Save Selector Secondary Reset Scope

secondaryBranchState 0x0059e360..0x0059e36b; refs 5 (baseAddressImmediate:1, indexedReadByte:2, localTablePointerImmediate:2); direct secondary indexed writers: 0; unresolved refs: 0.

helper 0x00410c90; direct calls 1; helper only called inside opcode 0x10 handler: True.

current before-frontier fills: 0; current after-frontier fills: 1; predecessor tail valid fills: 0.

no direct global secondary writer: True; no known pre-frontier reset in scoped evidence: True; global reset ruled out: False; promotion status: blocked

The secondaryBranchState table has no direct indexed writes in .text; its direct references are table-base loads, stack-local table pointer loads, and indexed reads. Helper 0x00410c90 is reached by a single direct call inside the opcode 0x10 handler, so secondary resets/overwrites are driven by script opcode 0x10 rows. The current root has no valid secondary opcode 0x10 fill before the 0x00542b0c blocker and the 1:0 tail has no post-fill secondary fill. This narrows reset risk to unproven runtime order or still-untraced bytecode paths; it still does not promote map1_01a->map2_02d without a strict source hotspot.

Helper Direct Calls

calltargetinside opcode10 handler
0x0040b4d20x00410c90True

Secondary Table Refs

refkindwrites tablemeaning
0x0040b4afbaseAddressImmediateFalseloads secondary table base for opcode 0x10 helper dispatch
0x0040b505localTablePointerImmediateFalseloads the secondary table address into a stack local; not a table write
0x0040b57elocalTablePointerImmediateFalseloads the secondary table address into a stack local; not a table write
0x00410a6bindexedReadByteFalsereads secondaryBranchState by selected slot
0x00410ad6indexedReadByteFalsereads secondaryBranchState by selected slot

Remaining Proofs