vgsp: host CUDA bridge + sema release recovery; greeneye simulator wave

- kernel: gsp_cuda_bridge (QMD launch capture, debugfs job/out/done, param+output resolution cached from inline writes), sema drain fixes (never hold/starve a channel), GR ring autopin + counter autoreg, per-page push reads, counter-derive gate; module builds clean
- tools/cuda-bridge: CUDA driver-API daemon executing mail/vadd kernels on the physical GPU, CUBB2/CBD2 v2 protocol, layout check + self-tests
- tools/guest-diag + tools/cuda-ab: scanner/pin fixes, victory push-only mode
- debug/risc-v-gsp-rm-vm: Phase S simulator wave (GSP device model, boot ladder, triage/re-demo harnesses, docs 30-41), GPGPU-sim scaffolding
- STATE-CURRENT/docs updates

1 files changed, 31 insertions, 0 deletions

diff --git a/debug/risc-v-gsp-rm-vm/SIMULATOR-WORK-BOUNDARY.txt b/debug/risc-v-gsp-rm-vm/SIMULATOR-WORK-BOUNDARY.txt
new file mode 100644
index 0000000..d79c7bf
--- /dev/null
+++ b/debug/risc-v-gsp-rm-vm/SIMULATOR-WORK-BOUNDARY.txt
@@ -0,0 +1,31 @@
+SIMULATOR WORK BOUNDARY — risc-v-gsp-rm-debugger
+
+This directory (open-iov/debug/risc-v-gsp-rm-vm/) is the ONLY place the
+simulator workstream writes. Every file change, test, session and document
+produced by this workstream stays inside it (the private handoffs at the
+workspace root are pointer/canonical copies, not project changes).
+
+NOT TOUCHED, EVER, WITHOUT EXPLICIT HUMAN APPROVAL:
+  - kernel/ (including vgsp.ko and every kernel module)
+  - driver/, userspace/, firmware/ sources, config/, tools/
+  - any file outside open-iov/debug/risc-v-gsp-rm-vm/
+
+CONDITIONAL EXCEPTION (owner-granted 2026-10-03, session 4):
+  Backups of AGENTS.md, Handoff-vGPU-IO.md, STATE-CURRENT.md and
+  Handoff-gsp-accurate-emulation-tools.md exist under
+  HANDOFF-BACKUPS/simulator-wave-20261003/. Those four files may be edited
+  ONLY after: (a) measured time-to-value proof, (b) first and second
+  adversarial review pass, (c) changes are additive/trimming with solid
+  reasoning. Any other edit outside this directory remains deferred.
+
+DEFERRED UNTIL HUMAN APPROVAL (recorded in the simulator handoff):
+  The private live handoff lives at the workspace root (directory above
+  open-iov): /home/rmcore/Git/integdev_gpu_drv/handoff-simulator.md
+  (its §14.4 lists the deferrals).
+  - vgsp kernel-module changes for a simulator-backed VFIO/PCIe device
+  - any use of physical GPU / mdev / module load / guest / reboot
+  - promotion of any simulator result into product behavior
+  - edits to eng-ops, RUNBOOK, AGENTS.md or other project docs
+
+If a required change falls outside this directory, stop, record the deferral
+in the handoff, and continue with everything that can be done inside.