Save Selector Opcode 0x20 Slot Sources

route map1_01a -> map2_02d; opcode row 0x005428a8; count byte 0x004576e8 save offset 0x0010; slot base 0x00457750; slot stride 0x00d8; loaded complete slot capacity: 3; runtime slot count required: True; runtime slot descriptor pointers required: True; proofFound False; promotion status blocked.

Opcode 0x20 mode 0 is controlled by runtime state, not by a static leaf table. The loop count byte 0x004576e8 sits inside the first save-read block at save offset 0x0010, while the 0x00457750 slot area is the second save-read block and contains only three complete 0xd8-byte slots. The static first dwords of the scanned slots are zero, so slot descriptor pointers must be materialized at runtime before descriptor+4 nested scripts can run. This keeps the current map1_01a -> map2_02d gate proof blocked until runtime slot count and descriptor pointer values are proven.

Failed Gates

• runtime-slot-count
• runtime-slot-descriptor-pointers
• active-order-runtime-state
• selected-root-execution-or-trace

Missing Evidence

• runtime slot count byte at 0x004576e8 on the current route path
• runtime descriptor pointers materialized at 0x00457750 + slot*0xd8
• active order/count values for current selector 2:0
• selected-root execution or equivalent runtime trace reaching opcode 0x20

Evidence Refs

• Hwanse2.exe: static slot/count byte locations and direct-reference scans
• out/save_loader_trace.json: save block mapping for count byte and slot base runtime addresses
• out/save_selector_opcode20_nested_base_modes.json: current opcode 0x20 mode and nested script path classification

Save Sources

Scanned Slots