You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
ci: fix main's mechanical and stale reds (fmt, clippy, tokio-ban, tls-budget, Windows dladdr, stale ledgers); list the GC-audit reds for their authors - #14604
main fails lint, check, tokio-ban, tls-budget and wasi-execution on every PR (recently merged PRs carry the same reds). This PR fixes the reds that are mechanical or stale and lists the rest — the GC-safety audits — for the authors to classify, because a wrong verdict there would turn a gate green while removing the check it exists for.
Based on c9b18ad22a (current main). It includes #14593 and #14594; those can be closed if this lands.
What this PR fixes
commit
change
verified locally (macOS arm64)
c9ed857e1f
fix(tests): drop the empty [[package]] left in the next-app-route fixture lock
tokio-ban: python3 scripts/tokio_inventory.py --offline KeyError → clean (offline); --self-test and test_tokio_gate.py OK
202599141d
fix(runtime): wpfacts_check family SCRATCH uses perry_thread_local!
fix(clippy): the two clippy errors that fail check
check: cargo clippy -p perry --bins and the host-compatible workspace clippy (CI command) both exit 0; cargo test -p perry-runtime --lib math 9 passed; constants bit-identical
71816996a1
fix(runtime): dladdr is POSIX; Windows builds take the unknown result
lint Windows type-check (E0425 ×4). Not run locally (needs the MSVC SDK via xwin); unix path unchanged
3009c395ec
chore(gates): delete ledger entries the gates report as stale
only entries each gate itself lists as stale; native_handle_ledger.py --no-raise-vs upstream/main: tables 116→114, none raised
3f9b7ec3e9
test(gc): register the two rooting witnesses of 43d4dd5 in the gc corpus
check_test_registration.py and --self-test OK. The two tests were not run under the GC matrix locally
9a26e83c24
docs(agents): keep placeholders out of the path code spans
check_gc_doc_claims.py and --self-test OK
50bb907b04
style: cargo fmt --all
cargo fmt --all -- --check OK
717501869b
chore(gates): re-record six file-size allowlist counts after cargo fmt
check_file_size.sh OK; only the six formatting-changed counts
Rules followed: no ceiling or baseline is raised; a ledger entry is deleted only where the gate itself reports it stale and the name does not reappear as a new or moved holder; nothing is classified on the authors' behalf.
The element-identity cargo-test failure is already fixed on main by 398e5b4 (my #14598 took the same approach and is superseded).
What this PR does not fix (needs the authors)
These require a GC-safety verdict per site (what the slot can hold, whether a barrier or root covers it). Output below is from this branch.
gate
why it needs the author
Address-classification audit
new GcHeader casts and the layout_slot.rs handle floor (the push_pop.rs entry moved with its call into grow_backing_unguarded, split out by 8abbab5; that also fixes the cargo-test failure native_string_validators_use_canonical_classifier)
GC store-site inventory
raw slot copies/writes need a GC_STORE_AUDIT(<class>) verdict; the class_field_set witness may have moved rather than vanished
gap-suite parity regressions and the gc-stress fan-in failure were not examined.
Two lint steps fail only on macOS (Array-type predicate lint self-test: BSD grep; Validate Windows LLVM runtime npm staging: no llvm-objcopy); both pass in CI.
Address-classification audit — addr_class
crates/perry-runtime/src/array/push_pop.rs:285: direct classify_heap_generation; use the canonical tracked/string header classifier
crates/perry-runtime/src/array/push_pop.rs grow_backing_to classify_heap_generation: 0 references, justified count 1 (new call or stale exception)
addr-class RATCHET FAILED — a file gained a site in a rule that is
frozen at its current count. Use the predicates in
crates/perry-runtime/src/value/addr_class.rs (is_handle_band /
is_above_handle_band / try_read_gc_header) instead of a hand-rolled
address floor or a bare is_valid_obj_ptr guard: neither rejects the
fetch/zlib/proxy handle bands on Linux, and dereferencing a handle
segfaults there while macOS silently hides it (#1843, #4004, #4665,
#4800, #6271).
[handle-floor] crates/perry-runtime/src/layout_slot.rs: 1 site(s), baseline allows 0
line 85: if arr.is_null() || (arr as usize) < crate::gc::GC_HEADER_SIZE + 0x1000 {
Address-classification audit failed; use the predicates/constants in
crates/perry-runtime/src/value/addr_class.rs (is_handle_band /
is_small_handle / is_proxy_id_band / try_read_gc_header / ...) instead
of re-typing band literals or casting to GcHeader, or add a justified
entry to scripts/addr_class_allowlist.txt:
crates/perry-runtime/src/arena/alloc_life.rs:289: [gcheader-cast] let h = addr as *const crate::gc::GcHeader;
crates/perry-runtime/src/arena/alloc_life.rs:401: [gcheader-cast] let header = (data as usize + aligned) as *const crate::gc::GcHeader;
crates/perry-runtime/src/arena/alloc_life.rs:500: [gcheader-cast] let header = (addr - crate::gc::GC_HEADER_SIZE) as *const crate::gc::GcHeader;
crates/perry-runtime/src/array/fill_birth.rs:132: [gcheader-cast] let header = (arr as *mut u8).sub(crate::gc::GC_HEADER_SIZE) as *mut crate::gc::GcHeader;
crates/perry-runtime/src/layout_slot.rs:88: [gcheader-cast] let h = (arr as *mut u8).sub(crate::gc::GC_HEADER_SIZE) as *mut crate::gc::GcHeader;
crates/perry-runtime/src/wpfacts_check/life_measure.rs:649: [gcheader-cast] let header = (s.addr - crate::gc::GC_HEADER_SIZE) as *const crate::gc::GcHeader;
crates/perry-runtime/src/wpfacts_check/life_measure.rs:692: [gcheader-cast] unsafe { (*((addr - crate::gc::GC_HEADER_SIZE) as *const crate::gc::GcHeader)).size }
GC store-site inventory — gc_store_site
GC store-site inventory failed; add nearby GC_STORE_AUDIT markers:
crates/perry-runtime/src/async_module.rs:55: raw slot write: slot.write(value);
crates/perry-runtime/src/module_require/init_guard_tests.rs:22: raw slot write: guards.write(1);
crates/perry-runtime/src/module_require/init_guard_tests.rs:23: raw slot write: guards.add(1).write(1);
crates/perry-runtime/src/record_array.rs:213: raw slot copy: std::ptr::copy_nonoverlapping(
crates/perry-runtime/src/record_array.rs:239: raw slot copy: std::ptr::copy_nonoverlapping((*header).elems.add(slot as usize * words), dst, words);
crates/perry-runtime/src/typedarray/slice_ops.rs:258: raw slot write: (base.add(i * 8) as *mut u64).write_unaligned(word);
crates/perry-runtime/src/typedarray/slice_ops.rs:260: raw slot write: (base.add(total - 8) as *mut u64).write_unaligned(word);
Accepted marker form: // GC_STORE_AUDIT(BARRIERED): reason, with class one of BARRIERED, EXTERNAL_BARRIERED, INIT, POINTER_FREE, ROOT, STACK
Or add a justified entry to scripts/gc_store_site_allowlist.txt.
GC store-site CLAIM verification failed (#8185):
IR witness registry entry 'class_field_set' matches no emitter call site — stale evidence; delete the registry entry (and its probe) with the site it covered
Local binding type-proof audit — local_binding
local-binding-type audit: unclassified local-type read: crates/perry-codegen/src/proto_constants.rs::iterator_member_site [local_type_hint] at lines 1038
Reference-test audit — reference_test
crates/perry-runtime/src/value/dyn_index.rs js_dyn_index_set_strict: 9 raw pointer-tag tests, justified count 8 (new test or stale exception)
SSO string-unboxing inventory — sso_unbox
SSO review {'path': 'crates/perry-runtime/src/string/concat_parts.rs', 'function': 'concat_parts_general', 'body_sha256': '789e94bde8a9fe6da107c3d2bdf9967d185717885454b07aebb68e349eeb00ed', 'claim': 'Only a part tagged exactly 0x7FFF (STRING_TAG) that passes is_valid_string_ptr is read as a StringHeader. Inline strings carry SHORT_STRING_TAG, miss that arm and the number/int32 arms, and reach js_jsvalue_to_string, which materializes a heap string that is then rooted; no inline payload is dereferenced as a header.', 'rule': 'mask-cast', 'support_files': []}: reviewed function changed; recheck its SSO proof
SSO proof source crates/perry-runtime/src/node_stream_event_emitter.rs: proof source changed; recheck fallback/decline path
SSO proof source crates/perry-runtime/src/string/concat.rs: proof source changed; recheck fallback/decline path
SSO proof source crates/perry-runtime/src/object/builtin_proto_entries.rs: proof source changed; recheck fallback/decline path
SSO proof source crates/perry-runtime/src/object/property_ops/put_value.rs: proof source changed; recheck fallback/decline path
SSO proof source crates/perry-runtime/src/array/join.rs: proof source changed; recheck fallback/decline path
Object-header shape-descriptor census — shape_census
::error::shape_descriptor_census: perry_probe_get bypasses the receiver-layout authority
gc_runtime_root_holders: NEW identity-ratcheted holders not pinned in
the inventory's `frontier` list. This covers perry-ui* callback tables
and otherwise-unclassified core raw/Perry thread-local declarations.
Register a scanner that reaches the holder, record a researched verdict
where the gated rules apply, or pin existing debt deliberately — with the
understanding that a pinned entry is not a GC-safety verdict.
crates/perry-runtime/src/arena/alloc_life.rs:114: RNG: Cell<u64> [rule T]
crates/perry-runtime/src/buffer/pool.rs:10: POOL_BASE: Cell<u32> [rule T]
crates/perry-runtime/src/buffer/pool.rs:11: POOL_SIZE: Cell<u32> [rule T]
crates/perry-runtime/src/fs/stream/write_file_input/deferred.rs:40: NEXT_OPERATION: Cell<usize> [rule T]
crates/perry-runtime/src/gc/cycle_malloc_trim.rs:255: TEST_MIMALLOC_FORCED_PURGES: Cell<usize> [rule T]
crates/perry-runtime/src/gc/cycle_malloc_trim.rs:286: LAST_REGION_GROWTH_PURGE: Cell<Option<Instant>> [rule T]
crates/perry-runtime/src/gc/cycle_malloc_trim.rs:322: TEST_REGION_GROWTH_PURGE_CHECKS: Cell<usize> [rule T]
crates/perry-runtime/src/object/deferred_namespace.rs:208: READY_STACK: std::cell::RefCell<Vec<usize>> [rule T]
crates/perry-runtime/src/object/global_this/populate.rs:1136: BIRTHING: std::cell::Cell<u8> [rule T]
crates/perry-runtime/src/promise/spec_combinators.rs:575: FAST_ARM_ELEMENTS: std::cell::Cell<u64> [rule T]
crates/perry-stdlib/src/readline/test_support.rs:6: DATA_COUNT: RefCell<usize> [rule T]
crates/perry-stdlib/src/readline/test_support.rs:7: KEYPRESS_NAMES: RefCell<Vec<String>> [rule T]
gc_runtime_root_holders: the inventory itself is malformed. Each of
these entries silences a holder without recording a usable reason.
crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/gc/census.rs; re-audit the window before updating its pin
crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/gc/cycle.rs; re-audit the window before updating its pin
crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/arena/inline.rs; re-audit the window before updating its pin
crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/gc/mod.rs; re-audit the window before updating its pin
crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/gc/policy.rs; re-audit the window before updating its pin
crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/gc/allocation_pacing.rs; re-audit the window before updating its pin
crates/perry-runtime/src/string/intern.rs:INTERN_TABLE: weak cache source changed; re-audit before refreshing pins
Unclassified runtime GC-pointer holders (#7231).
Each of these is a process-global or thread-local whose type can hold a
pointer into the GC heap, and NO registered root scanner in its own file
mentions it. That is either a missing root — which goes bad at collection
#0 and stays bad — or a holder that does not really store a GC pointer.
Decide which, and record the decision in
scripts/gc_runtime_root_holders.json. A list nobody checks is how this
class got here.
crates/perry-runtime/src/external_family.rs:136: INFO: AtomicUsize [rule B]
crates/perry-runtime/src/node_sea.rs:8: SEA_BLOB_FACTORY: AtomicUsize [rule B]
crates/perry-runtime/src/object/class_registry/construct.rs:1139: METHOD_CALLS: std::sync::atomic::AtomicUsize [rule B]
`--self-test` — root_holders_selftest
gc_runtime_root_holders self-test FAILED:
- crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/gc/census.rs; re-audit the window before updating its pin
- crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/gc/cycle.rs; re-audit the window before updating its pin
- crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/arena/inline.rs; re-audit the window before updating its pin
- crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/gc/mod.rs; re-audit the window before updating its pin
- crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/gc/policy.rs; re-audit the window before updating its pin
- crates/perry-runtime/src/gc/census.rs:PASS1_MARKED: non_moving_snapshot source changed: crates/perry-runtime/src/gc/allocation_pacing.rs; re-audit the window before updating its pin
- crates/perry-runtime/src/string/intern.rs:INTERN_TABLE: weak cache source changed; re-audit before refreshing pins
Poll-capable reach audit — poll_reach
error: ALLOC_RE symbols that CALL a POLL_CAPABLE_RUNTIME symbol but are not in POLL_CAPABLE_RUNTIME:
js_array_flat -> js_array_flat_depth
js_array_flat_depth -> js_number_coerce
js_object_assign_fresh -> js_object_assign_one
The checker knows this call's result is a heap value it must track (ALLOC_RE) and knows the thing it calls can re-enter JS or run a moving minor (POLL_CAPABLE_RUNTIME), and refuses to put the two together: a window whose only collection point is one of these classifies MOVING: no, so every `--moving-only` arm -- which is every gated arm, in all four modes -- drops it. That is #7616 exactly. Add the symbol to POLL_CAPABLE_RUNTIME.
=== poll reach: 4506 exported symbols, 1648 with an intra-runtime call edge, 420 matched by ALLOC_RE
Full output of raw_handle on this branch (category: needs the authors).
raw_handle
raw-handle debt sites: 1198 (baseline 861)
::error::per-module raw-handle rules: 128 violation(s)
crates/perry-runtime/src/array/exotic_snapshot.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/array/flat_clone.rs: raw-handle debt count 5 exceeds its ceiling of 4
crates/perry-runtime/src/array/from_concat.rs: 7 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/array/immutable.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/array/push_pop/growth.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/async_hooks/resource_methods.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/buffer/access.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/buffer/cmp.rs: 5 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/buffer/detach.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/buffer/from.rs: 8 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/buffer/iter.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/buffer/u8_codec.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/builtins/console.rs: raw-handle debt count 24 exceeds its ceiling of 7
crates/perry-runtime/src/closure/entry_bundle.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/closure/registry.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/async_value.rs: 5 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/asynchronous.rs: 5 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/asynchronous/imports.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/callback/batch.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/callback/saved.rs: 8 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/cleanup.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/guest/frame/suspended.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/guest/resource_cleanup.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/guest/resources.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/host_resource.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/http.rs: 6 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/mod.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/persistent/imports.rs: 5 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/persistent/operations.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/persistent/records.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/persistent/submit.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/producer.rs: 8 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/resource.rs: 6 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/value.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/value/retention.rs: 7 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/component/writer.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/event_target.rs: raw-handle debt count 14 exceeds its ceiling of 13
crates/perry-runtime/src/event_target/message_event.rs: 9 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/fs/dir_glob_watch/watch.rs: raw-handle debt count 4 exceeds its ceiling of 3
crates/perry-runtime/src/fs/dir_glob_watch/watch_abort.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/fs/fd_ops.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/fs/stream/utf8_stream.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/fs/stream/write_file_input.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/fs/stream/write_file_input/deferred.rs: 6 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/json/raw_json.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/json/replacer.rs: raw-handle debt count 12 exceeds its ceiling of 11
crates/perry-runtime/src/json/stringify_shape_template.rs: raw-handle debt count 3 exceeds its ceiling of 2
crates/perry-runtime/src/messaging.rs: 6 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/messaging/broadcast_operations.rs: 6 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/messaging/port_operations.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/messaging/worker_async_dispose.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/messaging/worker_metadata.rs: 5 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/native_payload_birth.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_api_host/metadata/owned.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_stream.rs: 10 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_stream/async_iterator.rs: raw-handle debt count 10 exceeds its ceiling of 7
crates/perry-runtime/src/node_stream/pipe_listeners.rs: 9 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_stream/proto_methods.rs: 10 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_stream/readable_from_iterator.rs: 7 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_stream/write_state.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_stream_constructors/builders.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_stream_event_emitter.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_stream_readwrite.rs: 7 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_stream_state_view.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/node_submodules/mod.rs: raw-handle debt count 5 exceeds its ceiling of 4
crates/perry-runtime/src/node_v8.rs: 19 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/alloc_basic.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/arguments.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/assert.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/class_registry/construct/class_object.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/class_registry/parent_static/symbol_members.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/class_registry/state.rs: 8 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/deferred_namespace.rs: 10 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/delete_rest.rs: raw-handle debt count 3 exceeds its ceiling of 2
crates/perry-runtime/src/object/field_get_set/accessors.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/field_get_set/class_object_props.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/field_get_set/class_object_template.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/field_get_set/entries_shape.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/field_get_set/get_field_by_name.rs: raw-handle debt count 3 exceeds its ceiling of 2
crates/perry-runtime/src/object/field_get_set/runtime_read_site.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/field_get_set/runtime_store_site.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/field_set_by_name/tail.rs: raw-handle debt count 10 exceeds its ceiling of 9
crates/perry-runtime/src/object/instanceof/shape_ancestry.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/layout_desc.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/layout_desc/store.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/native_method_install.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/native_module/callable_exports.rs: raw-handle debt count 29 exceeds its ceiling of 24
crates/perry-runtime/src/object/native_module/class_ref_values.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/node_http_prototypes.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/object_ops/define_property.rs: raw-handle debt count 5 exceeds its ceiling of 2
crates/perry-runtime/src/object/object_ops/descriptor_helpers.rs: raw-handle debt count 8 exceeds its ceiling of 2
crates/perry-runtime/src/object/overflow.rs: 29 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/property_ops/metadata.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/property_ops/set.rs: 5 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/runtime_layouts.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/shape_store.rs: 30 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/object/string_proto_thunks.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/process/node_module.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/process/worker_restrictions.rs: 8 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/promise/operation_owner.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/promise/settled_step.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/regex/string_compat.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/string/concat.rs: raw-handle debt count 10 exceeds its ceiling of 7
crates/perry-runtime/src/string/concat_parts.rs: 3 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/string/read.rs: 5 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/string/slice_ops.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/thread/clone_read.rs: 8 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/thread/clone_write.rs: 4 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/typedarray/iterate.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/typedarray/slice_ops.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/typedarray/transform.rs: raw-handle debt count 14 exceeds its ceiling of 2
crates/perry-runtime/src/typedarray_named.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/typedarray_props.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/validators/received.rs: 2 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/value/dyn_index.rs: raw-handle debt count 5 exceeds its ceiling of 3
crates/perry-runtime/src/value/dynamic_object.rs: 1 raw-handle debt site(s) in a module with no ceiling. New code must put real work inside RuntimeHandle::across_{mut,const,nanbox} or use with_{mut,const}_ptr; see #7341.
crates/perry-runtime/src/weakref.rs: raw-handle debt count 10 exceeds its ceiling of 4
crates/perry-runtime/src/gc/tests/copying.rs: ceiling of 3 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
crates/perry-runtime/src/gc/tests/dead_owner_side_tables.rs: ceiling of 1 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
crates/perry-runtime/src/gc/tests/helper_stores.rs: ceiling of 4 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
crates/perry-runtime/src/gc/tests/runtime_roots/callback_scanners.rs: ceiling of 47 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
crates/perry-runtime/src/gc/tests/runtime_roots/fs_options_object.rs: ceiling of 4 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
crates/perry-runtime/src/gc/tests/runtime_roots/hook_dispatch_handles.rs: ceiling of 3 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
crates/perry-runtime/src/gc/tests/runtime_roots/transient_handles.rs: ceiling of 10 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
crates/perry-runtime/src/node_stream_tests.rs: ceiling of 7 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
crates/perry-runtime/src/node_stream_tests_extra.rs: ceiling of 10 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
crates/perry-runtime/src/node_submodules/test.rs: ceiling of 4 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
crates/perry-runtime/src/object/global_this_webassembly.rs: ceiling of 5 matches nothing -- the module is clean (or gone). DELETE its line so the cleanup cannot be undone.
Put the allocating call inside RuntimeHandle::across_{mut,const,nanbox}
for a post-call reload; empty `|| ()` closures are still debt.
Use with_{mut,const}_ptr for a scoped argument to a
non-allocating operation / self-rooting runtime entry point.
See #7341 and scripts/raw_handle_debt_files.txt.
Full output of thread_exit on this branch (category: needs the authors).
thread_exit
thread_exit_address_globals: crates/perry-runtime/src/arena/region.rs:REGIONS: allocation-lifetime source changed: crates/perry-runtime/src/arena/region.rs; re-audit custody
thread_exit_address_globals: crates/perry-runtime/src/arena/region.rs:REGIONS: allocation-lifetime source changed: crates/perry-runtime/src/arena/block.rs; re-audit custody
thread_exit_address_globals: crates/perry-runtime/src/arena/alloc_life.rs:37: `INTERVAL: AtomicUsize` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/async_context.rs:416: `CONTEXT_GUARDS: crate::exception::marks::CatchStackKey<ContextGuardAction>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/contracts.rs:116: `CLAIMS: OnceLock<HashMap<u32, Claim>>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/lib.rs:538: `PUMP_DEPTH: crate::exception::marks::CatchStackKey<()>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/map.rs:20: `MAP_FOREACH_STACK: crate::exception::marks::CatchStackKey<usize>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/messaging/port_transport.rs:32: `TRANSPORT: LazyLock<Mutex<Transport>>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/node_api_host/loader.rs:179: `LINKED: std::sync::OnceLock<Linked>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/node_stream_constructors/web_adapter.rs:50: `WEB_READABLE_FROM_SOURCE_PTR: AtomicPtr<()>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/node_stream_constructors/web_adapter.rs:51: `WEB_WRITABLE_FROM_SINK_PTR: AtomicPtr<()>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/node_stream_constructors/web_adapter.rs:52: `WEB_TRANSFORM_FROM_TRANSFORMER_PTR: AtomicPtr<()>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/object/call_method_depth.rs:11: `CALL_METHOD_DEPTH: crate::exception::marks::CatchStackKey<()>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/object/class_handles.rs:185: `HTTP_SERVER_HANDLE_KIND_PROBE_PTR: AtomicPtr<()>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/object/field_get_set/ic_miss/private_member_access.rs:9: `PRIVATE_MEMBER_ACCESS_HINTS: crate::exception::marks::CatchStackKey<PrivateMemberAccessHint>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/object/field_get_set/ic_miss.rs:499: `PRIVATE_LEXICAL_BRAND_STACK: crate::exception::marks::CatchStackKey<u64>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/object/native_call_method/namespace_override.rs:14: `RUNNING: crate::exception::marks::CatchStackKey<(String, String)>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/object/prototype_chain.rs:41: `PROTOTYPE_RESOLUTION_STACK: crate::exception::marks::CatchStackKey<u64>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/object/this_binding.rs:28: `STATIC_PRIVATE_OWNER_STACK: crate::exception::marks::CatchStackKey<u64>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/object/this_binding.rs:366: `DERIVED_SUPER_BINDING_STACK: crate::exception::marks::CatchStackKey<DerivedSuperBinding>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/set.rs:36: `SET_FOREACH_STACK: crate::exception::marks::CatchStackKey<usize>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/snap_census/runner.rs:59: `ANCHOR: Anchor` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/snap_census/runner.rs:5354: `EXE_TEXT: [std::sync::atomic::AtomicUsize; 3]` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/string/short_pair.rs:161: `TAKEN: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/string/short_pair.rs:162: `DECLINED: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/turnloop_pool/mod.rs:222: `FAILED: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/family.rs:38: `NEVER: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/family.rs:39: `SITE: AtomicI64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/family.rs:40: `SITE_LEN: AtomicI64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/life.rs:68: `DEATHS: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/life.rs:69: `UNBORN: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/life.rs:70: `NON_YOUNG: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/life.rs:71: `EXACT: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/life.rs:72: `CHECKED_MINORS: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/life.rs:73: `DROPPED_UNOBSERVED: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/life.rs:74: `DIED_IN_CALL: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-runtime/src/wpfacts_check/life.rs:75: `BETS_FAILED: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-stdlib/src/crypto/uuid.rs:153: `SEQUENCE: Mutex<Sequence>` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-stdlib/src/turnloop_client/mod.rs:132: `DECLINED: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: crates/perry-stdlib/src/turnloop_client/mod.rs:134: `FAILED: AtomicU64` is a process-global static that can hold a heap address and has no thread-exit verdict in thread_exit_address_globals.json. After its thread exits, Arena::drop frees the memory and another thread reuses it (#11471): invalidate it there, make it per-thread, or record why it cannot hold an arena address.
thread_exit_address_globals: 1405 candidates, 170 counter-only, 481 classified by entry, 0 pending_fix group(s), 40 problem(s)
raliclo
pushed a commit
to raliclo/perry
that referenced
this pull request
Nov 13, 2026
No actionable comments were generated in the recent review.
Walkthrough
The pull request changes top-level-await module initialization, promise rooting and fact analysis, and non-Unix symbol handling. It also adds a module-scope binding test and GC-rooting witnesses. Most other edits reformat code, reorder declarations, or update supporting repository records.
Top-level-await programs no longer emit the per-module guarded initializer, evaluation wrapper, dependency initialization calls, or dependency declarations in the affected code-generation block. Related code is reformatted or reordered.
Compiler and transform maintenance crates/perry-codegen/src/*, crates/perry-transform/src/*, crates/perry-hir/src/*
Most changes reformat existing expressions and tests or reorder declarations. The HIR tests add a case for a block-local binding followed by a store to a module-level name.
Runtime and platform compatibility
Layer / File(s)
Summary
Platform symbol handling crates/perry-runtime/src/arena/alloc_life.rs, crates/perry-runtime/src/gc/life_why.rs, crates/perry-runtime/src/wpfacts_check/life.rs
Unix builds retain dladdr symbol lookup. Non-Unix builds use fallback implementations for image-base and symbol lookup.
Promise and runtime updates crates/perry-runtime/src/promise/*, crates/perry-runtime/src/object/*, crates/perry-runtime/src/arena/*
js_promise_resolved reloads the promise address from its GC root after allocating the constructor key. Other runtime changes primarily reformat code and tests or reorder declarations.
HTTP and streams crates/perry-ext-http/src/server/*, crates/perry-stdlib/src/streams/*, crates/perry-ext-zlib/src/stream/tests.rs
HTTP callback calls and stream-related expressions are reformatted. The described call arguments and behavior remain unchanged.
Facts analysis and repository support
Layer / File(s)
Summary
Native-promise fact handling and tests crates/perry-wpfacts/src/solve/*, crates/perry-wpfacts/src/tests/*
For locked native-promise then values, the solver loads the chain into a separate node and filters it through Cons::Defined before connecting the promise’s own field to the read node. One browser-effects test adds a DOMException.prototype receiver assertion.
Documentation and CI records AGENTS.md, changelog.d/*, scripts/*, tests/parity/*
The parity-test guidance changes its documented path layout. The changelog records reported CI fixes. Repository inventories and file-size counts are updated, and two GC-rooting witnesses are registered.
This PR mostly reformats code and updates CI records. It also changes how top-level-await modules are initialized and adds non-Unix fallbacks. Nothing indicates a defect, but the top-level-await initialization change and the Windows type-check were not verified locally, so owners should confirm them in CI before relying on them.
Pre-merge checks: 4
Check name
Status
Explanation
Title check
The title names the main change: a CI fix for main's mechanical and stale failures (fmt, clippy, tokio-ban, tls-budget, Windows dladdr, stale ledgers). The changeset matches: it has fmt-only reflows, …
Linked Issues check
Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check
Check skipped because no linked issues were found for this pull request.
Description check
The description follows the template's main purpose and gives detailed, relevant context. It has a summary, a table of changes with local verification notes, a clear list of unresolved gate failures, …
Full details: Title check
Explanation
The title names the main change: a CI fix for main's mechanical and stale failures (fmt, clippy, tokio-ban, tls-budget, Windows dladdr, stale ledgers). The changeset matches: it has fmt-only reflows, two clippy fixes, a dladdr Unix gate, a perry_thread_local change, and removal of stale ledger entries. The title also mentions listing the GC-audit failures for their authors, which the description and the changelog-free docs support, though that part is a documentation of unfixed items rather than code changes. The title is long (150 characters) but still specific.
Full details: Description check
Explanation
The description follows the template's main purpose and gives detailed, relevant context. It has a summary, a table of changes with local verification notes, a clear list of unresolved gate failures, and a checklist. It does not follow the template's section headings: it lacks the 'Changes' and 'Related issue' headings, and the 'Test plan' is a results table rather than the template's checkbox list. The description references #14593, #14594, and #14598 but does not use the template's 'Fixes #123' or 'n/a' line. The template's checklist items for CHANGELOG and version bumps are marked. The 'cargo build --release' and 'cargo test --workspace' items are not explicitly confirmed, and the description says the Windows lint type-check was not run locally. Overall, the description is mostly complete and clear, with a few template sections missing or reshaped.
Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Included review availability: This review used your included allowance. Your plan provides up to 8 included reviews per hour; 7 remain after this review.
Once this is in (or whichever parts you take), these PRs are independent of it and only waiting on the shared reds; each has its own unit test with a mutation check:
I will rebase each on main after this lands so they can be merged one at a time. #14595 is the design question behind #14597 (compile async bodies to WASM instead of the JS emitter); happy to follow whichever direction you choose there.
…ture lock
PerryTS#14482 removed the perry-uuid entry from
tests/integration/release/packages/next-app-route/provider/Cargo.lock by hand
and kept its `[[package]]` header, so two headers sat back to back. TOML reads
that as a package table with no keys, and `scripts/tokio_inventory.py
--offline` (the `tokio-ban` job) dies on `package["name"]` with KeyError on
every PR.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
(cherry picked from commit cfbb112)
74304a9 added a raw `thread_local!` to
crates/perry-runtime/src/wpfacts_check/family.rs, which
`scripts/check_thread_locals.py` refuses, so `tls-budget /
self-test-checkers` fails on every PR. `crate::perry_thread_local!` takes the
same syntax and the same `.with()` calls, as `wpfacts_check/life.rs` already
does.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
(cherry picked from commit 50d4c70)
- perry-wpfacts solve/strs.rs: STRS_K is usize::MAX (the cap is off, model.rs),
so `len() > STRS_K` is always false and absurd_extreme_comparisons denies it.
Allowed on the two functions with the reason; behaviour unchanged.
- perry-runtime math.rs js_math_exp: INV_LN2 and E are written as
std::f64::consts::LOG2_E and ::E (approx_constant). Same bits:
0x3FF71547652B82FE and 0x4005BF0A8B145769.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
alloc_life::image_base and wpfacts_check::life::symbol call libc::dladdr /
Dl_info unconditionally, so `cargo xwin check -p perry-runtime` (lint:
Type-check Windows runtime and stdlib) fails with E0425. Off unix they return
the values both already return when dladdr finds nothing: 0 and "?".
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
Each gate names these as matching nothing any more and asks for deletion;
only those entries are removed, no ceiling or baseline is raised.
- native_handle_ledger.txt: turnloop_h2/mod.rs and turnloop_serve/conn.rs
(ledger 1 table, measured 0). Tables 116 -> 114 vs main, none raised.
- gc_runtime_root_holders.json: 11 holders under "no longer match an
uncovered holder" (IN_FLIGHT, CP_LIVE_COUNT, CP_REFED_COUNT,
MAP_FOREACH_STACK, RUNNING, SET_FOREACH_STACK, NEXT_PORT_ID, ACTIVE,
PENDING x2, DRIVERS). None reappears among new or unclassified holders.
- thread_exit_address_globals.json: fn_metadata_owner.rs INDEX ("stale entry
- no such candidate static").
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
test_gap_gc_namespace_call_callee_rooting and
test_gap_gc_scalar_ctor_arg_rooting were added by 43d4dd5 but not listed in
tests/parity/gc_repsel_corpus.txt, so gc_repsel_matrix.sh never ran them and
check_test_registration.py fails lint.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
check_gc_doc_claims.py checks that a code span starting with a repo root names
an existing path; `tests/parity/<root>/<subject>/` and
`tests/parity/snapshots/<platform>-<mode>/<subject>.json` do not, so lint fails.
The existing directory stays in the code span and the placeholder pattern
moves to its own span. Wording otherwise unchanged.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
Mechanical: `cargo fmt --all` on main (222 files), which the `lint` job's
"Check formatting" step rejects. No hand edits; regenerate with
`cargo fmt --all` when rebasing.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
`cargo fmt --all` changed the code-line count of six allowlisted files;
check_file_size.sh asserts exact counts. Only those six entries change
(`./scripts/check_file_size.sh --update`), all from formatting:
codegen/mod.rs 3677->3709, stmt/loops.rs 8456->8453, object/shapes.rs
4937->4944, snap_census/runner.rs 4749->4768, stdlib streams.rs 2448->2454,
run_pipeline.rs 6363->6366.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
…eilings, two integration expectations (#14631)
* fix(runtime): RecordArrayHeader size assertion holds on wasm32
`const _: () = assert!(size_of::<RecordArrayHeader>() == 24)` (#14487) pins
the 64-bit layout; on wasm32 the `elems` pointer is 4 bytes and the head is 20,
so `wasi-execution` fails building the runtime for wasm32-wasip1 with E0080.
The head is reached only through the `js_record_array_*` entries and the GC
through `elems_slot` (`addr_of_mut!`), so nothing depends on the width: the
assertion now pins four u32 counts followed by the pointer with no padding
(16 + pointer size), keeping the capacity (+4) and elems (+16) offsets.
Checked by compiling the header and both assertions alone for
wasm32-wasip1 and aarch64-apple-darwin: the old one fails on wasm32 with the
CI message, the new one holds on both. `cargo test -p perry-runtime --lib
record_array`: 16 passed.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
* style: cargo fmt --all
`crates/perry-runtime/src/lib.rs` landed unformatted after #14604; the lint
job's "Check formatting" step rejects it. Mechanical.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
* chore(gates): delete the raw-handle ceilings the gate reports as matching nothing
raw_handle_debt.py lists eleven per-module ceilings whose module now has no
debt site ("matches nothing -- DELETE its line so the cleanup cannot be
undone"): global_this_webassembly.rs and ten test modules under
perry-runtime (gc/tests/..., node_stream_tests*.rs, node_submodules/test.rs).
Only those lines go; `--no-raise-vs upstream/main`: baseline 861 -> 861,
module ceilings 107 -> 96, none raised.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
* test(wasm): two integration expectations follow console.log's one-line output
#14625 made `console.log(a, b)` print its arguments on one line, as Node does,
but left 20_string_from_char_code.expected and
22_cross_module_nested_object.expected in the old one-value-per-line form, so
tests/integration/wasm/run_wasm_tests.sh fails both on main. The new contents
are Node's output (the cross-module case run with explicit `.ts` imports), and
the compiled programs print exactly that; the suite is back to 28 pass / 4
fail with the long-standing set.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
* chore: changelog entry for #14631
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
---------
Co-authored-by: Ralic Lo <raliclo@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
mainfailslint,check,tokio-ban,tls-budgetandwasi-executionon every PR (recently merged PRs carry the same reds). This PR fixes the reds that are mechanical or stale and lists the rest — the GC-safety audits — for the authors to classify, because a wrong verdict there would turn a gate green while removing the check it exists for.Based on
c9b18ad22a(currentmain). It includes #14593 and #14594; those can be closed if this lands.What this PR fixes
c9ed857e1ftokio-ban:python3 scripts/tokio_inventory.py --offlineKeyError →clean (offline);--self-testandtest_tokio_gate.pyOK202599141dtls-budget:check_thread_locals.pyFAIL → OK;--self-testOK;cargo test -p perry-runtime --lib wpfacts_check10 passedb1c63a6eafcheckcheck:cargo clippy -p perry --binsand the host-compatible workspace clippy (CI command) both exit 0;cargo test -p perry-runtime --lib math9 passed; constants bit-identical71816996a1lintWindows type-check (E0425 ×4). Not run locally (needs the MSVC SDK via xwin); unix path unchanged3009c395ecnative_handle_ledger.py --no-raise-vs upstream/main: tables 116→114, none raised3f9b7ec3e9check_test_registration.pyand--self-testOK. The two tests were not run under the GC matrix locally9a26e83c24check_gc_doc_claims.pyand--self-testOK50bb907b04cargo fmt --all -- --checkOK717501869bcheck_file_size.shOK; only the six formatting-changed countsRules followed: no ceiling or baseline is raised; a ledger entry is deleted only where the gate itself reports it stale and the name does not reappear as a new or moved holder; nothing is classified on the authors' behalf.
The element-identity
cargo-testfailure is already fixed onmainby 398e5b4 (my #14598 took the same approach and is superseded).What this PR does not fix (needs the authors)
These require a GC-safety verdict per site (what the slot can hold, whether a barrier or root covers it). Output below is from this branch.
GcHeadercasts and thelayout_slot.rshandle floor (thepush_pop.rsentry moved with its call intogrow_backing_unguarded, split out by 8abbab5; that also fixes thecargo-testfailurenative_string_validators_use_canonical_classifier)GC_STORE_AUDIT(<class>)verdict; theclass_field_setwitness may have moved rather than vanishedperry_probe_getbypasses the receiver-layout authority--self-testmaintoo, on the same changed-source pinswrite_file_input/deferred.rsandgc/life_why.rs(from e6c71cd): each a new table over a ceiling of 0 (the two stale rows are removed by this PR)compile_env == {"PERRY_WRITE_BARRIERS": "0"}failsOther jobs, not touched here:
wasi-execution:const _: () = assert!(size_of::<RecordArrayHeader>() == 24)(crates/perry-runtime/src/record_array.rs, wpfacts, codegen, runtime: an Array of value records is a record array (value records VR-4b) #14487) fails on wasm32, where the header holds a 4-byte pointer. Whether codegen relies on the 24 on 32-bit targets decides the fix.gap-suiteparity regressions and thegc-stressfan-in failure were not examined.Array-type predicate lintself-test: BSDgrep;Validate Windows LLVM runtime npm staging: nollvm-objcopy); both pass in CI.Address-classification audit —
addr_classGC store-site inventory —
gc_store_siteLocal binding type-proof audit —
local_bindingReference-test audit —
reference_testSSO string-unboxing inventory —
sso_unboxObject-header shape-descriptor census —
shape_censusRuntime GC-pointer holder custody audit —
root_holders`--self-test` —
root_holders_selftestPoll-capable reach audit —
poll_reachNative-handle ledger ratchet —
native_ledgerGC matrix liveness gate —
gc_matrixPer-test global sinks —
global_sinksRebasing
style: cargo fmtand the file-size counts are regenerated, not cherry-picked:cargo fmt --all && ./scripts/check_file_size.sh --update.Checklist
feat:/fix:/docs:/chore:prefix convention used in the log🤖 Generated with Claude Code
https://claude.ai/code/session_01CUQanVsnitcrmYLAWWPc3p
Summary by CodeRabbit
Bug Fixes
awaitmodule initialization and handling of deferred namespace imports.Improvements