Verification only: Oreslang native hidden actor generation recycling

[the1mills]

Funded private test mirror for ores-truffle-oreslang/oreslang-source.llvm#196. Verify exact original Git blobs, execute 10,000-generation hidden actor recycling and stale ref rejection, check existing scheduler lease and startup fault regressions, and use Clang ASan/UBSan. This is a CI-only mirror; do not merge.

Latest mirror source scope

This test-only draft now mirrors the original C scheduler, header, supervisor bridge dependencies and real bridge test; the six-file TLA+ candidate recycling contract is also mirrored verbatim. Workflows validate exact original Git blobs before running strict GCC, Clang ASan/UBSan, 10,000 repeated hidden actor generation increments, same-slot supervisor cleanup/abort/RESTART and three expected formal mutation counterexamples.

Proven earlier funded runs: scheduler #38199514916, bridge #38199681754 and TLC #38199890880. Latest exact-head bridge helper is checked by run #38200111977, separately. THIS IS A MIRROR FOR FUNDED TEST RUNNERS; NEVER MERGE.

Latest audited revision: closure and lease liveness

The funded mirror now uses exact native LLVM Git blobs for: lease-owner nonblocking wait_done and drain, post-CONTROL-close recycling rejection, bridge close/recycle race (including trusted-host cleanup of a returned hidden candidate), scheduler tests and original bounded TLA+ model. Run #38203745578 passed strict GCC/ASan/UBSan scheduler and generation regressions; run #38203745587 passed full native bridge GCC/ASan/UBSan, including adversarial closure. TLC #38203745574 passed the unchanged bounded model. This is test infrastructure only; do NOT merge the mirror.

Active identity-aware native reincarnation verification

Exact-source funded mirror now includes OresNativeActorScheduler_open_identity_control and recycle_normal_done, plus a native executable stress test with 10,000 previously active sealed physical generations, stale callbacks, typed CONTROL/PANIC and legacy-ABI denial. The bridge verification now checks an exact parent ActorRef in PANIC routing.

Native GCC/Clang sanitizers #38205126045, real supervisor bridge #38205126067, and bounded TLC with four mutants #38205126057 are green on verified exact source blobs. This draft is private funded CI only—DO NOT MERGE.

New exact-source PANIC parent authorization gate

Mirror now verifies the latest LLVM source blobs for the scheduler callback-mode probe and supervisor bridge PANIC authorization: identity-mode dispatch must use the exact live/published parent ActorRef, and slot-only callbacks must fail closed. New native bridge integration covers a physically retired parent without consuming another child. Added seven-blob source-verified TLA+ parent PANIC model and four expected mutant counterexamples.

Full native bridge #38208733422, native scheduler #38208733429, and parent PANIC TLC #38208733492 all passed. This CI mirror is verification-only; NEVER MERGE.

Exact-source native terminal receipt milestone

Expanded funded private mirror with scheduler terminal evidence, strong original/recovered-parent STOP admission fences, C++ bridge recovery, independent lost-ACK verification, 100+50 STOP races, concurrent claimants, and versioned TypeSpec/JSON Schema/TLA sources.

Terminal regression #38214312462 passed strict GCC, Clang ASan/UBSan and exact nine native source blobs; full bridge #38214312490 passed full native supervisor integration; formal/contract #38214312440 passed eleven exact model/contract blobs, bounded TLC safety and five expected unsafe-mutant counterexamples. Test-only private mirror: DO NOT MERGE.