open-iov.git/debug/risc-v-gsp-rm-vm/tests, branch v7-user-laneOpen-IOV vGPU-IO: host-side GSP emulation for unmodified NVIDIA guest drivers
https://git.vgpu.io/open-iov.git/atom?h=v7-user-lane2026-10-06T23:57:20+00:00risc-v-gsp-rm-debugger: B5 two-task attach + aggregate-state decode + docs 51/53 status2026-10-06T23:57:20+00:00Arthur Hanson Rasmussonarthur@vgpu.io2026-10-06T23:57:20+00:00urn:sha1:23d8683f3012ac579db424735d1418814bb7ff01
- sim/libos_port.py: port-role model + two-task network (extintr handoff,
cross-task send/reply, TASK_STATE_QUERY trap state)
- sim/msgq_attach.py: image task discovery, bounded two-task schedule,
second-task-frontier divergence fields (first ring poll still blocked on
post-init resume + GSP_ARGUMENTS_CACHED handoff; no fabricated polls)
- harness/state_decode.py: aggregate 'group: key=value' state parsing
(20-gsp-phys-state-* dumps) + kv diff classification
- tests: 127 green across the five observability modules
- docs/51/53: status and changelog updates
risc-v-gsp-rm-debugger: land docs 45-53 + harness/sim tool set with tests2026-10-06T23:28:39+00:00Arthur Hanson Rasmussonarthur@vgpu.io2026-10-06T23:28:39+00:00urn:sha1:6c3fd5df61ff2f5cb8833ead6c05eaff9fdc92bf
rm_capture (chunked decode), launch_audit, state_seed/state_decode,
valprobe, rehost, contracts+run_contracts, host_traffic, gmmu_walk,
msgq_attach, libos_port, log_decode, server_snapshot; doc index updates
in the tool overview, operations pages and the repo README.
greeneye: GMMU/FBIF observability, PTE decoder and oracle, MPU/libos simulator wave2026-10-04T22:42:36+00:00Arthur Hanson Rasmussonarthur@vgpu.io2026-10-04T22:42:36+00:00urn:sha1:1f2073d4fbb1d412d9bbf373312e3c51b83db92a
Simulator development wave (docs 42-44): GMMU page-table entry decode with its oracle/workflow harness, FBIF observability, and MPU/LIBOS device surfaces in the device model, plus refreshed boot/machine/profile data (tu104-570.144), the qemu-line results, and the new unit tests. Docs 00/06/35-41 updated to match; harness helpers and .gitignore included.
vgsp: host CUDA bridge + sema release recovery; greeneye simulator wave2026-10-03T18:05:38+00:00Arthur Hanson Rasmussonarthur@vgpu.io2026-10-03T18:05:38+00:00urn:sha1:cc79b478843f0230fe6aa8ecd822de7ba71c891e
- kernel: gsp_cuda_bridge (QMD launch capture, debugfs job/out/done, param+output resolution cached from inline writes), sema drain fixes (never hold/starve a channel), GR ring autopin + counter autoreg, per-page push reads, counter-derive gate; module builds clean
- tools/cuda-bridge: CUDA driver-API daemon executing mail/vadd kernels on the physical GPU, CUBB2/CBD2 v2 protocol, layout check + self-tests
- tools/guest-diag + tools/cuda-ab: scanner/pin fixes, victory push-only mode
- debug/risc-v-gsp-rm-vm: Phase S simulator wave (GSP device model, boot ladder, triage/re-demo harnesses, docs 30-41), GPGPU-sim scaffolding
- STATE-CURRENT/docs updates
debug: risc-v-gsp-rm-debugger final pass - remove in-development notices, complete rename, adversarial-review fixes2026-10-02T16:41:52+00:00Arthur Hanson Rasmussonarthur@vgpu.io2026-10-02T16:41:52+00:00urn:sha1:14cf2aa59c44a50f9a108b93d58c7cecab17d45f
Remove the '# TOOL IN DEVELOPMENT - NOT READY YET!' notices from the tool docs/README/scripts and the project docs; record the removal (2026-10-02) against the tool audit (debug/risc-v-gsp-rm-vm/docs/27-TOOL-AUDIT.md), the 194-test suite and the value-validation demos (docs/25-VALUE-VALIDATION.md).
Complete the cosmetic rename to risc-v-gsp-rm-debugger in user-facing prose and commands (launcher, roadmap, docs); internal greeneye package and code identifiers unchanged.
Adversarial-review fixes: deterministic control-discovery sweep (flaky test root-caused), UUID session dirs + atomic JSON writes for concurrent runs, Ghidra bridge loopback enforcement and clean shutdown, fp register restore in Session.call, version_diff --dry-run, 30 s interrupt budget, dry-run non-destructiveness verified.
Docs: flag-removal records, link fixes, command/flag corrections (fdematch arity, port_new_device --out, trace filename), F2 orchestration note in future-eng-ops; STATE-CURRENT status refreshed.
rename (cosmetic): green-eye -> risc-v-gsp-rm-debugger in user-facing names, docs, CLI, launcher and CI workflow; internal greeneye package/module identifiers unchanged (includes in-flight greeneye module edits present in the tree)2026-10-02T15:44:31+00:00Arthur Hanson Rasmussonarthur@vgpu.io2026-10-02T15:44:31+00:00urn:sha1:1c99bfbeffff04529f6f669601fdf835a73778dadebug: green-eye porting automation - new-device and driver-version port scripts, simulator packaging, porting docs; control-discovery fix2026-10-02T15:30:46+00:00Arthur Hanson Rasmussonarthur@vgpu.io2026-10-02T15:30:46+00:00urn:sha1:2fd653044127a665e4677a2cdfb58120d7b3e16bdebug: green-eye wave 3 - RM harness, local simulator, device map, MCP plugin, value-validation demos, CI pipeline, toolchain docs; add host RM tools rmtool/rmtop2026-10-02T14:58:21+00:00Arthur Hanson Rasmussonarthur@vgpu.io2026-10-02T14:58:21+00:00urn:sha1:002e3d7d13c414ea874abbee8d82803dd3a72fe5debug: green-eye wave 2 - injection SDK, Frida-like calls, Ghidra control bridge, long-term docs2026-10-02T13:13:00+00:00Arthur Hanson Rasmussonarthur@vgpu.io2026-10-02T13:13:00+00:00urn:sha1:1e701396b1b6d204dfd8e5a8ddcd3007038029ac
Adds to debug/risc-v-gsp-rm-vm/:
- Session.call / run_until: Frida-like remote function calls and run-to-cursor,
with register restoration; verified live (rpc_ping -> 0xaffe).
- symbol+offset target resolution (gsp_ctrl+0x10) across all APIs and the REPL.
- Injection SDK (sdk/) and 'greeneye inject': position-independent RV64 service
blobs (verified zero relocations), loaded into RAM, registered in the demo
handler table, and invoked either directly or through the firmware mailbox
dispatcher. Demo ABI extended: mailbox 16..23 selects slots, arg0 carries the
service command, arg2 added (struct now 0x190; schema updated).
- Ghidra control bridge (greeneye ghidra + GreenEyeControl.java): run-until-here,
breakpoints, memory/register access, remote calls, hit export; verified
end-to-end with Ghidra headless (run_until reached rpc_sum from a GhidraScript).
- MarkGreenEyeHits.java fixed for the Ghidra 12 createBookmark API; verified
headless together with ExportForGreenEye.java.
- Analyzer renders a QEMU first-fault table for probe sessions (fault count,
epc with firmware vaddr translation, access address/size, reason).
- Tests now 35 green, including injection, Ghidra bridge, remote call, run-until
and REPL command smoke tests.
- Documentation: docs/11-16 (GSP RM service developer guide, injection SDK
specification, Ghidra control, adversarial interoperability guide, agentic
GSP IDE, custom simulator design) and GREEN-EYE-ROADMAP.md (long-term H1-H7
program); doc maps and the project RISC-V VM doc updated.
debug: add green-eye GSP/uproc RISC-V VM runtime analysis tooling2026-10-02T12:36:35+00:00Arthur Hanson Rasmussonarthur@vgpu.io2026-10-02T12:36:35+00:00urn:sha1:ba58dcdc5ad6ca021c723d279f33e3f14e1184df
Adds open-iov/debug/risc-v-gsp-rm-vm: a GDB-free instrumentation stack that boots uproc/GSP firmware in qemu-system-riscv64 and provides Frida-like hooks, breakpoints, watchpoints, memory dumps, structure decoding, snapshot diffs, recorded sessions, declarative probes, a plugin API and a Ghidra symbol/hit bridge.
Verified: 25 tests green (including a live QEMU smoke test); the demo uproc boots with correct hook/leave/watch/schema/snapshot/fault evidence; the optional TCG trace plugin builds and recorded 15M trace lines in 3 s; the TU104 570.144 fwimage probe reports its first exception (load access fault at firmware vaddr 0x4009014 reading 0x2000000000000A00).
Documentation: lean tool docs under debug/risc-v-gsp-rm-vm/docs/00-10, a new docs/05-operations/03-risc-v-gsp-rm-vm.md debugging document, and '# TOOL IN DEVELOPMENT - NOT READY YET!' markers in docs/README.md, the onboarding tooling table and the debugging workflows doc.
Vendors qemu-plugin.h from QEMU v8.2.2 (GPL-2.0-or-later), with its license header intact, so the optional TCG plugin builds without a QEMU source tree.