docs/research/QVM_ENTITY_QUERY.md

Complete entity tag query and continuation

RE-657. Reproduce with python3 scripts/analyze_qvm_entity_query.py; check with python3 scripts/test_qvm_entity_query.py. The machine report retains source identity and bounded fixtures.

Complete276434–276502 starts at pool34091368 for a null previous pointer, otherwise at previous+880. It scans while unsigned pointer is below pool+count34992508×880, returning the first record with nonzero532 and536 and matching540. It never dereferences536 or compares strings. Repeated continuation enumerates every matching record once and returns zero on exhaustion. Distinct nonnull name pointers carrying the same requested tag both match; this does not prove a collision-free hash or semantic classname identity. Synthetic pools include unused records, null names, nonboolean used values and boundary starts. The bounded shared evaluator adds only the reached LTU opcode, with unsigned32-bit high-bit/equality tests; other unknown instructions still reject. No native calls or entity mutations occur. Caller scheduling, original pool population and grenade integration remain open.

No original executable/full QVM/native collision/physics/rendering executes. Native responses and legal input domains are supplied or unverified where stated; full runtime/macOS/Linux Rust/Bevy/Solari gameplay remains open.