Add: [H3] seal and validate HBG execution slots

[TaoZQY]

A graph packet must not authorize writes using its own claimed addresses. Seal actual frozen context resources during prepare and publish them into an independent context-owned AICPU registry. Before exposing a restore view, compare the packet's complete bindings, device, generation and runtime binary identity against this record.

Reserve a separate 192-byte registry slice outside all mutable graph images, retaining two physical allocations. Ready registrations are immutable; duplicates must match exactly. The resident DSO stores only a registry pointer. Rejected packets leave working memory, registry and output unchanged. HBG packet version 2 carries device and binary identity while preserving the 64-byte K1 envelope and invocation-owned callable identity.

Validation

• All 147 non-hardware C++ test executables passed, including 59 HBG cases per architecture.
• Full rebased stack at H3 Add: [H3] seal and validate HBG execution slots #2175: 147 C++ test executables and 159 Python tests passed (4 hardware-marked skips), covering ABI, task interfaces and simulator DMA workspace.
• Full-stack simulation with the pinned PTO ISA required: A2/A3 74 passed, 8 skipped; A5 71 passed.
• Runtime libraries rebuilt; repository pre-commit checks passed. Each earlier milestone was independently compiled and tested.
• mkdocs build --strict passed separately at all five PR heads. The HBG contract page is included in navigation from H1; the execution-slot page is included from H3.

The Host prepare callback and device control/admission interfaces are implemented. H4 must supply semantic validation and pristine restore; H5/common owner must connect CANN registration, PrepareTail ordering and device detachment before context close. Unit cache operations are stubbed; no onboard coherence or capture/replay claim is made.

Dependency and review scope

Draft 5/5: H3. Depends on #2174.

• Original stage commit (before squash): 7501f24c.
• Isolated implementation diff.
• Review order: K1 Add: kernel-mode C ABI skeleton, state machine, and wire headers #2064 → H1 Refactor: [H1] separate HBG host build from device upload #2171 → 2B Add: [2B] declare HBG resource and stream contracts #2172 → context prepare/freeze Add: [Context Prepare] prepare and freeze kernel resources #2173 → H2 Add: [H2] serialize immutable HBG packets for HostArgs #2174 → H3 Add: [H3] seal and validate HBG execution slots #2175.

This draft is rebased onto main at a1aa7fddf42b2d28849bc3fb6fe1eb50ab891324 and squashed to one commit. The rebase retains the upstream documentation-theme update. Source and test files match the previous PR head exactly; the squash preserves the complete rebased tree. Applicable pre-commit checks passed again.

All five HBG drafts target main. Each PR has exactly one commit, containing K1 plus all HBG milestones through the stage in its title. Squashing changes commit history, not the cumulative code scope. The original isolated diff above remains available to review this stage alone. Rebase in dependency order after prerequisites land.

The K1 snapshot originally carried from 21fb15c0 is included in this squashed commit, with its human author retained as co-author. Upstream #2064 remains open and has advanced; alignment with its final version remains public execution integration work.

No idle onboard devices were available. Simulation golden checks cover existing program-mode regression; mixed ACLGraph capture/replay, DSV4 CSA device accuracy and comparative performance remain unvalidated.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}