S279: final docs sweep — stale test counts, file size claim, version stamps

CONTEXT.md: deep debt history extended to S279, test count 9,131→9,156.
NEXT_STEPS.md: D-COV test counts updated (2 sites). README.md: production
panics confirmed S223→S279, file size limit reworded to honestly reflect
11 cylinder VFIO files >800L (single-concern hardware sequences).
CHANGELOG.md: added test-fix and debris cleanup items to S279 entry.
docs/guides/TESTING.md: S273→S279, 9,131→9,156. specs/README.md: Key
Numbers S211→S279 (7,842→9,156 lib tests, 65→88 methods, 49→46 unsafe,
47 crates). docs/README.md: S273→S279.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: BiomeOS Developer

CHANGELOG.md

@@ -21,8 +21,11 @@ Comprehensive deep debt audit and execution: eliminated all remaining P0/P1 prod
 - FIXED: `module_patch/mod.rs` — P1 `offset.unwrap()` after filter → `.filter_map()` with `p.offset?`
 - DEPRECATED: `get_capability_to_legacy_map()`, `capabilities_to_dependencies()` in `capability_helpers.rs` — legacy primal name mapping
 - DOCUMENTED: `get_platform_status()` — intentional design: sovereign primal is alive iff process runs
+- FIXED: `workload_executor_test.rs` — 2 `WorkloadFile` literals missing `data_dependencies` field (added S269, tests not updated)
+- FIXED: 3 `unibin_*_tests.rs` files — `start_servers_with_fallback()` calls missing 7th arg `jsonrpc_listener` (added S277, tests not updated)
+- CLEANED: `showcase/` directory removed (fossilized S275, pointer README only). Stale ignore patterns scrubbed (.gitignore, .cursorignore, .cleanignore, tarpaulin.toml). Dangling `[[bench]] jsonrpc_throughput` removed from server Cargo.toml. Migration doc `TODO`/`todo!()` replaced with completed code. S278B handoff archived.
 - VERIFIED: All 3 `unsafe` blocks in `hw-learn/nouveau_drm.rs` already have SAFETY comments
-- VERIFIED: 9,156+ lib tests pass, 0 clippy warnings
+- VERIFIED: All test targets compile (`cargo test --workspace --tests --no-run`). 9,156+ lib tests pass, 0 clippy warnings
 
 ### Session S279 (May 27, 2026) — Exp 229: Catalyst Channel — RM Compute Channel Before Warm Swap
 

CONTEXT.md

@@ -31,8 +31,8 @@ ToadStool is the **Layer 0** hardware substrate that other primals and springs d
 - **Peer primals**: Resolved at runtime via capability IDs and Unix-socket discovery (e.g. `capability.discover`, `resolve_capability_socket_fallback`) — not hardcoded URLs or legacy per-primal env manifests
 - **Discovery hierarchy** (primalSpring cross-cutting): Songbird `ipc.resolve` → biomeOS `capability.discover` → UDS filesystem convention → socket registry → TCP probing. toadStool implements tiers 1–4; TCP probing (tier 5) not used for local IPC
 - **Wave 8 Compute Trio** (S235–S263): `compute.dispatch.submit` trio-standard IPC contract. Phase A–D complete. NV VFIO e2e dispatch validated on Titan V (S263). **88 JSON-RPC methods.**
-- **Deep Debt** (S240–S273): All Duration literals → named constants. Zero production mocks/TODO/FIXME/unreachable!(). All unsafe SAFETY-documented. All `#[allow]`/`#[expect]` have `reason`. `cargo deny check bans` clean. Stale socket hygiene (S264). sporePrint Wave 28 (S265). Sandbox `working_dir` production + `data_dependencies` validation (S266). Kernel health preflight (S268). Sovereign driver rotation (S267). Production panic surface eliminated (S273). dispatch/sovereign.rs extraction (S273). warm_init module split (S273). CLI capability-based discovery migration (S273).
-- **Tests**: 23,000+ (9,131+ lib-only, 0 failures, unlimited parallelism)
+- **Deep Debt** (S240–S279): All Duration literals → named constants. Zero production mocks/TODO/FIXME/unreachable!(). All unsafe SAFETY-documented. All `#[allow]`/`#[expect]` have `reason`. `cargo deny check bans` clean. Stale socket hygiene (S264). sporePrint Wave 28 (S265). Sandbox `working_dir` production + `data_dependencies` validation (S266). Kernel health preflight (S268). Sovereign driver rotation (S267). Production panic surface eliminated (S273). dispatch/sovereign.rs extraction (S273). warm_init module split (S273). CLI capability-based discovery migration (S273). Deep Debt Evolution II — unwrap elimination, sovereign split, memmap2 removal (S276). Early Health Responder (S277). Module Extraction Sprint — 7 oversized files split, 4 C→Rust, RM ABI (S278). Panic Path Elimination III — all P0/P1 production unwraps eliminated, capability roundtrip deprecated (S279).
+- **Tests**: 23,000+ (9,156+ lib-only, 0 failures, unlimited parallelism)
 - **Unsafe**: 46 blocks (all in hw-safe/GPU/VFIO/display/plugin containment, all SAFETY-documented; reconciled S221); workspace `unsafe_code = "deny"`, 41 crates `forbid` + 5 hw crates with narrow `#[allow(unsafe_code, reason)]`; all lint attrs have `reason =` (S211+S213)
 - **async-trait**: DEPRECATED — fully removed and banned in `deny.toml` (S203r); transitive only via axum/config/wiggle
 - **deny.toml**: `ring` + `async-trait` + `zstd-sys` + `aws-lc-sys` bans active (ecoBin v3 compliant, `SOVEREIGNTY_STANDARDS.md` dark forest gate). `ring` present only as conditional transitive dep via quinn-proto/rustls-webpki (not on default build path)

NEXT_STEPS.md

@@ -34,7 +34,7 @@ syntax fixed in 3 server files. Test suite fully unblocked.
 
 ### P1: Test Coverage → 90% (D-COV) — Ongoing (S164)
 
-**~83.6% line coverage** (lib-only, 185K lines instrumented). **23,000+ tests** (0 failures, 9,131+ lib-only). Target 90%.
+**~83.6% line coverage** (lib-only, 185K lines instrumented). **23,000+ tests** (0 failures, 9,156+ lib-only). Target 90%.
 
 **S164** expanded coverage with **+94 new tests** across 7 low-coverage files:
 - `resource_validator.rs` 20% → ~75% (+19 tests)
@@ -210,7 +210,7 @@ after Phase D.
 - [x] **Clippy pedantic clean** -- `cargo clippy --workspace --all-targets -- -D warnings -W clippy::pedantic` zero warnings (S130+)
 - [x] **`#[expect]` evolution** -- production `#[allow]` evolved to `#[expect(lint, reason)]` where the lint fires; ~80 justified `#[allow]` remain (S198); S131+ removed stale suppressions
 - [x] **Spring sync S131+** -- all 5 springs pinned to latest, SPRING_ABSORPTION_TRACKER updated (S131+)
-- [ ] **Test coverage target 90%** -- 23,000+ tests (9,131+ lib-only); ~83.6% line; mock hardware layers for V4L2/VFIO (MockV4l2Device, MockVfioDevice); push to 90% ongoing
+- [ ] **Test coverage target 90%** -- 23,000+ tests (9,156+ lib-only); ~83.6% line; mock hardware layers for V4L2/VFIO (MockV4l2Device, MockVfioDevice); push to 90% ongoing
 - [x] **C dep elimination** -- flate2 → rust_backend, procfs default features disabled (S129)
 - [x] **Capability-based ports** -- `resolve_capability_or_legacy_port()` with graceful legacy fallback (S129)
 - [x] **God file splits (round 4)** -- ipc/server.rs, container/lib.rs, ecosystem.rs, handler/mod.rs, nestgate/client.rs (S129)

README.md

@@ -59,7 +59,7 @@ Nest    = Tower  + Storage            <- storage
 | Hardware transport | Implemented | DRM display, V4L2 capture, serial — frame protocol + router |
 | JSON-RPC surface | **88** JSON-RPC methods (direct) + semantic registry |
 | License | AGPL-3.0-or-later -- root LICENSE file + SPDX headers on all files |
-| File size limit | All production files target **< 500 lines** (S203i+S173: 52 production files refactored via test extraction; 3 specialty >700L files smart-refactored into directory modules; remaining >500L files are pure production — hardware drivers, type defs, all <700 lines) |
+| File size limit | Non-hardware production files target **< 500 lines**. 11 files >800L remain — all in `cylinder` VFIO hardware init (single-concern GPU bring-up sequences: pipeline, pfifo, pmu_investigate, sovereign_init, kernel_health, generation profiles, nv_gsp_bridge, reagent). S278 split 7 oversized files (~12,500L) into module dirs. |
 | Test concurrency | Unlimited parallelism (removed global throttle); zero `#[serial]`; test-time mDNS/TCP timeouts via `cfg!(test)`; zero fixed sleeps in non-chaos tests |
 | Environment safety | All env-var tests use `temp_env` (thread-safe), zero `std::env::set_var` in tests |
 
@@ -277,7 +277,7 @@ toadStool/
 | Lib-only line coverage | ~83.6% |
 | Full workspace test time | ~7m (unlimited parallelism, `cfg!(test)` fast timeouts; GPU crates have NVK resilience wrappers) |
 | `unsafe` blocks | **46 actual** (all in hw-safe/GPU/VFIO/display/plugin containment crates); all SAFETY-documented (S204, reconciled S221); workspace `unsafe_code = "deny"`, **41 crates `forbid`** + 5 hw crates with narrow `#[allow(unsafe_code, reason)]` |
-| Production panics/unwraps | **0** production `unwrap()` / `expect()` / `panic!()` (confirmed S223) |
+| Production panics/unwraps | **0** production `unwrap()` / `expect()` / `panic!()` (confirmed S279) |
 | Production `Box<dyn Error>` | 0 in core crates -- all typed errors (thiserror) |
 | Production stubs | 0 blind stubs; test-only mocks **`#[cfg(test)]`** only |
 | Production `todo!()`/`unimplemented!()`/`dbg!()` | 0 |

docs/README.md

@@ -1,6 +1,6 @@
 # ToadStool Documentation
 
-**Updated**: May 2026 — S273
+**Updated**: May 2026 — S279
 
 Primary documentation lives at the repository root. See [../DOCUMENTATION.md](../DOCUMENTATION.md) for the navigation hub. Session trackers archived to `ecoPrimals/infra/wateringHole/fossilRecord/toadstool/`.
 

docs/guides/TESTING.md

@@ -1,12 +1,12 @@
 # Testing Guide
 
-**Last Updated**: May 24, 2026 — S273
+**Last Updated**: May 27, 2026 — S279
 
 ## Quick Status
 
 | Metric | Status | Details |
 |--------|--------|---------|
-| **Lib-Only Tests** | **9,131+ (S273)** | 0 failures, unlimited parallelism |
+| **Lib-Only Tests** | **9,156+ (S279)** | 0 failures, unlimited parallelism |
 | **Workspace Tests** | **23,000+ (default features)** | ~222 intentional GPU/hardware ignores |
 | **Line Coverage** | **~83.6% (lib-only)** | ~185K production lines. Gap: hardware-dependent code (V4L2/VFIO/neuromorphic) |
 | **Clippy Pedantic** | **0 warnings** | Full workspace (`-D warnings`), in CI |

specs/README.md

@@ -115,15 +115,16 @@ toadStool picks the row. coralReef compiles for it. Springs never see the table.
 | Test coverage | Target 90%, current ~83.6% (llvm-cov) | D-COV |
 | Mocks in production | 0 (all `#[cfg(test)]` gated) | ✅ |
 
-### Key Numbers (S211)
+### Key Numbers (S279)
 
-- **20,000+ workspace / 7,842 lib-only** tests (0 failures), **~65 JSON-RPC methods**
+- **23,000+ workspace / 9,156+ lib-only** tests (0 failures), **88+ JSON-RPC methods**
 - **3 hardware transports** — Display (DRM), Capture (V4L2), Serial
-- **VFIO interface** — BAR0, DMA, power management (nvpmu)
+- **VFIO interface** — BAR0, DMA, power management (nvpmu), sovereign init pipeline
 - **NPU dispatch** — Akida AKD1000/1500 (kernel, VFIO, userspace)
-- **41 crates** `#![forbid(unsafe_code)]`, **5 crates** with narrow `#[allow(unsafe_code, reason)]` — **49 unsafe blocks** (all hw containment, all SAFETY-documented)
+- **41 crates** `#![forbid(unsafe_code)]`, **5 crates** with narrow `#[allow(unsafe_code, reason)]` — **46 unsafe blocks** (all hw containment, all SAFETY-documented)
 - **ecoBin v3.0 certified** — pure Rust, zero C application deps
 - **Rust 2024 edition**, MSRV 1.85
+- **47 workspace crates**, zero production panics/unwraps
 
 ### Architecture