Map t0011/t0013 tip residuals (M0 evidence)

[ericvh]

Human Summary

• Behavior/outcome changed: first work slice is an evidence map, not a product fix. t0011 allsquash and t0013 ACL are recorded as two independent residuals with pinned kernel, diod, and harness versions.
• Mechanism or implementation: ledger rows E0003–E0006, plan docs/plans/1-map-tip-xfails.md, formulation horizon split into two later implementation slices.
• Review focus: pins are real; the split is justified; no product code snuck in.
• Proof result: Mapped. scripts/check-scaffold.sh passed locally.
• Known gaps not claimed: no kernel/diod/harness change; XFAIL is not integration proof; ghcr.io/v9fs/docker:latest is floating.

Evidence and Target

• Related issue: Formulate first slice: map t0011/t0013 tip residuals (v9fs/test#28) #1
• Product tracker: Tip XFAIL residuals: t0011 allsquash and t0013 ACL test#28
• Milestone: M0 - Bootstrap
• Evidence version and paths/scenarios:
  • linux v7.2 = 8d3ae59288f1e7d58d76558a6ee96d533bc5019f
  • Image kernel-latest notes: currently v7.2 / kernel-v7.2
  • harness 94b2182f54b30a073d893990db8f64e69f0d911a (run 32929975795)
  • diod de51d1ee1bd5ccf1d8c16b96227c8bb03ec50106
• Target components/APIs/artifacts: this forge's ledgers only

Proof Movement

• Before: Unmapped
• After: Mapped
• Discriminating observation: a single-harness-bug mapping would fail because the same run shows squash working (export uid 65534) while ACL walks return EOPNOTSUPP 95 with no Txattrcreate. A squashuser-only change cannot make t0013 PASS.
• Exact commands/artifacts and results: scripts/check-scaffold.sh passed; CI on this PR is the scaffold job.

Independent Review

• Creator: mapping agent
• Reviewer: distinct from creator (required)
• Review note: pending
• Decision: pending
• Resolved blockers/questions: none
• Unresolved objections: none yet

Follow-Ups

• After this lands, open two implementation issues (do not open them in this PR): t0011 squashuser vs ownership assertion; t0013 ACL xattr / TMPFS_XATTR.
• Keep diod/xfail.txt until those slices PASS.

Durable State Updated

• Evidence map
• Proof ledger
• Decision/experiment/risk records as applicable (D0002 unchanged)
• Methodology trigger (none; first slice)
• Compact audit-report link when required (off)

Closeout

• Current GitHub status/proof/review labels: status:review, proof:mapped, review:needs-independent
• Next dependency-ordered issue: two implementation slices after merge
• State closer: after independent review

Made with Cursor

[ericvh]

Review: approved
Comments:

• nit: Human readable portion isn't very human readable.

[ericvh]

Review: approved
Focus: whether t0011 allsquash and t0013 ACL are actually independent residuals on the pinned run, and whether the pins/non-claims would let an implementer mix them.

Comments:

• suggestion: Correct the discriminator wording when opening the t0013 implementation issue. The plan/PR text says ACL Txattrwalk returns EOPNOTSUPP 95 with no Txattrcreate. On run 32929975795, t0013-v9fs-acl.diod.log has two Txattrcreate calls (system.posix_acl_access line 136, system.posix_acl_default line 390). Rxattrcreate and the 44-byte Twrite succeed; the following Tclunk is Rlerror ecode 95, and later walks still return 95. Walks are EOPNOTSUPP; create is attempted and does not persist. Reconsideration trigger: drafting the t0013 work-slice issue.
• nit: Agree with the earlier human note that the PR summary is dense. Not blocking for a mapping slice.
• praise: The split is justified by the same run: t0011 export Rgetattr uid 65534 (squash is working; the test then asserts $(id -u):$(id -g) on exp/) while t0013 -o posixacl mounts and Txattrwalk of system.posix_acl_* returns Rlerror ecode 95. t0012 is fully PASS. A squashuser-only change cannot make t0013 PASS.

Tests/proof requested:

• Mapped discriminator reconstructed from artifacts, not from the mapping text: empty diod-xfail/unexpected.txt; qemu.log diod-regression-eval: unexpected: 0; t0011 Rgetattr uid 65534; t0013 Rlerror ecode 95 on posix_acl walks.

Evidence appendix:

• Reviewer role: independent Cloud Agent session, distinct from the mapping commit (a378e7c, Cursor co-author). GitHub will attribute this comment to the PAT identity (ericvh); that is token identity, not self-approval of the mapping agent.
• Scope inspected: issue Formulate first slice: map t0011/t0013 tip residuals (v9fs/test#28) #1; PR Map t0011/t0013 tip residuals (M0 evidence) #2 body/diff/files (ledgers + docs/plans/1-map-tip-xfails.md + formulation horizon only; no product code); pins against live GitHub; run 32929975795 artifacts (diod-regression-logs, diod-xfail, results.json); diod/xfail.txt at harness SHA vs main; publish -e TMPFS_POSIX_ACL with TMPFS_XATTR not enabled.
• Commands/source refs/report links:
  • gh api repos/v9fs/linux/git/refs/tags/v7.2 → 8d3ae59288f1e7d58d76558a6ee96d533bc5019f
  • gh release view kernel-latest --repo v9fs/test → "currently v7.2 / kernel-v7.2"
  • harness 94b2182f54b30a073d893990db8f64e69f0d911a; run https://github.com/v9fs/test/actions/runs/32929975795
  • chaos/diod de51d1ee1bd5ccf1d8c16b96227c8bb03ec50106 still master HEAD
  • bash scripts/check-scaffold.sh → passed (25 required files, 4 skills)
  • PR Map t0011/t0013 tip residuals (M0 evidence) #2 already merged by ericvh at 2026-09-01T15:50:15Z (0d2f22d). Issue Formulate first slice: map t0011/t0013 tip residuals (v9fs/test#28) #1 labels are already review:approved + status:landed. This note does not re-merge and does not open the two implementation issues.