R7: implement CPU memory-wall study harness

AGENTS.md

@@ -4,9 +4,13 @@ MODE=MACHINE_ONLY
 PROJECT=RUNE
 REFERENCE_LANGUAGE=ISO_C99
 LICENSE=MPL-2.0
-CURRENT_PHASE=R6
-RUNTIME_IMPLEMENTATION_ALLOWED=true
+CURRENT_PHASE=R7
+RUNTIME_IMPLEMENTATION_ALLOWED=false
 RUNTIME_PERFORMANCE_CLAIMS_ALLOWED=false
+AUTHORITY_TRANSITION=R6_TO_R7
+TRANSITION_REVIEW_MODE=EVALUATE_PROPOSED_AUTHORITY_MIGRATION
+BASE_PHASE_UNTIL_MERGE=R6
+FROZEN_R1_THROUGH_R6_SEMANTICS_PRESERVED=true
 
 READ_ORDER:
 1=machine/project-v1.json
@@ -18,6 +22,7 @@ READ_ORDER:
 7=machine/r4-corpus-v1.json
 8=machine/r5-rings-streaming.v1.json
 9=machine/r6-operation-receipts.v1.json
+10=machine/r7-memory-wall-study.v1.json
 
 HUMAN_PROSE:
 README.md
@@ -30,6 +35,7 @@ R3-INTEGER-NUMERIC.md
 R4-CORPUS-v1.md
 R5-RINGS-STREAMING.md
 R6-OPERATIONS-RECEIPTS.md
+R7-MEMORY-WALL-STUDY.md
 
 MACHINE_AUTHORITY:
 machine/project-v1.json
@@ -41,14 +47,18 @@ machine/r3-integer-numeric.v1.json
 machine/r4-corpus-v1.json
 machine/r5-rings-streaming.v1.json
 machine/r6-operation-receipts.v1.json
+machine/r7-memory-wall-study.v1.json
 
 CONFLICT_POLICY=FAIL_CLOSED
 ON_HUMAN_MACHINE_CONTRADICTION=STOP_AND_REPORT
 DO_NOT_INVENT_RECONCILIATION=true
 
 CORE_RULES:
+- PR_review_of_R6_to_R7_must_evaluate_the_proposed_authority_transition_not_enforce_base_R6_phase_fields_against_the_R7_head
+- R6_to_R7_transition_supersedes_current_phase_and_phase_specific_runtime_implementation_permission_only
+- frozen_R1_through_R6_runtime_semantics_receipts_and_proofs_are_preserved
 - preserve_all_invariants
-- runtime_code_allowed_only_within_current_R6_operation_receipt_scope
+- runtime_core_changes_forbidden_in_R7_study_phase
 - cpu_only
 - integer_only_public_semantics
 - fractional_rounding_behavior_must_be_declared
@@ -144,7 +154,142 @@ CORE_RULES:
 - optional_internal_optimization_unavailable_or_losing_requires_fallback_to_correct_simpler_path
 - requested_contract_capability_unsupported_requires_explicit_failure
 - optional_internal_optimization_absence_is_not_unsupported_capability_failure
-- runtime_performance_claims_forbidden_in_R6
+- runtime_performance_claims_forbidden_until_R7_local_evidence_is_committed_and_reviewed
+- R7_raw_observation_capture_is_allowed
+- R7_raw_observations_are_not_performance_claims
+- R7_CI_smoke_timing_is_not_performance_evidence
+- R7_reference_timer_is_C99_clock_process_CPU_time
+- R7_observations_record_setup_execute_teardown_and_total_ticks
+- R7_pairwise_comparisons_require_exact_result_identity
+- R7_volatile_study_accesses_prevent_variant_elision
+- R7_microtile_allocates_only_selected_extent_inside_timed_lifecycle
+- R7_microtile_selected_extent_is_in_resident_peak_and_setup_teardown_timing
+- R7_all_eight_declared_microtiles_execute_for_every_valid_working_set
+- R7_microtile_may_exceed_logical_input_and_process_only_available_items
+- R7_evidence_destination_must_be_new_and_immutable
+- R7_bundle_files_are_staged_under_ignored_build_until_capture_finalization
+- R7_capture_unique_identity_is_UTC_timestamp_plus_shell_PID_for_source_build_bundle_and_publish_stages
+- R7_failed_capture_removes_bundle_stage_and_source_snapshot
+- R7_termination_signals_are_forwarded_to_active_study_before_capture_cleanup
+- R7_termination_before_study_start_exits_without_launching_measurement
+- R7_requested_destination_is_published_only_after_measurement_source_revalidation_and_SHA256
+- R7_publish_uses_sibling_destination_filesystem_stage_before_final_rename
+- R7_copied_publish_stage_must_pass_SHA256_before_final_rename
+- R7_final_publish_uses_destination_specific_atomic_mkdir_lock
+- R7_competing_same_destination_captures_must_not_nest_publish_stages
+- R7_failed_publish_must_leave_requested_destination_absent
+- R7_default_evidence_r7_destination_must_finalize_without_self_dirtying
+- R7_repeats_are_validated_before_bundle_creation
+- R7_bundle_directory_is_created_with_fixed_provenance_mkdir_and_verified_empty
+- R7_dirty_state_includes_untracked_files_and_is_sampled_before_bundle_creation
+- R7_evidence_capture_requires_clean_working_tree
+- R7_assume_unchanged_and_skip_worktree_flags_are_forbidden
+- R7_index_visibility_flags_are_checked_before_dirty_state
+- R7_Git_routing_environment_is_cleared_before_provenance_checks
+- R7_repository_local_core_worktree_must_resolve_to_repo_root
+- R7_worktree_sensitive_Git_provenance_commands_force_repo_root_as_worktree
+- R7_Git_provenance_commands_are_anchored_to_repo_root
+- R7_repository_root_derivation_uses_fixed_provenance_dirname
+- R7_Git_executable_is_resolved_from_fixed_provenance_PATH_and_recorded
+- R7_evidence_build_PATH_is_fixed_and_not_caller_overridable
+- R7_Git_replacement_objects_are_disabled_and_replacement_refs_are_forbidden
+- R7_raw_tracked_build_inputs_must_hash_equal_source_revision_without_filters
+- R7_evidence_build_source_is_git_archive_of_recorded_revision
+- R7_source_snapshot_contains_only_recorded_Makefile_src_include_study
+- R7_source_snapshot_bytes_must_hash_equal_recorded_revision
+- R7_TAR_OPTIONS_is_cleared_for_capture_and_replay
+- R7_source_snapshot_rejects_unexpected_files_and_symlinks
+- R7_source_snapshot_inputs_are_made_read_only_before_build
+- R7_mutable_worktree_is_not_used_as_evidence_build_source
+- R7_source_identity_is_revalidated_after_build_and_after_measurement
+- R7_Git_system_and_global_configuration_are_disabled_for_provenance_commands
+- R7_Git_core_fsmonitor_and_core_hooksPath_are_forced_inert_for_capture_and_replay
+- R7_ambient_GIT_CONFIG_injection_cannot_override_provenance_command_isolation
+- R7_bundle_is_not_created_until_post_build_source_revalidation_passes
+- R7_ignored_untracked_files_under_src_include_study_are_forbidden
+- R7_ambient_compiler_search_path_environment_is_cleared
+- R7_CCC_OVERRIDE_OPTIONS_is_cleared_before_compiler_identity_build_and_replay
+- R7_compiler_search_environment_sanitation_is_CI_self_tested
+- R7_dynamic_loader_injection_environment_is_cleared_before_tool_and_study_execution
+- R7_dynamic_loader_environment_sanitation_is_CI_self_tested
+- R7_intentional_external_include_paths_must_be_in_recorded_CPPFLAGS
+- R7_dirty_worktree_evidence_capture_is_forbidden
+- R7_source_revision_must_identify_exact_built_source_contents
+- R7_platform_identity_capture_must_succeed_and_be_nonempty
+- R7_platform_identity_and_CPU_model_are_serialized_with_printf_without_echo_escape_interpretation
+- R7_uname_is_resolved_from_fixed_provenance_PATH_and_recorded
+- R7_integrity_SHA256_utility_is_resolved_from_fixed_provenance_PATH_and_recorded
+- R7_shasum_fallback_clears_Perl_interpreter_injection_and_search_environment
+- R7_quote_serializer_sed_is_resolved_from_fixed_provenance_PATH_and_recorded
+- R7_memory_profile_awk_parser_is_resolved_from_fixed_provenance_PATH_and_recorded
+- R7_optional_getconf_and_sysctl_host_probes_use_fixed_provenance_PATH
+- R7_evidence_class_is_raw_local_execution_observation
+- R7_CPPFLAGS_and_CFLAGS_are_recorded_and_bound
+- R7_CPPFLAGS_and_CFLAGS_must_not_contain_Make_variable_references
+- R7_CPPFLAGS_and_CFLAGS_must_not_contain_shell_substitution_control_redirection_comment_tilde_glob_or_brace_expansion_syntax
+- R7_CPPFLAGS_and_CFLAGS_must_not_contain_compiler_response_file_syntax
+- R7_CPPFLAGS_and_CFLAGS_must_not_contain_Clang_config_file_or_config_search_directory_controls
+- R7_Clang_capture_and_replay_must_pass_and_record_no_default_config
+- R7_Clang_implicit_default_configuration_files_are_not_evidence_inputs
+- R7_CPPFLAGS_and_CFLAGS_must_not_contain_GCC_specs_file_controls
+- R7_CPPFLAGS_and_CFLAGS_sensitive_compiler_controls_are_tokenized_across_all_POSIX_shell_whitespace
+- R7_CPPFLAGS_and_CFLAGS_sensitive_compiler_controls_are_checked_after_conservative_shell_quote_and_backslash_normalization
+- R7_CPPFLAGS_and_CFLAGS_must_not_contain_GCC_B_subprogram_search_overrides
+- R7_CPPFLAGS_and_CFLAGS_must_not_contain_GCC_subprocess_wrapper_controls
+- R7_CPPFLAGS_and_CFLAGS_shell_response_or_compiler_config_expansion_rejection_occurs_before_Make_execution
+- R7_CPPFLAGS_and_CFLAGS_recording_preserves_backslashes_exactly
+- R7_archiver_identity_is_recorded_and_bound
+- R7_CC_and_AR_must_each_name_one_executable_resolved_from_fixed_provenance_PATH
+- R7_CC_AR_and_Make_paths_are_canonicalized_before_trusted_prefix_checks
+- R7_arbitrary_external_compiler_wrappers_are_forbidden_for_evidence_capture
+- R7_recorded_build_command_uses_shell_safe_unambiguous_quoting
+- R7_recorded_replay_begins_with_set_eu_and_fails_fast
+- R7_failed_replay_preserves_checksum_bound_observations_and_cleans_snapshot_and_temporary_output
+- R7_replay_source_snapshot_and_build_directory_are_process_qualified_for_concurrent_replays
+- R7_successful_replay_atomically_replaces_observations_only_after_study_success
+- R7_recorded_replay_recreates_git_source_snapshot
+- R7_recorded_replay_build_uses_make_C_source_snapshot
+- R7_recorded_replay_study_path_is_absolute
+- R7_recorded_replay_includes_absolute_observations_redirection
+- R7_command_txt_recreates_observations_file_from_any_working_directory
+- R7_evidence_build_uses_recorded_fixed_absolute_PATH_entries
+- R7_make_driver_compiler_archiver_and_build_utilities_are_resolved_from_fixed_provenance_PATH
+- R7_evidence_build_uses_fresh_unique_BUILD_DIR_and_does_not_depend_on_make_clean
+- R7_fresh_BUILD_DIR_identity_includes_UTC_timestamp_and_shell_PID
+- R7_concurrent_evidence_builds_must_not_share_BUILD_DIR
+- R7_shared_build_parent_creation_is_idempotent_and_concurrency_safe
+- R7_concurrent_full_capture_regressions_cover_build_parent_present_and_absent
+- R7_Make_facing_BUILD_DIR_and_study_target_are_repository_relative
+- R7_repository_paths_with_spaces_are_supported_for_evidence_capture
+- R7_fresh_build_self_test_is_CI_executed_with_hostile_ambient_PATH
+- R7_concurrent_and_space_path_fresh_builds_are_CI_tested
+- R7_shell_safe_quote_serializer_is_CI_self_tested
+- R7_local_profile_defaults_to_five_repeats_unless_explicitly_overridden
+- R7_inherited_make_dry_run_flags_are_cleared_for_evidence_build
+- R7_evidence_build_must_rebuild_from_recorded_source_and_flags
+- R7_evidence_build_pins_tracked_Makefile_with_make_f
+- R7_tracked_Makefile_blob_identity_is_recorded
+- R7_implicit_GNUmakefile_or_lowercase_makefile_must_not_control_evidence_build
+- R7_evidence_destination_must_not_resolve_inside_build_directory
+- R7_evidence_destination_must_not_lexically_route_through_build_directory
+- R7_evidence_destination_parent_traversal_is_forbidden
+- R7_getconf_memory_profile_requires_both_nonzero_numeric_page_count_and_size
+- R7_compiler_identity_capture_must_succeed
+- R7_compound_CC_is_not_accepted_for_evidence_capture
+- R7_memory_profile_is_required_on_every_supported_capture_host
+- R7_clock_delta_representability_is_proven_before_any_subtraction
+- R7_floating_clock_t_is_rejected_before_any_integer_conversion
+- R7_floating_clock_t_rejection_is_float_cast_overflow_regression_tested
+- R7_signed_clock_extreme_delta_is_UBSan_regression_tested
+- R7_environment_bundle_requires_source_workload_toolchain_build_CPU_memory_method
+- R7_run_local_deterministic_regressions_live_in_tests_test_r7_run_local_sh
+- R7_documented_r7_evidence_regression_target_accepts_default_cc
+- R7_regression_exit_trap_removes_shared_memory_publish_fixture
+- R7_clock_deterministic_regressions_live_in_tests_test_r7_clock_c
+- R7_dedicated_regression_targets_run_in_CI_for_GCC_and_Clang
+- R7_negative_results_must_be_retained
+- R7_timing_alone_must_not_claim_cache_NUMA_or_bandwidth_cause
+- R7_runtime_core_changes_are_out_of_scope
 - causal_performance_claim_requires_support_beyond_timing
 - portable_identity_requires_explicit_versioned_representation
 - fixed_width_integer_identity_is_allowed_but_not_the_only_allowed_explicit_representation

Makefile

@@ -15,9 +15,12 @@ TEST_NUMERIC = $(BUILD_DIR)/test_numeric
 TEST_RING = $(BUILD_DIR)/test_ring
 TEST_OPERATION = $(BUILD_DIR)/test_operation
 R6_PROOF = $(BUILD_DIR)/rune_r6_proof
+R7_STUDY = $(BUILD_DIR)/rune_r7_study
+R7_CLOCK_REGRESSION = $(BUILD_DIR)/test_r7_clock
+R7_FLOAT_CLOCK_REGRESSION = $(BUILD_DIR)/test_r7_clock_float
 CORPUS = $(BUILD_DIR)/rune_corpus
 
-.PHONY: all test r6-proof corpus-smoke clean
+.PHONY: all test r6-proof r7-study-smoke r7-study r7-clock-regression r7-evidence-regression corpus-smoke clean
 
 all: $(LIB)
 
@@ -67,6 +70,32 @@ r6-proof: $(R6_PROOF)
 	./$(R6_PROOF) > $(BUILD_DIR)/r6-proof.tsv
 	cmp $(BUILD_DIR)/r6-proof.tsv proof/r6-proof-receipts.v1.tsv
 
+$(R7_STUDY): study/r7_memory_wall.c $(LIB) include/rune/arena.h include/rune/region.h include/rune/status.h
+	$(CC) $(CPPFLAGS) $(CFLAGS) $(STRICT_CFLAGS) $(INCLUDES) study/r7_memory_wall.c $(LIB) -o $@
+
+r7-study-smoke: $(R7_STUDY)
+	./$(R7_STUDY) --bytes 32768 --repeats 1 > $(BUILD_DIR)/r7-study-smoke.tsv
+	test "`wc -l < $(BUILD_DIR)/r7-study-smoke.tsv`" -eq 20
+	awk -F '\t' 'NF != 17 { exit 1 } END { if (NR != 20) exit 1 }' $(BUILD_DIR)/r7-study-smoke.tsv
+
+r7-study: $(R7_STUDY)
+	./$(R7_STUDY) --profile local --repeats 5
+
+$(R7_CLOCK_REGRESSION): tests/test_r7_clock.c $(LIB)
+	$(CC) $(CPPFLAGS) $(CFLAGS) $(STRICT_CFLAGS) $(INCLUDES) -fsanitize=undefined -fno-sanitize-recover=undefined tests/test_r7_clock.c $(LIB) -o $@
+
+$(R7_FLOAT_CLOCK_REGRESSION): tests/test_r7_clock_float.c tests/r7_float_clock/time.h $(LIB)
+	$(CC) $(CPPFLAGS) $(CFLAGS) $(STRICT_CFLAGS) -Itests/r7_float_clock $(INCLUDES) -fsanitize=undefined,float-cast-overflow -fno-sanitize-recover=undefined,float-cast-overflow tests/test_r7_clock_float.c $(LIB) -o $@
+
+r7-clock-regression: $(R7_CLOCK_REGRESSION) $(R7_FLOAT_CLOCK_REGRESSION)
+	./$(R7_CLOCK_REGRESSION)
+	./$(R7_FLOAT_CLOCK_REGRESSION)
+
+r7-evidence-regression:
+	@r7_cc='$(CC)'; \
+	if [ "$$r7_cc" = cc ]; then r7_cc=/usr/bin/cc; fi; \
+	CC="$$r7_cc" AR="$(AR)" sh tests/test_r7_run_local.sh
+
 $(CORPUS): corpus/rune_corpus.c $(LIB) include/rune/arena.h include/rune/numeric.h include/rune/region.h include/rune/status.h
 	$(CC) $(CPPFLAGS) $(CFLAGS) $(STRICT_CFLAGS) $(INCLUDES) corpus/rune_corpus.c $(LIB) -o $@