[yabanana]

What

Lower qualified ELF general-dynamic TLS across a closed module graph, including initialized/BSS templates and local module-base indexes. Reuse the existing POSIX guest TLS helper without its x86 allocation stubs. Descriptor v3 binds TLS ownership and eligible SysV ptr(ptr) thread entries; the create/join adapter delegates to the production AnyPS5 providers and holds lifecycle ownership until join completes.

Add linked-DWARF candidate recovery and source-qualified guard derivation after module namespacing. Reject initial/local-exec addressing, arbitrary TLS indexes, unsupported thread attributes, detach/cancel and alternate exits. Host exception capture at the thread boundary is not guest C++ exception support.

Tested

Latest integration checkpoint (12 October): aligned with main 2f4cc8983, including the new component technical-debt layout. The final combined stack with the separate C++ follow-up #4718 passed 588 compiler/relinker/runtime checks and 26 native integrations on Apple Silicon. Rebuilt cube AOT/reference still match all eight RGB frames after 600 flips each; controller and typed module-bundle acceptance pass. These are local results; hosted CI is running on the updated head. Full Linux/Windows builds still require maintainer dispatch.

Apple Silicon/macOS, final integrated stack based on main fe66af1: 526 compiler/relinker/runtime checks passed (native hello rerun with sysctl access); 26 native integration cases passed, including descriptor control, TLS/thread lifecycle and the modular consumer. Rebuilt graphics AOT/reference completed 600 flips each, teardown and eight exact RGB comparisons. Controller O2 scenarios and production sleep smoke, SHA-256 O0/O2 and independent memcmp O0/O2 passed. These are local combined-stack results; hosted CI on this PR is pending. Full Linux/Windows builds require maintainer dispatch.

The thread adapter also passed ASan/UBSan and ThreadSanitizer in isolated failure/race tests before platform integration; these use controlled providers. The modular consumer separately runs production create/join. No performance or port-completion percentage claim.

Checklist

• Based on current main; checked for overlapping implementations
• One topic; follow-ups remain separate
• No added code comments, private notes, reports, images or binary fixtures
• Unsupported inputs reject; no weakened guards or silent fallback
• No new third-party runtime dependency
• Generic behavior; consumer qualification stays in examples
• Depends on: feat(aot): execute qualified module lifecycle in dependency order #4521, feat(aot): compile closed module bundles with checked native bindings #4520, test(aot): run optimized controller and independent component consumers #4424, feat(aot): lower finite native dispatch and optimized integer operations #4423, feat(aot): retain incremental debug facts and scoped obligations #4422, feat(aot): run controller input and independent provider-transfer consumers #4397, feat(aot): qualify provider contracts and recover bounded debug facts #4396, feat(aot): derive guard sites from qualified image recipes #4156, feat(aot): run source-built graphics on native Apple ARM64 #3891, feat(aot): discuss native ARM64 compiler architecture and integration #1835
• Unblocks: none
• AI-assisted: yes

[yabanana]

Superseded by #5021, which now contains the consolidated native ARM64 AOT implementation and verified consumers. #1835 remains the architecture discussion. Closing this stacked PR to keep one implementation review; its branch and review history are retained. This is not a merge into main.