3.6 KiB
3.6 KiB
Rehost Queue
This file is the short active queue for the current runtime and reverse-engineering frontier.
Working Rule
- Continue after each commit unless the queue is empty, a real blocker remains, or approval is needed.
- Keep detailed branch notes, long evidence dumps, and retired queue state in
docs/rehost-queue/. - Prefer linking to preserved notes instead of growing this file into another worklog.
Current Active Items
- Keep the periodic-company trace as the main shellless simulation frontier, with the next concrete control-lane pass focused on the ordinary loaded runtime-effect strip
0x00444d92 -> 0x00432f40(kind 8) -> 0x004323a0 -> 0x00431b20. The checkedrt3_105/mapscompact-dispatch corpus is now exported directly and partially mirrored into the periodic-company trace:41maps scanned,38with dispatch-strip rows,318nondirect rows total, the add-building subset is only10grouped occurrences across7descriptor keys, and the strongest broader nondirect families are now bounded too at36grouped occurrences across18maps fornondirect-ge1e-h0001-0360-0004-0100-0200-p0000-0000-0000-ffff :: [864:4]plus27across14maps for the mixed[-1:4]cluster. All of those checked rows still lack recovered trigger kind. The active open question is therefore which ordinary loaded rows acquire or bypass the missing trigger-kind control lane before they can reach placed-structure mutation opcodes. Preserved checked control-lane detail now lives in Periodic company control lane. - Keep the next static Tier-2 building pass focused on the earlier seed/projection seam into
0x00412d70, not another broadBuildingTypessweep. The grounded owner strip is0x004196c0 -> 0x00414490 -> 0x00416ce0 -> 0x00419230, and the checked candidate-table export now keeps the concrete row families explicit too: among the37probe-bearing maps,Port00/Warehouse00stay at35/43on30maps and shift earlier to10/18on7, whilePort01..11/Warehouse01..11stay fixed at45..55/56..66and the numbered trailer family splits independently at0x00000001 -> 28 mapsversus0x00000000 -> 9 maps. The new crossover matrix stays mixed rather than collapsing to one side too:35/43 :: 0x00000001 -> 25 maps,35/43 :: 0x00000000 -> 5 maps,10/18 :: 0x00000000 -> 4 maps, and10/18 :: 0x00000001 -> 3 maps. The stockBuildingTypesside is narrower too: across77checked.bcafiles onlyMachineShop.bcacarries nonzero selector bytes at0xb8..0xbb, while the broader nonzero stock signal lives in the22-file.btyalias-root family withdword_0xbb = 0x000001f4, especially theTextileMillbranch that already coversPort.btyandWarehouse.bty. The active open question is therefore which earlier seed/projection path lifts that narrow stock-side signal and the fixed numbered cluster into nonzero live[candidate+0xba/+0xbb]before0x00412d70and0x00419230consume it. Preserved checked row-family detail now lives in Tier2 candidate row families. Preserved checked stock selector-byte detail now lives in Tier2 selector-byte sources.