integration(RC · DO NOT MERGE): ARStack Studio + ESP32-P4 PTP/SV consolidated

.github/workflows/arstack-studio-native-preview.yml

@@ -5,6 +5,10 @@ on:
     types: [opened, synchronize, reopened, ready_for_review]
     paths:
       - 'apps/arstack_studio/**'
+      # Firmware-only timing fixes MUST create a matched ESP32 image and
+      # Windows Inno installer; do not leave users on stale embedded firmware.
+      - 'embedded/esp32p4_smv_injector/**'
+      - 'include/ariec61850/time_sync/**'
       - '.github/workflows/arstack-studio-native-preview.yml'
 
 permissions:
@@ -19,10 +23,14 @@ jobs:
   # rather than taking an older public firmware that lacks PROFILE-BINARY-V1.
   firmware:
     uses: ./.github/workflows/esp32p4-smv-injector.yml
+    with:
+      # Only the GUI Preview installer opts into measured local phase sync.
+      # Stable release workflow keeps ordinary firmware until board validation.
+      phase_sync_preview: true
 
   windows-preview:
     needs: firmware
-    if: ${{ !github.event.pull_request.draft && github.event.pull_request.head.repo.full_name == github.repository }}
+    if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
     runs-on: windows-2022
     timeout-minutes: 40
     env:
@@ -50,10 +58,17 @@ jobs:
         run: |
           cmake -S apps/arstack_studio -B build-studio-preview -G "Visual Studio 17 2022" -A x64 -DARIEC61850_WARNINGS_AS_ERRORS=ON -DARSTACK_STUDIO_ENGINEERING_PREVIEW=ON
           if ($LASTEXITCODE -ne 0) { throw 'Preview configuration failed' }
-          cmake --build build-studio-preview --config Release --target arstack_studio arstack_session_harness --parallel 2
+          cmake --build build-studio-preview --config Release --target arstack_studio arstack_session_harness arstack_clipboard_harness arstack_capture_harness --parallel 2
           if ($LASTEXITCODE -ne 0) { throw 'Native Studio preview build failed' }
           & "$PWD\build-studio-preview\Release\arstack_session_harness.exe"
           if ($LASTEXITCODE -ne 0) { throw 'Native session regression failed' }
+          & "$PWD\build-studio-preview\Release\arstack_clipboard_harness.exe"
+          if ($LASTEXITCODE -ne 0) { throw 'Production native clipboard readback regression failed' }
+          # The exact production PCAP decoder must pass the real historical
+          # 24-byte/zero-packet and STOPPED+stale-FPS regression, not just
+          # the session and clipboard tests on Draft PRs.
+          & "$PWD\build-studio-preview\Release\arstack_capture_harness.exe"
+          if ($LASTEXITCODE -ne 0) { throw 'Native SV capture 24-byte PCAP / liveness regression failed' }
           # Differentiate product code regressions from missing deployed DLLs.
           $nativeGui = Join-Path $PWD 'build-studio-preview\Release\arstack_studio.exe'
           $probe = Start-Process -FilePath $nativeGui -ArgumentList '--check-reference-template' -Wait -PassThru
@@ -95,6 +110,12 @@ jobs:
             throw 'Matching firmware job did not provide its manifest'
           }
           $manifest = Get-Content -Raw -LiteralPath $manifestPath | ConvertFrom-Json
+          if ($manifest.phaseSyncPreview -ne $true -or
+              $manifest.phaseServoEnabled -ne $true -or
+              $manifest.canonicalMacTxEvidenceEnabled -ne $true -or
+              $manifest.broadcastMirrorEnabled -ne $false) {
+            throw 'Studio preview refuses old/default SMV firmware without measured PTP-SV phase and MAC TX evidence'
+          }
           $expectedCapabilities = @('SMV-4I4V', 'PROFILE', 'PROFILE-BINARY-V1', 'LIVE-SETPOINTS', 'SESSION-LEASE', 'PTP-P2', 'SMPSYNCH-AUTO')
           foreach ($capability in $expectedCapabilities) {
             if ($manifest.capabilities -notcontains $capability) { throw "PR firmware lacks capability: $capability" }
@@ -216,7 +237,7 @@ jobs:
           $env:ARSTACK_STUDIO_FIRMWARE_DIR = Join-Path $stage 'firmware'
           $env:ARSTACK_STUDIO_ESPFLASH = Join-Path $stage 'tools\espflash.exe'
           $env:ESPFLASH_SKIP_UPDATE_CHECK = 'true'
-          foreach ($check in @('--check-reference-template', '--check-firmware-contract', '--check-p0-policy', '--check-app-lifecycle')) {
+          foreach ($check in @('--check-reference-template', '--check-firmware-contract', '--check-p0-policy', '--check-clipboard', '--check-app-lifecycle')) {
             $probe = Start-Process -FilePath $exe -ArgumentList $check -Wait -PassThru
             Write-Host "PACKAGED_PREVIEW_CHECK=$check EXIT=$($probe.ExitCode)"
             if ($probe.ExitCode -ne 0) {
@@ -264,7 +285,7 @@ jobs:
           $env:ARSTACK_STUDIO_FIRMWARE_DIR = Join-Path $installDir 'firmware'
           $env:ARSTACK_STUDIO_ESPFLASH = Join-Path $installDir 'tools\espflash.exe'
           $env:ESPFLASH_SKIP_UPDATE_CHECK = 'true'
-          foreach ($check in @('--check-firmware-contract', '--check-p0-policy', '--check-app-lifecycle')) {
+          foreach ($check in @('--check-firmware-contract', '--check-p0-policy', '--check-clipboard', '--check-app-lifecycle')) {
             $probe = Start-Process -FilePath $exe -ArgumentList $check -Wait -PassThru
             if ($probe.ExitCode -ne 0) { throw "Installed preview failed $check code $($probe.ExitCode)" }
           }

.github/workflows/arstack-studio-qt.yml

@@ -81,7 +81,7 @@ jobs:
         shell: powershell
         run: |
           cmake --build build-arstack-studio --config Release `
-            --target arstack_session_harness arstack_windows_ownership_harness --parallel
+            --target arstack_session_harness arstack_clipboard_harness arstack_windows_ownership_harness --parallel
 
       - name: S8A deterministic session harness on Windows
         timeout-minutes: 1
@@ -98,6 +98,16 @@ jobs:
             throw "S8A Windows deterministic harness failed with exit code $exitCode."
           }
 
+      - name: Native Windows clipboard roundtrip regression
+        timeout-minutes: 1
+        shell: powershell
+        run: |
+          $exe = Join-Path $PWD 'build-arstack-studio\Release\arstack_clipboard_harness.exe'
+          & $exe
+          if ($LASTEXITCODE -ne 0) {
+            throw "Native Windows OS clipboard readback failed: exit $LASTEXITCODE"
+          }
+
       - name: S8B cross-process ownership and serial-loss harness
         timeout-minutes: 1
         shell: powershell
@@ -174,6 +184,10 @@ jobs:
         shell: bash
         run: python3 apps/arstack_studio/tests/check_operator_workspace.py
 
+      - name: Independent SV PCAP decoder deterministic regressions
+        shell: bash
+        run: python3 -m unittest discover -s tests -p test_smv_wire_capture_audit.py -v
+
       - name: Native binary profile authority regression
         shell: bash
         run: |
@@ -212,7 +226,7 @@ jobs:
         run: |
           set -o pipefail
           cmake --build build-arstack-studio \
-            --target arstack_studio arstack_session_harness --parallel 2 \
+            --target arstack_studio arstack_session_harness arstack_capture_harness arstack_clipboard_harness --parallel 2 \
             2>&1 | tee /tmp/arstack-studio-build.log
 
       - name: 4I+4V reference template regression
@@ -236,6 +250,21 @@ jobs:
           timeout 20s ./build-arstack-studio/arstack_session_harness \
             2>&1 | tee /tmp/arstack-studio-session-harness.log
 
+      - name: Native GUI clipboard content/readback regression
+        shell: bash
+        run: |
+          set -o pipefail
+          timeout 15s env QT_QPA_PLATFORM=offscreen \
+            ./build-arstack-studio/arstack_clipboard_harness \
+            2>&1 | tee /tmp/arstack-studio-clipboard-harness.log
+
+      - name: Native SV PCAP capture and CSV decoder regression
+        shell: bash
+        run: |
+          set -o pipefail
+          timeout 20s ./build-arstack-studio/arstack_capture_harness \
+            2>&1 | tee /tmp/arstack-studio-capture-harness.log
+
       - name: Firmware bundle contract regression
         shell: bash
         run: |

.github/workflows/arstack-studio-windows-lifecycle.yml

@@ -104,11 +104,14 @@ jobs:
           New-Item -ItemType Directory -Path 'studio-ui-evidence' -Force | Out-Null
           Remove-Item Env:ARSTACK_STUDIO_QA_DIR -ErrorAction SilentlyContinue
           Remove-Item Env:ARSTACK_STUDIO_QA_NATIVE_ONLY -ErrorAction SilentlyContinue
-          foreach ($scale in @('1', '1.5', '1.75')) {
+          foreach ($scale in @('1', '1.25', '1.5', '1.75')) {
             $env:QT_SCALE_FACTOR = $scale
             $suffix = 'dpi-' + [string][int]([double]::Parse($scale, [System.Globalization.CultureInfo]::InvariantCulture) * 100)
             $logdir = Join-Path (Join-Path $PWD 'studio-ui-evidence') $suffix
             New-Item -ItemType Directory -Path $logdir -Force | Out-Null
+            # Software viewport shots, when grabWindow supports the CI backend.
+            # Native Windows fidelity is verified separately below.
+            $env:ARSTACK_STUDIO_QA_DIR = $logdir
             $stdout = Join-Path $logdir 'geometry-stdout.txt'
             $stderr = Join-Path $logdir 'geometry-stderr.txt'
             $probe = Start-Process -FilePath $exe -ArgumentList '--check-operator-ui' -Wait -PassThru `
@@ -136,11 +139,11 @@ jobs:
           if ($probe.ExitCode -ne 0) {
             throw "Native Windows screenshot acceptance failed, exit=$($probe.ExitCode)"
           }
-          $png = Join-Path $env:ARSTACK_STUDIO_QA_DIR 'studio-960x620.png'
+          $png = Join-Path $env:ARSTACK_STUDIO_QA_DIR 'studio-960x680.png'
           if (-not (Test-Path $png) -or (Get-Item $png).Length -lt 10000) {
-            throw 'Native Windows 960x620 screenshot was missing or empty'
+            throw 'Native Windows 960x680 screenshot was missing or empty'
           }
-          Write-Host 'Windows Qt deterministic 3-viewports x 3-DPI geometry + native 960x620 screenshot: PASS'
+          Write-Host 'Windows Qt deterministic 5-viewports x 4-DPI geometry + native 960x680 screenshot: PASS'
       - name: Upload desktop layout evidence
         if: always()
         uses: actions/upload-artifact@v4

.github/workflows/ci-routing-policy.yml

@@ -5,12 +5,16 @@ on:
       - '.github/workflows/**'
       - 'scripts/check_ci_trigger_policy.py'
       - 'docs/CI_WORKFLOW_ROUTING.md'
+      - 'docs/integration/**'
+      - 'tools/integration_preservation_audit.py'
   push:
     branches: [main]
     paths:
       - '.github/workflows/**'
       - 'scripts/check_ci_trigger_policy.py'
       - 'docs/CI_WORKFLOW_ROUTING.md'
+      - 'docs/integration/**'
+      - 'tools/integration_preservation_audit.py'
 permissions:
   contents: read
 concurrency:
@@ -24,3 +28,11 @@ jobs:
       - uses: actions/checkout@v4
       - name: Verify scoped PR workflow routing
         run: python3 scripts/check_ci_trigger_policy.py
+      - name: Verify preservation manifest and all 37 non-chain source inventories
+        shell: bash
+        run: |
+          if [ -f docs/integration/PR_PRESERVATION_SNAPSHOT_2026-10-22.json ]; then
+            python3 tools/integration_preservation_audit.py --verify-only
+          else
+            echo 'No integration manifest in this branch; no-op.'
+          fi

.github/workflows/esp32p4-ptp-lab.yml

@@ -93,7 +93,7 @@ jobs:
               'g_announce_sent.load',
               'g_sync_sent.load',
               'g_follow_up_sent.load',
-              'return g_ptp_ready.load',
+              'return source_has_fresh_evidence();',
           ]
           combined = eth + '\n' + ptp
           missing = [token for token in required if token not in combined]

.github/workflows/esp32p4-smv-injector.yml

@@ -2,6 +2,12 @@ name: ESP32-P4 SMV Injector
 
 on:
   workflow_call:
+    inputs:
+      phase_sync_preview:
+        description: "Build PTP-to-SV measured-local AUTO candidate only for Studio preview"
+        type: boolean
+        default: false
+        required: false
   workflow_dispatch:
   push:
     branches: [main]
@@ -50,7 +56,10 @@ env:
 
 jobs:
   build-esp32p4:
-    if: ${{ github.event_name != 'pull_request' || !github.event.pull_request.draft }}
+    # On draft consolidation, do not run ordinary expensive standalone builds.
+    # The Studio Native Preview explicitly requests a paired firmware via
+    # workflow_call phase_sync_preview=true; allow only that purposeful build.
+    if: ${{ github.event_name != 'pull_request' || !github.event.pull_request.draft || (inputs.phase_sync_preview == true && github.event.pull_request.head.ref == 'feat/ptp-source-policy-fsm-20261022') }}
     runs-on: ubuntu-latest
     timeout-minutes: 25
     env:
@@ -106,9 +115,51 @@ jobs:
           echo "ARSTACK_FIRMWARE_BUILD_ID=${ARSTACK_SOURCE_COMMIT:0:16}" >> "$GITHUB_ENV"
           echo "Exact firmware build identity pinned to ${ARSTACK_SOURCE_COMMIT:0:16}"
 
+      # Run the host-only SOURCE phase/MAC regression in the *same exact
+      # checkout* that produces the board image; Draft #286 otherwise skips
+      # the PTP Core workflow, making the physical 0<->2 fix untested.
+      - name: Regress internal GM microsecond sync without 0-2-0 flapping
+        if: ${{ inputs.phase_sync_preview == true }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          # Embedded job defaults to embedded/esp32p4_smv_injector;
+          # this standalone host test lives at the repository root.
+          cd "$GITHUB_WORKSPACE"
+          g++ -std=c++20 -O2 -Wall -Wextra -Werror -Iinclude tests/test_sv_tx_egress_evidence.cpp -o /tmp/arstack_sv_egress_regression
+          /tmp/arstack_sv_egress_regression
+          echo 'PTP-SV SOURCE phase and MAC continuity regression: PASS'
+
+      - name: Enable PTP-SV measured AUTO preview profile
+        if: ${{ inputs.phase_sync_preview == true }}
+        run: |
+          set -euo pipefail
+          python3 - <<'PY'
+          from pathlib import Path
+          cfg = Path('sdkconfig.defaults')
+          content = cfg.read_text(encoding='utf-8')
+          original = 'CONFIG_AR_SMV_BROADCAST_MIRROR=y'
+          assert content.count(original) == 1, 'expected controlled mirror policy'
+          content = content.replace(original, '# CONFIG_AR_SMV_BROADCAST_MIRROR is not set')
+          content += ('\n# SOURCE PTP-SV AUTO phase qualification - preview only\n'
+                      'CONFIG_AR_SMV_PTP_PHASE_SERVO_EXPERIMENTAL=y\n'
+                      'CONFIG_AR_SMV_HW_TX_EVIDENCE_EXPERIMENTAL=y\n')
+          cfg.write_text(content, encoding='utf-8')
+          PY
+
       - name: Select ESP32-P4 target
         run: source /opt/esp/idf/export.sh && idf.py set-target esp32p4
 
+      - name: Verify phase-qualified Studio preview is the actual compiled profile
+        if: ${{ inputs.phase_sync_preview == true }}
+        run: |
+          set -euo pipefail
+          grep -qx 'CONFIG_AR_SMV_PTP_PHASE_SERVO_EXPERIMENTAL=y' sdkconfig
+          grep -qx 'CONFIG_AR_SMV_HW_TX_EVIDENCE_EXPERIMENTAL=y' sdkconfig
+          grep -qx '# CONFIG_AR_SMV_BROADCAST_MIRROR is not set' sdkconfig
+          grep -qx 'CONFIG_AR_PTP_OPERATING_ROLE=0' sdkconfig
+          echo 'SOURCE local AUTO preview: servo ON; canonical MAC TX evidence ON; mirror OFF'
+
       - name: Verify P0 pre-v3 silicon policy
         run: |
           set -euo pipefail
@@ -124,7 +175,10 @@ jobs:
           grep -qx 'CONFIG_AR_PTP_DOMAIN=0' sdkconfig
           grep -qx 'CONFIG_AR_PTP_TRANSPORT_SPECIFIC=0' sdkconfig
           grep -qx 'CONFIG_AR_PTP_RESPOND_PDELAY=y' sdkconfig
-          grep -qx 'CONFIG_AR_PTP_SYNC_INTERVAL_MS=250' sdkconfig
+          grep -qx 'CONFIG_AR_PTP_VLAN=y' sdkconfig
+          grep -qx 'CONFIG_AR_PTP_VLAN_ID=0' sdkconfig
+          grep -qx 'CONFIG_AR_PTP_VLAN_PRIORITY=4' sdkconfig
+          grep -qx 'CONFIG_AR_PTP_SYNC_INTERVAL_MS=1000' sdkconfig
           grep -qx 'CONFIG_AR_PTP_ANNOUNCE_INTERVAL_MS=1000' sdkconfig
           echo 'Production timing profile: PASS · serialized shared EMAC TX · PTP-P2 LAB_SOURCE · HW timestamp adapter compiled'
 
@@ -148,9 +202,9 @@ jobs:
           start_begin = source.index('if (take_start_request())')
           start_end = source.index('if (!live_tx_running())', start_begin)
           start_block = source[start_begin:start_end]
-          clock_start = start_block.rindex(
-              'sample_clock = start_sample_clock(task_handle, active_profile.publisher_rate_hz);'
-          )
+          # M3 passes the ETH/PTP epoch context as additional arguments.
+          # Assert that the timer is still armed after the final console log.
+          clock_start = start_block.rindex('sample_clock = start_sample_clock(')
           assert start_block.rindex('ESP_LOGI') < clock_start
           assert 'ESP_LOG' not in start_block[clock_start:]
           assert 'static_assert(std::atomic<std::uint32_t>::is_always_lock_free);' in source
@@ -194,7 +248,13 @@ jobs:
           import os
           import re
           import sys
+          from pathlib import Path
           image, sha256, source_commit = sys.argv[1:]
+          cfg = Path('sdkconfig').read_text(encoding='utf-8')
+          servo = 'CONFIG_AR_SMV_PTP_PHASE_SERVO_EXPERIMENTAL=y' in cfg
+          mac_evidence = 'CONFIG_AR_SMV_HW_TX_EVIDENCE_EXPERIMENTAL=y' in cfg
+          no_mirror = '# CONFIG_AR_SMV_BROADCAST_MIRROR is not set' in cfg
+          candidate = servo and mac_evidence and no_mirror
           if not re.fullmatch(r"[0-9a-f]{40}", source_commit):
               raise SystemExit("Firmware source SHA unavailable/invalid; refusing a zero-provenance package")
           manifest = {
@@ -211,6 +271,11 @@ jobs:
               "espIdf": "5.5.4",
               "sourceCommit": source_commit,
               "buildId": source_commit[:16],
+              "phaseSyncPreview": candidate,
+              "phaseServoEnabled": servo,
+              "canonicalMacTxEvidenceEnabled": mac_evidence,
+              "broadcastMirrorEnabled": not no_mirror,
+              "smpSynchQualifiedAtBuild": False,
           }
           with open("build/firmware-manifest.json", "w", encoding="utf-8", newline="\n") as handle:
               json.dump(manifest, handle, indent=2, sort_keys=True)

.github/workflows/ptp-core-ci.yml

@@ -121,6 +121,15 @@ jobs:
           Build-Target 'smp_synch_wire_offset_tests'
           Build-Target 'ptp_discipline_tests'
           Build-Target 'ptp_p2_hardening_tests'
+          Build-Target 'ptp_power_profile_tests'
+          Build-Target 'sv_ptp_epoch_tests'
+          Build-Target 'ptp_control_cancellation_tests'
+          Build-Target 'ptp_emac_role_ownership_tests'
+          Build-Target 'ptp_canonical_authority_tests'
+          Build-Target 'ptp_receiver_clock_authority_tests'
+          Build-Target 'sv_ptp_clock_lease_tests'
+          Build-Target 'sv_ptp_phase_authority_tests'
+          Build-Target 'sv_tx_egress_evidence_tests'
           Build-Target 'ptp_profile_analyze'
 
       - name: Run PTP regression and analyzer smoke tests on MSVC