BONE/SEA S3: enforce atomic 4096-to-512 read-only block translation

[Deadbytes101]

BONE/SEA S3 READ-ONLY BLOCK ADAPTER CANDIDATE

STACKED BASE

• base branch: ecosystem/shinesea-s2-domain
• exact parent head: 0c3e8d0a790e8a2bdf9c3d9de51f25a903fddff6
• exact N6 authority: 93ea5ffb59ff31e87ab7fd5ecb5570c89b29ffee
• N6 nano SHA256: 581d1a6c59580fedca7fca97035449521231f9450ca4a3c2cf35d6ed07640855

PURPOSE

S3 freezes and models the exact read-only translation between SHINESEA 4096-byte logical blocks and N6 one-transfer 512-byte ATA authority. It does not execute the N6 I/O gate, read real hardware, link SHINESEA, or claim runtime success.

GEOMETRY

• SHINESEA block: 4096 bytes
• ATA sector: 512 bytes
• sectors per block: 8
• volume blocks: 16
• volume bytes: 65536
• first LBA: 40
• last LBA: 167
• full-volume transfers: 128
• ATA28 maximum LBA: 0FFFFFFFh

READ-ONLY AND ATOMIC-PUBLICATION LAW

• block_count() -> 16
• exact output length required
• checked block, byte, sector, and LBA arithmetic
• one separate sector transfer per N6 gate entry
• zeroed 512-byte sector staging
• complete-request staging bounded to 65536 bytes
• caller output copied once, only after every sector succeeds
• short read or hard device failure leaves caller output completely unchanged
• no write method
• write authority disabled

OBSERVED WINDOWS VALIDATION

Exact head:

f054e32818c68940eeebad740674f1b5bfb03913

Observed with RUSTFLAGS=-Dwarnings:

• all-target native debug compilation: PASS
• S1 contracts: 13 / 13 PASS
• S2 domain contracts: 14 / 14 PASS
• S2 control contracts: 6 / 6 PASS
• S3 adapter contracts: 15 / 15 PASS
• total: 48 / 48 PASS
• native release compilation: PASS
• compiler warnings: 0
• BONE/SEA S3 ADAPTER VERIFY PASS
• publication terminal: ATOMIC AFTER COMPLETE REQUEST
• final-sector short-read adversary: PASS
• final-sector hard device-failure adversary: PASS
• caller output remained unchanged on both failures
• write authority remained disabled
• no runtime PASS was emitted

WARNING-DENIAL LAW

• S3 source uses #![deny(warnings)]
• CI uses RUSTFLAGS=-Dwarnings
• release verifier executes both short-read and hard device-failure adversaries

RUNTIME BOUNDARY

No boot, root, supervisor, service, nanokernel, or SHINESEA runtime source changed. Real ATA, N6 I/O gate execution, CPU RIGHT_IO enforcement, ring3 transfer, SHINESEA linking, and read_verified_image remain unclaimed.

MERGE LAW

S3 is ready for review against exact S2 head. Merge is not performed automatically. Keep it stacked until prior PR disposition is deliberate; any retarget or integration into another tree requires fresh exact-head verification.

REPORTS ARE CLAIMS, NOT EVIDENCE.
NO COSTUME RIGOR.

[Deadbytes101]

S3 WINDOWS EVIDENCE — PRE-HYGIENE HEAD

Observed on exact head 6183453c3c87783f42cbcdd60a019af813206c5a:

• all-target native compilation: PASS
• S1 tests: 13 / 13 PASS
• S2 domain tests: 14 / 14 PASS
• S2 control tests: 6 / 6 PASS
• S3 adapter tests: 15 / 15 PASS
• total: 48 / 48 PASS
• release verifier terminal: BONE/SEA S3 ADAPTER VERIFY PASS
• full-volume geometry: 4096 -> 8 x 512, LBA 40-167, 128 transfers
• atomic publication: PASS
• write authority: disabled
• runtime PASS: not claimed

ADVERSARIAL JUDGE

The release build emitted one warning: PatternDevice::with_failure was used only by test code. A warning-bearing release head is not accepted as final S3 evidence.

SURGICAL CHANGE

Current head is now f054e32818c68940eeebad740674f1b5bfb03913.

• S3 source now uses #![deny(warnings)].
• Release verification now executes both a final-sector short-read adversary and a final-sector hard device-failure adversary.
• CI now sets RUSTFLAGS=-Dwarnings for every S3 native target.

The 48 / 48 result establishes the adapter logic on the earlier head. It does not authorize the new warning-denial head until exact-head compilation and release verification are observed.

REPORTS ARE CLAIMS, NOT EVIDENCE.
NO COSTUME RIGOR.

[Deadbytes101]

OBSERVED WINDOWS EXACT-HEAD EVIDENCE

HEAD

f054e32818c68940eeebad740674f1b5bfb03913

COMMAND GATE

RUSTFLAGS=-Dwarnings
cargo test --locked --all-targets --manifest-path tools/bone-sea/Cargo.toml
cargo run --locked --release --manifest-path tools/bone-sea/Cargo.toml --bin bone-sea-s3 -- verify

OBSERVED

• S1 native contracts: 13/13 PASS
• S2 domain contracts: 14/14 PASS
• S2 control contracts: 6/6 PASS
• S3 adapter contracts: 15/15 PASS
• total: 48/48 PASS
• debug compilation: PASS
• release compilation: PASS
• compiler warnings: 0
• terminal: BONE/SEA S3 ADAPTER VERIFY PASS
• publication: ATOMIC AFTER COMPLETE REQUEST
• write authority: disabled
• runtime PASS claim: none

The exact current head therefore closes the S3 native model gate. This evidence does not claim real ATA execution, N6 gate execution, CPU RIGHT_IO enforcement, ring3 transfer, SHINESEA linking, or read_verified_image execution.

REPORTS ARE CLAIMS, NOT EVIDENCE.
NO COSTUME RIGOR.