{"source":"map1_01a","target":"map2_02d","opcodeVaHex":"0x005428e4","opcodeValueHex":"0x0c000124","currentModeByteHex":"0x01","currentModeTargetHex":"0x0040c673","mode1SourceHex":"0x0059e348","mode1SourceStaticInitialValueHex":"0x00","mode1SourceStaticInitialValueKind":"pe-zero-filled-section-tail","mode1SourceHasRawByte":false,"mode1SourceSaveBacked":false,"mode1SourceHasStaticProducer":false,"defaultObject61Value":3,"defaultObject61ValueHex":"0x03","object61ConsumerGroupCount":6,"object61ConsumerGroups":[{"name":"linked object draw/copy","range":"0x0040cc6d..0x0040cc8f","routeImpact":"Consumes object+0x61 as another runtime object index; no stream pointer or scene record write is visible."},{"name":"linked object replacement","range":"0x0040d006..0x0040d02d","routeImpact":"Updates the linked object index when the target object is flagged; this is object state maintenance, not leaf selection."},{"name":"collision/action mask test","range":"0x0040d3af..0x0040d4d8","routeImpact":"Tests object action/collision masks and advances the current stream by +4 on the non-trigger path."},{"name":"object spawn/flag management","range":"0x0040d5da..0x0040dded","routeImpact":"Can branch the current script stream, but through the active handler's stream operand, not through the save-selector leaf table."},{"name":"status sync helper","range":"0x0040de28..0x0040ef09","routeImpact":"Runtime object synchronization; useful for VM semantics, weak evidence for map transition promotion."},{"name":"generic object helpers","range":"0x004334a3..0x004355f0","routeImpact":"Confirms object+0x61 is a general linked-object slot, not a dedicated save-selector route selector."}],"objectHandlerOpcodeCount":5,"routeOperandRowCount":12,"branchCapableRowCount":1,"directFrontierOperandCount":0,"branchFrontierOperandCount":0,"branchOperand":{"wordVaHex":"0x00542e74","opcodeHex":"0x2f","handlerVaHex":"0x0040d4dd","valueHex":"0x0053f42f","valueMeaning":"map2_16j.cns","nextDwordHex":"0x00001618","nextDwordKind":"small-scalar","cns":"map2_16j.cns"},"staticDefaultPromotesRoute":false,"runtimeProducerRequired":true,"strictHotspotRequired":true,"proofFound":false,"opcode24Mode1DefaultEffectProofFound":false,"failedOpcode24Mode1DefaultEffectGateIds":["runtime-mode1-source-producer","object61-route-control-effect","strict-source-hotspot"],"missingEvidence":["runtime write/read trace for 0x0059e348 around opcode 0x24 mode 1","proof that object+0x61 selects a current-route control-flow target","strict map1_01a source coordinate or event hotspot for map2_02d"],"evidenceRefs":[{"path":"out/save_selector_opcode24_mode1_runtime_context.json","description":"mode1 source runtime-producer proof gap"},{"path":"out/save_selector_object61_consumers.json","description":"object+0x61 consumer groups and route impact"},{"path":"out/save_selector_object61_stream_operands.json","description":"current route object+0x61 stream operand scan"},{"path":"out/runtime_trace_feasibility.json","description":"runtime trace availability blocker"}],"evidenceRefCount":4,"promotionStatus":"blocked","remainingProofs":["capture a runtime write/read trace for 0x0059e348 around opcode 0x24 mode 1","prove object+0x61 selects a current-route control-flow target, if it ever does","find a strict map1_01a source coordinate or event hotspot for map2_02d"],"conclusion":"With the current static evidence, opcode 0x24 mode 1 reads the zero-filled byte 0x0059e348 and would write object+0x61 = 3 at process start. The existing object+0x61 consumers use that field as linked-object state, and the current map1_01a->map2_02d stream operands contain no frontier leaf, frontier reader, or false-target operand. The only branch-capable row is opcode 0x2f at 0x00542e74, whose dword [stream+4] is 0x00001618 for map2_16j.cns. Therefore the static/default mode1 effect is not route promotion evidence; a runtime producer trace for 0x0059e348 or a strict map1_01a hotspot is still required."}