mirror of
https://github.com/Druthulu/BFM-decomp
synced 2026-10-03 08:07:25 -04:00
238 KiB
238 KiB
andi $x,0xFFfolded away in your output but present in the target → §1/I2 + §12 name the family; if the prescribed& 0xffat the use folds, hold the masked byte in a u16 local so only a QI->HI extend survives (P30 wave 2, byte-tested)- target reuses ONE address register across two different offsets of the same global → §20 (the pointer-var-to-the-global bullet, cookbook L1907-1918) — take
T *p = &D_x;and index offp, never the bare symbol twice - wrong branch sense / arms swapped /
beqwhere the target hasbne(match_one prints this class as BRANCH-POLARITY) → §3-T4 (invert the source condition) + §32.2; for a trailingreturn 0vs an early return see the shared-ret0 note (cookbook L1344) conflicting typeson YOUR OWN function's definition, where the fleet canon is(void)→ §73 (the PARAMS axis) + §42 — keep the(void)signature and read the incoming arg viaregister s32 a0v __asm__("$4"); §42 is otherwise indexed only under regalloc- gcc stole an instruction into a branch delay slot that the target leaves as
nop→ §5a + the zero-byte__asm__("")fence (§34 toolkit) —reorg.c stop_search_phalts the eager filler on an asm insn - §66d-5 —
residual_class's "structural ⇒ permuter CPU is waste" is WRONG for schedule permutations (measured, Phase 29 SESSION-18) L5529 - §162 — The cross-jump "CALL veto" is a COUNT law, not a CALL law (BOUNDS §88a; P30 S48,
func_80189540) L11340 - §91 — A structure-TRANSFER is only valid where the structure corresponds: the
--likerole trap (Phase 29 SESSION-21,func_8012AAAC×137) L6880 - §10 — Closing the regalloc/scheduling hard tail by hand (LZSS, Phase 7 session F — the full close) L854
match_onesays SIZE-MISMATCH/short and the target has a frame-pointer prologue (addu $fp,$sp,$zero/21F0A003) → The target is -O0. Pass--o0tomatch_one/rtu_match— nothing else will ever match (§116: opt level is a property of the FILE). Known -O0 regions: boot,ov_SC01_077_o0*, the whale_o0b, and 0x8013B568..0x8013C98C — a target outside all four still needs checking- Addendum — REGALLOC-PERM store in a cross-jump shared tail defeats §137's barrier (func_8017EDE8) L30640
- §148 — The loop.c hoisting THRESHOLD is arithmetic you can compute, and the
?:clamp that folds to MIN_EXPR (P30 S42,func_8017C6F4, 947 ins) L10183 - §150 — A register ROTATION across symmetric blocks is VARIABLE-IDENTITY evidence, not an allocator tie (P30 S43,
func_8017C6F4, 947 ins ×4) L10350 - §162 — CROSS-JUMP DIRECTION: the surviving copy is always the LATER one, so a BACKWARD
jinto a sibling arm is a sourcegoto(P30 S48) L11304 - §177 — 🔴 THE EPILOGUE RETURN-DELAY SLOT IS DECIDED BY YOUR SAVED-REGISTER SET, NOT BY SCHEDULING L17227
- §186 — CROSS-JUMPING RUNS AFTER SCHEDULING, SO NO C-LEVEL BARRIER CAN STEER IT L18137
- §194-H — §164-29's WAR fence runs again at SCHED2 ON HARD REGISTERS: an in-place
v &= Kbefore a branch fences the store that reads v, and when TWO independent stores compete for the one delay slot the fence picks the winner at ZERO length drift (a WIDTH/sh!=sw swap, not a nop). Corrects §167-42's reconstruction (pseudo arm → hard-reg arm) and supplies its first re-runnable A/B. L19356 sltiwhere the target hassltiu(or vice versa) → §35 — a separate SIGNED int copy of an unsigned load keepsslti; chained bounds get range-folded, so write each bound as its ownif/goto(§21)- §221 — A CONSTANT SHARED BY TWO STORES DIES AT THE CALL WHOSE DELAY SLOT REFILLS ITS REGISTER (single observation — not yet cross-confirmed) (P31 S58) L22829
- §232 — WHEN THE
jrDELAY SLOT'S STORE STORES THE RETURN VALUE, TIE THEM WITH ONE PSEUDO (single observation — not yet cross-confirmed) (P31 S58) L23231 - §243 — SPELL THE CSE BARRIER AS A REASSIGNED POINTER; AND THE
nop-AFTER-EVERY-lhSIGNATURE (P31 S58b) L23731 - ADDENDUM — to §225 / §256 — A GOTO TO A SHARED SET-POINT PREVENTS IF-CONVERSION FROM COLLAPSING A LATER BRANCH TEST L26345
- §263 — A STOLEN DELAY SLOT WHOSE INSTRUCTION IS AN ARG-REGISTER COPY IS AN ARITY ERROR, NOT A SCHEDULE (P31 S59, byte-proven) L24937
- §277 — RETURN-TAIL C SPELLING PICKS THE DELAY-SLOT-FILL vs TRAILING-MOVE TOPOLOGY, AND A NARROWER SECOND VARIABLE KEEPS TWO PSEUDOS INSTEAD OF ONE (P31 S60;
func_801846F0ov_SC03_104,func_801A44C4md_SC07_004, both byte-proven) L26571 - §285 — PRE-INITIALIZING A VARIABLE WITH A SHARED CONSTANT BEFORE A BRANCH MAKES BOTH ARMS OF THE FOLLOWING if/else DESTRUCTIVELY REUSE THE SAME DESTINATION REGISTER FOR THEIR BITWISE RESULT (byte-proven;
func_801811F0, ov_SC03_102, independently rediscovered across waves di/dj) (P31 S60; waves #, byte-proven) L29088 - §291 — THE DELAY-SLOT FALSE-VALUE: A CONDITIONAL BRANCH'S ZERO ARM MUST BE A FALL-THROUGH-ADJACENT BLOCK ENDING IN AN EXPLICIT JUMP, OR REORG CANNOT MATERIALIZE IT INSIDE THE BRANCH'S OWN DELAY SLOT (P31 S60; waves #, byte-proven) L29112
- §306 — A HAZARD
nopIN FRONT OF A DIV-RESULT STORE IS A STATEMENT-ORDER DEFECT: THE INDEPENDENT TRAILING STATEMENT MUST BE WRITTEN BEFORE THE DIVISION-CONSUMING ONE (P31 S62 T4; byte-proven func_8017E7D0) L29884 - §311 — A JOIN-BLOCK STORE CAN SWALLOW AN ARM'S LOAD-DELAY
nop: WHEN ONE ARM'S VALUE COMES FROM A LOAD, DUPLICATE THE STORE INTO BOTH ARMS (P31 S64 t5j-t5m; byte-proven func_8017D7E0) L30127 - §331 — OPEN GAP: NO LEVER ELIMINATES AN UNWANTED DUPLICATE COPY AT A BRANCH-TARGET BLOCK HEAD (P31 S67; main/func_80013154, closeness 12, NOT solved) L31069
- §361 — ★ — A LOOP-TAIL BYTE SIGNATURE THAT NAMES ITS SOURCE SHAPE — AND THE LAW THAT A "SCHEDULING TIE" MAY BE YOUR OWN EARLIER LEVER (P31 S68; byte-proven main/func_800241C0, fable escalation, 19 → 0 in 3 iterations) L31647
- a shared global declared at a conflicting type (u8 vs s32, signedness) blocking your draft → §37 asm-label alias
extern T X __asm__("D_x")— beats*(T*)&X, whose address-of perturbs regalloc. Works for FUNCTION definitions too (P30 wave 2) - your narrow load lost its load-delay
nopright after an inline block move → anlwl/lwr+swl/swrpair is a delay-slot SPONGE for the following load — the inverse of the §5a/§34 fence case. Align-1 4×u8 struct assign emits the inline form (§38 covers only the -O0 memcpy-call form) - §396g — ★★ — A GUARD LADDER'S RUNGS MUST STAY SYMMETRIC OR
reorg.cLOSES ITS BRANCH REDIRECT (P31 S69; byte-proven ov_SC03_028/func_80184C90, 92 ins) L32828 - §40 — Structural families: the MECHANICAL symbol-remap (crack one exemplar → remap the rest, ~0 tokens) (Phase 25 T3/T7, 2026-07-08) L2576
voidvss32return — is promoting it byte-neutral? → NO, not always: §41d (byte-proven; avoidbody with noreturngains an instruction). P30 adds a second mechanism: ans32return keeps$v0live-out and blocks dbr from filling a loop-back delay slot- LENGTH-DRIFT −1 and the missing instruction is a reg-to-reg COPY in a
jaldelay slot → a narrow prototyped param (plain ANSIs16 arg3) — §43 is indexed as the K&R-definition lever, but the ANSI form is the fix as often - §44 — The Phase-25 cheap-Opus giant batch: 5 structural levers + the §43 extension (2026-07-11, 6 crackers over the frontier giants) L3280
- §456 — The lever-removal move catalog: what the S104 agents found under ~205 pins, barriers and launders (Phase 36 T7) L37765
- §460 —
-dSPRINTS THE SCHEDULER'S READY LIST WITH PRIORITIES. STOP INFERRING IT FROM RTL ORDER. L35232 - §49 — The LUID DIAL: a zero-byte SCHEDULING dial (the sched.c analogue of §47) —
func_8017A4AC(536 ins ×134), Phase 26 session 8 L3565 - §193-C — gcc-2.7.2 cross_jump merges the SCHEDULED common SUFFIX only — there is no prefix/head merge, so §8/§48-A1's "duplicate into both arms and cross_jump refunds it" is a TAIL-only lever L18592
- §501 — ★★★ — A LEVER THAT MEASURES WORSE MAY BE A CASCADE: READ THE
.loopDUMP FOR THE DESIRABILITY FLIP BEFORE DISCARDING IT (P32 T4b,main:func_800391D4, a pinned wall banked by a Fable agent) L37157 - §51g — When the thing you are scanning has a GRAMMAR, parse the grammar (
tools/cdecl.py) L3807 - §52 — The WALKER-FAMILY skeleton: 6 regalloc-order levers + a deeply-characterized intrinsic wall (
func_80178004, 165 ins ×134; Phase 26, Fable5, 2026-07-15) L3951 - §53 — SWEEP A FAMILY WITH THE TOOL ITS EXEMPLAR NEEDED: the jr/switch carve, and how omitting it manufactured the "families don't template" doctrine (Phase 28 T1, 2026-07-15) L4066
- §54 —
--fix-def-sig: the member's CANONICAL DECLARATION is a build step too (tiny-IMM mega-pools, +4,801, Phase 29 T6, 2026-07-16) L4201 - ADDENDUM — §NNN — sharpens §55a / §164-37 / §165-28 (switch-vs-tree cluster): A SHAPE THAT LOOKS LIKE A SWITCH DISPATCH CAN BE PLAIN NESTED
ifs WHOSE SHARED BODY WAS TRIPLICATED BY THE SOURCE AND THEN CROSS-JUMP-MERGED BACK DOWN L28233 - §56b — PROPAGATING an h_seq giant: the exemplar's externs MUST be fleet-canonical, not the draft's types L4270
- §57 — The SELF-decl normalize: the sibling's OWN caller declares the templated fn divergently (the third §17a-1 direction;
tools/normalize_self_decls.py, func_801670E4 ×137, Phase 29, 2026-07-18) L4294 - §58 — match_one MATCH ≠ BANK: the four blind spots + the crack-wave reconcile-before-bank law (Phase 29 crack-wave, 2026-07-18) L4381
- §59 — Three h_seq sweep-residual classes match_one/the-exemplar-bank don't reveal (Phase 29 crack-wave close, 2026-07-18) L4415
- ADDENDUM — §NNN — sharpens §162a3/§60b: A
sll $v0,16 / sltiu $v0,1ZERO-TEST OF A JUST-DECREMENTED HALFWORD IS A SIGNED-TEMP WIDTH TELL OUTSIDE ANY SWITCH/RANGE-TEST CONTEXT L28303 - §65a — The blast-radius taxonomy (makes §61's law structural instead of remembered) L5068
- §62 — The jtbl RECONCILE must also follow the carve: the post-carve draft reconcile (
harvest_verify._jtbl_reconcile, Phase 29 SESSION-11, 2026-07-22) L4871 - §63 — The fresh-138 DEF-SIDE blocker: fix the HEADER decl, not the draft (
fix_header_decl.py, Phase 29 SESSION-13, 2026-07-23) L4915 - §16Z — SHARPENS (sharpens §37 "the /s-DEP LATTICE", §136-13, §136-14, §16Xy, §162q,
gcc-2.7.2-map/sched.md§64) L14398 - §67a — Run the symbol-set guard BEFORE you pay for a gate (
tools/symcheck.py, Phase 29 SESSION-18) L5443 - §68 — A comment-only line halted the extern scan, and the skip label blamed the type cap (Phase 29 SESSION-18) L5562
- §69 — How to attack a behemoth: map it, don't draft it (Phase 29 SESSION-18,
func_80183814, 5,122 ins) L5607 - §70 — The giv-init base register: walk the PARAMETER, not a copy of it (Phase 29 SESSION-18,
func_801777BC) L5657 - you are about to hand-derive a body that some overlay already matched → §71 — grep the callees/globals for an already-matched SIBLING first; in wave 2 this alone produced iteration-1 MATCHes on 4 of 19 targets
- §72 — A
register __asm__pin is a PREFERENCE, not a reservation (Phase 29 SESSION-18,func_8017F510) L5764 - §74 — Auditing a pinned draft: the §72 hazard is CALLER-SAVED pins spanning a call, and only the disassembly can tell you (Phase 29 SESSION-19,
func_8017D960b2, 5 pins) L5860 - §75c — Class-B's remedy is the FULL §17a-1 PAIR (decl and call-site cast); a decl-only fix moves the error and looks like a new wall (Phase 29 SESSION-19,
func_8012F14C) L6035 - a two-constant
if/elseor?:result lands in $v1 where the target reuses the condition's $v0 → §76 — fold the condition into a NAMED local and overwrite that SAME variable with the two constants (an s16 temp, a fresh temp, an inner scope, and both ternary polarities all stay $v1; only reusing ones32local coalesces onto $v0). §76 reads as behemoth-only; it is not - §77 — Every extraction tool carries a NARROW hard-coded preamble set; anything outside it silently caps the body's reach. Diff the preamble before you gate. (Phase 29 SESSION-19 — three variants in one session, two different tools) L6122
- §78 — A LENGTH drift can be a register grant in disguise; and
foldnever leaves a literal first in an|chain (Phase 29 SESSION-19, behemoth #2func_8017D9603,338 ins, 1806 → 0, pin-free) L6212 - §79 — For a 0-callee giant, fingerprint by DATA symbols (§71 cannot fire); and the STACK-SLOT ORDER is a declaration-order oracle (Phase 29 SESSION-19,
func_8017BF144,763 ins, cold start → 45/4763) L6258 - §80 — A do-not-re-buy entry is scoped to its BASE, not to the function; and the pin's hidden cost is an unconditional
qty_phys_sugg(Phase 29 SESSION-19,func_8017BF1445 → 0) L6308 - §81 — Banking a jr (jump-table) function: the 3-step carve chain, and why
match_onecannot see the problem (Phase 29 SESSION-19,func_8017C954) L6361 - ADDENDUM — to §82 — struct copies must stay MEMBER-WISE, not block-moved, to match a spill-slot save L25753
- §83 — The parameterised-repeat law, the spill-area trap, and why a per-case edit cannot move a per-case symptom (Phase 29 SESSION-20,
func_801838145,122 ins, cold-ish start → 36 structural / 99.3%) L6450 - §84 — The DERIVED-OFFSET remap bug: a hand-computed literal that encodes the DISTANCE between two per-overlay symbols, and why
match_oneis structurally blind to it (Phase 29 SESSION-20,func_8013D53C) L6510 - §85 — The RETURN-axis fleet widen is ALL-OR-NOTHING: widening the shared header alone guarantees a conflict in the source overlay (Phase 29 SESSION-20,
func_8012CC88/func_8014D12C) L6577 - §86 — Pinned-exemplar templatability is a PER-FAMILY property, not a per-member rate; and the §42e pin guard is now over-conservative (Phase 29 SESSION-20) L6627
- §87 —
match_oneCOMPILES but never LINKS, so an unresolvable data symbol reads as MATCH; and stored drafts go STALE against the tree (Phase 29 SESSION-20) L6671 - §89b — the parallel gate farm existed; the family path could not reach it (
tools/sweep_parallel.py) L6783 - §90 — Five tool-integrity laws from one session, each of which changed an answer (Phase 29 SESSION-21, 2026-07-27) L6804
- §92 — Conforming a DECLARATION: pointer changes are caller-neutral, scalar-WIDTH changes are not (Phase 29 SESSION-21,
tools/conform_decls.py) L6929 - §93 —
set -o pipefailattributes a pipeline failure to the LAST stage, not the failing one (Phase 29 SESSION-21,func_8014D820) L6960 - §94 — A family sweep's
0/Nis a TYPE-CARRY failure until proven otherwise: lift the exemplar's local types, ALL of them, transitively (Phase 29 SESSION-21,func_8016B6BC0/137 → 137/137) L6985 - §95 —
reconcile_tudropped the SIBLING declarators of a multi-symbolexternline (Phase 29 SESSION-21,func_80176218) L7021 - §96 — The same rewrite, one shape down:
reconcile_tumatched statements to lines by TEXT, so every COMMENTED declaration was silently skipped (Phase 29 SESSION-22,func_80176218banked) L7056 - §97 — The gate's own tree hygiene: a refused carve, an unchecked recovery, and a snapshot that captured a dirty tree (Phase 29 SESSION-22) L7104
- §98 —
conform_declshad three defects, and only the third needed R22 to find (Phase 29 SESSION-22,func_8014CF04) L7151 - §99 — The narrow-param wall is a DEF-side problem with a ZERO-blast-radius fix: convert the definition to K&R (Phase 29 SESSION-22,
func_80175AB8+func_80175DA8) L7205 - §100 — Prefer the DRAFT-LOCAL fix: a type only one function uses belongs in its BODY, not in a shared header (Phase 29 SESSION-22,
func_80175DA80/137 → 137/137) L7254 - §101 — The STALE DEFAULT class: a guard whose cause was removed is a silent skip wearing a safety label (Phase 29 SESSION-22, three instances in one session) L7283
- §102 — A PLUMBING verdict can MASK a DIFF; and K&R is not always a codegen change (Phase 29 SESSION-22,
func_8016EC0C) L7310 - §103 — A FILE-scope
externin a shared overlay TU is a GLOBAL constraint on every LATER function; move the DECL, not the draft (Phase 29 T48/T51,func_80135260— the fleet-wide half) L7345 - §104 — Two silent-skip defects in one scan: match on MASKED text, emit from the ORIGINAL (Phase 29 T53,
gather_externs) L7433 - §105 — A gate's revert must survive an EXCEPTION, not just a failure (Phase 29 T53,
jtbl_family_bank) L7469 - §106 — Persist the MEASUREMENT, derive the POLICY: a stored route let a stale file out-vote the live table (Phase 29 T54,
residual_class._ROUTE) L7508 - §107 — A lever wired into ONE gate path is a lever most families cannot reach (Phase 29 T56,
func_801440900/136 → 136/136) L7551 - §108 — Diagnosing a family
0/N: the four causes, and the third opt-in lever (Phase 29 T59) L7589 - §109 — Conforming a definition to a shared header: fix the NAMES, then check the RETURN precondition (Phase 29 T60) L7638
- §110 — A unit must define exactly ONE function, and "ends in
;" does not tell you which line defines it (Phase 29 T65) L7678 - §111 — The distinct-code metric is not noisy: a family pays it only if its members are byte-VARIANT (Phase 29 T66) L7719
- §112 — A macro-scoped declaration only collides where the macro is INSTANTIATED (Phase 29 T67/T69,
audit_header_sigs.py) L7768 - §113 — An ARITY blocker only exists if the macro CALLS the function; an address-taken use has no call site (Phase 29 T72) L7814
- §114 — The THIRD decl axis: a CALLEE the draft declares differently from the target TU (Phase 29 T76/T77) L7846
- §115 — A
func_XXXXXXXXpredicate rots by design: the same name-form assumption in THREE places (Phase 29 T78) L7888 - §117 — Spell the sibling's symbol from the SIBLING's address, not the exemplar's kind (Phase 29 T82) L7964
- §118 — Ordinal (positional) immediate resolution: compare C tokens to the DIFFERING asm uses (Phase 29 T87) L8001
- §119 — Two levers on the SAME axis, opposite directions: test the off-diagonal (Phase 29 T89) L8035
- §120 — Uniquify draft-defined TYPE names; and check which of N staging sites you actually patched (Phase 29 T93) L8064
- §121 — Synthesise externs for macro-DEFINED callees from the macro's own definition head (Phase 29 T95) L8099
- §122 — GATE RAW BEFORE TRANSFORMING; the undo belongs to the WRITER, as a per-edit journal (P30 T0a, 2026-07-30) L8122
- §123 — PROPAGATE A FAMILY WITH THE TOOL ITS TIER NEEDS:
dedup_propagateis h_exact-only; its refusals are statements about the TOOL (P30 wave 1, 2026-07-30) L8154 - ADDENDUM — §NNN — sharpens §37/§124 (unspecified-parameter-list family): DERIVE A CALLEE'S ARITY LOWER BOUND FROM ITS OWN
.sSTACK-ARGUMENT READS, NOT FROM ANY SINGLE CALL SITE L28336 - §125 — Split the CARVE from the BODY before calling a jr residue a wall — and measure it by SHA from a CLEAN tree (P30 SESSION-28; this section's first draft was WRONG and the method caught it) L8244
- §126 — The carve-within-a-carve: an ADDRESS RANGE is not an OPTIMIZATION REGION (P30 T2, byte-proven end-to-end) L8302
- §127 — The
-O0regime: the CONSTANT-OFFSET FOLD, and why-O0needs its own idiom set (P30 T3 wave, 15 targets) L8387 - §128 — A raw NUL in C source makes grep SILENTLY SKIP the file (P30 S28, 137 files) L8431
- §129 — Post-carve,
rtu_match/match_oneCOUNT THE JUMP TABLE AS INSTRUCTIONS; and a carve must never be committed without its owner (P30 S28,func_8013BD74) L8475 - §130 — An INCREMENTAL build can report BYTE-IDENTICAL for a change the CLEAN build cannot even LINK (P30 S28, the jr pair) L8524
- §131 — The jtbl OVER-SPAN:
sltiu Nis ground truth in BOTH directions, and the zero-word rule only guards one (P30 S28,func_80191C50) L8571 - §132 — The
JR-PAIR-IN-ONE-O0-OBJECT"wall" was TWO instrument defects: a merged-double span the carve could not see, and a truncated object no rule deleted (P30 S29,func_8013B83C+func_8013BD74) L8608 - §133 — The DEFAULT-FILTER class: three times in one session, a tool silently answered a narrower question than the one asked (P30 S1–S3) L8723
- ADDENDUM — to §134 — a typedef defined BELOW the splice point is stripped anyway L25697
- §3-The — scheduling rules (refining §135-2 and §135-4) L8950
- §138 — The propagation lanes: a gate refusal is a DECLARATION, and which lever you owe depends on blast radius L9453
- §139 — A GATE THAT GREPS FOR VERDICTS MUST ASSERT 1:1 ACCOUNTING; and a
--srcfilter must not survive a carve (P30 S38, wave 6: 10 of 16 drafts vanished) L9632 - §140 — A METRIC IS NOT A MEASUREMENT UNTIL IT IS REPRODUCIBLE FROM THE COMMITTED TREE (P30 S1e: a phantom regression that gated the session's best lever) L9698
- §141 — The §134 class is CLOSED: every line-shape decision now routes through
cdecl._mask(P30 S39) L9778 - §142 — An open stub whose
h_exactclass is MATCHED elsewhere is FREE. Propagate the body; do not gate a draft. (P30 S39, +7,710 ins in two commands) L9816 - §143 —
cast_call_sitesread a RETURN STATEMENT as a prototype and deleted it. A 0/39 sweep became 18/39. (P30 S40) L9872 - §144 — THE LITERAL'S SPELLING PICKS THE IMMEDIATE ENCODING (P30 S40 wave 1,
func_801822E0) L9926 - §195-I — §145(b) AMENDED — the pointer-bump
addiuis saved by cse, not combine: ANY second SET of a pseudo in the address's equivalence chain (in-placep += K, §145(b)'sp = r;copy, or an asm re-tie) kills the fold; the pass is cse and the gate isinvalidate'sreg_tick++L20202 - §146 — RE-MEASURE A WALL BEFORE YOU RESPECT IT. Both "permanent" giants fell to drafts already on disk. (P30 S6, +50,094 ins) L10015
- §147 — The three-stratum FRAME LAW, and four "stop searching" verdicts (P30 S42,
func_8017C294, serial run) L10074 - §149 — Four instrument defects in one session, and the two questions they were hiding (P30 S43) L10281
- §151 — THE GHOST WEDGE: when a load-before-store transposition is unreachable by ANY statement order (P30 S43,
func_8017EF68, 969 ins) L10405 - §152 — BYTE SIZE is the family key that name- and h_seq-grouping both miss (P30 S43, the 0xECC family: 1 crack → 12 overlays → 11,364 ins) L10456
- §153 — THE ADDRESS-REMATERIALISATION LAUNDER: a third zero-emission asm lever (P30 S43,
func_8018D98C, 710 ins) L10504 - §154 — Reading a disc payload: the module-id word, static base derivation, and "type 1 = uncompressed overlay" (P30 S44) L10560
- §155 — hi/lo literal scanning MUST track base registers (S45) L10596
- §156 — THE PREFERENCE-DONOR MERGE: cross-region variable reuse is what fills a0-a3, and a call-arg use in ONE region steers the fill in ALL of them (P30 S46 tier-3,
func_80186E24, 611 ins: 236-off "S11 regalloc-order" → MATCH, zero new pins) L10810 - §157 — the cheap-tier size cliff, measured (S45 p6) L10725
- §158 — The RANGE-EXTENDER: a fourth zero-emission asm lever completes the allocno toolkit (P30 S46 tier-3,
func_8017CE58, 733 ins) L10750 - §159 — THE DECLARATION AXIS: conform to byte-truth, and make every guard state its COVERAGE (P30 S47; ~10,930 sites across 8 axes, fleet byte-identical) L10866
- §160 — THE REACH-15 WAVE HARVEST: an align-1 block move, and the instrument that called it a wall (P30 S47) L10931
- §161 — THE RETRY-WAVE HARVEST: a jump table indexed from zero, and two allocator traps (P30 S47) L11007
- §163z — THE UNVETTED REMAINDER (do not cite as law; each needs a dedupe pass) L11866
- §197-B — A REPEATED COMPARE OF ONE VALUE AGAINST ONE CONSTANT IS DELETED BY cse's
qty_comparison_codeCHANNEL (the non-EQ complement of §165-03) — and a front-end-opaque mask on EITHER compare is a pure-C dial that keeps the target's second branch L20670 - §166 — THE DESTINATION-TU ORACLE (P30 S48): the seven-attempt bug that was never codegen L14960
- §168 — THE COUSIN TIER (P30 S49, 2026-08-12): h_seq's exact-hash brittleness, measured — and the similarity map above it L16269
- §169 — THE MICRO-ADAPT LANE (P30 S49): edit a proven body, don't crack a new one L16321
- §170 — THE A-PROP WORD-DIFF CARD (P30 S49): the lane that had no owner L16368
- §171a — THE MECHANICAL A-PROP DRAFT (P30 S50): 256 members banked with no agent in the loop L16478
- ADD-5 — → §267-ADD-6 / §172b-1 addendum — THE SIGN-TEST FACE:
(s16)v < 0ISsll 16+bgezON THE SHIFTED COPY, RAW STAYS LIVE — AND THE HALFWORD-ABS SHAPE NEEDS NO RITUAL L25421 - §173 — THE STORED-PLUMBING RECOVERY RECIPE (P31 T6): symfix-first, per-group isolation, and where the verdicts have no drafts L16674
- ADDENDUM — to §174 Law 4 (func_8017E9A8, ov_SC06_015) L28135
- §175 — A CALLER-SAVED REGISTER PIN CAN BE A CORRECTNESS BUG, NOT JUST A SCHEDULING CHOICE (P31 wave H, 2026-08-15) L16780
- §176-A — "SCHEDULE / DELAY-SLOT / LENGTH-DRIFT ±1" ⇒ check STATEMENT ORDER around the call first L17684
- §178 — SIX LEVERS MINED FROM THE WAVE-P JOURNALS (P31 S52), each byte-proven and source-cited L17284
- §179-A — 🔴 A LOOP-WALKED POINTER PARAMETER HANDS ITS ARGUMENT REGISTER TO THE GIV (9 byte-proofs) L17381
- §180b — WHAT THE PRE-GATE LADDER ACTUALLY FINDS IN A COLD PILE (the shape of integration debt) L17887
- §181 — WHAT A WAVE'S GATE ACTUALLY REJECTS (P31 S53, measured on wave R's 45-draft main pile) L17924
- CORRECTION — to §182/§188 (P31 S76) — THE EPILOGUE "WALL" IS AN ORACLE ARTIFACT IN THE REORDER ISLAND L35192
- §183 — THE DECLARATION-RECONCILIATION PLAYBOOK (P31 S53, measured on 20 byte-verified drafts) L18006
- §184 — COMMENT-BLINDNESS IS A DEFECT CLASS, NOT A BUG (P31 S53: three tools, one root cause, one session) L18077
- §185 — EDIT THE SIDE THAT IS CHEAP TO VERIFY, AND CHECK A TU RETYPE AT ITS USE SITES L18105
- §195-J — GTE / PsyQ op CALL-vs-INLINE is a PER-SITE SOURCE FACT, not a TU style — both forms coexist in one TU (measured in 2 TUs), and the tell is the target's own opcodes (
lwc2/sqr/swc2vsjal), not the sibling. Costs -8 ins on func_8018505C. Corollary: the game's inlinesqrmacro emits TWO hazard nops, the SDK'sSquare0body emits ONE — so the inline form is provably notSquare0inlined (a second instance of §187's SDK-vs-game GTE nop divergence). L20267 - §199-A — §189-A's asm→source inference is byte-FALSE: an interloper between a split constant's
lui/oriis a SCHEDULE fact, not a source fact — and the separator is the BIRTHING BOOST, not a "priority floor" (§189-A's split-timing half survives; its "no statement order / no pin" absolute and the candidate's own forward-scheduler narrative both fall) L20769 - §190 — THREE PRESCRIPTIONS FROM THE SAME HARVEST (weaker evidence than §189, honestly labelled) L18346
- §191 — WHAT THIS HARVEST DID NOT BANK (4 rejected, 4 narrowed) — recorded so it is not re-derived L18383
- §192 — THE PRE-GATE LADDER WAS MAIN-ONLY, AND NOBODY COULD SEE IT (P31 S54) L18405
- §195-D — §195 —
masked_diff.mask_forreturns 0 for EVERYj/jalword, so an internaljdestination is invisible to match_one, the permuter scorer AND every similarity tier: a control-flow semantic error (which calls execute) surfaces as a 1-instruction residual mislabelledDELAY-SLOT / profile=schedule, or as an outright false MATCH L19929 - §196 — PUT ON THE CARD WHAT THE TREE ALREADY KNOWS: the fleet's declaration consensus (P31 S54) L20557
- §199-F — §164-36b — THE TARGET-HEAD FENCE IS A DELAY-SLOT THREAD SELECTOR, AND IT ONLY FIRES WHEN
mostly_true_jump > 0(amendment to §164-36; its "−1 instruction" tell is falsified) L21030 - §200 — THE ALIAS IS THE UNIVERSAL DECLARATION ESCAPE: stop negotiating with the TU's spelling (P31 S55) L21150
- §201-C — §X — A CALL'S OWN DELAY SLOT AND THE UPSTREAM CONDITIONAL BRANCH'S SLOT COMPETE FOR ONE INSN (the call's argument copy), AND ONE STATEMENT'S POSITION RELATIVE TO THE CALL DECIDES BOTH — the residual is visible at the BRANCH, not at the call L21321
- ADDENDUM — to §202 — the DEF-SIDE ALIAS also resolves a function-vs-DATA-symbol identifier clash, not only a function-vs-function prototype clash L27213
- §203 — A DEDUPED TYPEDEF MUST PRECEDE EVERY SPLICE POINT, NOT JUST ITS OWN (P31 S56) L21537
- §204-A — A COMPARE THAT APPEARS BOTH IN A BRANCH'S DELAY SLOT AND AGAIN ON THE FALL-THROUGH IS A JOIN WITH TWO INCOMING EDGES: THE TWO GUARDS ARE SEQUENTIAL
ifs, NEVERif/else ifL21617 - §205 — THE CHAINED ASSIGNMENT IS ITS OWN SCHEDULING DIAL:
*b = *a = v;moves an argument copy that no local, no pin and no statement reorder will move (P31 S56) L22108 - §206 — THE JTBL-CARVE DRAFTING IDIOM: the bounds check is the entry count, and an EMPTY case owns a slot (P31 S56) L22163
- §207 — THE WAVE ab–ag HARVEST (P31 S58): 278 byte-banked notes → 25 laws, 103 self-reported no-gap L22232
- §208 — TWO NAMED LOCALS FOR ONE RELOADED EXPRESSION BUY TWO ALLOCNOS — the naming granularity owns the REGISTER SPLIT, not just the load count (P31 S58) L22253
- §194-B — / §209 addendum (P31 S58b) — TWO MORE INSTANCES, AND THE BOUND IS NOW REFUTED FOUR WAYS L24230
- §210 — THE SINGLE-BIT MASK IN A BOOLEAN TAIL:
andi K ; sltu $zero,vvssrl n ; andi 1is a STATEMENT-SHAPE dial, not an operator choice (P31 S58) L22379 - §211 — HOIST THE LOOP INIT ABOVE THE DOMINATING GUARD: it fills the guard's delay slot AND flips the counter/pointer register pair (P31 S58) L22425
- §212 — THE WALKING CURSOR IS COUNTABLE:
*wp++emits oneaddiuPER STORE,wp[0..2]emits one (P31 S58) L22484 - ADD-9 — → §213-3 / §217 addendum — ADJACENT PRE-CALL FRAME STORES ARE ONE AGGREGATE; THE UNESCAPED SCALAR NEIGHBOR IS DEAD-STORED L25225
- §214 — THE BANKED TWIN MAY BE A MACRO, A DELETED
.s, OR A SEMANTIC INVERSE — six ways a ≥0.9 similarity lies (P31 S58) L22565 - §215 — PIN ECONOMY: the twin's pins are NOT part of the shape, and §17's "pin every call-crossing value" is over-broad (P31 S58) L22611
- §216 — DISTINCT ADJACENT SCALARS vs ONE ARRAY: one
luiper access is the tell, and the array decl is UNUSABLE (P31 S58) L22667 - §218 — A NARROW TYPE AT THE ABI BOUNDARY COSTS AN IN-PLACE
sll/sraPAIR — on the RETURN as well as on the PARAMETER (P31 S58) L22733 - §219 — COMPOUND
+=, FULL ASSIGNMENT, AND AN EXPLICIT TEMP ARE THREE DIFFERENT SCHEDULES OF ONE READ-MODIFY-WRITE (P31 S58) L22762 - ADDENDUM — to §220 — REFERENCING THE RAW PARAMETER (NO NAMED COPY, NOT EVEN A PIN) LETS THE CALLEE-SAVED SPILL LAND IN THE FIRST CALL'S OWN DELAY SLOT L27490
- §222 — SWITCH vs IF-CHAIN, PART 3: source arm order IS emission order, a leading EMPTY case buys the median split, and a 2-way dispatch with a shared post-block is a
switch(P31 S58) L22845 - §223 — READING A
jalDELAY SLOT: the value in it was produced BEFORE the call, so it is NEVER that call's return (P31 S58) L22887 - §224 — CROSS-JUMP: WRITE THE DUPLICATE, AND READ A SHARED DELAY SLOT AS THE MERGE SIGNATURE (P31 S58) L22949
- ADD-4 — → §225-3/-4 addendum — THE MIRROR ROW: VALUE-RETURN IN THE TAKEN ARM + TRAILING BARE
return 0L25169 - §226 — addendum (P31 S58b) — THE FRAME CATALOGUE: SEVEN MORE LEVERS, AND SLOT ORDER IS DECLARATION ORDER L24627
- §227 — TYPE THE SOURCE BY THE LOAD WIDTH, NOT BY THE STORE WIDTH (P31 S58) L23069
- §228 — READING THE DIVIDE, PART N: the off-by-one compare is
% K == 1, and three more discriminators (P31 S58) L23089 - ADD-7 — → §229 addendum — THE VALUE FACE: A LOOP-STORE CONSTANT SPELLED AS A LITERAL HAS NO SOURCE POSITION; NAME IT TO PIN THE PROLOGUE INIT ORDER L25453
- §230 — THE ANCHOR PROBE: with
%hi/%lomasked, the survivingaddiudeltas tell you which assignment was written first (single observation — not yet cross-confirmed) (P31 S58) L23175 - §231 — TRANSCRIPTION AND SEMANTIC-READ HYGIENE: six ways the listing misleads (P31 S58) L23190
- §233 — THE WAVE aa–bg HARVEST (P31 S58b): 1,101 byte-banked notes → 24 new laws, 21 addenda, ~700 already-covered L23323
- §234 — CONSTANT MATERIALISATION: THE STORE LVALUE'S SIGNEDNESS PICKS
addiuvsli/ori(P31 S58b) L23367 - §235 — THE PHANTOM SYMBOL: A MASKED
MATCHCAN CARRY A RELOCATION THAT DOES NOT EXIST (P31 S58b) L23408 - ADD-2 — → §236 addendum (item 1 corollary) — THE SILENT-SPLICE DECLARATION LADDER: WHERE THE TU HAS NO SPELLING, UNPROTOTYPED
()BEATS THE FLEET VOTE L25377 - §237 — THE CAST-AT-CALL-SITE DECISION TABLE: WHAT §17a-1 FIXES, WHAT IT CANNOT, AND THE FOUR ESCAPES (P31 S58b) L23516
- §238 — SAME NAME, DIFFERENT FUNCTION: THE OVERLAY-HOMONYM TRAP (P31 S58b) L23571
- §239 — TWO-STATEMENT INTEGER-SPACE MATERIALISATION REORDERS
lavssll; AND THE PLUS-TREE OPERAND ORDER (P31 S58b) L23611 - §240 —
A + K + B: WRITE THE CONSTANT BETWEEN THE TWO RUNTIME TERMS (P31 S58b) L23645 - §241 — THE FOLDED SIGN-EXTEND-AND-SCALE:
sll 16 ; sra (16 − log2 scale)(P31 S58b) L23674 - §242 —
*kvs<<n, AND/2^nvs>>n: EXPRESSION SPELLING OWNS THE LOAD WIDTH AND THE ROUNDING CHAIN (P31 S58b) L23703 - ADDENDUM — to §244 — THE COMPILER BARRIER, NOT
volatile, BLOCKS A STORE→LOAD HOIST THROUGH A POINTER-OFFSET FIELD L26079 - §245 — THE CALL'S ARGUMENT LIST IS A SCHEDULING SLOT (P31 S58b) L23796
- §246 — THREE-LIVE-VALUE SCAN LOOPS WANT ADDRESS-FROM-INDEX; AND TWO SYMBOLS CAN SHARE ONE giv (P31 S58b) L23843
- §247 — TWO BRANCHES TO ONE LABEL MEANS THE SOURCE CONDITION IS NEGATED (P31 S58b) L23883
- §248 — SPLIT THE LOAD FROM THE ARITHMETIC: A FUSED
g + KDENIES THE CALLEE-SAVED REGISTER ITS DIRECT HOME (P31 S58b) L23917 - §249 — THE SELF-ASSIGN, THE DEAD RE-ASSIGN, AND THE
+ zrCOPY: THREE WAYS TO MAKE A DELETED INSTRUCTION REAL (P31 S58b) L23941 - §250 —
%hi/%lovslw: THE EXTERN'S ARRAY-vs-SCALAR SHAPE DECIDES ADDRESS MATERIALISATION (P31 S58b) L23983 - §251 — IMMEDIATE-SPELLING TRIGGERS:
+= 0xFF, FULL-WIDTH~K, AND THE TWO-OR SPLIT (P31 S58b) L24020 - ADDENDUM — to §252 — a
>=0/<0split on an unconditionally-decremented value needs the POSTFIX operator INSIDE the branch condition, not a prior statement L27548 - ADDENDUM — to §253 — SECOND byte-proven card (upgrade from single-observation), and the placement face: postfix-in-condition parks the RMW store in the branch delay slot L29346
- §254 — THE DEAD PARAMETER IS A REGISTER-PLACEMENT TOOL (single observation — not yet cross-confirmed) (P31 S58b) L24077
- ADD-9 — → §255 "AND CASE-BODY PLACEMENT" bound / §222-addendum-3 — ON A LARGE SPARSE TREE, BODIES FOLLOW SOURCE ORDER (measured by a one-word probe) L25481
- §268 — A
register __asm__PIN ON A CALL-CLOBBERED REGISTER IS HONORED EXACTLY WHEN THE PINNED RANGE CROSSES NO CALL (P31 S59c; three A/B'd cards, unifying §257-2's two) L25295 - §258 — ADDENDA TO EXISTING SECTIONS (P31 S58b) L24204
- ADD-11 — → Cross-confirmation card block (per §259's standing instruction: confirmation, not news) L25244
- §260-A — STAGE 2 IS PROVEN, AND THE WHOLE jtbl PIPELINE IS AUTOMATED AT THE GATE (P31 S59, same day) L24823
- §261 — THE -O0 ORACLE: DERIVE THE OPT LEVEL FROM THE TARGET, AND
$fpIS NOT THE TELL (P31 S59) L24859 - §262 — A LANE'S YIELD IS ONLY A LANE FACT IF IT IS SIZE-MATCHED (P31 S59) L24907
- §264 — FOUR TELLS-LANE C RECIPES, EACH DRIVEN TO MATCH (P31 S59) L24978
- §295 — THE KERNEL-TRAP STUB: §81's jr-DETECTOR WITHOUT A TABLE IS A PsyQ SYSCALL TRAMPOLINE — ROUTE TO §265, NEVER INTO THE CARVE CHAIN (P31 S61; wave m0a, 9 cards byte-proven; resolves §182's held cluster) L29411
- §3-1a. — The §266 sweep — every solo-lever A/B run for this batch L25536
- §269 — ADDENDA HARVESTED FROM WAVES ax/bm (P31 S59c) L25349
- §270 — The A-prop 0-bank anatomy: a byte-correct body still needs FOUR layers to agree (P31 S59) L25569
- §271 — Ordinal IMM pairing: text order is NOT emission order; emit CANDIDATES, let the oracle pick (P31 S59) L25587
- §272 — The
(void)-decl + empty-call wall: K&R the DEFINITION, not just the decls (P31 S59) L25609 - §273 — A standalone compile is the WRONG oracle for a TU-destined draft (P31 S59) L25629
- §274 — ADDENDA HARVESTED FROM 18 WAVES (P31 S60): 315 candidates, 255 already covered, 21 sharpenings, 3 new laws L25644
- §275 — THE LEFTOVER-REGISTER READ L26422
- §276 — MIXED ADDRESS-EXPRESSION SPELLING FOR ADJACENT RELOCATABLE SYMBOLS IS A CSE-UNIFICATION DIAL, NOT JUST A BYTE-ENCODING CHOICE (P31 S60;
func_80180FE8, ov_SC06_006, byte-proven) L26462 - §278 — ADDENDA HARVESTED FROM WAVE cf (P31 S60): 34 candidates, 13 already covered, 8 sharpenings, 4 new laws L26635
- §279 — A
do/while (p < end)LOOP UNDER AN ENTRY GUARD: the guard decides the compare, not the loop (P31 S60; wave cf, func_8017F2A4, ov_SC03_096, byte-proven) L26932 - §280 — THE CURSOR'S DECLARED TYPE PICKS
sltuvsslt: aT*bound test is UNSIGNED by C rule, an integer cursor is signed (P31 S60; wave cf, func_800CAE74, md_MAIN_031, byte-proven) L26966 - §281 — GROUP COPY-THEN-RMW BY OPERATION KIND, NOT FIELD BY FIELD: sched1 does the interleaving, the source must not (P31 S60; wave cf, func_80180FB4, ov_SC03_111, byte-proven) L27000
- §282 — gcc's OWN LOOP REVERSAL PUTS THE COUNTER INIT AFTER THE HOISTED MOVABLES — a position no hand-written down-count can reach (P31 S60; wave cf, func_80180DD8, ov_SC04_005, byte-proven) L27046
- §283 — ADDENDA HARVESTED FROM THE 36-WAVE BATCH (P31 S60): 1,216 candidates, 859 already covered, 46 sharpenings, 9 new laws L27131
- §284 — COMBINE CAN REASSOCIATE TWO SEQUENTIAL BITWISE-AND MASKS INTO ONE AGAINST THE PRE-MASK VALUE; AN ASM IN/OUT FENCE RIGHT AFTER THE FIRST MASK BLOCKS IT (P31, wave dd,
func_8018087C, ov_SC04_020, byte-proven) (P31 S60; waves #, byte-proven) L29084 - §286 — FOLD A STATEMENT'S SIDE EFFECT INTO A COMMA-EXPRESSION IN AN ARGUMENT POSITION TO PLACE ITS RTL RELATIVE TO A CALL'S OWN DELAY SLOT (P31 S60/dj;
func_80180A88, ov_SC06_010, byte-proven 411/411) (P31 S60; waves #, byte-proven) L29092 - §287 — A STACK-FRAME HOLE BELOW TWO ADDRESS-TAKEN AGGREGATE LOCALS IS A LEADING PAD MEMBER OF ONE COMBINED STRUCT, NOT SEPARATE LOCALS OR A REGISTER PIN (P31 S60/dj;
func_8017D104, ov_SC06_027, byte-proven 47/47) (P31 S60; waves #, byte-proven) L29096 - §288 — A REGISTER PIN DECLARED UNINITIALIZED AND ASSIGNED ONLY AT ITS LATE, SOLE USE STILL FORCES THE FIXED REGISTER'S SAVE/RESTORE, AND THE ASSIGNMENT'S SOURCE POSITION CONTROLS WHERE THE VALUE MATERIALIZES (P31;
func_80186530, ov_SC02_017, byte-proven, match_one MATCH re-verified) (P31 S60; waves #, byte-proven) L29100 - §289 — an array local's address-taken base keeps every element's store alive, even though only one pointer escapes (
func_80189EFC, ov_SC04_011) (P31 S60; waves #, byte-proven) L29104 - §290 — A SINGLE STRENGTH-REDUCED GIV CAN DRIVE STORES TO SEVERAL DISTINCT RELOCATABLE SYMBOLS, EACH KEEPING ITS OWN
%hi/%loANCHOR (P31 S60; waves #, byte-proven) L29108 - §292 — DECLARING A SYMBOL UPSTREAM OF AN ALREADY-BANKED SIBLING THAT RELIES ON THAT SYMBOL'S IMPLICIT (K&R) DECLARATION CAN SILENTLY REPROTOTYPE THE SIBLING'S OWN CALL SITE (P31 S60; waves #, byte-proven) L29116
- §293 — THE "WHOLE-OBJECT GATE NEEDS EVERY SIBLING" LAW, WRITTEN PROPERLY: IT IS THREE LAWS, AND THE LOAD-BEARING ONE IS "THE BASELINE, NOT THE SIBLINGS" (P31 S61; byte-proven on 15 binaries in one night) L29119
- §294 — ADDENDA HARVESTED FROM THE S61 GEN0/MAXTOK/MAIN/DEEPSEEK BATCH (waves ab8/ab16/ab24/ab32 · g0a–g0f · m0a · ds1/ds2): 99 candidates, 52 covered, 15 notes → 10 addenda, 29 notes → 5 new laws (§295–§299), 3 refuted L29169
- §296 — THE FRAME CHECK OUTRANKS THE ATLAS LEVER: READ PROLOGUE/EPILOGUE BEFORE DRAFTING ANY C — A REAL TELL CAN LIVE INSIDE AN UNREACHABLE FRAGMENT (P31 S61; wave m0a, 16 cards byte-proven; extends §179-C) L29466
- §297 — ONE GIV SERVING MIXED-WIDTH LOADS AND A STORE NEEDS STRUCT-MEMBER SPELLING; CAST/INDEX SPELLINGS RE-SPLIT THE PSEUDO (P31 S61; wave m0a,
func_800347C8, main, byte-proven 31/31) L29509 - §298 — THE SHARED-TAIL POSITION DIAGNOSTIC: A FOLDED TAIL BETWEEN SWITCH ARMS MEANS PER-ARM DUPLICATED STATEMENTS, NOT A HOISTED POST-SWITCH STATEMENT (P31 S61; waves g0e/g0f,
func_80181B68, ov_SC06_016, byte-proven 68/68) L29552 - §299 — TWO INDEPENDENT EXTRACTION CHAINS EMIT CONTIGUOUSLY INSIDE ONE EXPRESSION; ONLY A STATEMENT BOUNDARY MAKES THE SCHEDULER INTERLEAVE THEM (P31 S61; wave m0a,
func_8003A404, main, byte-proven 8/8) L29577 - §300 — S61 DISTILL BATCH NOTES (waves ab8/ab16/ab24/ab32 · g0a–g0f · m0a · ds1/ds2 · m0b) L29612
- §301 — AN INTERNAL
jCARRIESR_MIPS_26 .text: rtu/match_one "MATCH" COULD NOT SEE WHICH LABEL AjTAKES — FIXED (jrel), AND THE TWO DRAFT SHAPES IT HID (P31 S62 T1; byte-proven 2/2, negative-controlled over 3,297 stubs) L29681 - §302 — A RED BINARY IS A DRIFTED SPEC, NOT A MYSTERY: THE THREE CARVE-STATE INVARIANTS AND HOW TO DERIVE EACH FROM THE BYTES (P31 S62 T2; five reds healed in one session, 5/5, +39 held banks) L29729
- §303 — MODULE ISLAND TABLES: DERIVE THE PADS AT BUILD TIME, PEEL NOTHING — THE §154-A/§260 "island-pads"/"island-blocked" WALLS DISSOLVE (P31 S62 T3a; byte-proven md_SC03_076 func_801F0A9C + func_801F0F28, sha 9a165e36…) L29773
- §304 — SELF-DEFINING RODATA: WHEN A FUNCTION'S
.sIS THE ONLY OWNER OF THE DATA IT REFERENCES, THE C BODY MUST DEFINE IT (P31 S62 T3; byte-proven md_MAIN_011/func_800D04F4) L29809 - §305 — "CARVE-REFUSED" AT GATE TIME IS THREE NAMED, DETERMINISTIC CLASSES — NONE OF THEM A CARVE (P31 S62 T3; 28 resolver drafts autopsied 28/28) L29832
- §307 — THE BRUTE-FORCE-THE-STATEMENT-ORDERS LEVER HAS A BOUND: A FAN-OUT COPY'S PRIORITY IS SCHEDULER-INTERNAL, AND NO SOURCE ORDER REACHES IT (P31 S63; byte-evidenced NEGATIVE result, main wave) L29949
- §308 — A NAIVE FINAL
gotoDELETES THE TARGET'Sj+nop: SPELL THAT EDGE AS A TAUTOLOGICALifSO cse FOLDS IT TO AN UNCONDITIONAL JUMP AFTER jump1's WINDOW HAS CLOSED (P31 S63 t5e-t5i; byte-proven func_80180808) L29993 - §309 — A FRAME-ADDRESS EQUIVALENCE RIDES THROUGH A SKIPPABLE CONDITIONAL: POST-
ifSTORES FOLD ONTO$spUNLESS THEifSURVIVES jump1 AS A BARRIER-PRECEDED DIAMOND (P31 S63 t5e-t5i; byte-proven func_801812AC) L30056 - §310 — A TWO-OPERAND
subu's DESTINATION TIES ONLY TO THE OPERAND THAT IS BLOCK-LOCAL: SHARE ONE SIDE ACROSS BLOCKS TO CHOOSE WHICH OPERAND'S REGISTER IT LANDS IN (P31 S64 t5j-t5m; byte-proven func_8017F578) L30096 - §312 — A BARE RELATIONAL IN AN
ifGIVES THEsltNO TARGET: ASSIGN THE COMPARISON INTO THE ALREADY-ALLOCATED VARIABLE TO CHOOSE ITS DESTINATION REGISTER, AT ZERO INSTRUCTION COST (P31 S64 t5o-t5r; byte-proven func_80180DCC) L30169 - §313 — A RECOVERY STAGE THAT REWRITES THE DRAFT IS PART OF THE MEASUREMENT: GATE THE RAW DRAFT FIRST, THE REWRITE ONLY AS A FALLBACK (P31 S65 t5r-recovery; byte-proven func_8017BEBC, 246 ins) L30195
- §314 — AN IF/ELSE-IF ABS-RANGE CHECK'S C SPELLING IS INERT: FOUR STRUCTURALLY DIFFERENT REWRITES ALL COMPILE BYTE-IDENTICAL, AND NONE REACHES A TARGET THAT SINKS THE NEGATIVE ARM INTO AN OUT-OF-LINE BLOCK (P31 S65; UNPROVEN, gate-refused draft func_80181720) L30251
- §315 — ALL-CONSTANT AGGREGATE FILL: THE EMISSION ORDER IS SHARED-LITERAL GROUPS × DESCENDING INDEX, WITH PAIRED SUB-FIELDS INTERLEAVED (P31 S66; ⚠ UNPROVEN —
func_80185214, gate-REFUSED draft, closeness 32→5, never MATCHed) L30283 - §316 — A GUARD CHAIN THAT GATES A SUCCESS BLOCK ROUTES ITS FAILING GUARDS TO A LABEL BEFORE THE FLAG TEST, NOT TO THE EPILOGUE: THE RESIDUAL IS IMM-OFFSET-ONLY AT AN EXACTLY EQUAL INSTRUCTION COUNT (P31 S66; byte-proven func_80180284) L30320
- §317 — A NARROW STRUCT-FIELD STORE TURNS A LIVE SImode VARIABLE INTO A
li: convert.c's TRUNCATION-DISTRIBUTION MINTS A HImode COPY, AND cse REWRITES THAT COPY'S SOURCE TO THE EQUIVALENT CONSTANT (P31 S66; byte-proven func_8017EF94) L30354 - §318 — A UNARY MINUS STORED BACK INTO THE SAME HALFWORD IS COMPUTED IN HImode, SO ITS LOAD IS
lhu; AN INLINE(s32)CAST IS PROVABLY INERT AND ONLY A NAMED SImode LOCAL BUYSlh(P31 S66;func_8018568C, ov_SC03_028 —match_one-only, NOT byte-gated) L30388 - §319 — N TEXTUALLY DUPLICATED
return v;TAILS PUT THE LASTorAND THE RETURN-REGISTER MOVE IN ONE BASIC BLOCK, SO combine FOLDS THEM AND YOU ARE EXACTLY −1; Agoto done;JOIN WITH REAL INCOMING EDGES RESTORES THE SEPARATEaddu $v0,$a0,$zero(P31 S66 round4; byte-proven func_801809F0) L30681 - §320 — THE §43 "RETURN-TYPE FLIP PAIR" IS NOT TU-EDIT-REQUIRED: THREE DRAFT-ONLY ESCAPES (P31 S66; byte-proven func_800CCBC0, func_800D30D0, func_800D2A24) L30796
- §321 — FILE-SCOPE DUPLICATE ANONYMOUS-STRUCT TYPEDEFS ARE A HARD ERROR; THE SAME TEXT AT BLOCK SCOPE IS A WARNING (P31 S66; byte-proven func_80180728, func_8017F9F8, func_8017E07C) L30855
- §322 — A PROBE THAT ANSWERS A NECESSARY BUT NOT SUFFICIENT QUESTION WILL PRICE BLOCKED WORK AS FREE: RUN THE REAL PLANNER WHEN THE PLANNER IS PURE (P31 S67; measured, 96 of 159 open jtbl functions) L30876
- §323 — CARRYING FILE-SCOPE TYPES BETWEEN SPLIT TUs: DEDUPE BY NAME, SKIP HEADER-PROVIDED, AND THE GUARD TRAVELS WITH THE BLOCK (P31 S67; ov_SC02_000, two defects fixed, one open) L30906
- §324 — THE ARITY-SELF WALL NEEDS BOTH HALVES: A K&R DEFINITION AND A NO-PROTO TU DECL; EITHER ALONE STILL FAILS (P31 S67; rtu-proven ov_SC01_005/func_8017FBCC, 14 instances measured) L30959
- §325 — REGALLOC: A SHARED SMALL CONSTANT STORED TWICE IN THE PRE-LOOP BLOCK IS A local-alloc $s-OCCUPANT THAT STEALS THE ARGUMENT ALLOCNO'S REGISTER — PIN THE ARGUMENT-DERIVED LOCAL, NOT THE CONSTANT (P31 S67; byte-proven ov_SC03_119/func_80184F18, 153 ins) L30997
- §326 — DEFEATING ADDRESS-CSE: SPELL TWO READS OF THE SAME HALFWORD DIFFERENTLY AND GCC CANNOT SHARE THE ADDRESS (P31 S67; byte-proven ov_SC01_077/func_8017FAAC, 154 ins) L31010
- §327 — A RANGE TEST MUST BE HImode: WITH
s32+ A(u16)CAST GCC PROVES THE MASK REDUNDANT AND DROPS THEandi(P31 S67; byte-proven ov_SC02_039/func_8017EC34, 154 ins) L31019 - §328 — THE VOLATILE ALIAS MUST BE AN OBJECT, NOT A CAST:
*(volatile s32*)&symUNFOLDS %lo INTO A SEPARATEaddiu(P31 S67; byte-proven ov_SC07_007/func_80181B8C, 156 ins, NEW LAW) L31034 - §329 — fold-const NARROWS
(int)s16_var & 0xFFFONTO THE RAW HImode PSEUDO, BREAKING THE SIGN-EXTEND/MASK REGISTER TIE — A ZERO-BYTE WIDENING TEMP RESTORES IT (P31 S67; byte-proven ov_SC01_084/func_80183244, 157 ins) L31044 - §330 — THE NEIGHBOUR-SHAPE LEVER IS THE CHEAPEST FIRST MOVE, AND IT IS UNDER-USED (P31 S67; four independent instances in one 20-function wave) L31052
- §332 — THE maspsx
la-IN-A-DELAY-SLOT GAP: gcc EMITS A SYMBOLIC ADDRESS LOAD AS ONE ATOMIC length-2 INSN, SO IT CAN NEVER FILL A JUMP DELAY SLOT — 6 FUNCTIONS FLEET-WIDE, NONE BANKABLE FROM C (P31 S67; byte-traced main/func_80062144, func_8005DBD8) L31081 - §333 — FRAME SIZE IS SET BY DECLARED AGGREGATES, NOT USED ONES: AN UNREFERENCED TRAILING LOCAL IS A REAL DIAL (P31 S67; three independent byte-proven instances in one wave) L31125
- §334 — A RELOAD SPILL SLOT IS ROUNDED TO
BIGGEST_ALIGNMENT(8B), SO ONE SPILLED 4-BYTE PSEUDO CAN GROW THE FRAME BY 16 (P31 S67; byte-proven ov_SC05_008/func_8017DF68, 82 -> 53 residual) L31139 - §335 — AN
extern u16 A[]READ AT A VARIABLE SUBSCRIPT ALLOCATES DEAD STACK TEMPS (~8B PER ACCESS) THAT INFLATE THE FRAME WHILE EMITTING ZERO EXTRA INSTRUCTIONS (P31 S67; byte-proven ov_SC06_025/func_8017EA74, closeness 141 -> 20) L31150 - §336 — THE §5a CROSS-JUMP BARRIER GOES AT THE BOTTOM OF THE TWIN, NOT THE TOP:
find_cross_jumpWALKS BACKWARD FROM THE CONVERGING JUMP (P31 S67; byte-proven ov_SC05_001/func_80183C9C) L31159 - §337 — THE CC1-ONLY BLOCKER CLASS:
blocker_probe's STATIC ORACLE REPORTS "none" AND THE WHOLE-TU COMPILE STILL FAILS (P31 S67; ov_SC04_011/func_801827DC, md_MAIN_027/func_800CB4A4) L31167 - §338 —
jtbl_carve._sltiu_boundsMISREADS A NON-SWITCHsltiuAS A BOUNDS CHECK, OVER-SPANNING THE TABLE (P31 S67; ov_SC06_022/func_80185B80, byte-diagnosed) L31181 - §339 — A 2-CASE SWITCH OMITS THE LOW-BOUND RANGE TEST, SO THE PRESENCE OF
slti/bnezBETWEEN THEbeqs IS A COUNT TELL FOR A THIRD CASE NODE (P31 S67; byte-proven ov_SC02_005/func_80190538, 197 ins) L31191 - §340 — §194-K COROLLARY: FLIP THE FALSE EDGE YOU CANNOT DELETE. A "scheduler" residual can be sched.c's ALIAS ORACLE emitting a FALSE true-dependence; source order chooses its DIRECTION (P31 S67; byte-proven ov_SC03_107/func_8017CF48, 10 -> 0 in one compile, zero bytes) L31219
- §341 — AN HImode STORE TEMP REWEIGHTS A sched2 TIE-BREAK THAT NO STATEMENT ORDER CAN REACH (P31 S67; byte-proven ov_SC03_006/func_801823B8, last 4 ins) L31253
- §342 — A
void *PARAMETER CAST TO ITS REAL TYPE IN A LOCAL IS NOT BYTE-NEUTRAL WHEN A LATER PARAMETER ALSO NEEDS A CALLEE-SAVED REGISTER (P31 S67; byte-proven ov_SC07_002/func_80181394, NEW LAW) L31267 - §343 —
decl_prior's FLEET MAJORITY CAN BE WRONG ABOUT THE TRUE SIGNATURE — READ THE RIVALS, NOT JUST THE WINNER (P31 S67; measured on func_8012BD14 / func_8012D624 / func_80143C74) L31284 - §344 — RAISE A BIV'S global_alloc PRIORITY WITH A ZERO-BYTE REFERENCE INSTEAD OF PINNING IT; PINNING THE COUNTER KILLS LSR ENTIRELY (P31 S67; byte-proven ov_SC03_121/func_80180E64, 222 ins) L31306
- §345 — A VOLATILE STORE EVICTS THE MEM FROM cse AND KEEPS
sh; A VOLATILE LOAD BLOCKS combine AND DEGRADESlhINTOlhu+sll+sra(P31 S67; byte-proven ov_SC01_084/func_80181A7C) L31322 - §346 —
c ? X : -XTAKES expand_expr's COND_EXPR SINGLETON PATH (copy, then negate IN PLACE) — AN if/else STATEMENT GIVES THE TWO-ARM FORM (P31 S67; byte-proven ov_SC03_102/func_80180C38, closed the last instruction) L31332 - §347 — LOOP REGISTER ASSIGNMENT IS A DECLARATION-ORDER + LIVE-RANGE DIAL: FIVE COMPOSABLE LEVERS, 178 -> 0 (P31 S67; byte-proven ov_SC06_029/func_8017EF34, 243 ins) L31352
- §348 — THE BASE SPELLING PICKS THE ADDRESSING MODE: A SYMBOL GIVES THE 3-INSN
lui/%loFORM, A POINTER VARIABLE GIVES THE 2-INSNaddu/lwFORM (P31 S67; byte-proven ov_SC07_007/func_80182184, 264 -> 30 on this row alone) L31407 - §349 — RE-ASSIGN A BASE POINTER AT THE END OF THE LOOP BODY TO MAKE
n_times_set > 1— THAT KILLS BOTH loop.c's INVARIANT HOIST AND THE ADDRESS GIV, REPRODUCING A REMATERIALISEDaddiu $aN,$sp,K(P31 S67; byte-proven ov_SC06_029/func_801804C8, 255 ins) L31424 - §350 — A ZERO-BYTE RE-TIE SETS
reg_n_sets=2, WHICH KILLS sched1'sbirthing_insn_pLAUNCH_PRIORITY BOOST — THE MECHANISM BEHIND "MY ADDS ARE GLUED TO THEIR STORES" (P31 S67; byte-proven ov_SC04_011/func_80180B24, 215 ins) L31445 - §351 —
/s(MEM_IN_STRUCT_P) IS A DIAL YOU CHOOSE PER ACCESS: A COMPONENT_REF GRANTS IT AND LETS cse KEEP AN INDEX ACROSS THE STORE; A PLAIN CAST DENIES IT (P31 S67; ov_SC01_000/func_8017DD04, 186 -> 5) L31466 - §352 — ⚠ TWO IDENTICAL
__asm__ __volatile__("")BARRIERS MERGE WITH EACH OTHER — SPELL THE SECOND ONE DIFFERENTLY (P31 S67; byte-proven resident/func_800D128C, measured closeness 105 when they merged) L31496 - §353 — USE
-fno-thread-jumpsAS AN ORACLE TO PROVE A RESIDUAL IS thread_jumps, THEN LAUNDER THE VALUE TO KEEP A DEAD RE-TEST (P31 S67; byte-proven ov_SC01_008/func_8017EC68, 279 ins) L31529 - §354 — THE giv WORTH-WHILE TEST IS A DIAL: RE-ASSOCIATE THE ADDEND INTO THE INDEX TERM AND
strength_reduceDECLINES (P31 S68; byte-proven ov_SC03_105/func_801824CC, 320 ins, 201 → 5 → 0) L31552 - §355 — A REMAPPED SIBLING'S SOURCE BIAS IS NOT ITS EMITTED BIAS — DO NOT HAND-SHIFT OFFSETS TO MATCH THE ASM (P31 S68; byte-proven ov_SC07_007/func_8013DD68, 187/187 in 2 iterations) L31570
- §356 — MEASURE A DRAFT IN THE TU IT WILL LIVE IN, NOT IN THE STANDALONE PROBE (P31 S68; measured over 47 stored drafts) L31584
- §357 — ONE STRUCT POINTER, NOT TWO: A SECOND SOURCE VARIABLE BUILDS A THIRD IV (P31 S68; byte-proven ov_SC06_029/func_80181DF8, 335 ins, 330 → 13) L31599
- §358 — (sharpens §333) — AN UNREFERENCED FIXED-SIZE AGGREGATE LOCAL IS LOAD-BEARING (P31 S68; same function) L31608
- §359 — (§43-adjacent) — SPELL A SIGN-WIDEN AS AN EXPLICIT TWO-STEP, FUNCTION-SCOPED TEMP (P31 S68; byte-proven main/func_80012B58, 69 ins, 58 → 3 → 0) L31618
- §360 — THE "COMPILER FOUND A SHORTER EQUIVALENT THAN THE TARGET" PAIR (P31 S68; main/func_800241C0, 68 ins, 68 → 19) L31631
- §362 — TWO TRAPS WHEN A CARVE MOVES A STUB INTO THE
-O0TU (P31 S68; byte-proven, 6 fns / 2,547 ins across ov_MAIN_012 / ov_SC02_037 / ov_SC03_107) L31692 - §363 — ★★ — THE OVERLAY-LAYOUT ASSUMPTION IS A SYSTEMIC BUG CLASS, AND
mainIS THE EXCEPTION THAT FINDS IT (P31 S68; six instances, four of them in one session) L31715 - §364 — ★ — THE libgpu
P_TAGBITFIELD SPELLING IS OPT-LEVEL DEPENDENT (P31 S68; two functions, opposite verdicts, same session) L31744 - §365 — PIN BOTH MASKS OR NEITHER (P31 S68; ov_SC01_000/func_8017E594, 357 ins) L31758
- §366 — ★★ —
group_case_nodesMERGES STACKED CONSECUTIVE CASE LABELS: GIVE EVERY CASE ITS OWN BODY (P31 S68; ov_SC01_001/func_8017EC28, first-try MATCH 360/360, 96/96 relocs audited) L31767 - §367 — RECONCILING A DECL CONFLICT BETWEEN TWO DRAFTS FOR THE SAME TU (P31 S68; main) L31787
- §368 — ★★★ — THE RELOAD-REMAT CONSTANT: REACH A REGISTER NO PIN CAN REACH (P31 S68; ov_SC03_105/func_80187A30, 339 ins, fable escalation closed 8 → 0 in ONE edit) L31802
- §369 — REUSE THE COMPARE CONSTANT'S OWN VARIABLE FOR A MASK THAT KEEPS COALESCING (P31 S68; md_SC07_004/func_801AEC38, 365 ins) L31832
- §370 — ★★ — A HARD BOUND FROM sched.c, AND THE reorg SLOT-STEAL DIAGNOSTIC (P31 S68; main/func_8001BC6C, 69 ins, NOT closed — 33 → 28 over ~45 measured compiles) L31848
- §371 — ★★ — CARVING A SINGLE-OBJECT MODULE BINARY, AND THE spimdisasm RODATA-MIGRATION TRAP THAT FOLLOWS (P31 S68; byte-proven md_MAIN_003, func_800D0D6C 345 ins) L31900
- §372 — ★★★ — THE COPY-CAPTURE PAIR, AND THE ONE ZERO-BYTE EDIT THAT DEFEATS BOTH (P31 S68; byte-proven main/func_8003491C, 78 ins, fable escalation closed 5 → 0) L31949
- §373 — ★★★ — THE DEAD-RESET CSE-BREAKER, THE PIN THAT BREAKS A sched2 ANTI-DEP, AND WHY AN
asmCAN NEVER RAISE PRIORITY (P31 S68; byte-proven ov_SC06_010/func_8017E764, 438 ins, fable escalation closed 8 → 0) L31987 - §374 — A
register … __asm__("$30")RESERVATION IS NOT HONOURED BYmove_movables(P31 S68; main/func_80015608, 86 ins) L32036 - §375 — AN
$a0-$a3PIN USED LATE RELOCATES AN EARLIER OUTGOING-CALL USE OF THAT REGISTER (P31 S68; main/func_8005F0C8, 88 ins) L32052 - §376 — ★★★ — A STANDALONE
match_oneCLOSENESS OF 0 IS A CLAIM ABOUT THE BODY, NEVER ABOUT THE TU (P31 S69; measured 0/28) L32065 - §377 — THREE HARNESS DEFECTS FOUND IN ONE GATING SESSION, ALL "A CONFIDENT NUMBER ABOUT A SMALLER WORLD" (P31 S69) L32107
- §378 — ★★★ — THE SELF-CALLER CAST: LET A TU KEEP CALLING THE FUNCTION IT IS ABOUT TO DEFINE (P31 S69; byte-proven ov_SC04_010/func_8017D6CC) L32124
- §379 — ★★★ — MEM_IN_STRUCT_P: THE SAME LOAD, WRITTEN AS A STRUCT MEMBER, SCHEDULES WHERE A CAST CANNOT (P31 S69; byte-proven main/func_80021284 220 ins and main/func_8002D904 217 ins, found INDEPENDENTLY by two agents) L32174
- §380 — ★★★ — A SECOND SET OF A PSEUDO DISQUALIFIES IT FROM
move_movables(P31 S69; main/func_800215F4, 465 ins, closeness 106 → 59 → 39) L32205 - §381 — THE
insn_countHOIST THRESHOLD IS A DIAL YOU CAN READ WITHcc1 -dL(P31 S69; four independent uses in one wave) L32226 - §382 — TWO FOLD REASSOCIATIONS THAT NEED THEIR OWN STATEMENT (P31 S69) L32242
- §383 — TWO TOOLCHAIN FACTS THE PACKS DID NOT CARRY (P31 S69) L32254
- §384 — ★★★ — A CARVE-CONFIG BANK IS RED UNTIL YOU RE-EXTRACT, AND THAT LOOKS EXACTLY LIKE A FALSE BANK (P31 S69; measured twice, cost one destroyed match) L32269
- §385 — ★★★ — THE SCHED2 PRIORITY-DONOR ASM: closing the "hoisted-invariant vs IV-init preheader swap" class (P31 S69; byte-proven main/func_80038A58, 347 ins, fable escalation 2 → 0) L32319
- §386 — ★★★ — A BYTE LOAD ON THE BIV BASE WAS BORN IN THE COMBINE PASS: SPELL IT AS A SHIFT-MASK, NEVER A DEREF (P31 S69; byte-proven main/func_80020598, 292 ins, escalation 1 → 0) L32345
- §387 — ★★ — SPLIT-FOLD DISPATCH CLOBBER: one switch case needs a reload, another must keep the fold (P31 S69; byte-proven main/func_80030F80, 343 ins, escalation 3 → 0) L32371
- §388 — ★★★ — THE -O0 COLOURING ORACLE: simulate
stupid.cinstead of grinding spellings (P31 S69; main/func_80011380 proved a C-level WALL at 6) L32394 - §389 — ★★★ —
h_normIS BLIND TO INDEXED-GLOBAL RELOCS, SO FREE WORK BECOMES AN INVISIBLE SINGLETON (P31 S69; 31 stubs / 4,811 ins recovered, 8 banked same day) L32419 - §390 — ★★★ — MINIMUM DISTANCE IS NOT MINIMUM WORK; RANK TWIN CANDIDATES BY EFFORT, AND FILTER LOOKALIKES BY RATIO (P31 S69; byte-proven ov_SC01_077/func_80184D50, banked) L32460
- §391 — ★★ — A BYTE-ALIGNED STRUCT COPIES IN FOUR INSTRUCTIONS, A WORD-ALIGNED ONE IN TWO (P31 S69) L32498
- §392 — ★★★ — THE SONNET-WAVE HARVEST (P31 S69): SEVEN TYPE/ORDER LEVERS THAT EACH CLOSED A MATCH L32512
- §393 — ★★ — THE BIRTHING BOOST: A SINGLE-SET LOCAL IS SCHEDULED LAST; GIVE IT A SECOND SET (P31 S69; byte-proven ov_SC02_017/func_8017FCFC) L32553
- §394 — ★★ — TWO ALIGN-1 ACCESSES IN ONE FUNCTION RESERVE A PHANTOM STACK SLOT (P31 S69; ov_SC02_005/func_80180610) L32570
- §395 — ★★★ — FIVE NARROWING/PLACEMENT LEVERS FROM ONE 91-INSTRUCTION CRACK (P31 S69; byte-proven ov_SC06_018/func_80189E60, warm start 32 off → MATCH 91/91) L32621
- §397 — ★★★ — RE-RUN THE TWIN SCAN AFTER EVERY EXEMPLAR BANK; A CLUSTER SIBLING IS FREE THE MOMENT ITS EXEMPLAR LANDS (P31 S69; ~250k tokens spent proving it the expensive way) L32795
- §398 — ★★★ —
family_remapCARRIES THE SOURCE TU's DECL ENVIRONMENT INTO A DESTINATION THAT ALREADY OWNS THOSE NAMES (P31 S69; measured 3 banked of 22) L32845 - §399 — ★★★ — FOUR LEVERS FROM THE FINAL S69 ROUND (P31 S69; each byte-proven, none previously in the cookbook) L32902
- §400 — ★★ — A BASELINE CHECK THAT CONFLATES "ABSENT EVERYWHERE" WITH "CHANGED UNDER US" SILENTLY DROPS NEW FILES (P31 S69; 8 files, one session) L32942
- §401 — §401 L32977
- §402 — §402 L33010
- §403 — §403 L33034
- §404 — §404 L33066
- §3-A. — THE ORACLE HAS A HOLE: match_one cannot see a jump table (§405-A) L33108
- §408 — ★★★ — §406 REFUTED AS A SWEEP: THE SHAPE IS THE FAMILY, THE DISAGREEMENT IS THE DEFECT (P31 S71; 0 MATCH / 14 applied, 0 / 210) L33219
- §407 — ★★ — LATE-WAVE ADDENDA TO §405 (the last agents in) L33190
- §409 — ★★★ — THE S71 JOURNAL-FUELLED WAVE: 100% FIRST-PASS MATCH, AND THE NINE LAWS IT BROUGHT BACK (P31 S71) L33271
- §410 — ★★★ — COPY THEN ACCUMULATE ON THE COPY: resolving the birthing-boost vs register-allocation dilemma (P31 S71; byte-proven
ov_SC04_015/func_8017EB78, 98 ins) L33363 - §411 — ★★★ — THE PACK MUST CARRY THAT FUNCTION'S OWN HISTORY (P31 S71; measured 38/39 vs 124/131) L33396
- §412 — ★★★ — §323 CARVE BLOCKER 2 WAS A REGEX THAT COULD NOT SEE PAST
__attribute__(P31 S71) L33434 - §413 — ★★★ — DIFFICULTY IS THE RESIDUAL CLASS, NOT
nins— ROUTE THE MODEL TIER OFF HISTORY (P31 S71, Drew) L33483 - §414 — ★★★ —
parallel_gateONmainIS A FALSE PASS, AND THE RULE WAS ALREADY WRITTEN DOWN (P31 S71) L33520 - §415 — ★★ — A FILE-SCOPE DECL MAKES gcc-2.7.2 MERGE THE TU'S LATER BLOCK-SCOPE EXTERNS INTO IT (P31 S71; byte-proven
ov_SC04_011/func_80180B24, 215 ins) L33557 - §416 — ★★ — FOUR LEVERS FROM THE S71 OVERNIGHT LANE, none of which the cookbook held (P31 S71) L33582
- §417 — ★★★ — A REGISTER PIN CAN BLOCK
jump.c's SELECT COLLAPSE, AND UNPINNING THEN EXPOSES AcseSKIP-BLOCKS MERGE (P31 S71; byte-provenov_SC03_013/func_8017E6F4, 182 ins) L33615 - §418 — ★★★ — TWO LOOP-STRUCTURE LEVERS: MAKE THE SECOND INDEX A GIV, AND KEEP A TABLE ADDRESS UNFOLDED (P31 S71; byte-proven
ov_SC04_016/func_8017DF8C, 184 ins, 32 → 0 in seven compiles) L33642 - §419 — ★★★ — WHEN A PIN IS IMPOSSIBLE, WIN THE local-alloc DENSITY CONTEST INSTEAD (P31 S71; byte-proven
ov_SC01_000/func_8017DD04, 297 ins) L33668 - §420 — ★★★ — A MULTI-CLUSTER SYMBOL REBASE, AND THE BARE-NAME DEDUP THAT HID THREE QUARTERS OF IT (P31 S71; 4 banked in 57 s) L33702
- §421 — ★★★ — A
la $tN+addiuPAIR CAN BE A RELOAD ARTIFACT THAT NO C SPELLING REACHES (P31 S71; byte-provenmd_SC07_003/func_801A293C, 313 ins, 6 → 0) L33739 - §422 — ★★ — QImode ARITHMETIC VIA
(u8)(x - K), ANDflag ^ 1NEEDS ITS OWN TEMP (P31 S71; byte-provenresident/func_800D06E8, 344 ins) L33770 - §423 — ★★★ — "MATCH IN ISOLATION + GATE REJECTS + CAUSE NOT DETERMINED" ⇒ GREP THE TU FOR A FILE-SCOPE TYPEDEF THE DRAFT ALSO CARRIES (P31 S71; byte-proven
ov_SC03_092/func_8017FA74) L33790 - §424 — ★★★ — EQUAL-PRIORITY STORES COME OUT REVERSED: sched1's LUID tie picks the LAST statement first (P31 S71; byte-proven
ov_SC07_006/func_801890FC, 387 ins) L33817 - §425 — ★★★ —
sbALIASES SCALAR GLOBALS WHILEsh/swSTRUCT STORES DO NOT, AND TWO MORE ALIAS/BOOST RULES (P31 S71;md_MAIN_003/func_800CF3E8, 467 of 469 ins, all four byte-verified from-dS/-dR/-dl/-dr) L33839 - §426 — ★★★ — main's SWITCH FUNCTIONS WERE NEVER A CODEGEN WALL: ONE RODATA CARVE HAD BEEN MISSING SINCE PHASE 7 (P31 S72; 3 of the 11 "PROVEN gate-rejects" banked byte-identical in 14 s) L33865
- §427 — ★★ — A HASH IS A CORRECTNESS ORACLE WITH ZERO DIAGNOSTIC CONTENT; PRESERVE THE RED ARTIFACT BEFORE ANYTHING REBUILDS OVER IT (P31 S72) L33945
- §428 — ★★★ — A ZERO-BYTE CROSS-JUMP BARRIER: ADVANCE THE POINTER INSIDE EACH SWITCH ARM (P31 S72;
main/func_80026D64, 218 ins, MATCH in 2 compiles) L33964 - §429 — ★★★ — EVERY HELD POINTER NEEDS ITS OWN LOCAL, AND A NEGATIVE-DISPLACEMENT BYTE STORE NEEDS ONE OF ITS OWN (P31 S72;
main/CdReadStateMachine, MATCH 385/385) L34050 - §430 — ★★★ — A GOTO INTO A LOOP IS FINE; HAND-HOIST THE CONSTANTS IT COSTS YOU (P31 S73 — this section previously said the OPPOSITE and was wrong; the refutation is kept below) L34083
- §431 — ★★★ — SPLITTING A 27,000-LINE TU AT ITS ORIGINAL BOUNDARIES: THE JTBL SPANS TELL YOU WHERE, AND THE COMPILER TELLS YOU WHAT CROSSES (P31 S72;
src/800.c->800.c/800_b.c/800_c.c, byte-identical with nothing banked) L34132 - §432 — ★★★ — DEFEAT cse's MERGE OF TWO IDENTICAL MASKS BY SPELLING ONE AS A SHIFT PAIR (P31 S72/S73;
main/func_8002DC68, MATCH 198/198) L34227 - §433 — ★★★ — ON A SWITCH FUNCTION, CASE SOURCE ORDER IS THE DOMINANT RESIDUAL — AND
match_oneIS BLIND TO IT (P31 S73; 4 of 5 consecutive main MATCHes) L34195 - §434 — ★★★ — TWO SYMBOLS, ONE FRAME: RUN THE FRAME CHECK BEFORE DRAFTING ANYTHING LARGE (P31 S73;
main/SaveLoadRoutine+func_8002B0B4, byte-verified) L34269 - §435 — ★★★ — AN OVERLAY TU SPLIT IS NEAR-FREE, AND THE GAP TEST IS "IS THIS WORD A CODE ADDRESS", NOT "IS IT ZERO" (P31 S74; four overlays split, all byte-identical, CARVE-BLOCKED class emptied fleet-wide) L34317
- §436 — ★★★ — TWO TOOLS THAT READ THE WRONG SOURCE OF TRUTH, AND THE SHAPE THEY SHARE (P31 S74; both fixed + negative-controlled) L34374
- §437 — ★★★ — A WRAPPED TRAILING COMMENT BROKE THE TU PARSER, AND THE §8b DECL LAYER WROTE
extern #define(P31 S74; five independently-MATCHed jr bodies unblocked,ov_SC06_029byte-identical) L34431 - §438 — ★★★ — THE SAME-ADDRESS LEAD IS NOW SIZE-FILTERED: A HOMONYM IS WORSE THAN NO TWIN (P31 S74; ~12 of ~60 cards carried one) L34538
- §449 — ★★★ — FOUR COMPILER DIALS FROM THE S75 REDRAFT WAVE (two byte-gate CONFIRMED, and one correction to §439) L34951
- §440 — ★★★ — A
.rodataCARVE PIECE BINDS TO A SUBSEG, NOT TO A FUNCTION: EXTEND THE CARVE INSTEAD OF ISOLATING (P31 S74; 6 banked, resident included) L34586 - §441 — ★★ — THREE MORE INSTRUMENT DEFECTS FROM THE SAME SESSION, ALL OF WHICH BLAME THE SUBJECT (P31 S74) L34627
- §442 — ★★★ — A RECOVERY RUNG THAT REWRITES A LEGAL CONSTRUCT INTO AN ILLEGAL ONE READS EXACTLY LIKE A CODEGEN WALL (P31 S75;
reconcile_tu, 344 ins unblocked) L34657 - §443 — ★★ — A DERIVED DEPENDENCY MUST BE PROVISIONED BY EVERY PROVISIONER, AND WE HAVE TWO (P31 S69 → S74, the same defect twice) L34712
- §444 — ★★★ — A REJECTED GATE DAMAGED COMMITTED CARVE STATE, AND
git status src/SAID NOTHING WAS WRONG (P31 S75) L34739 - §445 — ★★ —
make clean BINARY=<x>IS FLEET-WIDE: THE VARIABLE IS ACCEPTED AND IGNORED (P31 S75) L34788 - §446 — ★★★ — "RELOC-ONLY REMAP GATED DIFF" IS A CARVE VERDICT, NOT A CODEGEN VERDICT, UNTIL YOU DIFF THE
.text(P31 S75; 4 siblings + 1 latent, ~1,300 ins) L34817 - §447 — ★★★ — THE BIGGEST FUNCTION LEFT IS A CARVE, AND THE VERDICT TOOL SAID "DECLARATIONS" (P31 S75; SaveLoadRoutine, 1,165 ins) L34864
- §448 — ★★★ — ASSEMBLY POSING AS C: 154 GAME FUNCTIONS THE REPORTS COUNTED AS DONE (P31 S75) L34908
- §450 — ★★★ — REGENERATING A TARGET
.sFOR A FUNCTION THAT IS NO LONGER A STUB (P31 S75; 146 functions unblocked, two silent defects caught by ONE cross-check) L35031 - §451 — ★★★ — YOUR EVIDENCE HAS MORE THAN ONE SOURCE, AND THE ONE YOU QUERY IS PROBABLY THE WORSE ONE (P31 S75; 37 functions reclassified, 122 ins banked from one word) L35072
- §452 — ★★★ — NOT EVERY VERBATIM BODY IS UNDECOMPILED WORK, AND §448'S HEADLINE OVERSTATED IT (P31 S75; 10-function burst, 0 banks, and the negative result is the finding) L35110
- §453 — ★★★ — ONE SOURCE PER UNIQUE FUNCTION: THE INCLUDE-AT-SITE SHARE, ITS GATE, AND THE FOUR DEFECTS THAT SHAPED IT (P35 S94–S96) L37561
- §454a — the recipe rung's real shape: replication, not discovery (S99, measured) L37677
- §455 — Rung G, the guided search: score the object, classify the residual, compose the moves (Phase 36 S101) L37692
- §457 — The lever-removal move catalog, S105: eight TU batches, 42 of 42 at 0 (Phase 36 T7) L37814
- §458 — Struct spelling is a per-access dial: the T2 probe's byte evidence (Phase 37 S106) L37886
- §459 — The declaration layer's byte facts (Phase 37 T4, S107–S108): what a prototype spelling can and cannot hide L37912
- §461 — LAUNDERING AN INVARIANT CAN BE THE DEFECT, AND "RESIDUAL A" DOES NOT GENERALIZE PAST ONE BINARY OP L35264
- §462 — FOUR LEVERS FROM
main:func_80024054(91 ins, 74/53/32 → 4) L35650 - §469 — THE
MEM_IN_STRUCT_PALIAS UNLOCK (and §463's spill law, independently confirmed) L35424 - §464 — FOUR VOLATILE/BARRIER LEVERS FROM
main:func_8005DE78(141 ins → MATCH) L35338 - §465 — THE ASPSX SLOT-HOP: A GAP OUR REORDER SUBSTITUTE CANNOT CLOSE (
main:func_8005F830) L35294 - §466 —
main(509 ins, -O0): ADDRESS CONTEXT EMITSmultINDEX-FIRST L35320 - §467 — GLOBAL-ALLOC TIES BREAK ON DECLARATION ORDER, AND A COPIED CLOBBER LIST IS A DEFECT L35366
- §468 — THE
%lo-FOLD EXTENDS TO STORES ONLY VIAextern Struct SYM[], AND MASKING HID THE OPERAND ORDER L35390 - §470 — FOUR CSE/SCHED LEVERS FROM
main:func_800301C8(170 ins, 133 → 18) L35447 - §471 — A LAUNDER'S REAL COST IS AN ALLOCNO, AND
$t0IS RELOAD'S (main:func_80032A74, 408 → 12) L35475 - §472 — 🔴 §148-A's HOIST THRESHOLD IS 29, NOT 58, WHEN THE LOOP CONTAINS A CALL L35499
- §473 — 🔴 §265's "HANDWRITTEN" VERDICT FOR
ov_SC07_002:func_8017DC80IS REFUTED (324 → 89) L35529 - §474 — A PROVED C-LEVEL FLOOR:
split_tree+stupid.c(-O0), frommain:func_80011380L35554 - §475 — THE
"memory"FENCE AS A CSE INVALIDATOR, AND(b*3)<<3INSTEAD OFb*24L35591 - §476 — 🔴 A HARD-REGISTER PIN DESTROYS TWO THINGS COMBINE AND SCHED1 NEED (
func_800226C0, 670 ins → MATCH) L35622 - §477 — ★★★ — THE
self_decl_tuCLASS IS A SOLVED, MECHANICAL LANE: 16 DRAFTS, 16 BANKS (P31 S77) L35723 - §478 — 🔴 — A VERBATIM DRAFT IS THE STRONGEST FALSE SIGNAL YOUR SCOPING TOOL CAN EMIT L35797
- §479 — ★★★ — WHERE THE PERMUTER ACTUALLY PAYS: A MEASURED YIELD CURVE (P31 S77, 8 candidates) L35817
- §480 — 🔴 — A STATIC BLOCKER CLASS THAT THE REAL PIPELINE ALREADY REMOVES IS A PHANTOM L35896
- §481 — ★★★ —
conflicting typesIS A SAME-SCOPE ERROR; ACROSS SCOPES IT IS ONLY A WARNING (P31 S77,main:func_8001FC08, 400 ins) L35911 - §482 — ★★★ — TWO INDEPENDENT RE-TIES, ORDERED: WHEN ONE BARRIER FIXES ONE RESIDUAL AND CREATES THE OTHER (P31 S77,
main:func_8006252C, 30 ins → MATCH) L35942 - §483 — ★★★ — THE S77w WAVE HARVEST: SIX LEVERS, FOUR FROM BANKED (BYTE-PROVEN) BODIES L35977
- §484 — ★★★ — "NO SINGLE NOLOAD BASE" IS NOT "UNLINKABLE": ASK WHETHER THE
.bssOFFSETS ARE DISJOINT (P31 S77) L36033 - §485 — ★★★ — THE PLACEMENT MAP WAS PARSING A PRETTY-PRINTER: 25 PsyQ OBJECTS WERE INVISIBLE, NOT ABSENT (P31 S77) L36079
- §486 — ★★★ — CARVING AN
-O0ISLAND IN main: FIVE COUPLED PIECES, AND THE TWO THAT ANNOUNCE THEMSELVES (P31 S77) L36115 - §487 — ★★★ — THE PSX LOADER'S PER-VERSION SIGNATURE SETS ARE A FREE PROVENANCE ORACLE: main's "WALL" BAND IS LIBPAD 4.2.1 (P31 S78) L36160
- §488 — ★★ — THE "GAME CODE" GAPS BETWEEN LIBRARY BLOCKS WERE LIBRARY OBJECTS: 13 SUBSEGS → LINKED, EXACT-TILED, ZERO TOKENS (P31 S78) L36212
- §489 — ★★★ — SCATTERED
.bssIS A PARTITION PROBLEM: SPLIT THE SECTION INTO PER-BASE PIECES AT LINK-PREPARE (P31 S78 #4; closes the §9.1 exclusion class 3/3) L36252 - §490 — ★★★ — THE "WALL" BAND WAS A LIBRARY VERSION AWAY: LIBPAD 4.2.1 + LIBAPI 4.2 FOUND, THE WHOLE 0x8005CE18–0x8005FC68 BAND + THE APICARD REGION LINKED FROM REAL OBJECTS (P31 S79 #13/#5) L36310
- §491 — ★★ — THE MECHANICAL LEFTOVERS (P31 S79 #6): A PHANTOM STUB, TWO JTBL TWINS, ONE EXACT CLONE — AND THREE TOOL GAPS THE BANKS EXPOSED L36356
- §492 — ★★ — "C-PLUMBING" WAS THREE DIFFERENT THINGS (P31 S79 #7): A RAW SPLICE THE GATE'S LADDER BROKE, TWO -O0 BODIES THE CHECKER COMPILED AT -O2, AND TWO DRAFTS THAT BELONGED TO OTHER OVERLAYS L36402
- §493 — ★★ — THE PERMUTER ROUTE END-TO-END, AND THE THREE PLUMBING STEPS BETWEEN A SCORE-0 WINNER AND THE MAIN GATE (P31 S79 #8) L36430
- §494 — ★★★ — TEN BANKS FROM ONE-AGENT-PER-FUNCTION DRAFTING (P31 S79/S80 #9): THE IDIOMS, THE PLUMBING, AND THE THREE WAYS AN AGENT'S "MATCH" WAS NOT ONE L36490
- §495 — ★★★ — THE VERBATIM END-STATE (P31 S80 #10): TWO DEF-SIDE DECLARATION WALLS, A "BANK" THAT WAS THE ASSEMBLY, AND A GATE THAT DROPPED A BANK ON EXIT 0 L36630
- §496 — ★★ — A CARRIED-TYPE TEST THAT ASSUMES THE OVERLAY INCLUDE SET SILENTLY DROPS A RESIDENT TYPEDEF (P32 T1a; byte-proven, resident
func_800D128Cisolation) L36671 - §497 — ★ — A BODILESS
typedef struct Tag Alias;DEFINES THE ALIAS, NOT THE TAG: THE CARRIER'S FALSE "CONFLICTING BODIES" REFUSAL (P32 T1b; ov_SC02_017func_80186C64isolation) L36705 - §498 — ★★★ — A CARVE THAT DROPS THE BINARY'S
--preCLAUSE, AND A GATE THAT IGNORED THE EXTRACT'S EXIT CODE: HOW A BYTE-CORRECT DRAFT WAS BOOKED "DIFF" (P32 T1a; residentfunc_800D128CBANKED 243 ins after two instrument fixes) L36728 - §499 — ★★★ — A NEVER-ONBOARDED PAYLOAD PINS ITS OWN BASE STATICALLY, AND THE FIRST BUILD CANNOT (P32 T2a/T2b: the parked five onboarded, 213 → 218 binaries, 0 UNCLAIMED) L36758
- §500 — ★★★ — THE T3 WAVE HARVEST (P32 T3, 2026-09-05): 31 one-agent-per-function drafters → 20 MATCH / 9 NEAR / 2 FAIL, every closer, two NEW named gcc mechanisms, and the wave-process defects L36799 C0509 | fleet-tool-parallelism-defaults | legacy,memory | 2026-09-29 | - | legacy memory fleet-tool-parallelism-defaults.md