fix(chapel-ci): pin CHPL_UNWIND=system + always install libunwind + bump cache gen v1→v2

PR #100 surfaced a 5th Chapel-2.8.0 sharp edge from the #99 Wave 2 series:

  error: The runtime has not been built for this configuration.
  There is no runtime for 'CHPL_UNWIND=bundled'
  Valid options: system

Root cause: cached $CHPL_HOME from #99 was built when libunwind-dev was
installed (gated on cache-miss), so chpl auto-inferred CHPL_UNWIND=system.
On PR #100 the cache hit, libunwind-dev install was SKIPPED, so the
consumer chpl invocation auto-inferred CHPL_UNWIND=bundled — mismatch
against the cached runtime, mass-panic build aborts.

Three-part fix at source:
1. Pin CHPL_UNWIND=system explicitly in both Build and Activate steps
   (no more auto-inference, no more cache-hit/miss drift).
2. Promote libunwind-dev to always-run (split out of the cache-miss-gated
   Install step). Cheap to install (~1-2s apt) on every run; matches
   the cached configuration.
3. Bump CHAPEL_MULTILOCALE_CACHE_GEN v1→v2 to discard the inconsistent
   cache and force a fresh build with the explicit CHPL_UNWIND.

Also includes the docs(truthfulness) audit from this branch:
- README badge corrected: 402 → 782 runnable tests (cargo authoritative)
- ROADMAP fly.toml [x] → [~] (file doesn't exist in this repo)
- ROADMAP/Wiki '500+ repositories' → '303-repo estate (2026-04-12)'
- chapel/README ~5-15%× soften to UNMEASURED ESTIMATE
- README + Wiki note PA001/PA001b SARIF collapse

Resolves blocking chapel-multilocale failure on PR #100.

Author: hyperpolymath

.github/workflows/chapel-ci.yml

@@ -57,7 +57,9 @@ env:
   CHAPEL_SRC_URL: "https://github.com/chapel-lang/chapel/releases/download/2.8.0/chapel-2.8.0.tar.gz"
   # $CHPL_HOME for the multilocale build. Cache key bumps via CHAPEL_MULTILOCALE_CACHE_GEN.
   CHAPEL_MULTILOCALE_HOME: /opt/chapel-multilocale
-  CHAPEL_MULTILOCALE_CACHE_GEN: "v1"
+  # Bump v1→v2 after pinning CHPL_UNWIND=system explicitly (was auto-inferred,
+  # which caused mismatches on cache-hit runs without libunwind-dev present).
+  CHAPEL_MULTILOCALE_CACHE_GEN: "v2"
 
 jobs:
   detect-relevant-changes:
@@ -280,14 +282,25 @@ jobs:
           path: ${{ env.CHAPEL_MULTILOCALE_HOME }}
           key: ${{ runner.os }}-chapel-multilocale-${{ env.CHAPEL_VERSION }}-gasnet-smp-${{ env.CHAPEL_MULTILOCALE_CACHE_GEN }}
 
-      - name: Install Chapel build dependencies
-        if: steps.chapel-cache.outputs.cache-hit != 'true'
+      # libunwind-dev MUST be installed even on cache-hit runs: the cached
+      # $CHPL_HOME was built with CHPL_UNWIND=system inferred from libunwind
+      # presence, so subsequent chpl invocations also need to find libunwind
+      # at runtime to pick the matching runtime variant. Without it, chpl
+      # infers CHPL_UNWIND=bundled, doesn't find a matching cached runtime,
+      # and aborts with "no runtime for CHPL_UNWIND=bundled".
+      - name: Install libunwind (needed even on cache-hit for CHPL_UNWIND=system)
         run: |
           set -euo pipefail
           sudo apt-get update -qq
+          sudo apt-get install -y --no-install-recommends libunwind-dev
+
+      - name: Install remaining Chapel build dependencies
+        if: steps.chapel-cache.outputs.cache-hit != 'true'
+        run: |
+          set -euo pipefail
           sudo apt-get install -y --no-install-recommends \
             build-essential gcc g++ make perl python3 \
-            m4 autoconf automake libtool libunwind-dev pkg-config
+            m4 autoconf automake libtool pkg-config
 
       - name: Build Chapel from source with CHPL_COMM=gasnet
         if: steps.chapel-cache.outputs.cache-hit != 'true'
@@ -313,6 +326,11 @@ jobs:
           # tries to verify LLVM headers via clang/Basic/Version.h and aborts
           # with a CHPL_LLVM "unset" make target.
           export CHPL_LLVM=none
+          # Pin CHPL_UNWIND=system explicitly. Auto-detection depends on
+          # libunwind-dev being installed at the moment chpl runs, which
+          # makes cache-hit vs cache-miss runs inconsistent. Pinning ensures
+          # the cached runtime variant always matches the env consumers see.
+          export CHPL_UNWIND=system
           # setchplenv.bash references ${MANPATH} unconditionally; GH runners
           # don't export MANPATH by default, so seed it before sourcing.
           export MANPATH="${MANPATH:-}"
@@ -331,6 +349,7 @@ jobs:
           set -euo pipefail
           export CHPL_HOME="${{ env.CHAPEL_MULTILOCALE_HOME }}"
           export CHPL_LLVM=none
+          export CHPL_UNWIND=system
           export MANPATH="${MANPATH:-}"
           source "$CHPL_HOME/util/setchplenv.bash"
           # Persist env to subsequent steps via GITHUB_ENV
@@ -340,6 +359,8 @@ jobs:
             echo "CHPL_COMM_SUBSTRATE=smp"
             echo "CHPL_LAUNCHER=smp"
             echo "CHPL_TARGET_COMPILER=gnu"
+            echo "CHPL_LLVM=none"
+            echo "CHPL_UNWIND=system"
             echo "PATH=$CHPL_HOME/bin/$(uname -s)-$(uname -m):$PATH"
           } >> "$GITHUB_ENV"
           chpl --version

CHANGELOG.md

@@ -3,9 +3,17 @@
 ## [Unreleased]
 
 ### Changed (2026-06-02) — truthfulness audit (humans + machines)
-- **README badge + Status block** corrected: 402 → 539 `#[test]` annotations
-  (the badge had not tracked the actual count for several releases). Same
-  count now also reflected in the Wiki Home page (was `282+`).
+- **README badge + Status block** corrected: 402 → **782 runnable tests**
+  (per `cargo test --release -- --list`; the underlying 539 `#[test]`
+  annotations expand via doctests + integration tiers). The badge had
+  not tracked actual count for several releases. Wiki Home was `282+`.
+- **chapel-ci `chapel-multilocale` gate** robustified (#100 collateral):
+  pinned `CHPL_UNWIND=system` explicitly + moved `libunwind-dev` install
+  to always-run (not gated on cache-hit). On cache-hit runs without
+  libunwind-dev, chpl auto-inferred `CHPL_UNWIND=bundled` and aborted
+  with "no runtime for bundled" because the cached runtime was built
+  with `system`. Cache-gen counter bumped `v1` → `v2` to discard the
+  inconsistent cache. Fifth Chapel-2.8.0 sharp edge from #99 Wave 2.
 - **ROADMAP v2.2.0**: downgraded "Per-project VeriSimDB instance:
   `deploy/panic-attack/fly.toml` for `verisim-panic-api`" from `[x]` to
   `[~]` — the API runs but the toml file is NOT in this repo (lives in

README.adoc

@@ -11,7 +11,7 @@ image:https://img.shields.io/badge/License-MPL--2.0-blue.svg[License: MPL-2.0,li
 image:https://api.thegreenwebfoundation.org/greencheckimage/github.com[Green Web,link="https://www.thegreenwebfoundation.org/green-web-check/?url=github.com"]
 image:https://img.shields.io/badge/status-active-green[Status]
 image:https://img.shields.io/badge/domain-security--analysis-blue[Domain]
-image:https://img.shields.io/badge/tests-539%20passing-brightgreen[Tests]
+image:https://img.shields.io/badge/tests-782%20passing-brightgreen[Tests]
 image:https://img.shields.io/badge/languages-49-blue[Languages]
 
 **panic-attack** is a multi-language security analysis and stress-testing system.
@@ -202,7 +202,7 @@ VeriSimDB remains the foundation dependency for these exports, so every snapshot
 Current state: **v2.5.0**
 
 * 32,000+ lines of Rust + Chapel
-* 539 `#[test]` annotations across unit / property / e2e / aspect / integration tiers
+* 782 runnable tests (per `cargo test --release -- --list`; 539 `#[test]` annotations plus doctest + integration expansions) across unit / property / e2e / aspect / integration tiers
 * 0 warnings
 * 25+ CLI subcommands
 * 49 supported languages (25 canonical weak-point categories PA001–PA025; `PA001b` SARIF subvariant collapses two allocation flavors under the same canonical rule)