Await bounded native search and bind prior epoch recovery probe

Author: KSemenenko

.github/workflows/ci.yml

@@ -102,9 +102,10 @@ jobs:
       - name: Run unit tests without CPU intrinsics
         run: dotnet run --project src/KeyLoad.AppHost --no-build --no-restore --configuration Release -- --KeyLoadTests:Suite=unit-scalar
       - name: Build the previous storage executable
+        id: native5
         run: bash scripts/Features/StorageRecovery/build-native5-probe.sh
       - name: Test recovery after process crashes
-        if: ${{ !cancelled() && steps.build.outcome == 'success' }}
+        if: ${{ !cancelled() && steps.build.outcome == 'success' && steps.native5.outcome == 'success' }}
         run: dotnet run --project src/KeyLoad.AppHost --no-build --no-restore --configuration Release -- --KeyLoadTests:Suite=recovery
       - name: Save test results
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
@@ -114,6 +115,7 @@ jobs:
           path: |
             **/TestResults/**
             artifacts/qualification/**
+            artifacts/native5-probe/**
           if-no-files-found: ignore
       - name: Save build diagnostics
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1

README.md

@@ -43,7 +43,7 @@ KeyLoad is a **development preview**. The current SQL subset provides bounded do
 
 The default server is a three-node replicated cluster (RF3), built on Orleans with persistent ZoneTree storage on each node. Production readiness, endurance, power-loss durability and comparative performance remain under qualification. The [implementation tracker](docs/implementation/status.json), [SQL compatibility inventory](docs/implementation/sql-client-conformance.json) and [test results](docs/implementation/runtime-qualification-20261002.md) record the detailed status.
 
-The server uses ZoneTree.FullTextSearch for bounded derived text candidates while preserving exact authorized ranking. Its [development receipt](docs/implementation/native-full-text-development-2026-10-03.json) records 26 native unit and 10 process-recovery checks through Aspire. Full Linux/RF3 qualification and incremental projection replay remain pending; these checks establish no speed improvement.
+The server uses ZoneTree.FullTextSearch for bounded derived text candidates while preserving exact authorized ranking. Search now awaits complete native execution and cleanup while retaining its analytical reservation. The [development receipt](docs/implementation/native-async-search-development-2026-10-03.json) records full Aspire normal/scalar suites at 2,866 tests each and recovery at 228, including the new native admission/cancellation cases and 10 native-text process cuts. Exact-source Linux/RF3 qualification and incremental projection replay remain pending; these checks establish no speed improvement.
 
 A bounded lossless time-series chunk codec has [development evidence](docs/implementation/sample-chunk-codec-development-2026-10-03.json) from full Aspire unit/scalar suites and matched native-codec controls. Canonical chunk storage, rewrite/recovery and RF3 qualification remain in progress under KL-078.
 

docs/ADR/ADR-077-offline-native-data-epoch.md

@@ -21,6 +21,12 @@ this reachable commit has exactly the same complete source tree as the original
 tree before building. Historical development receipts keep their actual original
 commit, archive and binary hashes; they are not relabeled as a new execution.
 
+TASK-EPOCH-PROBE-BIND corrects the overlaid probe's reported source revision to
+the exact reachable archived revision above. CI recovery requires successful
+probe preparation and retains the original probe receipt and binaries alongside
+the recovery reports. A matching tree alone cannot make two different execution
+receipts interchangeable; driver and executable file hashes remain verified.
+
 ADR-057's identity4/WAL3/checkpoint2 matrix records its qualified historical
 generation; it does not describe the current identity5/WAL4/checkpoint3 source.
 This ADR adjudicates that difference without changing historical receipts.
@@ -201,3 +207,13 @@ applied cut and raw records rather than immutable materialized-tree bytes. All
 upgrade, unsupported-open, snapshot-reader refusal and read-only published-target
 retry comparisons retain the complete byte inventory. No previous provider or
 serializer source is patched to produce the oracle.
+
+The [bound local integration receipt](../implementation/native-async-search-development-2026-10-03.json)
+rebuilds the actual reachable7784b6b source/tree with exactly the two declared
+CrashHost driver overlays. All75 executable files and both driver source hashes
+remain verified after the complete Aspire recovery suite:228/228 pass, including
+all14 epoch cases, with1000 unique seeded atomic process-crash receipts retained.
+Historical2532-bound artifacts are preserved separately without relabeling.
+Exact delivered-source Linux originals and a genuine homogeneous Docker/Aspire
+RF3 cold-upgrade fixture remain required; ordinary current-format RF3 startup
+does not qualify the previous-to-current cold-upgrade contract.

docs/ADR/ADR-081-awaited-native-search-execution.md

@@ -1,6 +1,6 @@
 # ADR-081 — Awaited bounded native search execution
 
-Status: Accepted implementation contract; source and runtime qualification pending.
+Status: Accepted implementation contract; reviewed source and local development gates passed; exact-source Linux and public RF3 qualification pending.
 Related: KL-029, REQ-FTS-003/005/007 and AC-FTS-003/005/007 in
 [NativeFullTextProjection](../Features/Search/NativeFullTextProjection.md),
 ADR-034, ADR-078, AC-MCP-001 and AC-SQLVIEW-003.
@@ -23,6 +23,14 @@ Provider source: [ZoneTreeMaintainer at pinned13ee11e](https://github.com/ZoneTr
 Actual causality and repaired liveness require the real public RF3 regression.
 Local default-scheduler tests alone do not establish the Orleans join.
 
+The [local integration receipt](../implementation/native-async-search-development-2026-10-03.json)
+binds the reviewed precommit source and runtime inventories to complete Aspire
+normal/scalar2866 tests each with identical identities and recovery228, without
+skips or flaky results. The three new real-native admission/projection oracles,
+all10 native-text process cuts,14 epoch cases and1000 unique seeded atomic
+process-crash receipts pass. This is macOS development evidence; the new public
+RF3 oracle and exact delivered-source Linux artifacts remain required.
+
 ## Execution and ownership contract
 
 Add `SearchEngine.SearchAsync` and factor existing exact search into one shared
@@ -83,7 +91,16 @@ Repair fixtures under existing accepted contracts, without product changes:
 2. TASK-FTS-ASYNC-INTEGRATE, root: only Query/SearchEngine.cs and new cohesive
    Query/Features/Search helpers if needed, Orleans/ClusterRouting
    GrainQueryReadCapabilities.cs and DatabaseReadGrain.cs. Preserve exact core,
-   authorization/error/admission paths; no central or DTO edits.
+   authorization/error/admission paths; no central or DTO edits. Root also
+   adapts the existing NativePublicReadFixture/Elements async diagnostic bridge
+   and CrashHost Search/NativeTextCrashScenario calls to the awaited API, keeping
+   the same diagnostic, real-process pause and canonical-preservation oracles.
+   Existing async search, relational-linkage, admission and process-recovery
+   callers await the new API without weakening their results or errors. The
+   allocation control retains its existing synchronous measurement helper:
+   warmup and GC.GetAllocatedBytesForCurrentThread before/Search/after must run
+   on the actual measured thread. Caller-thread counts around awaited worker
+   execution are invalid. No generic sync adapter or diagnostic suppression.
 3. TASK-FTS-ASYNC-ORACLE, lifecycle_wave Luna/high: new UnitTests/Features/Search
    NativeTextAsync* and IntegrationTests/Features/Search NativeTextAsyncRf3*
    files only. Use actual ZoneTree/native FTS and real RF3 SDK/official MCP.

docs/Features/Search/NativeFullTextProjection.md

@@ -27,6 +27,16 @@ TASK-FTS-QUERY / NATIVE / TEST depend on root frozen contracts and the completed
 epoch source build. Root owns integration, validation, receipts and commits.
 TASK-FTS-ASYNC-CONTRACT/INTEGRATE/ORACLE/JOIN map REQ-FTS-007 to AC-FTS-007
 under [ADR-081](../../ADR/ADR-081-awaited-native-search-execution.md).
+Its concrete oracles are `NativeTextAsyncProjectionTests` (full canonical
+publish/reuse/new-cut result parity), `NativeTextAsyncAdmissionTests` (pre-cancel,
+real native posting pause, saturation and joined cancellation cleanup), and
+`NativeTextAsyncRf3Tests` (actual SDK/official MCP freshness, persisted policy
+epochs, credential revocation and healthy three-node status). Their source is
+reviewed. The [awaited-execution development receipt](../../implementation/native-async-search-development-2026-10-03.json)
+records normal/scalar2866 tests each with identical identities, recovery228 and
+unchanged source/runtime inventories. All three new native unit oracles and10
+native-text process cuts pass. Genuine public RF3 liveness and exact delivered-source
+Linux outcomes remain separately required; AC-FTS-007 is not fully qualified.
 TASK-RF3-ORACLE-REPAIR corrects independently diagnosed catalog, persisted write
 grant, metadata-pointer and policy-epoch fixtures; it cannot weaken authorization
 or qualify the scheduler repair without genuine RF3 execution.