- s2 (the head, with R16/R17 added): search: 0 of 140 exemplars matched lever-free in 0.24 h (0 of 7,085 bodies behind them; 23,689 compiles). The two new generators closed nothing on the head; recorded as measured. - agent a2's "284 constant-holder pins of 10,958" verified against the source rather than believed (R14), and my first instrument was wrong (R40): asking R16 directly answered 33, because R16 only fires on a split declaration while most pins carry their value as an initialiser. R3 converts one form to the other, so the reachable family is R3+R16. Corrected, both figures derived: 537 constant-holder pin sites of 17,302, in 510 bodies (152 initialiser, 385 separate assignment; by register $2 282, $20 136, $3 28). - s3 drew exactly those 99 function names and closed 10 bodies before crashing with AttributeError: 'Namespace' object has no attribute 'allow_residue' in propagate — the a2 fix read the flag off the caller's namespace and the search engine builds its own Namespace for that in-process call. Fixed with getattr(a, "allow_residue", False): a library must not assume its caller's namespace shape (R43). - the ten banks were real, proven by gating the tree the crash left: check-all: 218 passed, 0 failed of 218 lever_census --check: 29,533 pin/asm sites, 29,533 marked !FAKE, 0 UNMARKED — OK - by first move the ten are R15 x3, R6 x4, R7 x2, R9 x1 — the draw was right about the family even though R16 did not fire. - snapshot row 13; s3 re-runs from the top with the fix.
tools/
Everything under tools/ that this project wrote — the extractor, the byte gate, the matching harness, the campaign
machinery, the audits, the Ghidra scripts, the public-flip rewrite package — is licensed under the GNU Affero General
Public License v3.0 (the repository's LICENSE). There are no per-file license headers; this statement covers them.
Third-party pieces under tools/ keep their own licenses and are listed in the top-level THIRD_PARTY.md:
tools/brave-CUE/ (GPL-3.0, vendored source), the pinned submodules tools/maspsx (MIT), tools/decomp-permuter
(MIT), tools/asm-differ (Unlicense) and tools/m2c (GPL-3.0), and the gcc-2.7.2 compiler tarballs under tools/bin/
(GCC, GPL). The Sony SDK directory tools/psyq/ is never part of the repository — it is user-supplied and gitignored.
Where each tool fits and how to run it: docs/SETUP.md ("Tooling inventory"), docs/wave-playbook.md (the matching
procedure) and docs/public-flip-runbook.md (the publication procedure).