Trust: refresh gen-0 spine sidecar — stamp ≠ spine SHA; link falls back to Zend (prelinked/bootstrap-gen0)

[PurHur]

Category

Foundation · Pillar 1 trust / gen-0 spine sidecar · (re-#8703, re-#8704, re-#22642)

Problem

On tip (d0b2bc4585, 2026-08-08), php script/check-selfhost-spine-sidecar-sync.php fails and make bootstrap-selfhost-link refuses the committed native gen-0 driver, falling back to Zend gen-0.

Observed:

check-selfhost-spine-sidecar-sync: FAILED — stamp 36ffcf016da85a32f68aa7b65e5b06bfc01c431a ≠ spine entry SHA-1 981dcf5da393817801b877c670f6a64d38f34380
  Spine SSOT: test/selfhost/compiler_lib_spine_smoke/main.php
  Stamp:      prelinked/bootstrap-gen0/.m3_compiler_lib_sidecar.sha

bootstrap-lowering-freshness: stale native compile driver … — refusing reuse (#21855)
bootstrap-compile-invoke: compiled driver(s) failed — falling back to Zend gen-0 (#2842)
bootstrap-selfhost-link: OK (via Zend)

bootstrap-gen0-staleness: stale — committed gen-0 driver bytes are from cc281e13c (2026-08-08);
  23 commit(s) have changed lowering sources since

./script/release-readiness.sh --json still reports user_release_ready: yes / north-star5-fast: ok (waives sidecar sync under fast path), so this is an honesty gap: green release-readiness while native gen-0 cannot compile the selfhost link without Zend.

PHP implementation target

• make bootstrap-gen0-refresh-sidecar via ./script/bootstrap-gen0-refresh-exclusive-docker.sh (honest Zend full-spine when lowering fingerprint stale — Gen-1+ #1492: committed gen-0 seed cannot be rebuilt — refresh OOMs at 48 GiB, 44 restamps since the blob last changed (script/bootstrap-refresh-gen0-sidecar.sh) #22642)
• Copy refreshed prelinked/bootstrap-gen0/ blobs + stamp + manifest with verified build receipt (no restamp)
• Optionally BOOTSTRAP_GEN0_REFRESH_ARGV_DRIVER=1 if argv driver still fails functional smoke after spine refresh

Repro

php script/check-selfhost-spine-sidecar-sync.php
php script/bootstrap-gen0-staleness.php
./script/docker-exec.sh -- bash -lc 'make bootstrap-selfhost-link'   # note Zend fallback lines

Done when

• php script/check-selfhost-spine-sidecar-sync.php exits 0
• php script/bootstrap-gen0-staleness.php reports fresh (or only residual argv-driver debt documented)
• make bootstrap-selfhost-link succeeds without falling back to Zend gen-0 (or with BOOTSTRAP_M5_NO_ZEND=1)
• make bootstrap-gen0-driver-functional-smoke still OK
• No fingerprint restamp without a matching build receipt (provenance: verified-fresh)

[PurHur]

claim: lane-B bootstrap/trust automation — starting this run

Pillar 1 release-readiness was green (user_release_ready: yes, north-star5-fast: ok), but check-selfhost-spine-sidecar-sync is red and bootstrap-selfhost-link falls back to Zend. No eligible non-stdlib/ext Lane B (% 3 == 1) implementable ticket in the open queue — treating this as the bootstrap/trust fallback fix.

Plan: ./script/bootstrap-gen0-refresh-exclusive-docker.sh (honest Zend full-spine; lowering fingerprint stale vs tip). Will not restamp without a build receipt.

[PurHur]

Exclusive refresh launched:

• container: agent-harness-phpc-gen0-28998 (32g / 4 cpus, snapshot bind)
• pin: d0b2bc4585b2 on branch agent/issue-28998-gen0-spine-sidecar-refresh
• BOOTSTRAP_GEN0_FORCE_ZEND_SPINE=1 + BOOTSTRAP_GEN0_REFRESH_ARGV_DRIVER=1
• nikic preflight: OK 7247/7247 — Zend full-spine AOT in progress

(#10533 comments locked at 2500+; status lives here.)

[PurHur]

Maintainer gate snapshot (2026-08-08) — #10533 comments locked

Gate	Result	Symptom
php script/bootstrap-inventory.php --check	green	OK 7248/7248
./script/release-readiness.sh --json	green*	user_release_ready: yes, north-star5-fast: ok — *warns gen-0 seed stale (25 lowering commits since cc281e13c)
make bootstrap-selfhost-link	partial	still Zend-fallback (falling back to Zend gen-0) — this issue
Open PRs	none	nothing to merge this run

Parity stocked for workers: #29013 #29014 #29015 #29016 (implementation-ready). Native gen-0 refresh remains the Pillar 1 honesty fix.