196,38,37,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
26,260000,10000,0,0,192,41,37,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
27,270000,10000,0,0,158,40,38,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
28,280000,10000,0,0,158,40,35,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
29,290000,10000,0,0,164,41,37,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
30,300000,10000,0,0,154,43,39,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
31,310000,10000,0,0,172,46,35,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
32,320000,10000,0,0,180,49,34,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
33,330000,10000,0,0,145,51,35,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
34,340000,10000,0,0,203,53,37,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
35,350000,10000,0,0,154,55,39,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
36,360000,10000,0,0,144,57,37,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
37,370000,10000,0,0,144,57,35,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
38,380000,10000,0,0,132,57,34,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
39,390000,10000,0,0,180,57,32,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
40,400000,10000,0,0,220,63,29,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
41,410000,10000,0,0,215,64,28,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
42,420000,10000,0,0,208,68,29,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
43,430000,10000,0,0,177,72,27,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
44,440000,10000,0,0,199,77,28,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
45,450000,10000,0,0,223,82,26,4096,30,0,0,0,65536,0,0,65536,0,0
|
||||
46,460000,10000,0,0,202,85,24,4096,67,0,0,0,65536,0,0,65536,0,0
|
||||
47,470000,10000,0,0,218,91,25,4096,198,0,0,0,65536,0,0,65536,0,0
|
||||
48,480000,10000,0,0,221,92,26,4096,350,0,0,0,65536,0,0,65536,0,0
|
||||
49,490000,10000,0,0,225,97,26,4096,528,0,0,0,65536,0,0,65536,0,0
|
||||
50,500000,10000,0,0,214,100,27,4096,694,0,0,0,65536,0,0,65536,0,0
|
||||
51,510000,10000,0,0,227,102,28,4096,883,0,0,0,65536,0,0,65536,0,0
|
||||
52,520000,10000,0,0,208,102,29,4096,1043,0,0,0,65536,0,0,65536,0,0
|
||||
53,530000,10000,0,0,207,102,30,4096,1202,0,0,0,65536,0,0,65536,0,0
|
||||
54,540000,10000,0,0,200,102,31,4096,1319,0,0,0,65536,0,0,65536,0,0
|
||||
55,550000,10000,0,0,205,103,32,4096,1464,0,0,0,65536,0,0,65536,0,0
|
||||
56,560000,10000,0,0,211,103,32,4096,1620,0,0,0,65536,0,0,65536,0,0
|
||||
57,570000,10000,0,0,193,110,33,4096,1712,0,0,0,65536,0,0,65536,0,0
|
||||
58,580000,10000,0,0,190,5,67,4096,1775,0,0,0,65536,0,0,65536,0,0
|
||||
|
@@ -0,0 +1,59 @@
|
||||
tick_number,elapsed_ns,tick_interval_ns,cache_hits_delta,bucket_hits_delta,word_executions_delta,hot_word_count,avg_word_heat_q48,window_width,actual_window_size,predicted_label_hits,jitter_bits,apic_ticks,time_trust_q48,variance_q48,vm_call_depth_max,hera_heat_q48,hermes_heat_q48,artemis_heat_q48
|
||||
1,10000,10000,0,0,183,4,45,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
2,20000,10000,0,0,173,5,44,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
3,30000,10000,0,0,184,6,60,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
4,40000,10000,0,0,174,8,71,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
5,50000,10000,0,0,150,9,78,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
6,60000,10000,0,0,159,11,73,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
7,70000,10000,0,0,188,15,71,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
8,80000,10000,0,0,214,16,83,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
9,90000,10000,0,0,216,19,82,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
10,100000,10000,0,0,222,21,84,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
11,110000,10000,0,0,207,23,86,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
12,120000,10000,0,0,189,26,83,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
13,130000,10000,0,0,221,28,80,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
14,140000,10000,0,0,204,29,83,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
15,150000,10000,0,0,203,30,82,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
16,160000,10000,0,0,201,32,83,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
17,170000,10000,0,0,190,34,86,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
18,180000,10000,0,0,170,35,73,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
19,190000,10000,0,0,154,28,44,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
20,200000,10000,0,0,154,28,41,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
21,210000,10000,0,0,153,32,39,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
22,220000,10000,0,0,167,35,42,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
23,230000,10000,0,0,176,37,41,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
24,240000,10000,0,0,175,37,39,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
25,250000,10000,0,0,196,38,37,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
26,260000,10000,0,0,192,41,37,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
27,270000,10000,0,0,158,40,38,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
28,280000,10000,0,0,158,40,35,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
29,290000,10000,0,0,164,41,37,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
30,300000,10000,0,0,154,43,39,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
31,310000,10000,0,0,172,46,35,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
32,320000,10000,0,0,180,49,34,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
33,330000,10000,0,0,145,51,35,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
34,340000,10000,0,0,203,53,37,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
35,350000,10000,0,0,154,55,39,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
36,360000,10000,0,0,144,57,37,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
37,370000,10000,0,0,144,57,35,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
38,380000,10000,0,0,132,57,34,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
39,390000,10000,0,0,180,57,32,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
40,400000,10000,0,0,220,63,29,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
41,410000,10000,0,0,215,64,28,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
42,420000,10000,0,0,208,68,29,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
43,430000,10000,0,0,177,72,27,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
44,440000,10000,0,0,199,77,28,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
45,450000,10000,0,0,223,82,26,4096,30,0,0,0,65536,0,0,65536,0,0
|
||||
46,460000,10000,0,0,202,85,24,4096,67,0,0,0,65536,0,0,65536,0,0
|
||||
47,470000,10000,0,0,218,91,25,4096,198,0,0,0,65536,0,0,65536,0,0
|
||||
48,480000,10000,0,0,221,92,26,4096,350,0,0,0,65536,0,0,65536,0,0
|
||||
49,490000,10000,0,0,225,97,26,4096,528,0,0,0,65536,0,0,65536,0,0
|
||||
50,500000,10000,0,0,214,100,27,4096,694,0,0,0,65536,0,0,65536,0,0
|
||||
51,510000,10000,0,0,227,102,28,4096,883,0,0,0,65536,0,0,65536,0,0
|
||||
52,520000,10000,0,0,208,102,29,4096,1043,0,0,0,65536,0,0,65536,0,0
|
||||
53,530000,10000,0,0,207,102,30,4096,1202,0,0,0,65536,0,0,65536,0,0
|
||||
54,540000,10000,0,0,200,102,31,4096,1319,0,0,0,65536,0,0,65536,0,0
|
||||
55,550000,10000,0,0,205,103,32,4096,1464,0,0,0,65536,0,0,65536,0,0
|
||||
56,560000,10000,0,0,211,103,32,4096,1620,0,0,0,65536,0,0,65536,0,0
|
||||
57,570000,10000,0,0,193,110,33,4096,1712,0,0,0,65536,0,0,65536,0,0
|
||||
58,580000,10000,0,0,190,5,67,4096,1775,0,0,0,65536,0,0,65536,0,0
|
||||
|
@@ -0,0 +1,59 @@
|
||||
tick_number,elapsed_ns,tick_interval_ns,cache_hits_delta,bucket_hits_delta,word_executions_delta,hot_word_count,avg_word_heat_q48,window_width,actual_window_size,predicted_label_hits,jitter_bits,apic_ticks,time_trust_q48,variance_q48,vm_call_depth_max,hera_heat_q48,hermes_heat_q48,artemis_heat_q48
|
||||
1,10000,10000,0,0,183,4,45,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
2,20000,10000,0,0,173,5,44,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
3,30000,10000,0,0,184,6,60,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
4,40000,10000,0,0,174,8,71,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
5,50000,10000,0,0,150,9,78,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
6,60000,10000,0,0,159,11,73,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
7,70000,10000,0,0,188,15,71,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
8,80000,10000,0,0,214,16,83,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
9,90000,10000,0,0,216,19,82,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
10,100000,10000,0,0,222,21,84,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
11,110000,10000,0,0,207,23,86,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
12,120000,10000,0,0,189,26,83,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
13,130000,10000,0,0,221,28,80,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
14,140000,10000,0,0,204,29,83,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
15,150000,10000,0,0,203,30,82,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
16,160000,10000,0,0,201,32,83,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
17,170000,10000,0,0,190,34,86,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
18,180000,10000,0,0,170,35,73,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
19,190000,10000,0,0,154,28,44,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
20,200000,10000,0,0,154,28,41,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
21,210000,10000,0,0,153,32,39,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
22,220000,10000,0,0,167,35,42,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
23,230000,10000,0,0,176,37,41,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
24,240000,10000,0,0,175,37,39,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
25,250000,10000,0,0,196,38,37,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
26,260000,10000,0,0,192,41,37,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
27,270000,10000,0,0,158,40,38,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
28,280000,10000,0,0,158,40,35,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
29,290000,10000,0,0,164,41,37,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
30,300000,10000,0,0,154,43,39,685,685,0,0,0,65536,0,0,65536,0,0
|
||||
31,310000,10000,0,0,172,46,35,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
32,320000,10000,0,0,180,49,34,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
33,330000,10000,0,0,145,51,35,567,567,0,0,0,65536,0,0,65536,0,0
|
||||
34,340000,10000,0,0,203,53,37,582,582,0,0,0,65536,0,0,65536,0,0
|
||||
35,350000,10000,0,0,154,55,39,731,731,0,0,0,65536,0,0,65536,0,0
|
||||
36,360000,10000,0,0,144,57,37,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
37,370000,10000,0,0,144,57,35,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
38,380000,10000,0,0,132,57,34,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
39,390000,10000,0,0,180,57,32,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
40,400000,10000,0,0,220,63,29,4096,0,0,0,0,65536,0,0,65536,0,0
|
||||
41,410000,10000,0,0,215,64,28,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
42,420000,10000,0,0,208,68,29,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
43,430000,10000,0,0,177,72,27,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
44,440000,10000,0,0,199,77,28,4096,24,0,0,0,65536,0,0,65536,0,0
|
||||
45,450000,10000,0,0,223,82,26,4096,30,0,0,0,65536,0,0,65536,0,0
|
||||
46,460000,10000,0,0,202,85,24,4096,67,0,0,0,65536,0,0,65536,0,0
|
||||
47,470000,10000,0,0,218,91,25,4096,198,0,0,0,65536,0,0,65536,0,0
|
||||
48,480000,10000,0,0,221,92,26,4096,350,0,0,0,65536,0,0,65536,0,0
|
||||
49,490000,10000,0,0,225,97,26,4096,528,0,0,0,65536,0,0,65536,0,0
|
||||
50,500000,10000,0,0,214,100,27,4096,694,0,0,0,65536,0,0,65536,0,0
|
||||
51,510000,10000,0,0,227,102,28,4096,883,0,0,0,65536,0,0,65536,0,0
|
||||
52,520000,10000,0,0,208,102,29,4096,1043,0,0,0,65536,0,0,65536,0,0
|
||||
53,530000,10000,0,0,207,102,30,4096,1202,0,0,0,65536,0,0,65536,0,0
|
||||
54,540000,10000,0,0,200,102,31,4096,1319,0,0,0,65536,0,0,65536,0,0
|
||||
55,550000,10000,0,0,205,103,32,4096,1464,0,0,0,65536,0,0,65536,0,0
|
||||
56,560000,10000,0,0,211,103,32,4096,1620,0,0,0,65536,0,0,65536,0,0
|
||||
57,570000,10000,0,0,193,110,33,4096,1712,0,0,0,65536,0,0,65536,0,0
|
||||
58,580000,10000,0,0,190,5,67,4096,1775,0,0,0,65536,0,0,65536,0,0
|
||||
|
@@ -137,7 +137,7 @@ CapsuleRunResult capsule_birth_baby(
|
||||
const CapsuleDesc *descs,
|
||||
const CapsuleNameEntry *names,
|
||||
const uint8_t *arena,
|
||||
uint32_t *out_vm_id,
|
||||
VMUuid *out_vm_id,
|
||||
void **out_vm_ctx
|
||||
);
|
||||
|
||||
@@ -216,7 +216,7 @@ int capsule_vm_kill(const char *name);
|
||||
* @param out Output: registry entry copy
|
||||
* @return 0 on success, -1 if not found
|
||||
*/
|
||||
int capsule_vm_registry_get(uint32_t vm_id, VMRegistryEntry *out);
|
||||
int capsule_vm_registry_get(VMUuid vm_id, VMRegistryEntry *out);
|
||||
|
||||
/**
|
||||
* capsule_vm_registry_count - Get number of registered VMs
|
||||
@@ -252,7 +252,7 @@ int capsule_vm_find_by_name_nocase(const char *name, VMRegistryEntry *out);
|
||||
* @param vm_id VM ID to update
|
||||
* @param state New VMState value
|
||||
*/
|
||||
void capsule_vm_set_state(uint32_t vm_id, uint32_t state);
|
||||
void capsule_vm_set_state(VMUuid vm_id, uint32_t state);
|
||||
|
||||
/**
|
||||
* capsule_vm_registry_set_name - Assign a symbolic name to a registered VM
|
||||
@@ -262,7 +262,7 @@ void capsule_vm_set_state(uint32_t vm_id, uint32_t state);
|
||||
* @param vm_id VM ID to name
|
||||
* @param name Symbolic name string
|
||||
*/
|
||||
void capsule_vm_registry_set_name(uint32_t vm_id, const char *name);
|
||||
void capsule_vm_registry_set_name(VMUuid vm_id, const char *name);
|
||||
|
||||
/**
|
||||
* capsule_vm_kill_all_nonmama - Kill every non-Mama VM in the registry.
|
||||
|
||||
@@ -31,6 +31,7 @@
|
||||
#define STARKERNEL_CAPSULE_RUN_H
|
||||
|
||||
#include <stdint.h>
|
||||
#include "starkernel/vm_uuid.h" /* VMUuid -- FABRIC.md item 3.8 */
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
@@ -63,7 +64,7 @@ typedef enum {
|
||||
|
||||
typedef struct {
|
||||
uint64_t run_id; /* Sequential run identifier */
|
||||
uint32_t vm_id; /* Which VM executed this */
|
||||
VMUuid vm_id; /* Which VM executed this (item 3.8) */
|
||||
uint32_t reserved; /* Padding */
|
||||
uint64_t capsule_id; /* Which capsule was run */
|
||||
uint64_t capsule_hash; /* Hash at time of execution */
|
||||
@@ -91,17 +92,18 @@ typedef enum {
|
||||
} VMState;
|
||||
|
||||
typedef struct {
|
||||
uint32_t vm_id; /* Assigned at birth, immutable */
|
||||
VMUuid vm_id; /* Assigned at birth, immutable (item 3.8) */
|
||||
uint32_t state; /* VMState */
|
||||
uint64_t birth_capsule_id; /* Which capsule birthed this VM */
|
||||
uint64_t birth_timestamp_ns; /* When VM was born */
|
||||
uint64_t birth_dict_hash; /* Dictionary hash after birth */
|
||||
uint32_t flags; /* VM flags */
|
||||
uint32_t parent_vm_id; /* Who birthed this VM. Set once at birth,
|
||||
VMUuid parent_vm_id; /* Who birthed this VM. Set once at birth,
|
||||
* never rewritten. Hera's own entry is
|
||||
* self-referential (parent_vm_id == vm_id
|
||||
* == 0) -- the sentinel a heat-fanout walk
|
||||
* up the parent chain stops at. */
|
||||
* == vm_uuid_hera(), all-zero) -- the
|
||||
* sentinel a heat-fanout walk up the
|
||||
* parent chain stops at. */
|
||||
void *vm_ptr; /* Pointer to live VM object; NULL when dead */
|
||||
char name[VM_NAME_MAX]; /* Symbolic name, e.g. "Hera", "Hermes" */
|
||||
} VMRegistryEntry;
|
||||
@@ -148,7 +150,7 @@ uint32_t capsule_run_log_count(void);
|
||||
* PARITY:BIRTH vm_id=N capsule_id=X mode=p capsule_hash=H dict_hash=D
|
||||
*/
|
||||
void capsule_parity_log_birth(
|
||||
uint32_t vm_id,
|
||||
VMUuid vm_id,
|
||||
uint64_t capsule_id,
|
||||
uint64_t capsule_hash,
|
||||
uint64_t dict_hash
|
||||
@@ -161,7 +163,7 @@ void capsule_parity_log_birth(
|
||||
* PARITY:BIRTH_FAILED vm_id=N capsule_id=X error=E partial_dict_hash=H
|
||||
*/
|
||||
void capsule_parity_log_birth_failed(
|
||||
uint32_t vm_id,
|
||||
VMUuid vm_id,
|
||||
uint64_t capsule_id,
|
||||
CapsuleRunResult error,
|
||||
uint64_t partial_dict_hash
|
||||
@@ -174,7 +176,7 @@ void capsule_parity_log_birth_failed(
|
||||
* PARITY:RUN vm_id=N run_id=R capsule_id=X mode=e pre_dict=P post_dict=Q
|
||||
*/
|
||||
void capsule_parity_log_run(
|
||||
uint32_t vm_id,
|
||||
VMUuid vm_id,
|
||||
uint64_t run_id,
|
||||
uint64_t capsule_id,
|
||||
uint64_t pre_dict_hash,
|
||||
@@ -200,7 +202,7 @@ void capsule_parity_log_mama_init(
|
||||
* PARITY:KILL vm_id=N name=X
|
||||
*/
|
||||
void capsule_parity_log_kill(
|
||||
uint32_t vm_id,
|
||||
VMUuid vm_id,
|
||||
const char *name
|
||||
);
|
||||
|
||||
|
||||
@@ -41,6 +41,7 @@
|
||||
#define STARKERNEL_CAPSULE_VM_PHYSICS_H
|
||||
|
||||
#include <stdint.h>
|
||||
#include "starkernel/vm_uuid.h" /* VMUuid -- FABRIC.md item 3.8 */
|
||||
|
||||
#ifdef __cplusplus
|
||||
extern "C" {
|
||||
@@ -55,7 +56,7 @@ extern "C" {
|
||||
*
|
||||
* @param vm_id Registry VM ID assigned at birth
|
||||
*/
|
||||
void vm_physics_init(uint32_t vm_id);
|
||||
void vm_physics_init(VMUuid vm_id);
|
||||
|
||||
/**
|
||||
* vm_physics_retire - Remove a killed VM, returning its heat to Hera
|
||||
@@ -70,7 +71,7 @@ void vm_physics_init(uint32_t vm_id);
|
||||
*
|
||||
* @param vm_id Registry VM ID of the VM being killed
|
||||
*/
|
||||
void vm_physics_retire(uint32_t vm_id);
|
||||
void vm_physics_retire(VMUuid vm_id);
|
||||
|
||||
/**
|
||||
* vm_physics_touch - Record real dispatch activity against a VM
|
||||
@@ -89,7 +90,7 @@ void vm_physics_retire(uint32_t vm_id);
|
||||
*
|
||||
* @param vm_id Registry VM ID being dispatched to
|
||||
*/
|
||||
void vm_physics_touch(uint32_t vm_id);
|
||||
void vm_physics_touch(VMUuid vm_id);
|
||||
|
||||
/**
|
||||
* vm_physics_tick - Heartbeat-gated inference pass
|
||||
@@ -147,7 +148,7 @@ uint64_t vm_physics_fleet_heat_sum(void);
|
||||
* @param vm_id Registry VM ID
|
||||
* @return execution_heat_q48, or 0 if vm_id is unknown or not live
|
||||
*/
|
||||
uint64_t vm_physics_heat_of(uint32_t vm_id);
|
||||
uint64_t vm_physics_heat_of(VMUuid vm_id);
|
||||
|
||||
/**
|
||||
* vm_physics_conserved - Conservation check
|
||||
|
||||
@@ -37,6 +37,7 @@
|
||||
#include <stddef.h>
|
||||
#include <stdint.h>
|
||||
#include "starforth_config.h" /* STADIUM_CONTAINS_DEPTH_MAX, STADIUM_CAPACITY_TICK, STADIUM_MEMORY_PERCENT */
|
||||
#include "starkernel/vm_uuid.h" /* VMUuid -- FABRIC.md item 3.8 */
|
||||
|
||||
#define STADIUM_CELL_BYTES 64
|
||||
|
||||
@@ -272,19 +273,15 @@ int stadium_evict(size_t cell_index);
|
||||
/*
|
||||
* StadiumVMQuota - per-VM ownership of a subset of the global cell array
|
||||
* (FABRIC.md §22.3, item 3.7: "each VM holds its own free-list head index
|
||||
* into the global array"). A small table, linearly searched by vm_id --
|
||||
* capsule_birth.c's vm_id is monotonic and never reused (next_vm_id only
|
||||
* increments, even across VM death), so it cannot index this table
|
||||
* directly, and STADIUM_MAX_VM_COUNT is small enough (default 4) that a
|
||||
* linear scan costs nothing. Not exposed outside stadium.c: nothing outside
|
||||
* needs to inspect quota state directly yet.
|
||||
* into the global array"). A small table, linearly searched by vm_id -- a
|
||||
* VMUuid (item 3.8) can't be used as a direct array index anyway, and
|
||||
* STADIUM_MAX_VM_COUNT is small enough (default 4) that a linear scan costs
|
||||
* nothing. Not exposed outside stadium.c: nothing outside needs to inspect
|
||||
* quota state directly yet. Slot emptiness is tracked by an internal
|
||||
* `in_use` flag, not a vm_id sentinel value -- there is no unused vm_id bit
|
||||
* pattern to reserve for it.
|
||||
*/
|
||||
|
||||
/* Sentinel meaning "no VM owns this slot yet." Distinct from a real vm_id
|
||||
* (capsule_birth.c reserves 0 for Hera, so 0 cannot double as "unused" here
|
||||
* either -- same shape of mistake STADIUM_CONTAINS_NONE was fixed for). */
|
||||
#define STADIUM_QUOTA_SLOT_EMPTY ((uint32_t)-1)
|
||||
|
||||
/*
|
||||
* stadium_admit - Place a candidate patron header into the Stadium, scoped
|
||||
* to vm_id's quota (FABRIC.md §19.3, §22.3, item 3.7).
|
||||
@@ -301,9 +298,9 @@ int stadium_evict(size_t cell_index);
|
||||
* -- the item-3.6 rule that patron zero (Hera) must never actually be
|
||||
* selected is a separate, later check at the eviction site.
|
||||
*
|
||||
* REFUSES if vm_id has no quota granted (only Hera, vm_id 0, has one today
|
||||
* -- granted the entire array at stadium_boot_init(), since she is the only
|
||||
* VM that exists per item 0.1). Granting quota to additional VMs, and
|
||||
* REFUSES if vm_id has no quota granted (only Hera, vm_uuid_hera(), has one
|
||||
* today -- granted the entire array at stadium_boot_init(), since she is the
|
||||
* only VM that exists per item 0.1). Granting quota to additional VMs, and
|
||||
* transferring capacity between them, is capacity ARBITRATION -- item 1.3
|
||||
* left "how much capacity moves per eligible transfer" explicitly open, so
|
||||
* this item does not invent it. Only the boot-time all-to-Hera grant exists.
|
||||
@@ -336,7 +333,7 @@ int stadium_evict(size_t cell_index);
|
||||
* quota full and candidate not denser than its least-dense
|
||||
* evictable resident, or it has no evictable resident at all).
|
||||
*/
|
||||
size_t stadium_admit(uint32_t vm_id, const StadiumPatronHeader *candidate);
|
||||
size_t stadium_admit(VMUuid vm_id, const StadiumPatronHeader *candidate);
|
||||
|
||||
#endif /* __STARKERNEL__ */
|
||||
|
||||
|
||||
@@ -0,0 +1,101 @@
|
||||
/*
|
||||
StarForth — Steady-State Virtual Machine Runtime
|
||||
|
||||
Copyright (c) 2023–2025 Robert A. James
|
||||
All rights reserved.
|
||||
|
||||
This file is part of the StarForth project.
|
||||
|
||||
Licensed under the StarForth License, Version 1.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
|
||||
You may obtain a copy of the License at:
|
||||
https://github.com/star.4th@proton.me/StarForth/LICENSE.txt
|
||||
|
||||
This software is provided "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
express or implied, including but not limited to the warranties of
|
||||
merchantability, fitness for a particular purpose, and noninfringement.
|
||||
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
|
||||
*/
|
||||
|
||||
/**
|
||||
* vm_uuid.h - 128-bit VM identifiers (FABRIC.md punch list item 3.8)
|
||||
*
|
||||
* Replaces capsule_birth.c's monotonic uint32_t vm_id with a wider,
|
||||
* RFC-4122-shaped identifier. NOT real randomness: this kernel has no RNG
|
||||
* source at all (checked directly against QEMU 10.2.1's actual CPU feature
|
||||
* set -- amd64 RDRAND and riscv64 Zkr are both available, aarch64 has
|
||||
* neither RNDR nor any RNG property on any CPU model including "max"), and
|
||||
* Captain Bob ruled a uniform fallback across all three ISAs rather than a
|
||||
* per-architecture split. Values are generated by a deterministic PRNG
|
||||
* (splitmix64) seeded from the Mama capsule's content hash -- the same
|
||||
* capsule booted twice produces the same ID sequence, preserving the
|
||||
* run-to-run reproducibility this project has relied on everywhere else
|
||||
* (the dict_hash regression check after every prior item this session).
|
||||
*/
|
||||
|
||||
#ifndef STARKERNEL_VM_UUID_H
|
||||
#define STARKERNEL_VM_UUID_H
|
||||
|
||||
#ifdef __STARKERNEL__
|
||||
|
||||
#include <stdint.h>
|
||||
|
||||
typedef struct {
|
||||
uint64_t hi;
|
||||
uint64_t lo;
|
||||
} VMUuid;
|
||||
|
||||
/*
|
||||
* vm_uuid_hera - The fixed, reserved identifier for Hera (patron zero,
|
||||
* item 3.6; VM 0 in the pre-item-3.8 scheme). Not drawn from the pool --
|
||||
* capsule_birth.c's KILL logic ("Hera cannot be killed") and the fleet
|
||||
* heat-fanout parent-chain sentinel (capsule_run.h's `parent_vm_id`
|
||||
* comment: "self-referential, parent_vm_id == vm_id == 0") both depend on
|
||||
* Hera's id being a fixed, cheaply-comparable value, exactly as 0 was
|
||||
* before this item. All-zero.
|
||||
*/
|
||||
VMUuid vm_uuid_hera(void);
|
||||
int vm_uuid_is_hera(VMUuid id);
|
||||
|
||||
/*
|
||||
* vm_uuid_none - Sentinel meaning "no id" / "slot not in use." All-ones --
|
||||
* NOT all-zero, because all-zero is Hera's reserved value (item 3.8 caught
|
||||
* this collision before writing any code that could have repeated the
|
||||
* STADIUM_CONTAINS_NONE mistake at a new site).
|
||||
*/
|
||||
VMUuid vm_uuid_none(void);
|
||||
int vm_uuid_is_none(VMUuid id);
|
||||
|
||||
int vm_uuid_equal(VMUuid a, VMUuid b);
|
||||
|
||||
/*
|
||||
* vm_uuid_pool_init - Seed the generator. Call once, after the Mama
|
||||
* capsule's content hash is known (right after capsule_birth_mama()
|
||||
* succeeds) and before the first non-Hera VM birth. Idempotent to call
|
||||
* again (re-seeds and refills), though nothing does today.
|
||||
*/
|
||||
void vm_uuid_pool_init(uint64_t seed);
|
||||
|
||||
/*
|
||||
* vm_uuid_next - Pop the next id from the pre-filled FIFO pool, refilling
|
||||
* with a fresh batch (continuing the same deterministic splitmix64 stream)
|
||||
* when empty. If called before vm_uuid_pool_init() (not the intended path),
|
||||
* self-seeds from a fixed default rather than returning garbage -- flagged
|
||||
* as a safety net, not normal use.
|
||||
*/
|
||||
VMUuid vm_uuid_next(void);
|
||||
|
||||
/*
|
||||
* vm_uuid_format - Writes the RFC-4122-shaped string
|
||||
* "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" (36 chars + NUL) into buf.
|
||||
* @param buf Caller-provided buffer, at least 37 bytes.
|
||||
*/
|
||||
void vm_uuid_format(VMUuid id, char *buf);
|
||||
|
||||
#endif /* __STARKERNEL__ */
|
||||
|
||||
#endif /* STARKERNEL_VM_UUID_H */
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -64,7 +64,9 @@ typedef struct vm_node {
|
||||
|
||||
static vm_node_t *vm_registry_head = (void *)0;
|
||||
static uint32_t vm_registry_count = 0;
|
||||
static uint32_t next_vm_id = 1; /* VM 0 reserved for Mama */
|
||||
/* item 3.8: vm_id generation moved to vm_uuid_next()'s deterministic pool;
|
||||
* the monotonic next_vm_id counter this replaced is gone. Hera's id is
|
||||
* vm_uuid_hera() (fixed, reserved), not drawn from the pool. */
|
||||
|
||||
/* Copy at most VM_NAME_MAX-1 chars, always null-terminate */
|
||||
static void vm_name_copy(char *dst, const char *src) {
|
||||
@@ -84,10 +86,10 @@ static int vm_name_eq(const char *a, const char *b) {
|
||||
}
|
||||
|
||||
/* Internal: return mutable pointer into registry node for vm_id */
|
||||
static VMRegistryEntry *vm_find_entry_ptr(uint32_t vm_id) {
|
||||
static VMRegistryEntry *vm_find_entry_ptr(VMUuid vm_id) {
|
||||
vm_node_t *node = vm_registry_head;
|
||||
while (node) {
|
||||
if (node->entry.vm_id == vm_id) return &node->entry;
|
||||
if (vm_uuid_equal(node->entry.vm_id, vm_id)) return &node->entry;
|
||||
node = node->next;
|
||||
}
|
||||
return (void *)0;
|
||||
@@ -109,19 +111,18 @@ void capsule_vm_registry_init(void *mama_vm_ptr) {
|
||||
|
||||
vm_registry_head = (void *)0;
|
||||
vm_registry_count = 0;
|
||||
next_vm_id = 1;
|
||||
|
||||
/* Mama is always VM 0 */
|
||||
/* Mama is always the reserved, fixed vm_uuid_hera() id (item 3.8) */
|
||||
mama = (vm_node_t *)kmalloc(sizeof(vm_node_t));
|
||||
if (!mama) return;
|
||||
|
||||
mama->entry.vm_id = 0;
|
||||
mama->entry.vm_id = vm_uuid_hera();
|
||||
mama->entry.state = VM_STATE_LIVE;
|
||||
mama->entry.birth_capsule_id = 0;
|
||||
mama->entry.birth_timestamp_ns = 0;
|
||||
mama->entry.birth_dict_hash = 0;
|
||||
mama->entry.flags = 0;
|
||||
mama->entry.parent_vm_id = 0; /* self-referential: Hera is the root */
|
||||
mama->entry.parent_vm_id = vm_uuid_hera(); /* self-referential: Hera is the root */
|
||||
mama->entry.vm_ptr = mama_vm_ptr;
|
||||
for (i = 0; i < VM_NAME_MAX; i++) mama->entry.name[i] = '\0';
|
||||
vm_name_copy(mama->entry.name, "Hera");
|
||||
@@ -142,15 +143,20 @@ static VMRegistryEntry *vm_registry_alloc(void) {
|
||||
node = (vm_node_t *)kmalloc(sizeof(vm_node_t));
|
||||
if (!node) return (void *)0;
|
||||
|
||||
node->entry.vm_id = 0;
|
||||
node->entry.vm_id = vm_uuid_none(); /* not yet assigned -- NOT
|
||||
* vm_uuid_hera(): a
|
||||
* newly-allocated embryo
|
||||
* is never Hera (item
|
||||
* 3.8 caught this exact
|
||||
* collision class again) */
|
||||
node->entry.state = VM_STATE_EMBRYO;
|
||||
node->entry.birth_capsule_id = 0;
|
||||
node->entry.birth_timestamp_ns = 0;
|
||||
node->entry.birth_dict_hash = 0;
|
||||
node->entry.flags = 0;
|
||||
node->entry.parent_vm_id = 0; /* only Hera calls BIRTH today; see
|
||||
* design doc's "explicitly out of
|
||||
* scope" for making this dynamic */
|
||||
node->entry.parent_vm_id = vm_uuid_hera(); /* only Hera calls BIRTH
|
||||
* today; see design doc's "explicitly
|
||||
* out of scope" for making this dynamic */
|
||||
node->entry.vm_ptr = (void *)0;
|
||||
for (i = 0; i < VM_NAME_MAX; i++) node->entry.name[i] = '\0';
|
||||
node->next = (void *)0;
|
||||
@@ -168,7 +174,7 @@ static VMRegistryEntry *vm_registry_alloc(void) {
|
||||
return &node->entry;
|
||||
}
|
||||
|
||||
int capsule_vm_registry_get(uint32_t vm_id, VMRegistryEntry *out) {
|
||||
int capsule_vm_registry_get(VMUuid vm_id, VMRegistryEntry *out) {
|
||||
VMRegistryEntry *entry;
|
||||
if (!out) return -1;
|
||||
entry = vm_find_entry_ptr(vm_id);
|
||||
@@ -242,12 +248,12 @@ int capsule_vm_find_by_name_nocase(const char *name, VMRegistryEntry *out) {
|
||||
return -1;
|
||||
}
|
||||
|
||||
void capsule_vm_set_state(uint32_t vm_id, uint32_t state) {
|
||||
void capsule_vm_set_state(VMUuid vm_id, uint32_t state) {
|
||||
VMRegistryEntry *entry = vm_find_entry_ptr(vm_id);
|
||||
if (entry) entry->state = state;
|
||||
}
|
||||
|
||||
void capsule_vm_registry_set_name(uint32_t vm_id, const char *name) {
|
||||
void capsule_vm_registry_set_name(VMUuid vm_id, const char *name) {
|
||||
VMRegistryEntry *entry;
|
||||
if (!name) return;
|
||||
entry = vm_find_entry_ptr(vm_id);
|
||||
@@ -277,7 +283,7 @@ static void dispatch_init_forth(void *vm_ctx) {
|
||||
int capsule_vm_kill(const char *name) {
|
||||
VMRegistryEntry *entry;
|
||||
VM *vm;
|
||||
uint32_t vm_id;
|
||||
VMUuid vm_id;
|
||||
uint32_t i;
|
||||
|
||||
if (!name) return -1;
|
||||
@@ -303,7 +309,7 @@ int capsule_vm_kill(const char *name) {
|
||||
}
|
||||
|
||||
/* Hera cannot be killed */
|
||||
if (entry->vm_id == 0) {
|
||||
if (vm_uuid_is_hera(entry->vm_id)) {
|
||||
console_println("KILL: cannot kill Hera");
|
||||
return -1;
|
||||
}
|
||||
@@ -341,11 +347,11 @@ int capsule_vm_kill(const char *name) {
|
||||
void capsule_vm_kill_all_nonmama(void) {
|
||||
vm_node_t *node;
|
||||
VM *vm;
|
||||
uint32_t vm_id;
|
||||
VMUuid vm_id;
|
||||
|
||||
node = vm_registry_head;
|
||||
while (node) {
|
||||
if (node->entry.vm_id == 0 || node->entry.state == VM_STATE_DEAD) {
|
||||
if (vm_uuid_is_hera(node->entry.vm_id) || node->entry.state == VM_STATE_DEAD) {
|
||||
node = node->next;
|
||||
continue;
|
||||
}
|
||||
@@ -402,13 +408,18 @@ CapsuleRunResult capsule_birth_mama(
|
||||
post_dict_hash);
|
||||
|
||||
{
|
||||
VMRegistryEntry *mama_entry = vm_find_entry_ptr(0);
|
||||
VMRegistryEntry *mama_entry = vm_find_entry_ptr(vm_uuid_hera());
|
||||
if (mama_entry) {
|
||||
mama_entry->birth_capsule_id = mama_cap->capsule_id;
|
||||
mama_entry->birth_dict_hash = post_dict_hash;
|
||||
}
|
||||
}
|
||||
|
||||
/* item 3.8: seed the vm_uuid pool now that the Mama capsule's content
|
||||
* hash is known -- before any baby birth (none happens today, item 0.1),
|
||||
* so the same capsule booted twice produces the same id sequence. */
|
||||
vm_uuid_pool_init(mama_cap->content_hash);
|
||||
|
||||
return CAPSULE_RUN_OK;
|
||||
}
|
||||
|
||||
@@ -422,7 +433,7 @@ CapsuleRunResult capsule_birth_baby(
|
||||
const CapsuleDesc *descs,
|
||||
const CapsuleNameEntry *names,
|
||||
const uint8_t *arena,
|
||||
uint32_t *out_vm_id,
|
||||
VMUuid *out_vm_id,
|
||||
void **out_vm_ctx)
|
||||
{
|
||||
if (!capsule_name || !dir || !descs || !names || !arena)
|
||||
@@ -440,7 +451,7 @@ CapsuleRunResult capsule_birth_baby(
|
||||
if (vr != CAPSULE_VALID) return CAPSULE_RUN_ERR_INVALID;
|
||||
|
||||
if (vm_registry_live_count() >= STADIUM_MAX_VM_COUNT) {
|
||||
capsule_parity_log_birth_failed(0, cap->capsule_id,
|
||||
capsule_parity_log_birth_failed(vm_uuid_none(), cap->capsule_id,
|
||||
CAPSULE_RUN_ERR_FLEET_FULL, 0);
|
||||
return CAPSULE_RUN_ERR_FLEET_FULL;
|
||||
}
|
||||
@@ -448,7 +459,7 @@ CapsuleRunResult capsule_birth_baby(
|
||||
VMRegistryEntry *entry = vm_registry_alloc();
|
||||
if (!entry) return CAPSULE_RUN_ERR_INVALID;
|
||||
|
||||
uint32_t vm_id = next_vm_id++;
|
||||
VMUuid vm_id = vm_uuid_next();
|
||||
entry->vm_id = vm_id;
|
||||
entry->state = VM_STATE_EMBRYO;
|
||||
entry->birth_capsule_id = cap->capsule_id;
|
||||
@@ -533,7 +544,7 @@ CapsuleRunResult capsule_run_experiment(
|
||||
|
||||
CapsuleRunRecord record;
|
||||
record.run_id = 0;
|
||||
record.vm_id = 0;
|
||||
record.vm_id = vm_uuid_hera(); /* experiments run on Mama's own VM */
|
||||
record.reserved = 0;
|
||||
record.capsule_id = cap->capsule_id;
|
||||
record.capsule_hash = cap->content_hash;
|
||||
@@ -546,7 +557,7 @@ CapsuleRunResult capsule_run_experiment(
|
||||
|
||||
uint64_t run_id = capsule_run_log_record(&record);
|
||||
|
||||
capsule_parity_log_run(0, run_id, cap->capsule_id, pre_dict_hash, post_dict_hash);
|
||||
capsule_parity_log_run(vm_uuid_hera(), run_id, cap->capsule_id, pre_dict_hash, post_dict_hash);
|
||||
|
||||
if (out_run_id) *out_run_id = run_id;
|
||||
|
||||
|
||||
@@ -67,7 +67,7 @@ void capsule_run_log_init(void) {
|
||||
/* Zero the ring buffer */
|
||||
for (uint32_t i = 0; i < CAPSULE_MAX_RUN_RECORDS; i++) {
|
||||
run_log[i].run_id = 0;
|
||||
run_log[i].vm_id = 0;
|
||||
run_log[i].vm_id = vm_uuid_none(); /* not {0,0} -- that's Hera's reserved id (item 3.8) */
|
||||
run_log[i].reserved = 0;
|
||||
run_log[i].capsule_id = 0;
|
||||
run_log[i].capsule_hash = 0;
|
||||
@@ -158,6 +158,14 @@ static void parity_put_hex64(uint64_t val) {
|
||||
PARITY_EMIT(buf);
|
||||
}
|
||||
|
||||
/* item 3.8: VMUuid printed as its two hex64 halves, hyphen-separated --
|
||||
* reuses parity_put_hex64 rather than a new hex-formatting routine. */
|
||||
static void parity_put_uuid(VMUuid id) {
|
||||
parity_put_hex64(id.hi);
|
||||
PARITY_EMIT("-");
|
||||
parity_put_hex64(id.lo);
|
||||
}
|
||||
|
||||
static void parity_put_u32(uint32_t val) {
|
||||
char buf[12];
|
||||
int i = 11;
|
||||
@@ -189,7 +197,7 @@ static void parity_put_u64(uint64_t val) {
|
||||
}
|
||||
|
||||
void capsule_parity_log_birth(
|
||||
uint32_t vm_id,
|
||||
VMUuid vm_id,
|
||||
uint64_t capsule_id,
|
||||
uint64_t capsule_hash,
|
||||
uint64_t dict_hash)
|
||||
@@ -197,7 +205,7 @@ void capsule_parity_log_birth(
|
||||
if (!PARITY_HAVE_SINK) return;
|
||||
|
||||
PARITY_EMIT("PARITY:BIRTH vm_id=");
|
||||
parity_put_u32(vm_id);
|
||||
parity_put_uuid(vm_id);
|
||||
PARITY_EMIT(" capsule_id=");
|
||||
parity_put_hex64(capsule_id);
|
||||
PARITY_EMIT(" mode=p capsule_hash=");
|
||||
@@ -208,7 +216,7 @@ void capsule_parity_log_birth(
|
||||
}
|
||||
|
||||
void capsule_parity_log_birth_failed(
|
||||
uint32_t vm_id,
|
||||
VMUuid vm_id,
|
||||
uint64_t capsule_id,
|
||||
CapsuleRunResult error,
|
||||
uint64_t partial_dict_hash)
|
||||
@@ -216,7 +224,7 @@ void capsule_parity_log_birth_failed(
|
||||
if (!PARITY_HAVE_SINK) return;
|
||||
|
||||
PARITY_EMIT("PARITY:BIRTH_FAILED vm_id=");
|
||||
parity_put_u32(vm_id);
|
||||
parity_put_uuid(vm_id);
|
||||
PARITY_EMIT(" capsule_id=");
|
||||
parity_put_hex64(capsule_id);
|
||||
PARITY_EMIT(" error=");
|
||||
@@ -227,7 +235,7 @@ void capsule_parity_log_birth_failed(
|
||||
}
|
||||
|
||||
void capsule_parity_log_run(
|
||||
uint32_t vm_id,
|
||||
VMUuid vm_id,
|
||||
uint64_t run_id,
|
||||
uint64_t capsule_id,
|
||||
uint64_t pre_dict_hash,
|
||||
@@ -236,7 +244,7 @@ void capsule_parity_log_run(
|
||||
if (!PARITY_HAVE_SINK) return;
|
||||
|
||||
PARITY_EMIT("PARITY:RUN vm_id=");
|
||||
parity_put_u32(vm_id);
|
||||
parity_put_uuid(vm_id);
|
||||
PARITY_EMIT(" run_id=");
|
||||
parity_put_u64(run_id);
|
||||
PARITY_EMIT(" capsule_id=");
|
||||
@@ -268,12 +276,12 @@ void capsule_parity_log_mama_init(
|
||||
PARITY_EMIT("\n");
|
||||
}
|
||||
|
||||
void capsule_parity_log_kill(uint32_t vm_id, const char *name)
|
||||
void capsule_parity_log_kill(VMUuid vm_id, const char *name)
|
||||
{
|
||||
if (!PARITY_HAVE_SINK) return;
|
||||
|
||||
PARITY_EMIT("PARITY:KILL vm_id=");
|
||||
parity_put_u32(vm_id);
|
||||
parity_put_uuid(vm_id);
|
||||
PARITY_EMIT(" name=");
|
||||
if (name) PARITY_EMIT(name);
|
||||
PARITY_EMIT("\n");
|
||||
|
||||
@@ -66,7 +66,7 @@ typedef struct {
|
||||
} VMPhysics;
|
||||
|
||||
typedef struct vm_physics_node {
|
||||
uint32_t vm_id;
|
||||
VMUuid vm_id;
|
||||
VMPhysics physics;
|
||||
struct vm_physics_node *next;
|
||||
} vm_physics_node_t;
|
||||
@@ -157,11 +157,11 @@ static uint64_t slope_fit_quality_q48 = 0;
|
||||
static uint64_t fleet_heartbeat_tick_count = 0;
|
||||
static uint64_t fleet_last_inference_tick = 0;
|
||||
|
||||
static vm_physics_node_t *vm_physics_find(uint32_t vm_id)
|
||||
static vm_physics_node_t *vm_physics_find(VMUuid vm_id)
|
||||
{
|
||||
vm_physics_node_t *n = vm_physics_head;
|
||||
while (n) {
|
||||
if (n->vm_id == vm_id) return n;
|
||||
if (vm_uuid_equal(n->vm_id, vm_id)) return n;
|
||||
n = n->next;
|
||||
}
|
||||
return (void *)0;
|
||||
@@ -182,10 +182,10 @@ static void vm_physics_transfer(VMPhysics *from, VMPhysics *to, uint64_t amount_
|
||||
to->execution_heat_q48 += moved;
|
||||
}
|
||||
|
||||
void vm_physics_init(uint32_t vm_id)
|
||||
void vm_physics_init(VMUuid vm_id)
|
||||
{
|
||||
vm_physics_node_t *node = vm_physics_find(vm_id);
|
||||
/* Hera (vm_id 0) is the fleet's single structural root -- the one
|
||||
/* Hera (vm_uuid_hera()) is the fleet's single structural root -- the one
|
||||
* entry capsule_vm_kill refuses to ever kill, and the same fixed
|
||||
* point vm_physics_find_root_id below walks every parent chain up
|
||||
* to. She is where the fleet's whole Q48_ONE initially resides;
|
||||
@@ -193,7 +193,7 @@ void vm_physics_init(uint32_t vm_id)
|
||||
* per the "cold mass added to a closed system" reasoning -- which
|
||||
* requires a nonzero sum to already exist, so Hera's own
|
||||
* registration is where that sum is seeded. */
|
||||
int is_root = (vm_id == 0);
|
||||
int is_root = vm_uuid_is_hera(vm_id);
|
||||
|
||||
if (node) {
|
||||
node->physics.execution_heat_q48 = is_root ? Q48_ONE : 0;
|
||||
@@ -222,39 +222,39 @@ void vm_physics_init(uint32_t vm_id)
|
||||
* at its own birth and never rewritten -- including a dead VM's, so the
|
||||
* walk continues correctly through an already-killed intermediate
|
||||
* parent without any special dead-parent handling. Hera's own entry is
|
||||
* self-referential (parent_vm_id == vm_id == 0), which is what stops
|
||||
* the walk: she is the only node with no outbound edge.
|
||||
* self-referential (parent_vm_id == vm_id == vm_uuid_hera()), which is
|
||||
* what stops the walk: she is the only node with no outbound edge.
|
||||
*
|
||||
* The 64-hop guard is defensive only -- a well-formed chain terminates
|
||||
* in O(fleet depth) hops, nowhere near 64. It exists so a corrupted
|
||||
* chain (which should never happen) returns the starting vm_id instead
|
||||
* of spinning.
|
||||
*/
|
||||
static uint32_t vm_physics_find_root_id(uint32_t vm_id)
|
||||
static VMUuid vm_physics_find_root_id(VMUuid vm_id)
|
||||
{
|
||||
uint32_t cursor = vm_id;
|
||||
VMUuid cursor = vm_id;
|
||||
uint32_t guard;
|
||||
|
||||
for (guard = 0; guard < 64; guard++) {
|
||||
VMRegistryEntry entry;
|
||||
|
||||
if (capsule_vm_registry_get(cursor, &entry) != 0) break;
|
||||
if (entry.parent_vm_id == cursor) break; /* self-referential: root */
|
||||
if (vm_uuid_equal(entry.parent_vm_id, cursor)) break; /* self-referential: root */
|
||||
cursor = entry.parent_vm_id;
|
||||
}
|
||||
return cursor;
|
||||
}
|
||||
|
||||
void vm_physics_retire(uint32_t vm_id)
|
||||
void vm_physics_retire(VMUuid vm_id)
|
||||
{
|
||||
vm_physics_node_t *dying = vm_physics_find(vm_id);
|
||||
vm_physics_node_t *root;
|
||||
uint32_t root_id;
|
||||
VMUuid root_id;
|
||||
|
||||
if (!dying || !dying->physics.is_live) return;
|
||||
|
||||
root_id = vm_physics_find_root_id(vm_id);
|
||||
root = (root_id != vm_id) ? vm_physics_find(root_id) : (void *)0;
|
||||
root = !vm_uuid_equal(root_id, vm_id) ? vm_physics_find(root_id) : (void *)0;
|
||||
|
||||
if (root) {
|
||||
/* The dying VM's entire remaining heat flows to the root it
|
||||
@@ -278,7 +278,7 @@ void vm_physics_retire(uint32_t vm_id)
|
||||
dying->physics.is_live = 0;
|
||||
}
|
||||
|
||||
void vm_physics_touch(uint32_t vm_id)
|
||||
void vm_physics_touch(VMUuid vm_id)
|
||||
{
|
||||
vm_physics_node_t *target = vm_physics_find(vm_id);
|
||||
VMFleetTouchSample sample = { 0, 0, 0 };
|
||||
@@ -483,7 +483,7 @@ int vm_physics_conserved(void)
|
||||
return diff < VM_PHYSICS_EPSILON_Q48;
|
||||
}
|
||||
|
||||
uint64_t vm_physics_heat_of(uint32_t vm_id)
|
||||
uint64_t vm_physics_heat_of(VMUuid vm_id)
|
||||
{
|
||||
vm_physics_node_t *n = vm_physics_find(vm_id);
|
||||
if (!n || !n->physics.is_live) return 0;
|
||||
@@ -541,7 +541,11 @@ void vm_physics_status(void)
|
||||
if (!n->physics.is_live) continue;
|
||||
|
||||
console_puts("VM-PHYSICS: vm_id=");
|
||||
console_put_u64(n->vm_id);
|
||||
{
|
||||
char uuid_buf[37];
|
||||
vm_uuid_format(n->vm_id, uuid_buf);
|
||||
console_puts(uuid_buf);
|
||||
}
|
||||
|
||||
if (capsule_vm_registry_get(n->vm_id, &entry) == 0) {
|
||||
console_puts(" name=");
|
||||
|
||||
@@ -224,7 +224,7 @@ void mama_word_birth(VM *vm)
|
||||
const char *src;
|
||||
char lower[VM_NAME_MAX];
|
||||
CapsuleRunResult result;
|
||||
uint32_t new_vm_id;
|
||||
VMUuid new_vm_id;
|
||||
|
||||
if (vm->dsp < 1) {
|
||||
vm->error = 1;
|
||||
@@ -277,7 +277,7 @@ void mama_word_birth(VM *vm)
|
||||
{ const char *suf = "init.4th"; for (i = 0; suf[i]; i++) capsule_name[j++] = suf[i]; }
|
||||
capsule_name[j] = '\0';
|
||||
|
||||
new_vm_id = 0;
|
||||
new_vm_id = vm_uuid_none();
|
||||
|
||||
/* Switch console prefix to the baby's name so its init capsule output
|
||||
* appears tagged [Hermes] / [Artemis] rather than [Hera]. */
|
||||
@@ -468,8 +468,8 @@ void mama_word_use(VM *vm)
|
||||
return;
|
||||
}
|
||||
|
||||
/* vm_id 0 = Hera — restore default dispatch (NULL = use REPL's own vm) */
|
||||
if (entry.vm_id == 0) {
|
||||
/* Hera — restore default dispatch (NULL = use REPL's own vm) */
|
||||
if (vm_uuid_is_hera(entry.vm_id)) {
|
||||
sk_repl_set_active_vm((void *)0);
|
||||
} else {
|
||||
sk_repl_set_active_vm((VM *)entry.vm_ptr);
|
||||
@@ -763,9 +763,11 @@ static void mama_word_vm_call(VM *vm)
|
||||
}
|
||||
|
||||
/**
|
||||
* @brief CAPSULE-BIRTH ( capsule-id -- vm-id )
|
||||
* @brief CAPSULE-BIRTH ( capsule-id -- vm-id-hi vm-id-lo )
|
||||
* Birth a baby VM from a production (p) capsule.
|
||||
* Returns the new VM's ID, or -1 on failure.
|
||||
* Returns the new VM's 128-bit ID as a double (item 3.8 -- FORTH already
|
||||
* has double-cell words for exactly this), high cell on top, or
|
||||
* vm_uuid_none()'s hi/lo (both all-ones) on failure.
|
||||
*/
|
||||
void mama_word_capsule_birth(VM *vm)
|
||||
{
|
||||
@@ -775,10 +777,11 @@ void mama_word_capsule_birth(VM *vm)
|
||||
}
|
||||
|
||||
cell_t capsule_idx = vm_pop(vm);
|
||||
uint32_t new_vm_id = 0;
|
||||
VMUuid new_vm_id = vm_uuid_none();
|
||||
|
||||
if ((uint64_t)capsule_idx >= capsule_get_desc_count()) {
|
||||
vm_push(vm, (cell_t)-1);
|
||||
vm_push(vm, (cell_t)new_vm_id.lo);
|
||||
vm_push(vm, (cell_t)new_vm_id.hi);
|
||||
return;
|
||||
}
|
||||
const char *cap_name = capsule_get_names()[(uint32_t)capsule_idx].name;
|
||||
@@ -793,11 +796,11 @@ void mama_word_capsule_birth(VM *vm)
|
||||
(void **)0 /* Don't need VM context back */
|
||||
);
|
||||
|
||||
if (result == CAPSULE_RUN_OK) {
|
||||
vm_push(vm, (cell_t)new_vm_id);
|
||||
} else {
|
||||
vm_push(vm, (cell_t)-1); /* Birth failed */
|
||||
if (result != CAPSULE_RUN_OK) {
|
||||
new_vm_id = vm_uuid_none(); /* Birth failed */
|
||||
}
|
||||
vm_push(vm, (cell_t)new_vm_id.lo);
|
||||
vm_push(vm, (cell_t)new_vm_id.hi);
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -836,12 +839,14 @@ void mama_word_capsule_run(VM *vm)
|
||||
* ============================================================================ */
|
||||
|
||||
/**
|
||||
* @brief MAMA-VM-ID ( -- 0 )
|
||||
* Push Mama's VM ID (always 0).
|
||||
* @brief MAMA-VM-ID ( -- 0 0 )
|
||||
* Push Mama's VM ID as a double (item 3.8): vm_uuid_hera() is all-zero,
|
||||
* so both cells are 0. High cell on top, matching CAPSULE-BIRTH.
|
||||
*/
|
||||
void mama_word_mama_vm_id(VM *vm)
|
||||
{
|
||||
vm_push(vm, 0);
|
||||
vm_push(vm, 0);
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -969,7 +974,7 @@ static void mama_word_connect_artemis(VM *vm __attribute__((unused)))
|
||||
if (capsule_vm_find_by_name_nocase("Artemis", &entry) != 0 ||
|
||||
entry.state == VM_STATE_DEAD ||
|
||||
entry.state == VM_STATE_STILLBORN) {
|
||||
uint32_t new_vm_id = 0;
|
||||
VMUuid new_vm_id = vm_uuid_none();
|
||||
const char *saved = console_get_vm_name();
|
||||
CapsuleRunResult r;
|
||||
|
||||
@@ -1040,7 +1045,7 @@ static void mama_word_connect_hermes(VM *vm __attribute__((unused)))
|
||||
if (capsule_vm_find_by_name_nocase("Hermes", &entry) != 0 ||
|
||||
entry.state == VM_STATE_DEAD ||
|
||||
entry.state == VM_STATE_STILLBORN) {
|
||||
uint32_t new_vm_id = 0;
|
||||
VMUuid new_vm_id = vm_uuid_none();
|
||||
const char *saved = console_get_vm_name();
|
||||
CapsuleRunResult r;
|
||||
|
||||
|
||||
@@ -0,0 +1,137 @@
|
||||
/*
|
||||
StarForth — Steady-State Virtual Machine Runtime
|
||||
|
||||
Copyright (c) 2023–2025 Robert A. James
|
||||
All rights reserved.
|
||||
|
||||
This file is part of the StarForth project.
|
||||
|
||||
Licensed under the StarForth License, Version 1.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
|
||||
You may obtain a copy of the License at:
|
||||
https://github.com/star.4th@proton.me/StarForth/LICENSE.txt
|
||||
|
||||
This software is provided "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
||||
express or implied, including but not limited to the warranties of
|
||||
merchantability, fitness for a particular purpose, and noninfringement.
|
||||
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
|
||||
*/
|
||||
|
||||
/**
|
||||
* vm_uuid.c - 128-bit VM identifiers (FABRIC.md punch list item 3.8)
|
||||
*
|
||||
* See vm_uuid.h for the design rationale (no RNG source exists on any of
|
||||
* the three ISAs uniformly, so this is deterministic, not random).
|
||||
*/
|
||||
|
||||
#include "starkernel/vm_uuid.h"
|
||||
|
||||
#ifdef __STARKERNEL__
|
||||
|
||||
#include <stddef.h>
|
||||
|
||||
#define VM_UUID_POOL_SIZE 16
|
||||
|
||||
static uint64_t vm_uuid_prng_state = 0;
|
||||
static int vm_uuid_seeded = 0;
|
||||
static VMUuid vm_uuid_pool[VM_UUID_POOL_SIZE];
|
||||
static size_t vm_uuid_pool_pos = VM_UUID_POOL_SIZE; /* "empty": first next() call refills */
|
||||
|
||||
VMUuid vm_uuid_hera(void) {
|
||||
VMUuid id;
|
||||
id.hi = 0;
|
||||
id.lo = 0;
|
||||
return id;
|
||||
}
|
||||
|
||||
int vm_uuid_is_hera(VMUuid id) {
|
||||
return id.hi == 0 && id.lo == 0;
|
||||
}
|
||||
|
||||
VMUuid vm_uuid_none(void) {
|
||||
VMUuid id;
|
||||
id.hi = 0xFFFFFFFFFFFFFFFFULL;
|
||||
id.lo = 0xFFFFFFFFFFFFFFFFULL;
|
||||
return id;
|
||||
}
|
||||
|
||||
int vm_uuid_is_none(VMUuid id) {
|
||||
return id.hi == 0xFFFFFFFFFFFFFFFFULL && id.lo == 0xFFFFFFFFFFFFFFFFULL;
|
||||
}
|
||||
|
||||
int vm_uuid_equal(VMUuid a, VMUuid b) {
|
||||
return a.hi == b.hi && a.lo == b.lo;
|
||||
}
|
||||
|
||||
/* splitmix64 -- public-domain, well-known, minimal. Deterministic given a
|
||||
* seed; not cryptographically random, not claimed to be. */
|
||||
static uint64_t splitmix64_next(uint64_t *state) {
|
||||
uint64_t z = (*state += 0x9E3779B97F4A7C15ULL);
|
||||
z = (z ^ (z >> 30)) * 0xBF58476D1CE4E5B9ULL;
|
||||
z = (z ^ (z >> 27)) * 0x94D049BB133111EBULL;
|
||||
return z ^ (z >> 31);
|
||||
}
|
||||
|
||||
static void vm_uuid_pool_refill(void) {
|
||||
size_t i;
|
||||
for (i = 0; i < VM_UUID_POOL_SIZE; i++) {
|
||||
uint64_t hi = splitmix64_next(&vm_uuid_prng_state);
|
||||
uint64_t lo = splitmix64_next(&vm_uuid_prng_state);
|
||||
/* RFC 4122 version 4 / variant bits -- cosmetic shape only, not a
|
||||
* claim these are cryptographically random. */
|
||||
hi = (hi & 0xFFFFFFFFFFFF0FFFULL) | 0x0000000000004000ULL;
|
||||
lo = (lo & 0x3FFFFFFFFFFFFFFFULL) | 0x8000000000000000ULL;
|
||||
vm_uuid_pool[i].hi = hi;
|
||||
vm_uuid_pool[i].lo = lo;
|
||||
}
|
||||
vm_uuid_pool_pos = 0;
|
||||
}
|
||||
|
||||
void vm_uuid_pool_init(uint64_t seed) {
|
||||
vm_uuid_prng_state = seed;
|
||||
vm_uuid_seeded = 1;
|
||||
vm_uuid_pool_refill();
|
||||
}
|
||||
|
||||
VMUuid vm_uuid_next(void) {
|
||||
VMUuid id;
|
||||
|
||||
if (!vm_uuid_seeded) {
|
||||
/* Safety net, not the intended path -- callers should seed from the
|
||||
* Mama capsule's content hash before the first non-Hera VM birth. */
|
||||
vm_uuid_pool_init(0x9E3779B97F4A7C15ULL);
|
||||
}
|
||||
if (vm_uuid_pool_pos >= VM_UUID_POOL_SIZE) {
|
||||
vm_uuid_pool_refill();
|
||||
}
|
||||
|
||||
id = vm_uuid_pool[vm_uuid_pool_pos];
|
||||
vm_uuid_pool_pos++;
|
||||
return id;
|
||||
}
|
||||
|
||||
void vm_uuid_format(VMUuid id, char *buf) {
|
||||
static const char hex[] = "0123456789abcdef";
|
||||
int pos = 0;
|
||||
int i;
|
||||
uint64_t halves[2];
|
||||
/* Group boundaries per RFC 4122: 8-4-4-4-12 hex digits, dashes after
|
||||
* digit 8, 12, 16, 20 (of 32 total). hi supplies digits 0-15, lo
|
||||
* supplies digits 16-31. */
|
||||
halves[0] = id.hi;
|
||||
halves[1] = id.lo;
|
||||
|
||||
for (i = 0; i < 32; i++) {
|
||||
uint64_t v = (i < 16) ? halves[0] : halves[1];
|
||||
int shift = (15 - (i % 16)) * 4;
|
||||
buf[pos++] = hex[(v >> shift) & 0xF];
|
||||
if (i == 7 || i == 11 || i == 15 || i == 19) buf[pos++] = '-';
|
||||
}
|
||||
buf[pos] = '\0';
|
||||
}
|
||||
|
||||
#endif /* __STARKERNEL__ */
|
||||
@@ -271,7 +271,7 @@ int sk_vm_bootstrap_parity(ParityPacket *out) {
|
||||
* capsule_birth_baby() which never calls vm_init_with_host(). */
|
||||
capsule_vm_hooks_register();
|
||||
capsule_vm_registry_init(vm); /* establishes [Hera] console prefix */
|
||||
vm_physics_init(0); /* Hera: the fleet's root, seeded Q48_ONE */
|
||||
vm_physics_init(vm_uuid_hera()); /* Hera: the fleet's root, seeded Q48_ONE */
|
||||
capsule_run_log_init();
|
||||
register_mama_forth_words(vm); /* BIRTH KILL START STOP USE + capsule words */
|
||||
#if SK_PARITY_DEBUG
|
||||
|
||||
@@ -68,7 +68,7 @@ static size_t link_to_size(uint32_t v) {
|
||||
* rather than direct indexing.
|
||||
*/
|
||||
typedef struct {
|
||||
uint32_t vm_id;
|
||||
VMUuid vm_id;
|
||||
int in_use;
|
||||
size_t free_head;
|
||||
} StadiumVMQuota;
|
||||
@@ -76,10 +76,10 @@ typedef struct {
|
||||
static StadiumVMQuota stadium_quotas[STADIUM_MAX_VM_COUNT];
|
||||
|
||||
/* Returns the quota slot index for vm_id, or -1 if none is granted. */
|
||||
static int quota_slot_for_vm(uint32_t vm_id) {
|
||||
static int quota_slot_for_vm(VMUuid vm_id) {
|
||||
int i;
|
||||
for (i = 0; i < STADIUM_MAX_VM_COUNT; i++) {
|
||||
if (stadium_quotas[i].in_use && stadium_quotas[i].vm_id == vm_id) return i;
|
||||
if (stadium_quotas[i].in_use && vm_uuid_equal(stadium_quotas[i].vm_id, vm_id)) return i;
|
||||
}
|
||||
return -1;
|
||||
}
|
||||
@@ -149,12 +149,12 @@ int stadium_boot_init(void) {
|
||||
{
|
||||
int i;
|
||||
for (i = 0; i < STADIUM_MAX_VM_COUNT; i++) {
|
||||
stadium_quotas[i].vm_id = 0;
|
||||
stadium_quotas[i].vm_id = vm_uuid_none();
|
||||
stadium_quotas[i].in_use = 0;
|
||||
stadium_quotas[i].free_head = STADIUM_CELL_NONE;
|
||||
}
|
||||
}
|
||||
stadium_quotas[0].vm_id = 0;
|
||||
stadium_quotas[0].vm_id = vm_uuid_hera();
|
||||
stadium_quotas[0].in_use = 1;
|
||||
stadium_quotas[0].free_head = 0;
|
||||
|
||||
@@ -309,7 +309,7 @@ int stadium_evict(size_t cell_index) {
|
||||
* contains-gated residents are skipped, never eviction candidates) and
|
||||
* evicting it only if the candidate is strictly denser.
|
||||
*/
|
||||
size_t stadium_admit(uint32_t vm_id, const StadiumPatronHeader *candidate) {
|
||||
size_t stadium_admit(VMUuid vm_id, const StadiumPatronHeader *candidate) {
|
||||
int slot;
|
||||
size_t i;
|
||||
size_t idx;
|
||||
|
||||
Reference in New Issue
Block a user