From b937654ffa79575d68f1565a4693b4710f21dbfd Mon Sep 17 00:00:00 2001 From: Jan Petykiewicz Date: Sat, 18 Apr 2026 22:46:09 -0700 Subject: [PATCH] Ground acquisition loader tuple owner field --- crates/rrt-runtime/src/smp.rs | 45 ++++++++++++++++++++++++++++------- docs/rehost-queue.md | 8 +++++-- 2 files changed, 43 insertions(+), 10 deletions(-) diff --git a/crates/rrt-runtime/src/smp.rs b/crates/rrt-runtime/src/smp.rs index 75e50ed..ea91f80 100644 --- a/crates/rrt-runtime/src/smp.rs +++ b/crates/rrt-runtime/src/smp.rs @@ -4639,6 +4639,8 @@ fn build_periodic_company_service_trace_report( .to_string(), "shared finalize helper 0x0040ef10 now has both create-side callers 0x00403ef3 / 0x00404489 and data-driven loader callers 0x0046f073 / 0x004707ff, so the [site+0x276] owner lane is grounded under constructor-plus-finalize families rather than only the post-load local replay strip" .to_string(), + "data-driven loader callers 0x0046f073 / 0x004707ff push tuple fields [+0x00/+0x04/+0x0c] into 0x0040ef10, and that helper's third argument flows into ebx and then [site+0x276] at 0x0040f5d4" + .to_string(), "station-detail mutation path 0x0040dc40 already consumes [site+0x276], company stat-family 0x2329/0x0d, and candidate field [candidate+0x22], then commits linked-site side-state rebuild through 0x0040d1f0 / 0x00480710 / 0x0045b160 / 0x0045b9b0 / 0x00418be0 / 0x0040cd70" .to_string(), "city-connection direct-placement family 0x00402cb0 -> 0x00403ed5/0x0040446b -> 0x004134d0 -> 0x0040ef10 already grounds the shared allocator/finalize path for newly created site rows" @@ -4656,7 +4658,7 @@ fn build_periodic_company_service_trace_report( .to_string(), ]; let near_city_acquisition_site_owner_company_projection_status = - "live_meaning_grounded_constructor_and_finalize_families_bounded_projection_missing" + "loader_tuple_owner_arg_grounded_constructor_and_finalize_families_bounded_broader_projection_missing" .to_string(); let near_city_acquisition_site_self_id_projection_status = "live_meaning_grounded_reconstructible_from_collection_identity".to_string(); @@ -4733,13 +4735,14 @@ fn build_periodic_company_service_trace_report( "direct constructor control-flow now shows 0x004134d0 allocating a new placed-structure row through 0x00518900 and then calling 0x0040f6d0, which seeds [site+0x2a4], clears broad row state, copies the display name bytes, and writes [site+0x276] from an incoming argument before any later service logic runs".to_string(), "0x0040f6d0 immediately zeroes [site+0x2a8/+0x272/+0x27a/+0x29e], stamps [site+0x3d4/+0x3d5], and seeds further local caches, which makes it a create-side initializer rather than a replay-only refresh".to_string(), "shared finalize helper 0x0040ef10 now has create-side callers 0x00403ef3 / 0x00404489 and data-driven callers 0x0046f073 / 0x004707ff; the latter feed it from tuple-backed loads after 0x0040eba0 / 0x0052eb90 rather than from the checked-in local replay strip".to_string(), + "the loader-side dataflow is narrower now too: 0x0046f073 / 0x004707ff push tuple fields [+0x00/+0x04/+0x0c] into 0x0040ef10, that helper reads arg3 into ebx at 0x0040ef1c, and the paired write at 0x0040f5d4 stores ebx into [site+0x276] while 0x0040f5da stores the computed companion word into [site+0x27a]".to_string(), "inside 0x0040ef10 the [site+0x276] write at 0x0040f047 only clears owner-company under a world-flag branch, while the paired [site+0x276]/[site+0x27a] write at 0x0040f5d4 follows a 0x00436590 event/scalar path and is not the generic post-load republisher".to_string(), "direct local writer census now shows the grounded [site+0x276] write side clustering under live mutation families such as 0x004269b0 / 0x00426a10, the create-side 0x0040ef10 / 0x0040f6d0 strip, and the bulk reassignment families 0x00426dce..0x00426ea1 and 0x00430040..0x004300d6 rather than under the known replay strip".to_string(), "direct local control-flow reconstruction now shows those same writer families hanging under the 0x00431b20 opcode dispatcher over 0x0061039c: opcodes 0x04..0x07 dispatch to 0x00430040, opcodes 0x08/0x10..0x13 dispatch to 0x00426d60, and opcodes 0x0d/0x16 dispatch to 0x0042fc90".to_string(), "0x0042fc90 itself iterates the live placed-structure collection 0x0062b26c, filters rows through 0x0040c990 plus optional company match [site+0x276], and then dispatches row vtable slot +0x70, which keeps that branch on the live application side rather than replay".to_string(), ], blockers: vec![ - "current atlas evidence now bounds [site+0x276] under constructor-plus-finalize and live mutation families, but it still does not identify which persisted tuple fields and later restore/finalize calls are sufficient to repopulate the owner-company lane for shellless acquisition without guessing".to_string(), + "current atlas evidence now grounds one persisted tuple path too: loader tuple field [+0x0c] reaches [site+0x276] through 0x0046f073 / 0x004707ff -> 0x0040ef10, but it still does not identify which broader persisted source family feeds that tuple or which additional restore/finalize calls are sufficient to repopulate the owner-company lane for shellless acquisition without guessing".to_string(), ], }, SmpServiceConsumerHypothesis { @@ -4791,11 +4794,11 @@ fn build_periodic_company_service_trace_report( }, ]; let near_city_acquisition_remaining_owner_gaps = vec![ - "persisted tuple-to-live projection of placed-structure owner-company field [site+0x276] for the acquisition-side owner-present gate; the live meaning is grounded through 0x0047efe0 and the owner family is now bounded under 0x004134d0 / 0x0040f6d0 plus shared finalize helper 0x0040ef10".to_string(), + "persisted source family feeding the loader tuple-to-live projection of placed-structure owner-company field [site+0x276] for the acquisition-side owner-present gate; the live meaning is grounded through 0x0047efe0, the owner family is bounded under 0x004134d0 / 0x0040f6d0 plus shared finalize helper 0x0040ef10, and loader tuple field [+0x0c] is now known to seed [site+0x276] through 0x0046f073 / 0x004707ff".to_string(), "exact persisted inputs and shellless service semantics for the now-grounded live cached tri-lane writer family over [site+0x310/+0x338/+0x360], especially 0x0040d450 and 0x00410b30..0x004118f4 above 0x00412560".to_string(), ]; let near_city_acquisition_region_lane_statuses = vec![ - "[site+0x276] owner-present gate: consumed directly by 0x004014b0, the live owner-company meaning is grounded through 0x0047efe0, and the write family is now bounded under 0x004134d0 / 0x0040f6d0 plus shared finalize helper 0x0040ef10; the remaining gap is which persisted tuple or restore path repopulates that lane for shellless acquisition".to_string(), + "[site+0x276] owner-present gate: consumed directly by 0x004014b0, the live owner-company meaning is grounded through 0x0047efe0, the write family is bounded under 0x004134d0 / 0x0040f6d0 plus shared finalize helper 0x0040ef10, and loader tuple field [+0x0c] is now known to seed that lane through 0x0046f073 / 0x004707ff; the remaining gap is which persisted source family and companion restore calls are sufficient for shellless acquisition".to_string(), "[site+0x2a4] placed-structure id lane: peer-chain helpers already ground this as the record's own site id, constructor-side 0x00480210 seeds it for new linked-site rows, and 0x004269b0 resolves the chosen site id back through 0x0062b26c before mutating [site+0x276], so this lane is reconstructible from collection identity for the 0x004014b0 commit path".to_string(), "[site+0x310/+0x338/+0x360] cached tri-lane: exact delta reader grounded at 0x0040cac0, deferred additive accumulator/reset helper grounded at 0x0040c9a0, and direct live producers now grounded at 0x0040d450 plus the broader 0x00410b30..0x004118f4 candidate-processing loop above 0x00412560; the remaining gap is exact service semantics and persisted inputs, not writer existence".to_string(), "placed-structure subtype filter: 0x0040d360 is the exact test [candidate+0x32] == 4, the owning subtype byte is already bounded under 0x004131f0 -> 0x00412fb0 -> 0x004120b0 -> 0x00412ab0, and direct local binary inspection now grounds stream-load callback 0x0040ce60 as the restore-side bridge into [site+0x3cc/+0x3d0]".to_string(), @@ -4894,6 +4897,7 @@ fn build_periodic_company_service_trace_report( .to_string(), "0x00403ef3 / 0x00404489 create-side callers of shared finalize helper 0x0040ef10".to_string(), "0x0046f073 / 0x004707ff data-driven loader callers of shared finalize helper 0x0040ef10".to_string(), + "0x0046f073 / 0x004707ff tuple field [+0x0c] feeding 0x0040ef10 arg3 and then [site+0x276] at 0x0040f5d4".to_string(), "0x004134d0 / 0x0040ef10 shared placed-structure allocator and finalize-or-rebuild lane for newly created or tuple-loaded site rows" .to_string(), "0x00481430 / 0x0047d8e0 dynamic side-buffer stream-load owner repopulating route-entry lists, three byte arrays, five proximity buckets, and trailing scratch band" @@ -28130,7 +28134,7 @@ mod tests { let trace = build_periodic_company_service_trace_report(&analysis); assert_eq!(trace.selected_company_id, Some(7)); assert_eq!(trace.atlas_candidate_consumers.len(), 9); - assert_eq!(trace.known_bridge_helpers.len(), 73); + assert_eq!(trace.known_bridge_helpers.len(), 74); assert_eq!(trace.next_owner_questions.len(), 5); assert_eq!(trace.companies.len(), 1); assert_eq!( @@ -28215,7 +28219,7 @@ mod tests { ); assert_eq!( trace.near_city_acquisition_site_owner_company_projection_status, - "live_meaning_grounded_constructor_and_finalize_families_bounded_projection_missing" + "loader_tuple_owner_arg_grounded_constructor_and_finalize_families_bounded_broader_projection_missing" ); assert_eq!( trace.near_city_acquisition_site_self_id_projection_status, @@ -28357,6 +28361,16 @@ mod tests { && line.contains("0x0046f073 / 0x004707ff") && line.contains("0x0040ef10")) ); + assert!( + trace.near_city_acquisition_projection_hypotheses[0] + .evidence + .iter() + .any(|line| line.contains("[+0x00/+0x04/+0x0c]") + && line.contains("0x0040ef1c") + && line.contains("0x0040f5d4") + && line.contains("[site+0x276]") + && line.contains("[site+0x27a]")) + ); assert!( trace.near_city_acquisition_projection_hypotheses[0] .evidence @@ -28452,7 +28466,7 @@ mod tests { trace .near_city_acquisition_runtime_backed_input_families .len(), - 17 + 18 ); assert_eq!(trace.near_city_acquisition_remaining_owner_gaps.len(), 2); assert_eq!(trace.near_city_acquisition_region_lane_statuses.len(), 4); @@ -28532,6 +28546,15 @@ mod tests { && line.contains("0x00403ef3 / 0x00404489") && line.contains("0x0046f073 / 0x004707ff")) ); + assert!( + trace + .near_city_acquisition_runtime_backed_input_families + .iter() + .any(|line| line.contains("0x0046f073 / 0x004707ff") + && line.contains("[+0x00/+0x04/+0x0c]") + && line.contains("0x0040ef10") + && line.contains("0x0040f5d4")) + ); assert!( trace .near_city_acquisition_runtime_backed_input_families @@ -28777,7 +28800,8 @@ mod tests { .any(|line| line.contains("[site+0x276]") && line.contains("0x0047efe0") && line.contains("0x004134d0 / 0x0040f6d0") - && line.contains("0x0040ef10")) + && line.contains("0x0040ef10") + && line.contains("[+0x0c]")) ); assert!( !trace @@ -28973,6 +28997,11 @@ mod tests { .iter() .any(|line| line.contains("0x0046f073 / 0x004707ff")) ); + assert!(trace.known_bridge_helpers.iter().any(|line| { + line.contains("0x0046f073 / 0x004707ff") + && line.contains("[+0x0c]") + && line.contains("0x0040f5d4") + })); assert!( trace .known_bridge_helpers diff --git a/docs/rehost-queue.md b/docs/rehost-queue.md index c1b0a84..12763e8 100644 --- a/docs/rehost-queue.md +++ b/docs/rehost-queue.md @@ -123,9 +123,13 @@ Working rule: copied name bytes, `[site+0x276]`, `[site+0x3d4/+0x3d5]`, and cleared local caches, and the shared finalize helper `0x0040ef10` has both create-side callers `0x00403ef3 / 0x00404489` and data-driven loader callers `0x0046f073 / 0x004707ff` + - one persisted tuple path is grounded too now: + the data-driven loader callers `0x0046f073 / 0x004707ff` push tuple fields + `[+0x00/+0x04/+0x0c]` into `0x0040ef10`, and inside that helper arg3 becomes `ebx` and then + `[site+0x276]` at `0x0040f5d4` - the remaining owner-company question is therefore narrower than “find any replay seam”: - identify which persisted tuple fields and later restore/finalize calls are sufficient to - repopulate `[site+0x276]` for shellless acquisition + identify which persisted source family feeds that tuple and which companion restore/finalize + calls are sufficient to repopulate `[site+0x276]` for shellless acquisition - the second is narrower in the same way: the checked-in `0x36b1/0x36b2/0x36b3` triplet seam and the `0x4a9d/0x4a3a/0x4a3b` side-buffer seam still do not serialize `[site+0x310/+0x338/+0x360]`