S263: primalSpring stadial gate — compute.fan_out, primal.announce, universal standards compliance

primalSpring Wave 22 stadial gate audit response: universal standards
checklist green, upstream compute.fan_out implemented, composition gaps
closed, version bumped to 0.2.0.

- compute.fan_out: DAG-aware dispatch of clone-level work units with
  substrate filtering for wetSpring 264-clone Tenaillon 2016 parallelism
- primal.announce: self-registration broadcast for mesh discovery
- capabilities.list: added capabilities array + count per CAPABILITY_WIRE_STANDARD
- btsp.capabilities: registered in capability response
- deny.toml: banned aws-lc-sys per SOVEREIGNTY_STANDARDS dark forest gate
- DataDependency: workload TOML input data staging (nestGate composition gap)
- Version 0.1.0 → 0.2.0 reflecting Phase D maturity
- Fixed 5 pre-existing Rust 1.92 clippy issues + 1 #[expect] missing reason
- 85 JSON-RPC methods, 8,945 lib tests, 0 clippy warnings, deny clean

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: BiomeOS Developer

.env.example

@@ -1,5 +1,5 @@
 # ToadStool Environment Configuration
-# Updated: S262 (May 14, 2026)
+# Updated: S263 (May 17, 2026)
 #
 # All values have sensible defaults. Only override what you need.
 # Copy this file to .env and customize for your environment.

CHANGELOG.md

@@ -5,7 +5,26 @@ All notable changes to ToadStool will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased] - May 14, 2026 (Sessions 43-262)
+## [Unreleased] - May 17, 2026 (Sessions 43-263)
+
+### Session S263 (May 17, 2026) — Stadial Gate: primalSpring Audit Response
+
+primalSpring Wave 22 stadial gate audit response: universal standards compliance, upstream `compute.fan_out` implementation, composition gap closure.
+
+- ADDED: `compute.fan_out` JSON-RPC endpoint — DAG-aware dispatch of clone-level work units with substrate filtering, auto-generated dispatch_id, and per-unit assignment/queuing status (wetSpring upstream ask for Tenaillon 2016 264-clone parallelism)
+- ADDED: `primal.announce` JSON-RPC endpoint — self-registration broadcast for mesh discovery (stadial standard)
+- ADDED: `btsp.capabilities` in `capabilities.list` response — BTSP transport security capability declaration
+- ADDED: `device` capability type in `capabilities.list` — VFIO management and GR init
+- EVOLVED: `capabilities.list` response shape — added `capabilities` array + `count` field per `CAPABILITY_WIRE_STANDARD.md` envelope (backward-compat: `provided_capabilities` retained)
+- EVOLVED: `DataDependency` struct in workload TOML spec — `name`, `source`, `blake3`, `required` fields for input data staging (composition gap with nestGate)
+- SECURITY: Banned `aws-lc-sys` in `deny.toml` per `SOVEREIGNTY_STANDARDS.md` dark forest gate
+- FIXED: `#[expect(non_camel_case_types)]` in `gguf.rs` — added `reason`
+- FIXED: 4 pre-existing clippy issues from Rust 1.92 (`manual_is_multiple_of`, `collapsible_if`, `needless_late_init`, `unnecessary_cast`, `too_many_arguments`)
+- EVOLVED: Workspace version `0.1.0` → `0.2.0` (reflecting Phase D maturity, stadial readiness)
+- ADDED: Semantic aliases `ember.fan_out`, `sovereign.fan_out` for `compute.fan_out`
+- ADDED: Wire L3 cost entry for `compute.fan_out` (high energy, GPU-capable)
+- ADDED: 12 new tests — fan_out validation (5), capabilities envelope (2), primal.announce (1), shader_info + gr_init (from S262, 4)
+- METRICS: 85 JSON-RPC methods (direct), 8,945 lib tests, 0 clippy warnings, deny clean
 
 ### Session S262 (May 14, 2026) — Diesel Engine Completion: GR Init IPC + Shader Metadata Aliases
 

CONTEXT.md

@@ -30,12 +30,12 @@ ToadStool is the **Layer 0** hardware substrate that other primals and springs d
   - Family: `compute-{family_id}.sock` / `compute-{family_id}-tarpc.sock`
 - **Peer primals**: Resolved at runtime via capability IDs and Unix-socket discovery (e.g. `capability.discover`, `resolve_capability_socket_fallback`) — not hardcoded URLs or legacy per-primal env manifests
 - **Discovery hierarchy** (primalSpring cross-cutting): Songbird `ipc.resolve` → biomeOS `capability.discover` → UDS filesystem convention → socket registry → TCP probing. toadStool implements tiers 1–4; TCP probing (tier 5) not used for local IPC
-- **Wave 8 Compute Trio** (S235–S262): `compute.dispatch.submit` trio-standard IPC contract. **Phase A: coral-ember absorbed** (S237). **Phase B: glowplug absorbed** (S239). **Phase C complete — all blocking items resolved** (S245–S253): toadstool-cylinder (153 .rs, 520 tests), DRM/MMIO/AMD/NVIDIA/VFIO, `OwnedFd` VFIO fd ownership (S253), SwapOrchestrator real quiesce/persist/restore (S253), `toadstool device` CLI (S253). **Phase D: dispatch live** (S254–S262) — `LocalDeviceFactory` wired at handler startup (S254), AMD DRM dispatch live, NV VFIO QMD-based dispatch wired via PBDMA (S258–S259). `CPUCTL_HALTED` bit fix + `probe_warm_fecs()` (S256). `device.vfio.open` + `device.vfio.roundtrip` JSON-RPC endpoints (S259). `health.version` + `health.drain` RPC endpoints (S260). Kepler dispatch wired (S260). `device.gr.init` / `compute.context.init` IPC exposed (S262). coralReef shader metadata aliases wired (S262). **83 JSON-RPC methods.**
-- **Deep Debt** (S240–S262): All Duration literals extracted to named constants (~100+ across 30+ files). Legacy primal env vars `#[deprecated]` with migration guidance (S250). All `#[allow(deprecated)]` evolved to `#[expect(deprecated, reason)]` (S252). `VfioResourceHandle` `Option<i32>` → `OwnedFd` (S253). Sentinel values evolved to idiomatic Rust (S250). Zero library `println!`/`eprintln!`. All production files <800 lines. Zero production mocks/TODO/FIXME/unreachable!(). All unsafe SAFETY-documented. All `#[allow]`/`#[expect]` have `reason` (S255+S259+S261). `cargo deny check bans` passes clean.
-- **Tests**: 22,900+ (8,849+ lib-only, 0 failures, unlimited parallelism)
+- **Wave 8 Compute Trio** (S235–S263): `compute.dispatch.submit` trio-standard IPC contract. **Phase A: coral-ember absorbed** (S237). **Phase B: glowplug absorbed** (S239). **Phase C complete — all blocking items resolved** (S245–S253): toadstool-cylinder (153 .rs, 520 tests), DRM/MMIO/AMD/NVIDIA/VFIO, `OwnedFd` VFIO fd ownership (S253), SwapOrchestrator real quiesce/persist/restore (S253), `toadstool device` CLI (S253). **Phase D: dispatch live** (S254–S263) — `LocalDeviceFactory` wired at handler startup (S254), AMD DRM dispatch live, NV VFIO QMD-based dispatch wired via PBDMA (S258–S259). `CPUCTL_HALTED` bit fix + `probe_warm_fecs()` (S256). `device.vfio.open` + `device.vfio.roundtrip` JSON-RPC endpoints (S259). `health.version` + `health.drain` RPC endpoints (S260). Kepler dispatch wired (S260). `device.gr.init` / `compute.context.init` IPC exposed (S262). coralReef shader metadata aliases wired (S262). `compute.fan_out` DAG-aware dispatch (S263). `primal.announce` self-registration (S263). **85 JSON-RPC methods.**
+- **Deep Debt** (S240–S263): All Duration literals extracted to named constants (~100+ across 30+ files). Legacy primal env vars `#[deprecated]` with migration guidance (S250). All `#[allow(deprecated)]` evolved to `#[expect(deprecated, reason)]` (S252). `VfioResourceHandle` `Option<i32>` → `OwnedFd` (S253). Sentinel values evolved to idiomatic Rust (S250). Zero library `println!`/`eprintln!`. All production files <800 lines. Zero production mocks/TODO/FIXME/unreachable!(). All unsafe SAFETY-documented. All `#[allow]`/`#[expect]` have `reason` (S255+S259+S261+S263). `cargo deny check bans` passes clean. `aws-lc-sys` banned (S263).
+- **Tests**: 22,900+ (8,945+ lib-only, 0 failures, unlimited parallelism)
 - **Unsafe**: 46 blocks (all in hw-safe/GPU/VFIO/display/plugin containment, all SAFETY-documented; reconciled S221); workspace `unsafe_code = "deny"`, 41 crates `forbid` + 5 hw crates with narrow `#[allow(unsafe_code, reason)]`; all lint attrs have `reason =` (S211+S213)
 - **async-trait**: DEPRECATED — fully removed and banned in `deny.toml` (S203r); transitive only via axum/config/wiggle
-- **deny.toml**: `ring` + `async-trait` + `zstd-sys` bans active (ecoBin v3 compliant). `ring` present only as conditional transitive dep via quinn-proto/rustls-webpki (not on default build path)
+- **deny.toml**: `ring` + `async-trait` + `zstd-sys` + `aws-lc-sys` bans active (ecoBin v3 compliant, `SOVEREIGNTY_STANDARDS.md` dark forest gate). `ring` present only as conditional transitive dep via quinn-proto/rustls-webpki (not on default build path)
 - **Display Phase 2**: `display.present`, `display.subscribe_input`, `display.poll_events` (petalTongue IPC)
 - **Encrypted compute dispatch** (Phase 55): Tower `crypto.encrypt`/`crypto.decrypt` for payloads; `DISCOVERY_SOCKET` highest-precedence capability resolution
 - **Self-registration** (S207): `ipc.register` to Songbird via `DISCOVERY_SOCKET` at startup — dynamic NUCLEUS membership without restart

Cargo.toml

@@ -64,7 +64,7 @@ members = [
 exclude = ["fuzz", "crates/ml/burn-inference"]
 
 [workspace.package]
-version = "0.1.0"
+version = "0.2.0"
 edition = "2024"
 rust-version = "1.85.0"
 authors = ["ToadStool Development Team"]

DEBT.md

@@ -1,6 +1,6 @@
 # Active Technical Debt Register
 
-**Date**: May 2026 — S262
+**Date**: May 2026 — S263
 **Philosophy**: Math is universal, precision is silicon. Workarounds are
 short-term solutions that increase debt. We aim to solve deep debt over
 iterations, evolving toward vendor-agnostic, capability-based solutions—

DOCUMENTATION.md

@@ -1,6 +1,6 @@
 # ToadStool Documentation Hub
 
-**Last Updated**: May 2026 — S262
+**Last Updated**: May 2026 — S263
 
 ---
 

NEXT_STEPS.md

@@ -1,7 +1,7 @@
 # ToadStool -- Next Steps
 
 **Updated**: May 2026 — S266 (PlxKeepalive: continuous config space heartbeat for PLX-bridged devices. Root cause: PLX D3cold from **inactivity**, not swap events. ember `PlxKeepalive` + glowplug `PlxGuardian` fleet manager. 98 ember tests, 95 glowplug tests.)
-**Status**: Production-grade | Rust edition **2024** (MSRV 1.85) | **AGPL-3.0-or-later** | **All quality gates green** | tests verified (22,900+ workspace, 0 failures; 8,849+ lib-only) | **83 JSON-RPC methods** | Wire Standard L3 (partial) | Zero C FFI deps (ecoBin v3.0) | **Zero production panics/expects** | **Zero production TODO/FIXME/HACK** | **Zero production unreachable!()** | IPC-first | workspace `unsafe_code = "deny"`, **41 crates `forbid`** | **46 unsafe blocks** (all in hw containment, all SAFETY-documented) | **rustix 1.x workspace-wide** | **capability-based primal references (no hardcoded names)** | **`async-trait` DEPRECATED** (banned in `deny.toml`) | **`deny.toml` ring + async-trait + zstd-sys bans active** | **Phase C complete — all blocking items resolved (S253)** | **Phase D dispatch live — QMD-based VFIO PBDMA dispatch wired (S258–S263)** | **`OwnedFd` VFIO fd ownership (S253)** | **`toadstool device` CLI (S253)** | **CORALREEF_* env vars deprecated with TOADSTOOL_* primaries (S253)** | **Zero `#[allow(deprecated)]` remaining** | **520 cylinder tests** | **E2E sovereign dispatch VALIDATED on Titan V (warm handoff)**
+**Status**: Production-grade | Rust edition **2024** (MSRV 1.85) | **AGPL-3.0-or-later** | **All quality gates green** | tests verified (22,900+ workspace, 0 failures; 8,945+ lib-only) | **85 JSON-RPC methods** | Wire Standard L3 (partial) | Zero C FFI deps (ecoBin v3.0) | **Zero production panics/expects** | **Zero production TODO/FIXME/HACK** | **Zero production unreachable!()** | IPC-first | workspace `unsafe_code = "deny"`, **41 crates `forbid`** | **46 unsafe blocks** (all in hw containment, all SAFETY-documented) | **rustix 1.x workspace-wide** | **capability-based primal references (no hardcoded names)** | **`async-trait` DEPRECATED** (banned in `deny.toml`) | **`deny.toml` ring + async-trait + zstd-sys bans active** | **Phase C complete — all blocking items resolved (S253)** | **Phase D dispatch live — QMD-based VFIO PBDMA dispatch wired (S258–S263)** | **`OwnedFd` VFIO fd ownership (S253)** | **`toadstool device` CLI (S253)** | **CORALREEF_* env vars deprecated with TOADSTOOL_* primaries (S253)** | **Zero `#[allow(deprecated)]` remaining** | **520 cylinder tests** | **E2E sovereign dispatch VALIDATED on Titan V (warm handoff)**
 **Latest**: S266 — **PLX Keepalive (Root Cause Fix)**: `PlxKeepalive` in ember — continuous config space heartbeat (CfgRd 0x00 every 5s) on PLX-bridged devices + full bridge chain. `KeepaliveHandle` for stop/status/heartbeat_count. `detect_plx_bridge()` checks vendor 0x10b5 in ancestry. `PlxGuardian` in glowplug — fleet-level auto-detection via `scan_and_protect()`, per-device `protect()/release()`, `status_summary()`. Root cause: PLX D3cold from inactivity (toadstool-server polling was accidental keepalive; bridge died in ~10min when it stopped).
 **Previous**: S265r — Driver Lab + Containment. S264 — PCIe bridge keepalive. S263 — CPUCTL_ALIAS breakthrough, GR context scheduler, warm handoff on Titan V. S262 — `device.gr.init` IPC. S261 — deep debt sweep. S259 — VFIO IPC + QMD dispatch. S258 — PBDMA dispatch wiring.
 

README.md

@@ -1,6 +1,6 @@
 # ToadStool
 
-**Sovereign Compute Hardware** | Pure Rust | ecoBin | May 2026 | S262
+**Sovereign Compute Hardware** | Pure Rust | ecoBin | May 2026 | S263 | v0.2.0
 
 ---
 
@@ -42,7 +42,7 @@ Nest    = Tower  + Storage            <- storage
 | `cargo fmt --all -- --check` | 0 diffs |
 | `cargo clippy --workspace --all-targets -- -D warnings` | 0 warnings |
 | `cargo doc --workspace --no-deps` (RUSTDOCFLAGS="-D warnings") | 0 warnings |
-| `cargo test --workspace` | **22,900+ tests, 0 failures** (8,849+ lib-only), **~222** ignored (hardware-gated); full workspace ~7m |
+| `cargo test --workspace` | **22,900+ tests, 0 failures** (8,945+ lib-only), **~222** ignored (hardware-gated); full workspace ~7m |
 | Doctests | All passing (common, core, server, cli, testing, display) |
 | Standalone clone test | Pull to any machine, `cargo test` works (GPU-optional, CPU fallback, device-lost resilient) |
 | `unsafe` blocks | **46 actual** (all in hw-safe/GPU/VFIO/display/plugin containment crates); all SAFETY-documented (S204, reconciled S221); workspace `unsafe_code = "deny"`, **41 crates `forbid`** + 5 hw crates with narrow `#[allow(unsafe_code, reason)]`; **all lint attrs have `reason =`** (S211+S213) |
@@ -391,7 +391,7 @@ See [DEBT.md](DEBT.md) for full register and evolution paths.
 
 ---
 
-**Last Updated**: May 2026 — S262. **22,900+** workspace tests, 0 failures (8,849+ lib-only). ~83.6% lib-only line coverage (target 90%). **83 JSON-RPC methods** (direct) + semantic registry (incl. `health.version`, `health.drain`, `device.vfio.open`, `device.vfio.roundtrip`, `device.gr.init`, `compute.context.init`, `ember.vfio.*`, `ember.gr.init`, `sovereign.gr.init`, `ember.swap`, `sovereign.boot` aliases) with **Wire Standard L3** (cost_estimates + operation_dependencies). AGPL-3.0-or-later. Zero C FFI deps (ecoBin v3.0). **46 unsafe blocks** (all in hw-safe/GPU/VFIO/display/plugin containment crates); all SAFETY-documented; workspace `unsafe_code = "deny"`, **41 crates `forbid`** + 5 hw crates with narrow `#[allow(unsafe_code, reason)]`. **Zero production panics/expects**. Zero production TODO/FIXME/HACK. Zero production `unreachable!()`. All files under 800 lines (production+examples). Zero library println/eprintln. IPC-first JSON-RPC (dual-socket: `compute.sock` + `compute-tarpc.sock`). Rust 1.85+ (edition 2024, MSRV). **Phase C complete** (S245–S253). **Phase D dispatch live** (S254–S259) — AMD DRM dispatch live, NV VFIO QMD-based dispatch wired via PBDMA. **`OwnedFd` VFIO fd ownership** (S253). **520 cylinder tests.** **Capability-based discovery compliant** per `CAPABILITY_BASED_DISCOVERY_STANDARD.md` v1.2.
+**Last Updated**: May 2026 — S263. **22,900+** workspace tests, 0 failures (8,945+ lib-only). ~83.6% lib-only line coverage (target 90%). **85 JSON-RPC methods** (direct) + semantic registry (incl. `health.version`, `health.drain`, `device.vfio.open`, `device.vfio.roundtrip`, `device.gr.init`, `compute.context.init`, `compute.fan_out`, `primal.announce`, `ember.vfio.*`, `ember.gr.init`, `sovereign.gr.init`, `ember.swap`, `sovereign.boot` aliases) with **Wire Standard L3** (cost_estimates + operation_dependencies). AGPL-3.0-or-later. Zero C FFI deps (ecoBin v3.0). **46 unsafe blocks** (all in hw-safe/GPU/VFIO/display/plugin containment crates); all SAFETY-documented; workspace `unsafe_code = "deny"`, **41 crates `forbid`** + 5 hw crates with narrow `#[allow(unsafe_code, reason)]`. **Zero production panics/expects**. Zero production TODO/FIXME/HACK. Zero production `unreachable!()`. All files under 800 lines (production+examples). Zero library println/eprintln. IPC-first JSON-RPC (dual-socket: `compute.sock` + `compute-tarpc.sock`). Rust 1.85+ (edition 2024, MSRV). **Phase C complete** (S245–S253). **Phase D dispatch live** (S254–S259) — AMD DRM dispatch live, NV VFIO QMD-based dispatch wired via PBDMA. **`OwnedFd` VFIO fd ownership** (S253). **520 cylinder tests.** **Capability-based discovery compliant** per `CAPABILITY_BASED_DISCOVERY_STANDARD.md` v1.2.
 
 ---
 

crates/cli/src/executor/workload/conversion.rs

@@ -175,6 +175,7 @@ mod tests {
             },
             resources: None,
             security: None,
+            data_dependencies: None,
         };
 
         let env_overrides = HashMap::new();
@@ -210,6 +211,7 @@ mod tests {
             },
             resources: None,
             security: None,
+            data_dependencies: None,
         };
 
         let result = convert_to_workload_spec(&workload, HashMap::new());
@@ -244,6 +246,7 @@ mod tests {
             },
             resources: None,
             security: None,
+            data_dependencies: None,
         };
 
         let result = convert_to_workload_spec(&workload, HashMap::new());
@@ -278,6 +281,7 @@ mod tests {
             },
             resources: None,
             security: None,
+            data_dependencies: None,
         };
 
         let result = convert_to_workload_spec(&workload, HashMap::new());
@@ -380,6 +384,7 @@ mod tests {
             },
             resources: None,
             security: None,
+            data_dependencies: None,
         };
 
         let result = convert_to_workload_spec(&workload, overrides).unwrap();

crates/cli/src/executor/workload/reporting.rs

@@ -107,6 +107,7 @@ mod tests {
             },
             resources: None,
             security: None,
+            data_dependencies: None,
         }
     }