test(scale): attribute physical storage before SCALE26

Makefile

@@ -1,4 +1,4 @@
-.PHONY: help lint format type-check security workflow-lint license-check third-party-notices third-party-notices-check cargo-deny-licenses test pre-push pre-push-clean pre-push-preflight pre-push-fast bazel-test clean test-tck docstring-coverage test-network benchmark test-perf test-perf-xs test-perf-slow test-perf-large coverage coverage-rust coverage-python coverage-node coverage-quick coverage-report coverage-diff coverage-strict check-coverage check-coverage-rust check-coverage-python check-coverage-node check-patch-coverage test-durations test-analytics docs-serve docs-build docs-clean cargo-build codspeed-build codspeed-build-walltime codspeed-run bench-traversal bench-fixed-hop-limit bench-fixed-hop-livejournal bench-m4-entry bench-g500-scale20 bench-g500-ladder bench-adjacency-200m bench-file-backed-128m m4-entry-matrix-check durability-isolation-check native-consumers release-load-matrix-check release-load-matrix bulk-construction-conformance-check bulk-construction-conformance cargo-test cargo-check cargo-clippy cargo-fmt cargo-fmt-check clean-builds clean-builds-all pnpm-install pnpm-build pnpm-test-bdd install build release-version-check package-license-verify publish-dry-run publish-dry-run-npm publish-dry-run-docs publish-dry-run-python publish-dry-run-cargo record-release-artifacts clean-env-verify-check clean-env-verify-preflight clean-env-verify
+.PHONY: help lint format type-check security workflow-lint license-check third-party-notices third-party-notices-check cargo-deny-licenses test pre-push pre-push-clean pre-push-preflight pre-push-fast bazel-test clean test-tck docstring-coverage test-network benchmark test-perf test-perf-xs test-perf-slow test-perf-large coverage coverage-rust coverage-python coverage-node coverage-quick coverage-report coverage-diff coverage-strict check-coverage check-coverage-rust check-coverage-python check-coverage-node check-patch-coverage test-durations test-analytics docs-serve docs-build docs-clean cargo-build codspeed-build codspeed-build-walltime codspeed-run bench-traversal bench-fixed-hop-limit bench-fixed-hop-livejournal bench-m4-entry bench-g500-scale20 bench-g500-ladder g500-ladder-qualification g500-ladder-qualification-check bench-adjacency-200m bench-file-backed-128m m4-entry-matrix-check durability-isolation-check native-consumers release-load-matrix-check release-load-matrix bulk-construction-conformance-check bulk-construction-conformance cargo-test cargo-check cargo-clippy cargo-fmt cargo-fmt-check clean-builds clean-builds-all pnpm-install pnpm-build pnpm-test-bdd install build release-version-check package-license-verify publish-dry-run publish-dry-run-npm publish-dry-run-docs publish-dry-run-python publish-dry-run-cargo record-release-artifacts clean-env-verify-check clean-env-verify-preflight clean-env-verify
 
 help:  ## Show this help message
 	@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | sort | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-20s\033[0m %s\n", $$1, $$2}'
@@ -329,6 +329,19 @@ bench-g500-ladder:  ## Bounded billion-edge scale ladder S20-S26 first-fail evid
 	GF_G500_LADDER_MAX_SCALE="$$GF_G500_LADDER_MAX_SCALE" \
 	cargo test -p graphforge-api --release --test scale_g500_ladder ladder_public_facade_first_fail_evidence -- --ignored --nocapture --test-threads=1
 
+g500-ladder-qualification-check:  ## Validate #951 disk attribution and conservative S26 projection
+	@test -n "$$EVIDENCE" || (echo "EVIDENCE is required" && exit 2)
+	uv run --frozen --with jsonschema python scripts/ci/validate-g500-ladder-qualification.py "$$EVIDENCE"
+
+g500-ladder-qualification:  ## Build and validate #951 evidence from adjacent real certifications
+	@test -n "$$LOW_CERT" || (echo "LOW_CERT is required" && exit 2)
+	@test -n "$$HIGH_CERT" || (echo "HIGH_CERT is required" && exit 2)
+	@test -n "$$EVIDENCE" || (echo "EVIDENCE is required" && exit 2)
+	@test -n "$$VOLUME_BYTES" || (echo "VOLUME_BYTES is required" && exit 2)
+	@test -n "$$RESERVED_HEADROOM_BYTES" || (echo "RESERVED_HEADROOM_BYTES is required" && exit 2)
+	uv run --frozen python scripts/ci/build-g500-ladder-qualification.py "$$LOW_CERT" "$$HIGH_CERT" "$$EVIDENCE" --volume-bytes "$$VOLUME_BYTES" --reserved-headroom-bytes "$$RESERVED_HEADROOM_BYTES"
+	$(MAKE) g500-ladder-qualification-check EVIDENCE="$$EVIDENCE"
+
 bench-adjacency-200m:  ## >200M-edge public adjacency build evidence (#336; ignored, scale-host)
 	GF_ADJACENCY_SCALE_EVIDENCE_OUT="$(CURDIR)/docs/development/adjacency-200m-evidence.json" \
 	GF_ADJACENCY_SCALE_WORK="$(CURDIR)/build/adjacency-200m-work" \

crates/graphforge-api/BUILD.bazel

@@ -210,7 +210,7 @@ gf_rust_integration_test(
     data = _API_TEST_DATA,
     size = "large",
     timeout = "long",
-    deps = _API_DEPS,
+    deps = _API_DEPS + ["//crates/graphforge-filesystem:graphforge_filesystem"],
 )
 
 gf_rust_integration_test(

crates/graphforge-api/Cargo.toml

@@ -39,6 +39,7 @@ cucumber = { workspace = true }
 tokio = { workspace = true }
 graphforge-cypher = { path = "../graphforge-cypher" }
 graphforge-storage = { path = "../graphforge-storage", features = ["test-failpoints", "test-support"] }
+graphforge-filesystem = { path = "../graphforge-filesystem" }
 
 # BDD runner for the public-API + TCK feature files (tests/features/).
 # A custom-harness target (cucumber drives its own main).

crates/graphforge-api/src/lib.rs

@@ -547,6 +547,22 @@ impl std::fmt::Debug for GraphForge {
 }
 
 impl GraphForge {
+    /// Capture authenticated logical and physical storage attribution for the
+    /// generation visible to this facade.
+    ///
+    /// The storage layer walks only the generation's authenticated inventories
+    /// and opens retained file capabilities. It never recursively scans the
+    /// project directory, and qualification fails closed on an unclassified
+    /// graph artifact.
+    pub fn storage_attribution(
+        &self,
+    ) -> Result<graphforge_storage::StorageAttributionSnapshot, GfError> {
+        let generation = self.generation_for_read()?;
+        let snapshot = graphforge_storage::capture_storage_attribution(&generation)?;
+        snapshot.validate_for_qualification()?;
+        Ok(snapshot)
+    }
+
     pub(crate) fn stage_project_generation(
         &self,
         request: &graphforge_storage::ProjectGenerationRequest,
@@ -4099,6 +4115,19 @@ fn materialize_compact_graph_target(
         files_opened_in_place: 0,
         files_reused: reused.files_reused,
         bytes_reused: reused.bytes_reused,
+        application_read_bytes: reused
+            .application_read_bytes
+            .saturating_add(copied.application_read_bytes),
+        application_read_calls: reused
+            .application_read_calls
+            .saturating_add(copied.application_read_calls),
+        application_write_bytes: reused
+            .application_write_bytes
+            .saturating_add(copied.application_write_bytes),
+        application_write_calls: reused
+            .application_write_calls
+            .saturating_add(copied.application_write_calls),
+        fsync_calls: reused.fsync_calls.saturating_add(copied.fsync_calls),
     };
     Ok(evidence)
 }

crates/graphforge-api/src/portable.rs

@@ -60,6 +60,20 @@ pub struct PortableV2ImportResult {
     pub generation_uuid: Uuid,
     /// Whether the operation replayed an identical publication.
     pub idempotent_replay: bool,
+    /// Exact private-materialization identity allocation for lifecycle qualification.
+    #[doc(hidden)]
+    pub materialized_identity_allocated_bytes: std::collections::BTreeMap<String, u64>,
+    /// Exact published-project identity union for lifecycle qualification,
+    /// including controls and every retained generation.
+    #[doc(hidden)]
+    pub published_identity_allocated_bytes: std::collections::BTreeMap<String, u64>,
+    /// Exact identities durably removed by private-materialization cleanup.
+    #[doc(hidden)]
+    pub materialized_cleanup_removed_identity_allocated_bytes:
+        std::collections::BTreeMap<String, u64>,
+    /// Whether the cleanup namespace synchronization completed.
+    #[doc(hidden)]
+    pub materialized_cleanup_parent_sync_confirmed: bool,
 }
 
 /// Publish a verified local portable-v2 package to an OCI registry.
@@ -186,6 +200,18 @@ pub struct PortableV2ExportFacadeResult {
     pub selection_fingerprint: String,
     /// Caller-selected output path.
     pub output: PathBuf,
+    /// Exact writer-owned published allocation for lifecycle qualification.
+    #[doc(hidden)]
+    #[serde(skip)]
+    pub allocation_identity_allocated_bytes: std::collections::BTreeMap<String, u64>,
+    /// Writer-owned logical bytes of the published package identity union.
+    #[doc(hidden)]
+    #[serde(skip)]
+    pub allocation_logical_bytes: u64,
+    /// Writer-owned distinct published package identities.
+    #[doc(hidden)]
+    #[serde(skip)]
+    pub allocation_physical_objects: u64,
 }
 
 /// Stable export result.
@@ -421,6 +447,9 @@ impl GraphForge {
             },
             selection_fingerprint: receipt.selection_fingerprint,
             output: request.output_path.clone(),
+            allocation_identity_allocated_bytes: receipt.allocation_identity_allocated_bytes,
+            allocation_logical_bytes: receipt.allocation_logical_bytes,
+            allocation_physical_objects: receipt.allocation_physical_objects,
         })
     }
 
@@ -526,6 +555,14 @@ impl GraphForge {
             transport_digest: receipt.transport_digest,
             generation_uuid: receipt.publication.generation_uuid,
             idempotent_replay: receipt.publication.idempotent_replay,
+            materialized_identity_allocated_bytes: receipt.materialized_identity_allocated_bytes,
+            published_identity_allocated_bytes: receipt.published_identity_allocated_bytes,
+            materialized_cleanup_removed_identity_allocated_bytes: receipt
+                .materialized_cleanup
+                .removed_identity_allocated_bytes,
+            materialized_cleanup_parent_sync_confirmed: receipt
+                .materialized_cleanup
+                .parent_sync_confirmed,
         })
     }
 }

crates/graphforge-api/src/resumable_construction.rs

@@ -270,11 +270,7 @@ impl GraphConstructionSession<'_> {
             }
             let (prepared_dir, prepared_guard, hydration_evidence) =
                 super::hydrate_graph_workspace(&resolved, false)?;
-            self.inner.record_hydration_application_read_bytes(
-                hydration_evidence
-                    .bytes_validated
-                    .saturating_add(hydration_evidence.bytes_copied),
-            )?;
+            self.inner.record_hydration_evidence(&hydration_evidence)?;
             let runtime_catalog = super::load_runtime_catalog(&prepared_dir)?;
             let property_inventory = std::sync::Arc::new(
                 graphforge_storage::AuthenticatedPropertyInventory::from_resolved_generation(