Save Selector Opcode 0x20 Active Order Space

• route: map1_01a -> map2_02d
• descriptor rows: 12
• loaded slot capacity: 3
• unique-index orders: 1464
• repeat-allowed orders: 1884
• unique direct proof orders: 0
• repeat-allowed direct proof orders: 0
• current selector sample covered: False
• active order alone promotes route: False
• proofFound: False
• promotion status: blocked

Enumerating every descriptor active-order shape up to the loaded three-slot capacity still finds no static field-map record, current-frontier reference, or 0xe8/0xea gate reader/writer in descriptor+4 scripts. The only non-pointer context+0xa8 base that can be selected by active order alone is the generic runtime object-pointer table path. The 0x0059e310 rows are pointer-dword low-byte collisions in the shaped scan, not reliable script opcodes. Active order alone therefore cannot prove the gate-time base for map1_01a->map2_02d; runtime descriptor/object state or an equivalent trace is still required.

Failed Gates

• selector-2-0-active-order
• runtime-descriptor-object-state
• direct-route-proof-in-descriptor-order
• strict-source-hotspot

Missing Evidence

• selector 2:0 active order/count or equivalent runtime trace
• runtime descriptor/object state selected by opcode 0x20
• field-map/frontier/gate direct proof in an enumerated descriptor order
• strict map1_01a source hotspot

Evidence Refs

• out/save_selector_opcode20_descriptor_scripts.json: descriptor script scans used to enumerate direct route proof absence
• out/save_selector_opcode20_slot_sources.json: loaded slot capacity and runtime slot descriptor requirements
• out/save_selector_opcode20_sample_order_effects.json: known public sample order signatures and current selector sample coverage

Order Space Counts

Final Non-Pointer Context+0xa8 Bases

Known Sample Signatures

Remaining Proofs

• capture selector 2:0 active order/count or an equivalent runtime trace
• prove the runtime object pointer selected by descriptor+4 if the 0x42 path is active
• find a strict map1_01a source hotspot or equivalent non-coordinate trigger