{"source":"map1_01a","target":"map2_02d","promotionStatus":"blocked","proofFound":false,"failedOpcode24RuntimeProducerGateIds":["indirect-runtime-producer","opcode24-route-stream-selection","strict-hotspot"],"missingEvidence":["indirect runtime producer of 0x0059e348 on a normal route path","opcode 0x24 mode 1 object+0x61 writes select a current-route stream","strict map1_01a source coordinate or non-coordinate trigger"],"mode1SourceHex":"0x0059e348","mode1ReadVaHex":"0x0040c675","opcode24BoundaryVaHex":"0x005428e4","frontierReaderHex":"0x00542b0c","storage":{"sectionName":".data","rawBytePresent":false,"staticInitialValueHex":"0x00","staticInitialValueKind":"pe-zero-filled-section-tail","saveBacked":false},"directProducerEvidence":{"sourceWriteRows":95,"coveringWriteCount":0,"indexedWriteCandidateCount":0,"addressProducerCandidateCount":0,"staticProducerCandidateCount":0},"indirectProducerEvidence":{"basePlusMode1OffsetCandidateCount":0,"baseWindowMode1WriteCandidateCount":0,"nearbyBaseWindowMode1WriteCandidateCount":0,"noStaticBaseIndirectCandidate":true},"fileAndBlockProducerEvidence":{"readFileCallCount":30,"globalDestinationReadFileCount":2,"mode1FileReadCandidateCount":0,"mode1BlockRowCount":259,"mode1BlockWriteCandidateCount":0,"mode1BlockDirectCoveringWriteCount":0},"runtimeEnabledFlagEvidence":{"flagHex":"0x0059e34d","refCount":12,"directWriteCount":0,"modeDispatchRequiresRuntimeFlagOne":true,"staticEvidenceProvesModeDispatch":false,"blockWriteCandidateCount":0,"blockDirectCoveringWriteCount":0},"defaultAndRuntimePollEvidence":{"staticDefaultPromotesRoute":false,"directFrontierOperandCount":0,"branchFrontierOperandCount":0,"currentRootMode1CandidateCount":18,"currentRootFrontierOperandCount":0,"currentRootRouteCnsOperandCount":0,"runtimeClassification":"runtime-flag-nonroute-mode1-zero","pollCount":7,"runtimeFlagOneCount":340,"mode1SourceNonzeroObserved":false,"sourceSaveLoadClassification":"source-ready-adaptive-exit-no-route","sourceSaveLoadDiversionSelector":"48:13","sourceSaveLoadRoutePromotionEvidenceFound":false},"traceAvailability":{"canRunRuntimeTraceNow":false,"canCaptureTraceNow":false,"tracePoints":[{"name":"mode1 source write watchpoint","kind":"watch-write-byte","addressHex":"0x0059e348","purpose":"break on any runtime producer of opcode 0x24 mode1 source before the handler reads it"},{"name":"opcode24 mode1 read","kind":"execute-breakpoint","addressHex":"0x0040c675","purpose":"confirm the value consumed by opcode 0x24 mode1 on the map1_01a->map2_02d path"},{"name":"current blocker frontier reader","kind":"execute-breakpoint","addressHex":"0x00542b0c","purpose":"confirm the control path reaches the branch reader and capture selectionBuffer[0x20]"},{"name":"gate-time context base proof","kind":"execute-breakpoint","addressHex":"0x005428c4","purpose":"capture context+0xa8 base and gate index before the first inherited gate"}],"blockers":["execution probe: WineDbg attach fails even for a notepad control process under qemu-i386","execution probe: WineDbg launch crashes even for a notepad control process under qemu-i386","execution probe: Hwanse2.exe startup crashes or exits before a useful route trace can be captured","execution probe: Hwanse2.exe stays alive in virtual desktop mode, but WineDbg attach/watchpoint still fails","execution probe: no Wine debugger path reaches a stable watchpoint-capable session","execution probe: QEMU gdbstub connects, but route watchpoint/breakpoint insertion is not stable","WineDbg attach fails even for a notepad control process under qemu-i386","WineDbg launch crashes even for a notepad control process under qemu-i386","Hwanse2.exe startup crashes or exits before a useful route trace can be captured","Hwanse2.exe stays alive in virtual desktop mode, but WineDbg attach/watchpoint still fails","no Wine debugger path reaches a stable watchpoint-capable session","QEMU gdbstub connects, but route watchpoint/breakpoint insertion is not stable"]},"acceptedEvidenceChecklist":[{"requirement":"runtime write producer for 0x0059e348 on the normal route path","currentStatus":"missing","acceptedSignal":"watchpoint captures a write to 0x0059e348 before opcode 0x24 mode1 read"},{"requirement":"opcode 0x24 mode1 read consumes nonzero route-relevant value","currentStatus":"missing","acceptedSignal":"breakpoint at 0x0040c675 observes route-backed mode1 source"},{"requirement":"runtime flag enables route-relevant opcode 0x24 mode dispatch","currentStatus":"missing","acceptedSignal":"0x0059e34d == 1 with selected root/strict hotspot proof on same path"}],"notAcceptedEvidence":["static zero-filled storage at 0x0059e348","runtime flag 0x0059e34d == 1 while selected pointer remains non-route","constructed selector diagnostics with mode1 source still zero","generic opcode 0x24 mode1 payload patterns with no frontier or route CNS operands"],"evidenceRefs":[{"path":"out/save_selector_opcode24_mode1_runtime_context.json","fields":["proofFound","failedOpcode24RuntimeProducerGateIds","missingEvidence"]},{"path":"out/save_selector_opcode24_mode1_source_writes.json","fields":["rows","coveringWriteCount","staticProducerCandidateCount"]},{"path":"out/save_selector_opcode24_mode1_indirect_context.json","fields":["basePlusMode1OffsetCandidateCount","noStaticBaseIndirectCandidate"]},{"path":"out/save_selector_opcode24_mode1_file_read_context.json","fields":["readFileCallCount","mode1FileReadCandidateCount"]},{"path":"out/save_selector_opcode24_mode1_block_writes.json","fields":["rows","blockWriteCandidateCount","directCoveringWriteCount"]},{"path":"out/save_selector_opcode24_runtime_enabled_context.json","fields":["runtimeEnabledFlagHex","directWriteCount","evidenceRefs"]},{"path":"out/save_selector_opcode24_runtime_enabled_block_writes.json","fields":["blockWriteCandidateCount","directCoveringWriteCount"]},{"path":"out/save_selector_opcode24_mode1_default_effect.json","fields":["staticDefaultPromotesRoute","directFrontierOperandCount"]},{"path":"out/save_selector_opcode24_current_root_modes.json","fields":["gateBoundaryVaHex","mode1CandidateCount","frontierOperandCount"]},{"path":"out/runtime_opcode24_flag_context.json","fields":["classification","runtimeFlagOneCount","mode1SourceNonzeroObserved"]},{"path":"out/runtime_trace_feasibility.json","fields":["canRunRuntimeTraceNow","tracePoints","blockers"]},{"path":"out/runtime_trace_execution_probe.json","fields":["canCaptureTraceNow","blockers"]}],"evidenceRefCount":12,"relatedReports":["out/save_selector_opcode24_mode1_runtime_context.json","out/save_selector_opcode24_mode1_source_writes.json","out/save_selector_opcode24_mode1_indirect_context.json","out/save_selector_opcode24_mode1_file_read_context.json","out/save_selector_opcode24_mode1_block_writes.json","out/save_selector_opcode24_runtime_enabled_context.json","out/runtime_opcode24_flag_context.json","out/runtime_trace_feasibility.html"],"regenerateAndVerifyCommands":["python3 tools/summarize_opcode24_runtime_producer_external_proof_packet.py","python3 tools/verify_web_assets.py"],"remainingProofs":["find an indirect runtime producer of 0x0059e348, if one exists","prove opcode 0x24 mode 1 object+0x61 writes select a current-route stream, not only object state","find a strict map1_01a source coordinate or non-coordinate trigger"],"conclusion":"Opcode 0x24 mode1 remains blocked: static/direct/file/block producers are absent, runtime polls keep 0x0059e348 at zero, and a stable watchpoint trace is unavailable."}