Save Selector Opcode 0x20 Object Base Candidates

route map1_01a -> map2_02d; non-pointer object-base candidates: 16; context+0xf2 object selectors: 16; fixed stream+2 object selectors: 0; gate rows after candidates 0; field-map rows after candidates 0; frontier refs after candidates 0; proofFound False; promotion status blocked.

The 16 non-pointer descriptor+4 context+0xa8 rows are all opcode 0x42 object-base selectors with stream+1 == 0, so the handler chooses dword[0x0059db30 + context[0xf2]*4] rather than a fixed stream+2 object index. Scanning the rest of each descriptor+4 script after these rows finds no 0xe8/0xea selection-buffer reads or writes, no field-map CNS records, and no current-frontier direct references. These rows are therefore generic runtime object-base reselections, not a specific gate-base proof for map1_01a -> map2_02d.

Failed Gates

• runtime-context-f2-object-pointer
• descriptor-script-gate-row
• field-map-or-frontier-reference
• specific-gate-base-proof

Missing Evidence

• runtime context+0xf2 object pointer selected by the active descriptor script
• descriptor+4 script row that reads/writes gate offsets 0xe8 or 0xea after the object-base selector
• field-map CNS or current-frontier reference after the object-base candidate
• specific gate-base proof for map1_01a -> map2_02d

Evidence Refs

• Hwanse2.exe: descriptor+4 script scans and opcode 0x42 handler evidence
• out/save_selector_opcode20_descriptor_scripts.json: descriptor script rows and frontier/gate reference scans
• out/save_selector_selection_buffer_bases.json: runtime object pointer mode still required for context+0xa8

Handler Evidence

Candidates