sots-re/findings/control-flow
alex 232550595d lane BU: run 1's result reshapes the prediction; the run-2 test committed before run 2 finished
Run 1 falsified P3 as written -- the walk is NOT ascending element address,
0 of 5 sequences -- and handed back a sharper key: it is lexicographically
ascending in (fleet->Location*, fleet*), 5 of 5. Both are heap addresses.

Run 1 also found something the static read had missed: the newly minted fleet
ids are ALREADY on the fleet objects when the assignment walk claims them, so
the id-to-group pairing is decided upstream of AssignFleetsAndIssueOrders.

The cross-process test that separates 'the Location pointer is the key' from
'the Location pointer is a correlate' is committed here, while run 2 was still
loading and before its autosave existed.
2026-09-09 03:25:02 -04:00
..
ai-visit-order-probe.md BR: RNG excluded by measurement - zero foreign draws in all three AI brackets, and the global generator is drawn 3x in a process to mint the AI seeds; plus the first replayable rich-turn record 2026-09-09 02:51:01 -04:00
alliance-mask-and-modcount.md lane A2: the alliance mask read from the bytes, and every ModCount writer 2026-09-08 12:44:30 -04:00
combat-done-tail.md Z: the unnamed counter at S+0x8 is ModCount, and my players flag was my own error 2026-09-08 10:04:21 -04:00
combat-resolver.md lane J: the combat resolver, read from the instruction stream 2026-09-08 09:37:02 -04:00
combat-retreat-pipeline.md B5: the combat resolver's sub-dispatcher is RETREAT, and it is the largest 2026-09-08 12:00:14 -04:00
fleet-visit-order-mechanism.md lane BU: run 1's result reshapes the prediction; the run-2 test committed before run 2 finished 2026-09-09 03:25:02 -04:00
gate-indexed-rng-audit.md lane AZ merged: three species short-circuits not one, frac polarity inverted in two published findings, tscr is not a corpus constant 2026-09-09 03:03:25 -04:00
hive-creation-rng.md L1: CDiff crosses at frame 50, and the AI client seed is fresh in every process 2026-09-08 18:23:19 -04:00
indirect-edges.md lane V2: vtable inversion — resolve indirect call edges image-wide 2026-09-08 12:05:05 -04:00
inlined-draws.md lane I: the complete inlined-draw inventory, and the seven RNG entry points 2026-09-08 10:03:33 -04:00
per-history-residue.md BS: cross-reference lane BR - the global generator's three-word seed mint reproduces, and it is not the whole story on an encounter turn 2026-09-09 03:13:15 -04:00
pinned-seed-rich-turn.md rule 11 corrections: AD's 94 leaves decompose 59+35, list 10 is OnCommand_TransferShips, BP's income claim marked as inference 2026-09-09 02:22:24 -04:00
raid-gate-multiplicity.md rule 11 corrections: AD's 94 leaves decompose 59+35, list 10 is OnCommand_TransferShips, BP's income claim marked as inference 2026-09-09 02:22:24 -04:00
raid-intercept-species-word.md AZ: correct the archived save's size, stage both states, and add the pre-loss turn-11 save 2026-09-09 03:00:29 -04:00
raid-target-pick-verdict.md lane AZ merged: three species short-circuits not one, frac polarity inverted in two published findings, tscr is not a corpus constant 2026-09-09 03:03:25 -04:00
seed-exposure-forward-test.md BQ: cross-reference lane BP's probe 2 - both lanes landed on the AI fleet layer 2026-09-09 02:13:22 -04:00
standalone-generator-and-turn-record.md lane Y: the standalone's generator against lane Z's calibrated oracle pairs, and the tail's turn record 2026-09-08 11:40:19 -04:00
standalone-scaffold.md lane S2: the standalone scaffold, and the measured distance to the byte-match 2026-09-08 10:35:56 -04:00
tail-probes.md lane H: five live probes, the oracle restored, and a harness perturbation bisected to one hook 2026-09-08 13:53:36 -04:00
tail-rng-ledger.md lane AG merged: gate-indexed audit rows, three gates decoded, tail-rng-ledger 11.1 corrected in place 2026-09-08 22:29:14 -04:00
trade-raid-rng-gate.md AC: guest-state and click-helper notes for VM141 2026-09-08 21:33:25 -04:00
turn-driver.md lane A2: the alliance mask read from the bytes, and every ModCount writer 2026-09-08 12:44:30 -04:00
turn-spine.md tech effects (196-entry TechId table, OnTechResearched), 8 formula gaps answered, std::string settled 2026-09-07 22:05:49 -04:00
w3-containers-status-handlers.md W3: NVO.TShn's writer trapped live, its gate named, and 158/158 on the corpus 2026-09-08 16:41:09 -04:00
watchpoints-modcount-status.md lane W2: the three queue items not reached, with the reason and the cheapest next step for each 2026-09-08 15:25:53 -04:00