2.6 KiB
P15-031 Stage0 Decision
Status: STOP. B38 is STOP-NO-SOURCE.
G08 is replayed against frozen BASE
0f696ad1e2c6628022d02ce52d07eb66704769dd. P15-031 may proceed only if all
five conditions pass: an existing project diagnostic consumer that has
actually captured the complete predeclared mount/map/vget/xattr/decode/cache
schema through FreeBSD DTrace/SDT or a justified KTR path; no pointer,
credential, or unauthenticated metadata leakage; an owned-temp FreeBSD 15
prototype with exact fields/counts and closed failure/detach/unload lifecycle;
disabled WITH_ZSTDIO=0/1 builds with no new undefined symbols; and a 10-run
hot-path median regression of at most 3% with retained interleaved controls.
The consumer condition is evaluated first because neither a gate prototype nor
a proposed B38 test can create its own project need. The bounded inventory
covers all 3,243 tracked paths under repo-pre-15 and planning/pre15 at
BASE, without reading planning/pre15/introduction.md or treating this
addendum as evidence. It finds 33 native-tracing references: 16 planning or
audit records, three historical evidence files, 10 test-only paths, and four
reports or documents. There are zero production/operations paths, zero
consumer manifests, and zero qualifying consumers.
A future declaration uses schema pre15-p15-031-consumer-v1 under
repo-pre-15/diagnostics/. It binds a versioned production implementation and
actual FreeBSD 15 capture by path and SHA-256, identifies owner/workflow/
deployment, records privileged access and DTrace/SDT or justified KTR
transport, binds the complete event-schema hash, and records a positive count
for every event. The gate rejects a hypothetical maintainer, Linux
tracepoints, generic usefulness, a proposed test, its own prototype, or merely
installed dtrace. If an approved declaration appears, this STOP-only version
refuses false GO and requires the remaining native prototype, privacy, build,
and benchmark stages before source authorization.
The first condition is STOP, so privacy execution, prototype generation,
WITH_ZSTDIO=0/1 builds, undefined-symbol comparison, the 10-run benchmark,
D/H/K0/K1, targeted QEMU TC178, full feature, and smoke are all NOT_RUN.
The gate's seven decision controls prove that GO is emitted only when all five
conditions are PASS; no benchmark samples or later-stage metrics are
fabricated.
No src/erofs_trace.h, trace callsite, src/Makefile change,
tests/pre15/cases/B38-trace.sh, source commit, or empty commit is created.
Protected PID 26318, port 9222, and the immutable base image are outside this
STOP path and are not addressed or hashed.