…i-dynamo#15)

…iteups for 14 open bugs

- Reformat all 16 issue markdowns to match GitHub bug template (Describe the Bug,
  Steps to Reproduce, Expected/Actual Behavior, Environment, Additional Context)
- Add upstream/ directory with per-bug subfolders containing issue.md, pr.md, and
  discovery.md for each of the 16 bugs found via fuzzing
- Add fixes/ directory with annotated patch files and regression tests for all 14
  open bugs
- Create 14 minimal fix branches (fix/*-{bug#}) off upstream/main, each with a
  single commit touching only the affected file
- Verified all 14 bugs still present in upstream/main as of 50af343
- Confirmed 2 bugs already fixed upstream (ai-dynamo#15 RadixTree scoring, ai-dynamo#16 TwoPartCodec overflow)

The fork's devel stage in docker/Dockerfile.multi runs
scripts/generate_container_oss_attribution.sh and treats TRT_LLM_VER as a
required TAG argument. The docker/Makefile %_build rule derives
TRT_LLM_VERSION from tensorrt_llm/version.py::__version__ and forwards it
via --build-arg TRT_LLM_VER=..., but our direct buildx invocation was
missing that, so the devel stage failed with:

  #15 0.092 ERROR: Missing required parameter TAG
  failed to solve: process "... /tmp/gen_attribution.sh 'devel' ${TRT_LLM_VER} ${TARGETARCH}"
  did not complete successfully: exit code: 1

Mirror the Makefile: parse __version__ out of tensorrt_llm/version.py
after we append the commit suffix, and pass it as --build-arg TRT_LLM_VER.

Signed-off-by: Schwinn Saereesitthipitak <schwinns@nvidia.com>

/ai-dynamo#8/ai-dynamo#15/ai-dynamo#16)

Test-only additions for the seams the review flagged as untested.

ai-dynamo#7 _project_scale_to with a real apply outcome (4 cases):
  both components changed → full ScalingDecision; both equal current →
  None (PSM-equivalent no-change); single-component proposal → other count
  stays None; non-apply execute_action → None. Previously every adapter.tick
  test hit only the None/empty path, so a regression in the projection /
  no-change detection would have shipped silently.

ai-dynamo#8 _tick_input_to_context + FPM encoding:
  build a TickInput with traffic (incl kv_hit_rate), worker counts (incl
  scaling-in-progress flags), and a real ForwardPassMetrics; assert the
  PipelineContext.observations mapping and that the FPM bytes decode back
  (key format "<worker_id>/<dp_rank>", canonical encoder). This is the
  ingress glue where the add_observations P1 + the projection live.

ai-dynamo#15 registry mutation during an in-flight tick:
  suspend a PROPOSE plugin mid-gather (asyncio.Event), register a new
  plugin while suspended, release, and assert the late plugin did NOT join
  the in-flight stage (pre-tick snapshot) and the tick completed cleanly —
  then a fresh tick picks it up. Exercises the no-locks invariant that
  scheduler.py/server.py document but no test covered.

ai-dynamo#16 test_tick_diagnostics_extended scope note:
  clarify in the module docstring that plugin_overrides / reconcile_reasons
  / held_over_plugins have no production populator in this PR; these tests
  lock the dataclass contract (defaults / no shared-mutable aliasing), not
  live behavior.

835 planner tests pass (+6).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>