Sprint 0-9 Closeout Checklist

Concrete closeout checklist based on the current codebase audit.

Current conclusion: we are not ready to honestly declare Sprint 10 complete-in-practice yet. The main blockers are:

• Sprint 0's tolerated-diff categories are still deferred until afs-ld can emit real linked output for Mach-O-to-Mach-O differential checks.

Sprint 10 Gate

Do not declare "we are on Sprint 10" until all of these are true:

• Sprint 9 reloc referents are remapped to atom-aware forms.
• Sprint 8 resolution orchestration exists as a real callable stage, not just loose helper APIs.
• cargo test -p afs-ld is green after the closeout work.
• cargo clippy -p afs-ld --all-targets -- -D warnings is green after the closeout work.
• README.md and sprint docs no longer materially misstate the current state of the crate.

Recommended Order

• Close Sprint 9 reloc-to-atom remap first.
• Close Sprint 8 resolution orchestration and option coverage second.
• Close Sprint 6 TBD/SDK search gaps third.
• Close Sprint 4 nested archive support fourth.
• Finish the deferred Sprint 0 differential-harness tolerance work once afs-ld can emit real output.

Cross-Sprint Exit Criteria

• Every closeout chunk lands with tests.
• Every bug fix or behavioral gap gets a regression test.
• No newly-discovered roadmap/code mismatch is left undocumented.
• Any user-facing diagnostic we touch stays deterministic and testable.

Sprint 0

Status: closed

Validated:

• afs-ld exists as its own git submodule in the parent workspace.
• Parent Cargo.toml includes afs-ld as a workspace member.
• CLAUDE.md, README.md, crate wiring, and test harness scaffolding exist.
• Reference repos are present under parent .refs/ (ld64, mold, lld).
• tests/reader_empty.rs enforces the empty-invocation CLI contract.
• tests/diff_harness_sanity.rs and tests/diff_harness_finds_critical.rs exist and pass.
• cargo clippy -p afs-ld --all-targets -- -D warnings is currently clean.

Remaining closeout work:

• Explicitly downscope Sprint 0 docs so the current diff harness is described as synthetic until end-to-end linking exists.
• Add tolerated-diff categories once real Mach-O-to-Mach-O comparisons exist.

Sprint 1

Status: closed

Validated:

• Mach-O constants are duplicated locally in src/macho/constants.rs.
• MachHeader64 parsing exists and rejects malformed headers.
• Load-command dispatch exists and preserves unknown commands as raw bytes.
• Segment and section-header metadata parsing exists.
• LC_BUILD_VERSION and LC_LINKER_OPTIMIZATION_HINT decoding exists.
• --dump exists through src/dump.rs and src/main.rs.
• Corpus round-trip tests pass in tests/reader_corpus_round_trip.rs.

Remaining closeout work:

• Add an otool -lV parity test for dumper output shape across the corpus.
• Add a panic-focused malformed-input stress pass beyond the current unit tests so the "no panics on malformed input" claim is defensible.

Sprint 2

Status: closed

Validated:

• Section classification exists in src/section.rs.
• InputSection carries section data and raw relocation bytes.
• RawNlist / InputSymbol parsing and classification exist in src/symbol.rs.
• Common symbols, weak flags, private externs, and indirect aliases are surfaced.
• StringTable exists and handles suffix-dedup overlaps.
• DysymtabCmd is parsed and exposed through ObjectFile.
• ObjectFile integrates header, commands, sections, symbols, strings, and dysymtab.

Remaining closeout work:

• Add nm -a parity tests for symbol view and classification.
• Add otool -r parity checks for relocation-offset surfaces promised by Sprint 2, with section/load-command parity covered by the Sprint 1 otool -lV gate.
• Add stronger malformed-symbol / malformed-string-table stress coverage if we want the "never panics" bar to be explicit.

Sprint 3

Status: closed enough for current closeout

Validated:

• ARM64 relocation constants exist.
• Raw relocation parsing and writing exist.
• Fused Reloc form exists.
• ADDEND and SUBTRACTOR + UNSIGNED pairing is fused in parse_relocs.
• Validation logic exists in validate_relocs.
• Write-side round-trip support exists.
• Unit coverage is broad and current corpus relocation round-trips pass.

Remaining closeout work:

• No audit-blocking work found for Sprint 3.

Sprint 4

Status: closed

Validated:

• BSD, SysV, and GNU-thin archive flavors are recognized.
• Archive headers and name decoding are implemented.
• Symbol-index parsing exists for BSD and SysV archives.
• Lazy member fetch exists via fetch_object_defining.
• libarmfortas_rt.a is exercised by tests/archive_runtime.rs.
• Archive dump mode exists via --dump-archive.

Remaining closeout work:

• Implement one-level nested archive support (.a member inside .a) and preserve provenance for diagnostics.
• Formally treat resolve::force_load_archive / force_load_all as the Sprint 4 completion surface and document that surface instead of adding a parallel archive-only helper.
• Add ar -t shape/parity coverage for --dump-archive.

Sprint 5

Status: partially closed

Validated:

• DylibFile exists and parses binary MH_DYLIB.
• LC_ID_DYLIB, dependency dylib commands, ordinals, and rpaths are decoded.
• Export trie decoding exists with cycle/depth protection.
• Real clang-built dylib coverage exists in tests/dylib_integration.rs.
• Dylib dump mode exists via --dump-dylib.

Remaining closeout work:

• Prove recursive re-export / umbrella lookup behavior with a focused test, not just dependency collection.
• Confirm the public dylib surface matches what Sprint 5 intended for re-exported symbols, not only direct exports.

Sprint 6

Status: closed

Validated:

• The custom YAML subset parser exists in src/macho/tbd_yaml.rs.
• TBD schema decoding exists in src/macho/tbd.rs.
• DylibFile::from_tbd exists and materializes TBDs into the same linker-facing surface.
• Real libSystem.tbd smoke/integration coverage exists in tests/tbd_smoke.rs and tests/tbd_integration.rs.
• TBD dump mode exists via --dump-tbd.

Remaining closeout work:

• Implement SDK -syslibroot library search helpers for .tbd / .dylib.
• Implement framework search helpers promised by Sprint 6.
• Make target filtering fail loudly when the requested target is not exported, instead of only materializing matching targets when the caller already knows one exists.
• No further audit-blocking work found for Sprint 6 in the current helper/test surface.

Sprint 7

Status: closed

Validated:

• Symbol sum type exists with the planned major variants.
• StringInterner, opaque ids, and SymbolTable exist.
• The insertion matrix is heavily unit-tested.
• Weak/strong/common coalescing behavior is covered in unit tests.
• Alias-cycle detection and chain resolution exist.
• Transition logging exists.

Remaining closeout work:

• Add the differential weak-coalescing / duplicate-behavior coverage against system ld that Sprint 7 originally called for.

Sprint 8

Status: closed

Validated:

• Archive seeding, object seeding, and dylib seeding exist.
• Fixed-point archive fetch draining exists.
• force_load_archive and force_load_all helpers exist in src/resolve.rs.
• Undefined classification exists for Error, Warning, Suppress, and DynamicLookup.
• Did-you-mean support exists.
• Duplicate-symbol and undefined-symbol formatting helpers exist.
• Real integration coverage exists for archive pull plus unresolved-symbol reporting.

Remaining closeout work:

• Add a real orchestration entrypoint for resolution (seed -> optional force load -> drain -> classify) that can be called as a coherent stage.
• Add option/state plumbing for all_load, force_load, and undefined treatment so resolution is not just a bag of helper APIs.
• Add an archive order-sensitivity test.
• Add dedicated tests for force_load_archive and force_load_all.
• Add dedicated tests for UndefinedTreatment::Warning, Suppress, and DynamicLookup.
• Add a dedicated test that unresolved weak refs stay accepted regardless of treatment.
• Tighten diagnostics toward the Sprint 8 format by carrying section/offset provenance and aggregate repeated relocation sites when available.

Sprint 9

Status: closed

Validated:

• Atom model and atom table exist.
• Section splitting at symbol boundaries exists.
• .alt_entry folding exists.
• CString atom splitting exists and is integration-tested.
• Compact-unwind atom splitting and parent_of wiring exist.
• Backpatching of Symbol::Defined { atom } exists.
• N_NO_DEAD_STRIP and weak-def flags are propagated into atom flags.
• Embedded payload addends on symbol-based data relocs are folded into local atom offsets or preserved on external refs.

Remaining closeout work:

• Remap relocations from raw section/symbol referents into atom-aware referents.
• Add atom-local relocation storage or an equivalent per-atom relocation view.
• Ensure same-object references point at target atoms, not raw section offsets.
• Add a focused integration test proving a local branch or data reference resolves to the callee/target atom.
• Add a boundary-crossing reloc diagnostic test.
• Confirm no raw section-relative relocation state leaks into Sprint 10 inputs.
• No further audit-blocking work found for Sprint 9 in the current corpus and targeted local-addend probes.

Documentation Closeout

• Update README.md so it no longer says the crate is only Sprint 0 scaffolding.
• Refresh sprint docs whose deliverables have been implemented under a different surface than originally planned.
• Keep CLAUDE.md as the authority for discipline, but make user-facing docs match the actual code.

Verification Commands

• cargo test -p afs-ld
• cargo clippy -p afs-ld --all-targets -- -D warnings
• Focused xcrun-backed checks when touching reader/resolve/atom/TBD/dylib paths:
  • cargo test -p afs-ld --test reader_corpus_round_trip -- --nocapture
  • cargo test -p afs-ld --test resolve_integration -- --nocapture
  • cargo test -p afs-ld --test atom_integration -- --nocapture
  • cargo test -p afs-ld --test dylib_integration -- --nocapture
  • cargo test -p afs-ld --test tbd_integration -- --nocapture