Self-host M5: native vendor bundle rebuild audit (php-cfg, php-types, php-llvm)

[PurHur]

Category

bootstrap | php-in-php

Problem

Committed prelinked/bootstrap-vendor/*.o sidecars keep M5 fast path green, but there is no automated audit that native objects can be rebuilt from source under prelinked/bootstrap-vendor/sources/ when vendor/ is absent and BOOTSTRAP_M5_VENDOR_ALLOW_ZEND=0. Stale or hand-patched blobs can drift from the PHP sources they claim to represent.

php-src reference: N/A (bootstrap). Reference packages: php-cfg, php-types, php-llvm vendored sources in-repo.

Repro

# Today: manual / ad-hoc only
BOOTSTRAP_M5_VENDOR_ALLOW_ZEND=0 ./script/bootstrap-vendor-native-rebuild-audit.sh 2>/dev/null || echo "script missing"
ls -la prelinked/bootstrap-vendor/*.o

Observed (2026-06-15):

• Sidecars exist and link in fast M5 gates
• No CI presenter fails when native rebuild from sources/ diverges from committed .o hashes

Scope

• Add script/bootstrap-vendor-native-rebuild-audit.sh (or extend script/north-star5-verify.sh --fast opt-in step)
• Document per-package object_ok / hash diff output
• docs/bootstrap-selfhost.md — when to run audit (monthly / before vendor-prelink PRs)
• prelinked/bootstrap-vendor/sources/ — no Zend compile fallback in audit path

Done when

• Audit script rebuilds each vendor bundle natively (no vendor/, no Zend gen-0) and compares object hashes or link smoke output
• Script exits non-zero on drift with actionable package name
• Wired into make north-star5-verify-fast as opt-in gate (BOOTSTRAP_VENDOR_REBUILD_AUDIT=1) or documented monthly maintainer step
• Issue template section in script output for filing drift bugs

Related

• Epic: Self-host critical path — compiler compiles itself (M3→M5) #1492 (M5 self-host epic)
• M5: Prelink vendor (php-cfg, php-types, php-llvm) — no composer at cold boot #1416 (vendor prelink)
• Self-host M5: vendor cold boot without BOOTSTRAP_M5_VENDOR_ALLOW_ZEND fallback #8705 (lzf / vendor bundle hygiene)
• Self-host M5: PHP_COMPILER_LIB_SPINE_BUNDLE compile path — no Zend gen-0 fallback in CI #8716 (no Zend gen-0 fallback in CI)
• ROADMAP 🗺️ ROADMAP: Self-host + web-capable PHP subset (living) #78

[PurHur]

claim: agent-lane-c-run — lane C queue empty (all stdlib/php-in-php); starting bootstrap vendor rebuild audit (#8718).

[PurHur]

Merged via #8985.

Verification:

• php vendor/bin/phpunit test/unit/BootstrapVendorNativeRebuildAuditTest.php test/unit/NorthStar5VerifyScriptTest.php — OK (7 tests)
• Issue repro: BOOTSTRAP_M5_VENDOR_ALLOW_ZEND=0 ./script/bootstrap-vendor-native-rebuild-audit.sh — script present and executes (reports per-package match/drift/fail with issue template on drift)

Lane C note: 138 lane-C issues all stdlib/php-in-php owned; took bootstrap #8718 (lane A) as only non-blocked implementation-ready work.