Release v1.1.0: fix examples 000–009 AOT smoke (001-SimpleWeb exit 134 munmap_chunk invalid pointer)

[PurHur]

Context

./script/release-readiness.sh --full --json is failing on examples-aot-smoke for example 001-SimpleWeb.

Failure

• Gate: examples-aot-smoke
• Example: 001-SimpleWeb
• Symptom: phpc build output binary exits 134 with munmap_chunk(): invalid pointer

Observed in Docker harness via:

./script/docker-exec.sh -- bash -lc './script/release-readiness.sh --full --json'

Acceptance criteria

• ./script/docker-exec.sh -- bash -lc './script/release-readiness.sh --full --json' reports examples-aot-smoke: ok
• ./script/release-readiness.sh --full --json returns user_release_ready: yes

Release tracking

• Roadmap: 🗺️ ROADMAP: Self-host + web-capable PHP subset (living) #78 (User release roadmap v1.1.0 → Gate checklist → examples AOT smoke)
• Notes: This is the current tagged-release blocker for v1.1.0 until the full bundle turns green.

[PurHur]

claim: worker-lane-a — batch (issues #13989 merged, #13995)

[PurHur]

Merged via #14005

Fix: Cache one htmlspecialchars() result in examples/001-SimpleWeb/example.php; avoid (string) cast on $_REQUEST that triggers AOT double-free on repeated htmlspecialchars().

Verification:

• examples-aot-smoke: 001-SimpleWeb: ok
• vendor/bin/phpunit --filter testAotExecuteSimpleWeb → OK

Follow-up: Full examples-aot-smoke still fails on 004-ApiJson (Current basic block has no parent function) on harness — reproduced on master; separate issue from this 001 munmap fix. AOT (string) + htmlspecialchars() compiler bug remains for a future JIT fix.