qvm: recover exact-match filter removal

docs/FINDINGS.md

@@ -1803,3 +1803,5 @@ RE-813–822 replaces the scoreboard decimal assumption with actual37914 executi
 RE-934: Actual252500 exports comparison bytes and signed metadata while ignoring masks. It skips comparison-1 rows, performs no IO for count zero, but truncates/writes an empty file for a nonempty all-hole table. Supplied zero/negative handles still reach write and close. The INT_MIN metadata case retains the original formatter wrapping-negation punctuation instead of host decimal output. Eighteen fixtures execute actual70386/37914/69338; native memory operations are modeled and file operations captured. Aggregate overflow and actual filesystem acceptance remain open. [Evidence](research/QVM_FILTER_EXPORT.md).
 
 RE-935: Rust matches all18 original export cases, including mask loss, all-hole truncation, invalid handles and original INT_MIN formatter bytes. Empty tables produce no plan; other tables produce ordered print/open/write/close effects. A4096-row table is bounded by28 bytes per row, below the131072-byte source buffer; unit tests check that maximum and reject4097 rows. Native IO remains an adapter boundary. [Evidence](research/RUST_FILTER_EXPORT.md).
+
+RE-936: Thirty actual253296 cases execute parser252304/37159, scan exact mask/comparison pairs and remove only the first duplicate by storing comparison-1. Mask/metadata/count remain unchanged. Parse failure and no match return0; successful removal prints Removed and requests export. A preexisting comparison-1 record can match255.255.255.255 and report successful removal again. Export is captured in this stage. [Evidence](research/QVM_FILTER_REMOVE.md).

docs/PROVISIONAL_TODO.md

@@ -1849,3 +1849,5 @@ RE-924–933 completed bounded bot settings, announcement, connect-child composi
 - [x] RE-934 Original filter export and native file-operation order ([evidence](research/QVM_FILTER_EXPORT.md)).
 
 - [x] RE-935 Rust filter export policy and bounded storage ([evidence](research/RUST_FILTER_EXPORT.md)).
+
+- [x] RE-936 Original exact-match filter removal ([evidence](research/QVM_FILTER_REMOVE.md)).

docs/RESEARCH_LEDGER.md

@@ -2405,3 +2405,7 @@ Actual252500 exports comparison bytes and signed metadata while ignoring masks.
 ## 2026-10-28 — RE-935 Rust filter export policy and bounded storage
 
 Rust matches all18 original export cases, including mask loss, all-hole truncation, invalid handles and original INT_MIN formatter bytes. Empty tables produce no plan; other tables produce ordered print/open/write/close effects. A4096-row table is bounded by28 bytes per row, below the131072-byte source buffer; unit tests check that maximum and reject4097 rows. Native IO remains an adapter boundary. Focused `cargo xtask test-group rust-filter-export` passes with deterministic report regeneration, relevant regressions and storage/documentation/whitespace checks. Full suite deferred to the tenth-commit boundary. Original assets unchanged; native IO effects remain captured.
+
+## 2026-10-28 — RE-936 Original exact-match filter removal
+
+Thirty actual253296 cases execute parser252304/37159, scan exact mask/comparison pairs and remove only the first duplicate by storing comparison-1. Mask/metadata/count remain unchanged. Parse failure and no match return0; successful removal prints Removed and requests export. A preexisting comparison-1 record can match255.255.255.255 and report successful removal again. Export is captured in this stage. Focused `cargo xtask test-group qvm-filter-remove` passes with deterministic report regeneration, relevant regressions and storage/documentation/whitespace checks. Full suite deferred to the tenth-commit boundary. Original assets unchanged; native IO effects remain captured.

docs/REVERSE_ENGINEERING_TODO.md

@@ -1886,3 +1886,5 @@ Purpose: turn the supplied installation into an evidence-backed specification of
 - [x] RE-934 Original filter export and native file-operation order ([evidence](research/QVM_FILTER_EXPORT.md)).
 
 - [x] RE-935 Rust filter export policy and bounded storage ([evidence](research/RUST_FILTER_EXPORT.md)).
+
+- [x] RE-936 Original exact-match filter removal ([evidence](research/QVM_FILTER_REMOVE.md)).

docs/research/QVM_FILTER_REMOVE.md

@@ -0,0 +1,5 @@
+# Original exact-match filter removal
+
+RE-936. Focused validation: `cargo xtask test-group qvm-filter-remove`. [Machine report](qvm-filter-remove.json).
+
+Thirty actual253296 cases execute parser252304/37159, scan exact mask/comparison pairs and remove only the first duplicate by storing comparison-1. Mask/metadata/count remain unchanged. Parse failure and no match return0; successful removal prints Removed and requests export. A preexisting comparison-1 record can match255.255.255.255 and report successful removal again. Export is captured in this stage.

docs/research/README.md

@@ -1421,3 +1421,5 @@ The extension collector adds five focused tests for native tail calls, command-r
 - [RE-934: Original filter export and native file-operation order](QVM_FILTER_EXPORT.md).
 
 - [RE-935: Rust filter export policy and bounded storage](RUST_FILTER_EXPORT.md).
+
+- [RE-936: Original exact-match filter removal](QVM_FILTER_REMOVE.md).

docs/research/qvm-filter-remove.json

@@ -0,0 +1,1296 @@
+{
+  "limits": "Exact mask/comparison first-match scan; parser and integer children source-executed; native diagnostics and file IO captured. Native table provenance, malformed counts and unsafe parser tokens remain open.",
+  "probes": [
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "312e322e332e34"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 33,
+        "trace_sha256": "5ec8276dcccff21f5d6d00c323d9518cd97a77ce7f2b3f3be8806459107d9440"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [],
+        "save": 0,
+        "text": "312e322e332e34"
+      },
+      "result": 0,
+      "rows": []
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "312e2a"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 33,
+        "trace_sha256": "5ec8276dcccff21f5d6d00c323d9518cd97a77ce7f2b3f3be8806459107d9440"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [],
+        "save": 0,
+        "text": "312e2a"
+      },
+      "result": 0,
+      "rows": []
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "2a"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 33,
+        "trace_sha256": "5ec8276dcccff21f5d6d00c323d9518cd97a77ce7f2b3f3be8806459107d9440"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [],
+        "save": 0,
+        "text": "2a"
+      },
+      "result": 0,
+      "rows": []
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "bad-address",
+          "text": "626164"
+        }
+      ],
+      "execution": {
+        "stop": 253312,
+        "trace_length": 15,
+        "trace_sha256": "4585d0dfd3ae6b60d316cb4ced7466e028bdcb045d0b352ee1ca2df5b244248d"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [],
+        "save": 0,
+        "text": "626164"
+      },
+      "result": 0,
+      "rows": []
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "3235352e3235352e3235352e323535"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 33,
+        "trace_sha256": "5ec8276dcccff21f5d6d00c323d9518cd97a77ce7f2b3f3be8806459107d9440"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [],
+        "save": 0,
+        "text": "3235352e3235352e3235352e323535"
+      },
+      "result": 0,
+      "rows": []
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "bad-address",
+          "text": ""
+        }
+      ],
+      "execution": {
+        "stop": 253312,
+        "trace_length": 15,
+        "trace_sha256": "4585d0dfd3ae6b60d316cb4ced7466e028bdcb045d0b352ee1ca2df5b244248d"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [],
+        "save": 0,
+        "text": "312e"
+      },
+      "result": 0,
+      "rows": []
+    },
+    {
+      "changes": [
+        {
+          "address": 36275956,
+          "after": 4294967295,
+          "before": 67305985
+        }
+      ],
+      "diagnostics": [
+        {
+          "op": "removed"
+        }
+      ],
+      "execution": {
+        "stop": 253357,
+        "trace_length": 61,
+        "trace_sha256": "13bb7eef03b8846c0562a52d8787005ca3203dac9f6f7b3101c3c1793f26cf2a"
+      },
+      "exported": [],
+      "exports": [
+        252500
+      ],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "312e322e332e34"
+      },
+      "result": 1,
+      "rows": [
+        [
+          4294967295,
+          4294967295,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "312e2a"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 54,
+        "trace_sha256": "82f219011dc1abe34f7c418409b4244671e550ca81c167d9d980eff5505b6fec"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "312e2a"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          67305985,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "2a"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 54,
+        "trace_sha256": "82f219011dc1abe34f7c418409b4244671e550ca81c167d9d980eff5505b6fec"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "2a"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          67305985,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "bad-address",
+          "text": "626164"
+        }
+      ],
+      "execution": {
+        "stop": 253312,
+        "trace_length": 15,
+        "trace_sha256": "4585d0dfd3ae6b60d316cb4ced7466e028bdcb045d0b352ee1ca2df5b244248d"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "626164"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          67305985,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "3235352e3235352e3235352e323535"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 64,
+        "trace_sha256": "88991c252b4388f362068ac8572f716844cf836f4acb6d9340a3759fe548a2cd"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "3235352e3235352e3235352e323535"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          67305985,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "bad-address",
+          "text": ""
+        }
+      ],
+      "execution": {
+        "stop": 253312,
+        "trace_length": 15,
+        "trace_sha256": "4585d0dfd3ae6b60d316cb4ced7466e028bdcb045d0b352ee1ca2df5b244248d"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "312e"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          67305985,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [
+        {
+          "address": 36275956,
+          "after": 4294967295,
+          "before": 67305985
+        }
+      ],
+      "diagnostics": [
+        {
+          "op": "removed"
+        }
+      ],
+      "execution": {
+        "stop": 253357,
+        "trace_length": 61,
+        "trace_sha256": "13bb7eef03b8846c0562a52d8787005ca3203dac9f6f7b3101c3c1793f26cf2a"
+      },
+      "exported": [],
+      "exports": [
+        252500
+      ],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ],
+        "save": 0,
+        "text": "312e322e332e34"
+      },
+      "result": 1,
+      "rows": [
+        [
+          4294967295,
+          4294967295,
+          9
+        ],
+        [
+          4294967295,
+          67305985,
+          10
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "312e2a"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 75,
+        "trace_sha256": "4e6411971d70aff944003db02e357c7fd06a78d4f72d7034e48ab813bb66f9cd"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ],
+        "save": 0,
+        "text": "312e2a"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          67305985,
+          9
+        ],
+        [
+          4294967295,
+          67305985,
+          10
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "2a"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 75,
+        "trace_sha256": "4e6411971d70aff944003db02e357c7fd06a78d4f72d7034e48ab813bb66f9cd"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ],
+        "save": 0,
+        "text": "2a"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          67305985,
+          9
+        ],
+        [
+          4294967295,
+          67305985,
+          10
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "bad-address",
+          "text": "626164"
+        }
+      ],
+      "execution": {
+        "stop": 253312,
+        "trace_length": 15,
+        "trace_sha256": "4585d0dfd3ae6b60d316cb4ced7466e028bdcb045d0b352ee1ca2df5b244248d"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ],
+        "save": 0,
+        "text": "626164"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          67305985,
+          9
+        ],
+        [
+          4294967295,
+          67305985,
+          10
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "3235352e3235352e3235352e323535"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 95,
+        "trace_sha256": "74cc14c3b65f772fa1038a1ed3455229ea70d274bc68d3906d266781caed17fb"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ],
+        "save": 0,
+        "text": "3235352e3235352e3235352e323535"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          67305985,
+          9
+        ],
+        [
+          4294967295,
+          67305985,
+          10
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "bad-address",
+          "text": ""
+        }
+      ],
+      "execution": {
+        "stop": 253312,
+        "trace_length": 15,
+        "trace_sha256": "4585d0dfd3ae6b60d316cb4ced7466e028bdcb045d0b352ee1ca2df5b244248d"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ],
+        "save": 0,
+        "text": "312e"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          67305985,
+          9
+        ],
+        [
+          4294967295,
+          67305985,
+          10
+        ]
+      ]
+    },
+    {
+      "changes": [
+        {
+          "address": 36275968,
+          "after": 4294967295,
+          "before": 67305985
+        }
+      ],
+      "diagnostics": [
+        {
+          "op": "removed"
+        }
+      ],
+      "execution": {
+        "stop": 253357,
+        "trace_length": 82,
+        "trace_sha256": "278e0610787c5a587cf4b4a08938b6243b582bae75f6a77575114e74b31ac52e"
+      },
+      "exported": [],
+      "exports": [
+        252500
+      ],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "312e322e332e34"
+      },
+      "result": 1,
+      "rows": [
+        [
+          255,
+          1,
+          11
+        ],
+        [
+          4294967295,
+          4294967295,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [
+        {
+          "address": 36275956,
+          "after": 4294967295,
+          "before": 1
+        }
+      ],
+      "diagnostics": [
+        {
+          "op": "removed"
+        }
+      ],
+      "execution": {
+        "stop": 253357,
+        "trace_length": 61,
+        "trace_sha256": "13bb7eef03b8846c0562a52d8787005ca3203dac9f6f7b3101c3c1793f26cf2a"
+      },
+      "exported": [],
+      "exports": [
+        252500
+      ],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "312e2a"
+      },
+      "result": 1,
+      "rows": [
+        [
+          255,
+          4294967295,
+          11
+        ],
+        [
+          4294967295,
+          67305985,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "2a"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 75,
+        "trace_sha256": "4e6411971d70aff944003db02e357c7fd06a78d4f72d7034e48ab813bb66f9cd"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "2a"
+      },
+      "result": 0,
+      "rows": [
+        [
+          255,
+          1,
+          11
+        ],
+        [
+          4294967295,
+          67305985,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "bad-address",
+          "text": "626164"
+        }
+      ],
+      "execution": {
+        "stop": 253312,
+        "trace_length": 15,
+        "trace_sha256": "4585d0dfd3ae6b60d316cb4ced7466e028bdcb045d0b352ee1ca2df5b244248d"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "626164"
+      },
+      "result": 0,
+      "rows": [
+        [
+          255,
+          1,
+          11
+        ],
+        [
+          4294967295,
+          67305985,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "3235352e3235352e3235352e323535"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 85,
+        "trace_sha256": "c33d637d615d95807baf47d84327e0b5b96018069bdf3367a43bb00400674e8c"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "3235352e3235352e3235352e323535"
+      },
+      "result": 0,
+      "rows": [
+        [
+          255,
+          1,
+          11
+        ],
+        [
+          4294967295,
+          67305985,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "bad-address",
+          "text": ""
+        }
+      ],
+      "execution": {
+        "stop": 253312,
+        "trace_length": 15,
+        "trace_sha256": "4585d0dfd3ae6b60d316cb4ced7466e028bdcb045d0b352ee1ca2df5b244248d"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ],
+        "save": 0,
+        "text": "312e"
+      },
+      "result": 0,
+      "rows": [
+        [
+          255,
+          1,
+          11
+        ],
+        [
+          4294967295,
+          67305985,
+          9
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "312e322e332e34"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 85,
+        "trace_sha256": "b948e5ab076a4902eb8a061d6f4d419cd8496d65cbff8c254d8d5306a7cbde12"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ],
+        "save": 0,
+        "text": "312e322e332e34"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          4294967295,
+          12
+        ],
+        [
+          0,
+          0,
+          13
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "not-found",
+          "text": "312e2a"
+        }
+      ],
+      "execution": {
+        "stop": 253380,
+        "trace_length": 75,
+        "trace_sha256": "4e6411971d70aff944003db02e357c7fd06a78d4f72d7034e48ab813bb66f9cd"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ],
+        "save": 0,
+        "text": "312e2a"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          4294967295,
+          12
+        ],
+        [
+          0,
+          0,
+          13
+        ]
+      ]
+    },
+    {
+      "changes": [
+        {
+          "address": 36275968,
+          "after": 4294967295,
+          "before": 0
+        }
+      ],
+      "diagnostics": [
+        {
+          "op": "removed"
+        }
+      ],
+      "execution": {
+        "stop": 253357,
+        "trace_length": 82,
+        "trace_sha256": "278e0610787c5a587cf4b4a08938b6243b582bae75f6a77575114e74b31ac52e"
+      },
+      "exported": [],
+      "exports": [
+        252500
+      ],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ],
+        "save": 0,
+        "text": "2a"
+      },
+      "result": 1,
+      "rows": [
+        [
+          4294967295,
+          4294967295,
+          12
+        ],
+        [
+          0,
+          4294967295,
+          13
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "bad-address",
+          "text": "626164"
+        }
+      ],
+      "execution": {
+        "stop": 253312,
+        "trace_length": 15,
+        "trace_sha256": "4585d0dfd3ae6b60d316cb4ced7466e028bdcb045d0b352ee1ca2df5b244248d"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ],
+        "save": 0,
+        "text": "626164"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          4294967295,
+          12
+        ],
+        [
+          0,
+          0,
+          13
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "removed"
+        }
+      ],
+      "execution": {
+        "stop": 253357,
+        "trace_length": 61,
+        "trace_sha256": "13bb7eef03b8846c0562a52d8787005ca3203dac9f6f7b3101c3c1793f26cf2a"
+      },
+      "exported": [],
+      "exports": [
+        252500
+      ],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ],
+        "save": 0,
+        "text": "3235352e3235352e3235352e323535"
+      },
+      "result": 1,
+      "rows": [
+        [
+          4294967295,
+          4294967295,
+          12
+        ],
+        [
+          0,
+          0,
+          13
+        ]
+      ]
+    },
+    {
+      "changes": [],
+      "diagnostics": [
+        {
+          "op": "bad-address",
+          "text": ""
+        }
+      ],
+      "execution": {
+        "stop": 253312,
+        "trace_length": 15,
+        "trace_sha256": "4585d0dfd3ae6b60d316cb4ced7466e028bdcb045d0b352ee1ca2df5b244248d"
+      },
+      "exported": [],
+      "exports": [],
+      "input": {
+        "handle": 7,
+        "metadata": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ],
+        "save": 0,
+        "text": "312e"
+      },
+      "result": 0,
+      "rows": [
+        [
+          4294967295,
+          4294967295,
+          12
+        ],
+        [
+          0,
+          0,
+          13
+        ]
+      ]
+    }
+  ],
+  "root": 253296,
+  "sha256": "a589351dfe517470a1b121dd2164714987d9e4577bf00c6486e1540035d7a79d",
+  "source": {
+    "archive": "zUrT43_qvm.pk3",
+    "archive_sha256": "b59bf0c5bedf11d50e0edd220da7eade96de40601e98ae14c54c819047df0796",
+    "member": {
+      "bytes": 983300,
+      "comment_hex": "",
+      "compressed_bytes": 246560,
+      "compression": 8,
+      "crc32": "98ea1768",
+      "create_system": 0,
+      "create_version": 63,
+      "date_time": [
+        2018,
+        6,
+        18,
+        22,
+        11,
+        50
+      ],
+      "directory": false,
+      "entry_index": 2,
+      "external_attr": 32,
+      "extra_hex": "0a0020000000000001001800d1e24e974007d40116dcbf962f1fd20116dcbf962f1fd201",
+      "extract_version": 20,
+      "flags": 0,
+      "header_offset": 221309,
+      "internal_attr": 0,
+      "occurrence": 0,
+      "output": "assets/extracted/zUrT43_qvm.pk3/members/000002/vm/qagame.qvm",
+      "path": "vm/qagame.qvm",
+      "sha256": "a589351dfe517470a1b121dd2164714987d9e4577bf00c6486e1540035d7a79d",
+      "type": "member",
+      "volume": 0
+    }
+  }
+}

scripts/analyze_qvm_filter_remove.py

@@ -0,0 +1,13 @@
+"""Execute recovered filter mutation and its explicit child boundaries."""
+from pathlib import Path
+from analyze_qvm import write_json
+from qvm_research_support import source
+from qvm_filter_persistence_support import environment,mutate,mutation_fixtures
+from qvm_filter_update_support import snapshot
+
+def main():
+ q,raw,h,ins=source();probes=[]
+ for a in mutation_fixtures('remove'):
+  m,b=environment(raw,h,a['rows']);m,p,b=mutate(ins,m,b,bytes.fromhex(a['text']),'remove',a['metadata'],a['save'],False,a['handle']);p.update(input=a,rows=snapshot(m,len(a['rows'])));probes.append(p)
+ write_json(Path('docs/research/qvm-filter-remove.json'),dict(source=q['source'],sha256=q['sha256'],root=253296,probes=probes,limits='Exact mask/comparison first-match scan; parser and integer children source-executed; native diagnostics and file IO captured. Native table provenance, malformed counts and unsafe parser tokens remain open.'))
+if __name__=='__main__':main()

scripts/qvm_filter_persistence_support.py

@@ -49,3 +49,44 @@ def export_oracle(rows,handle):
  lines=[('.'.join(str(x) for x in r[1].to_bytes(4,'little'))+':').encode()+decimal(r[2])+b'\n' for r in rows if r[1]!=0xffffffff]
  text=b''.join(lines)
  return dict(events=[] if not rows else [dict(op='print',text=b'Writing: banlist.txt\n'.hex()),dict(op='open',path=b'banlist.txt'.hex(),mode=1),dict(op='write',handle=handle,text=text.hex()),dict(op='close',handle=handle)],formats=[x.hex() for x in lines],buffer=(text if rows else b'stale').hex())
+
+def mutate(ins,m,b,text,kind,metadata=0,save=0,with_export=False,handle=7):
+ from qvm_filter_update_support import LEFT
+ from qvm_camera_world_support import string
+ string(m,b,LEFT,text);diagnostics=[];exports=[];exported=[]
+ def warning(i,m,a,bs):
+  diagnostics.append(dict(op='removed') if a[8]==92070 else dict(op='bad-address',text=cstring(m,bs,a[12]).hex()) if a[8]==92320 else dict(op='not-found',text=cstring(m,bs,a[12]).hex()))
+  return m,0,{'diagnostic_captured':True}
+ def atoi(i,m,a,bs):
+  m,v,p,b=run(i,m,37159,37277,36,a,dict(bs),base=EXPORT+0x30000);return m,v,{'actual_source_child':37159}
+ def parse(i,m,a,bs):
+  m,v,p,b=run(i,m,252304,252498,172,a,dict(bs),{37159:atoi,2294:warning},base=EXPORT+0x40000);return m,v,{'actual_source_child':252304}
+ def persist(i,m,a,bs):
+  exports.append(252500)
+  if with_export:
+   m,p,b=export(i,m,dict(bs),handle);exported.append({k:p[k] for k in ['events','formats','buffer']});return m,0,{'actual_source_child':252500}
+  return m,0,{'export_captured':True}
+ start,stop=(253296,253381) if kind=='remove' else (252127,252212)
+ m,v,p,b=run(ins,m,start,stop,40,{8:LEFT,12:metadata,16:save},b,{252304:parse,2294:warning,252500:persist},base=EXPORT+0x50000)
+ p.update(result=v,diagnostics=diagnostics,exports=exports,exported=exported);return m,p,b
+
+def mutation_fixtures(kind):
+ from itertools import product
+ tables=[[],[[0xffffffff,0x04030201,9]],[[0xffffffff,0x04030201,9],[0xffffffff,0x04030201,10]],[[0xff,1,11],[0xffffffff,0x04030201,9]],[[0xffffffff,0xffffffff,12],[0,0,13]]]
+ texts=[b'1.2.3.4',b'1.*',b'*',b'bad',b'255.255.255.255',b'1.']
+ return [dict(rows=rows,text=text.hex(),metadata=meta,save=save,handle=7) for rows,text,meta,save in product(tables,texts,[0,0xffffffff,0x80000000] if kind=='metadata' else [0],[0,1] if kind=='metadata' else [0])]
+
+def mutation_oracle(a,kind,with_export=False):
+ from qvm_filter_insert_oracle import parse
+ rows=[list(r) for r in a['rows']];parsed,remaining=parse(bytes.fromhex(a['text']));diag=[];exports=[];result=0
+ if parsed is None:diag=[dict(op='bad-address',text=remaining.hex())]
+ else:
+  j=next((j for j,r in enumerate(rows) if r[:2]==list(parsed)),None)
+  if j is None:diag=[dict(op='not-found',text=a['text'])]
+  else:
+   result=1
+   if kind=='remove':rows[j][1]=0xffffffff;diag=[dict(op='removed')];exports=[252500]
+   else:
+    rows[j][2]=a['metadata']
+    if a['save']:exports=[252500]
+ return dict(result=result,diagnostics=diag,exports=exports,exported=[export_oracle(rows,a['handle'])] if exports and with_export else [],rows=rows)

scripts/test_qvm_filter_remove.py

@@ -0,0 +1,13 @@
+import json,unittest
+from pathlib import Path
+from qvm_filter_persistence_support import mutation_oracle
+class MutationTests(unittest.TestCase):
+ def test_source_mutation_and_effects(self):
+  rows=json.loads(Path('docs/research/qvm-filter-remove.json').read_text())['probes'];self.assertEqual(len(rows),30)
+  for p in rows:
+   for k,v in mutation_oracle(p['input'],'remove',False).items():self.assertEqual(p[k],v)
+ def test_duplicates_and_hole_sentinel(self):
+  a=dict(rows=[[0xffffffff,0x04030201,9],[0xffffffff,0x04030201,10]],text=b'1.2.3.4'.hex(),metadata=42,save=1,handle=7)
+  p=mutation_oracle(a,'remove',False);self.assertEqual(p['rows'][1],a['rows'][1]);self.assertEqual(p['result'],1)
+  a.update(rows=[[0xffffffff,0xffffffff,9]],text=b'255.255.255.255'.hex());self.assertEqual(mutation_oracle(a,'remove',False)['result'],1)
+if __name__=='__main__':unittest.main()

xtask/checks.tsv

@@ -3124,3 +3124,7 @@ edge	docs/research/qvm-filter-export.json	scripts/analyze_rust_filter_export.py
 group	rust-filter-export	scripts/analyze_rust_health_impulse.py
 group	gameplay	scripts/analyze_rust_filter_export.py
 edge	crates/urt-gameplay/src/qvm_format.rs	scripts/analyze_rust_filter_export.py
+report	scripts/analyze_qvm_filter_remove.py	docs/research/qvm-filter-remove.json
+edge	docs/research/qvm-filter-remove.json	scripts/test_qvm_filter_remove.py
+group	qvm-filter-remove	scripts/analyze_qvm_filter_remove.py
+edge	scripts/analyze_qvm_filter_remove.py	scripts/analyze_qvm_resumer_audit.py