qvm: packed string length

docs/ASSET_PIPELINE_TODO.md

@@ -697,3 +697,6 @@ Research progress: RE-673 [report](research/QVM_MODEL_HIERARCHY.md); remaining n
 
 
 Research progress: RE-674 [report](research/QVM_LEAF_BASIS.md); remaining native/content/runtime/platform scope stays open.
+
+
+Research progress: RE-675 [report](research/QVM_WORD_STRLEN.md); remaining native/content/runtime/platform scope stays open.

docs/FINDINGS.md

@@ -1043,3 +1043,6 @@ Bounded qagame paths recover bomb-plant/inactivity correction requests, direct f
 
 
 **RE-674 — Leaf ancestry matrix accumulation:** 23092 accumulates matrices through the node parent chain and repeats the unusual fourth-row source indexing; identity ancestors therefore alter row four. [Evidence](research/QVM_LEAF_BASIS.md).
+
+
+**RE-675 — Packed-word string length for resource release:** Complete36038 tests each byte of packed words and returns the first NUL offset, including high-bit data and cross-word boundaries. [Evidence](research/QVM_WORD_STRLEN.md).

docs/PROVISIONAL_TODO.md

@@ -1023,3 +1023,6 @@ Research progress: RE-673 [report](research/QVM_MODEL_HIERARCHY.md); remaining n
 
 
 Research progress: RE-674 [report](research/QVM_LEAF_BASIS.md); remaining native/content/runtime/platform scope stays open.
+
+
+Research progress: RE-675 [report](research/QVM_WORD_STRLEN.md); remaining native/content/runtime/platform scope stays open.

docs/RESEARCH_LEDGER.md

@@ -1027,3 +1027,8 @@ Complete22009 composes the sample basis only with nonnull parents and uses local
 ## 2026-10-21 — RE-674 Leaf ancestry matrix accumulation (separate task commit)
 
 23092 accumulates matrices through the node parent chain and repeats the unusual fourth-row source indexing; identity ancestors therefore alter row four. 12 independent full4×4 float32 product fixtures cover depths1..4, identity, turn/scale and nondiagonal inputs. Full suite: 1157 tests pass. Report regenerates byte-identically (22327 bytes). Storage/filter, links and whitespace checks pass. No assets/Rust runtime/shared VM evaluator changed; native/reference/legal/full platform scope remains open.
+
+
+## 2026-10-21 — RE-675 Packed-word string length for resource release (separate task commit)
+
+Complete36038 tests each byte of packed words and returns the first NUL offset, including high-bit data and cross-word boundaries. 48 independent byte-length fixtures cover every in-word NUL position, long strings, offset pointers and unchanged input memory; missing backing words reject. Full suite: 1161 tests pass. Report regenerates byte-identically (22547 bytes). Storage/filter, links and whitespace checks pass. No assets/Rust runtime/shared VM evaluator changed; native/reference/legal/full platform scope remains open.

docs/REVERSE_ENGINEERING_TODO.md

@@ -1066,3 +1066,6 @@ Purpose: turn the supplied installation into an evidence-backed specification of
 
 
 - [x] RE-674 Leaf ancestry matrix accumulation ([report](research/QVM_LEAF_BASIS.md)).
+
+
+- [x] RE-675 Packed-word string length for resource release ([report](research/QVM_WORD_STRLEN.md)).

docs/research/QVM_WORD_STRLEN.md

@@ -0,0 +1,7 @@
+# Packed-word string length for resource release
+
+RE-675. Reproduce with `python3 scripts/analyze_qvm_word_strlen.py`; check with `python3 scripts/test_qvm_word_strlen.py`. The [machine report](qvm-word-strlen.json) retains source identity and bounded fixtures.
+
+Actual36039–36120 reads four-byte words, tests low-to-high byte masks and advances by4 until a NUL is found. Independent payload lengths verify outputs through129 bytes with high-bit nonzero data and nonzero bytes after the terminator. This helper is a source implementation, not a supplied native strlen response. LOAD4 can read past the terminator within its word; finite backing memory is explicit. Synthetic unaligned keys do not establish native alignment/page safety. No heap/string ownership or native execution is claimed.
+
+No original executable/full QVM/native collision/physics/rendering executes. Native responses and legal input domains are supplied or unverified where stated; full runtime/macOS/Linux Rust/Bevy/Solari gameplay remains open.

docs/research/README.md

@@ -624,3 +624,6 @@ The extension collector adds five focused tests for native tail calls, command-r
 
 
 [RE-674: Leaf ancestry matrix accumulation](QVM_LEAF_BASIS.md). Reproduce with `python3 scripts/analyze_qvm_leaf_basis.py`; check with `python3 scripts/test_qvm_leaf_basis.py`.
+
+
+[RE-675: Packed-word string length for resource release](QVM_WORD_STRLEN.md). Reproduce with `python3 scripts/analyze_qvm_word_strlen.py`; check with `python3 scripts/test_qvm_word_strlen.py`.

docs/research/qvm-word-strlen.json

@@ -0,0 +1,761 @@
+{
+  "limits": "Actual36039\u201336120 over explicit word-addressed memory containing a NUL. Packed LOAD4 can read bytes after NUL. Unaligned fixture keys are evaluator inputs, not native alignment/page-safety evidence. Missing memory rejects.",
+  "probes": [
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 0,
+        "trace": null,
+        "trace_length": 23,
+        "trace_sha256": "1b349c58c6f21e6a15c703b42348dc1414d4ccc6827fa5d3219b6103707667f5"
+      },
+      "length": 0,
+      "payload_hex": "",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 0,
+        "trace": null,
+        "trace_length": 23,
+        "trace_sha256": "1b349c58c6f21e6a15c703b42348dc1414d4ccc6827fa5d3219b6103707667f5"
+      },
+      "length": 0,
+      "payload_hex": "",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 1,
+        "trace": null,
+        "trace_length": 37,
+        "trace_sha256": "a6cd2a09059ed0f19ad38433ac4109baf623116c17f703182c186e97588f7ecc"
+      },
+      "length": 1,
+      "payload_hex": "01",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 1,
+        "trace": null,
+        "trace_length": 37,
+        "trace_sha256": "a6cd2a09059ed0f19ad38433ac4109baf623116c17f703182c186e97588f7ecc"
+      },
+      "length": 1,
+      "payload_hex": "01",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 2,
+        "trace": null,
+        "trace_length": 43,
+        "trace_sha256": "e9c82bdb2026c1106640d5bb7321d23bee198ce90359f4182e58182b55a1e2f1"
+      },
+      "length": 2,
+      "payload_hex": "014a",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 2,
+        "trace": null,
+        "trace_length": 43,
+        "trace_sha256": "e9c82bdb2026c1106640d5bb7321d23bee198ce90359f4182e58182b55a1e2f1"
+      },
+      "length": 2,
+      "payload_hex": "014a",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 3,
+        "trace": null,
+        "trace_length": 49,
+        "trace_sha256": "a34822537e467d80a627d79dfb82b5dcdfdb8a7b145ab5dc61ea78b29bddcbe3"
+      },
+      "length": 3,
+      "payload_hex": "014a93",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 3,
+        "trace": null,
+        "trace_length": 49,
+        "trace_sha256": "a34822537e467d80a627d79dfb82b5dcdfdb8a7b145ab5dc61ea78b29bddcbe3"
+      },
+      "length": 3,
+      "payload_hex": "014a93",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 4,
+        "trace": null,
+        "trace_length": 64,
+        "trace_sha256": "48400504cf85aaf4e728055a74011792e380084af8463ce7f98452ada2a7ea18"
+      },
+      "length": 4,
+      "payload_hex": "014a93dc",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 4,
+        "trace": null,
+        "trace_length": 64,
+        "trace_sha256": "48400504cf85aaf4e728055a74011792e380084af8463ce7f98452ada2a7ea18"
+      },
+      "length": 4,
+      "payload_hex": "014a93dc",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 5,
+        "trace": null,
+        "trace_length": 78,
+        "trace_sha256": "806c16c108918883f7186176266f9efbaf88c595452d0447f80541143ead0aa5"
+      },
+      "length": 5,
+      "payload_hex": "014a93dc26",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 5,
+        "trace": null,
+        "trace_length": 78,
+        "trace_sha256": "806c16c108918883f7186176266f9efbaf88c595452d0447f80541143ead0aa5"
+      },
+      "length": 5,
+      "payload_hex": "014a93dc26",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 6,
+        "trace": null,
+        "trace_length": 84,
+        "trace_sha256": "57437437d3e3b45443aee2d41ffbcaaa475d7e6f3af8976188ab5229da1e4522"
+      },
+      "length": 6,
+      "payload_hex": "014a93dc266f",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 6,
+        "trace": null,
+        "trace_length": 84,
+        "trace_sha256": "57437437d3e3b45443aee2d41ffbcaaa475d7e6f3af8976188ab5229da1e4522"
+      },
+      "length": 6,
+      "payload_hex": "014a93dc266f",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 7,
+        "trace": null,
+        "trace_length": 90,
+        "trace_sha256": "b7078cfb4bed4538e09055d3538145ff1dc05dd118126a45ffb8a1dfdcff699c"
+      },
+      "length": 7,
+      "payload_hex": "014a93dc266fb8",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 7,
+        "trace": null,
+        "trace_length": 90,
+        "trace_sha256": "b7078cfb4bed4538e09055d3538145ff1dc05dd118126a45ffb8a1dfdcff699c"
+      },
+      "length": 7,
+      "payload_hex": "014a93dc266fb8",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 8,
+        "trace": null,
+        "trace_length": 105,
+        "trace_sha256": "553ebaaa9efa13eb8016c9594764e71ea9f784ea3e4d16a1b065a7bffb355ae0"
+      },
+      "length": 8,
+      "payload_hex": "014a93dc266fb802",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 8,
+        "trace": null,
+        "trace_length": 105,
+        "trace_sha256": "553ebaaa9efa13eb8016c9594764e71ea9f784ea3e4d16a1b065a7bffb355ae0"
+      },
+      "length": 8,
+      "payload_hex": "014a93dc266fb802",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 9,
+        "trace": null,
+        "trace_length": 119,
+        "trace_sha256": "e7d04a06d512976aa0cc697544b754c8743099d311e339831f475ecd89675027"
+      },
+      "length": 9,
+      "payload_hex": "014a93dc266fb8024b",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 9,
+        "trace": null,
+        "trace_length": 119,
+        "trace_sha256": "e7d04a06d512976aa0cc697544b754c8743099d311e339831f475ecd89675027"
+      },
+      "length": 9,
+      "payload_hex": "014a93dc266fb8024b",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 10,
+        "trace": null,
+        "trace_length": 125,
+        "trace_sha256": "24ebdf56a7baa883468c86b51e5537941258a24f150765727adb357fbe6d310c"
+      },
+      "length": 10,
+      "payload_hex": "014a93dc266fb8024b94",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 10,
+        "trace": null,
+        "trace_length": 125,
+        "trace_sha256": "24ebdf56a7baa883468c86b51e5537941258a24f150765727adb357fbe6d310c"
+      },
+      "length": 10,
+      "payload_hex": "014a93dc266fb8024b94",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 11,
+        "trace": null,
+        "trace_length": 131,
+        "trace_sha256": "49a03d7ea80a76534a04862d59f1420da40c121778aa9e3d504bcd7139cd1c4e"
+      },
+      "length": 11,
+      "payload_hex": "014a93dc266fb8024b94dd",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 11,
+        "trace": null,
+        "trace_length": 131,
+        "trace_sha256": "49a03d7ea80a76534a04862d59f1420da40c121778aa9e3d504bcd7139cd1c4e"
+      },
+      "length": 11,
+      "payload_hex": "014a93dc266fb8024b94dd",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 12,
+        "trace": null,
+        "trace_length": 146,
+        "trace_sha256": "bf3e6f87491f4e7cd36ae561805729108d87a93de5889a24109277fd226d3795"
+      },
+      "length": 12,
+      "payload_hex": "014a93dc266fb8024b94dd27",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 12,
+        "trace": null,
+        "trace_length": 146,
+        "trace_sha256": "bf3e6f87491f4e7cd36ae561805729108d87a93de5889a24109277fd226d3795"
+      },
+      "length": 12,
+      "payload_hex": "014a93dc266fb8024b94dd27",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 13,
+        "trace": null,
+        "trace_length": 160,
+        "trace_sha256": "e54a8478bc790d1c6049314112af1d643df470a603066f0c18a3b125ed936108"
+      },
+      "length": 13,
+      "payload_hex": "014a93dc266fb8024b94dd2770",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 13,
+        "trace": null,
+        "trace_length": 160,
+        "trace_sha256": "e54a8478bc790d1c6049314112af1d643df470a603066f0c18a3b125ed936108"
+      },
+      "length": 13,
+      "payload_hex": "014a93dc266fb8024b94dd2770",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 14,
+        "trace": null,
+        "trace_length": 166,
+        "trace_sha256": "27e9a7f2f780d3ad84b49e2e6ed089994e977de325cd7a74efd238ca890379d8"
+      },
+      "length": 14,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 14,
+        "trace": null,
+        "trace_length": 166,
+        "trace_sha256": "27e9a7f2f780d3ad84b49e2e6ed089994e977de325cd7a74efd238ca890379d8"
+      },
+      "length": 14,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 15,
+        "trace": null,
+        "trace_length": 172,
+        "trace_sha256": "41d3b4a6c1983f9284d074e9dee27972fa698dd56e264b6a35233ec265326088"
+      },
+      "length": 15,
+      "payload_hex": "014a93dc266fb8024b94dd2770b903",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 15,
+        "trace": null,
+        "trace_length": 172,
+        "trace_sha256": "41d3b4a6c1983f9284d074e9dee27972fa698dd56e264b6a35233ec265326088"
+      },
+      "length": 15,
+      "payload_hex": "014a93dc266fb8024b94dd2770b903",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 16,
+        "trace": null,
+        "trace_length": 187,
+        "trace_sha256": "905af6b402d79b6c479e79cb68831dc3213fc492c7d42806e9aab31da6fffe00"
+      },
+      "length": 16,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 16,
+        "trace": null,
+        "trace_length": 187,
+        "trace_sha256": "905af6b402d79b6c479e79cb68831dc3213fc492c7d42806e9aab31da6fffe00"
+      },
+      "length": 16,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 17,
+        "trace": null,
+        "trace_length": 201,
+        "trace_sha256": "d5a1bfdd93c2c2b74489794dcc061822fd36bfcf6ba938cf88474c5e84fcc4a0"
+      },
+      "length": 17,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 17,
+        "trace": null,
+        "trace_length": 201,
+        "trace_sha256": "d5a1bfdd93c2c2b74489794dcc061822fd36bfcf6ba938cf88474c5e84fcc4a0"
+      },
+      "length": 17,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 31,
+        "trace": null,
+        "trace_length": 336,
+        "trace_sha256": "6bd25946a3dc448d14c1e29d2f4fbd1878a91881e32e6dab37b454e51758ae8e"
+      },
+      "length": 31,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 31,
+        "trace": null,
+        "trace_length": 336,
+        "trace_sha256": "6bd25946a3dc448d14c1e29d2f4fbd1878a91881e32e6dab37b454e51758ae8e"
+      },
+      "length": 31,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 32,
+        "trace": null,
+        "trace_length": 351,
+        "trace_sha256": "b5df56e509ca1751636a17709152c512c89862b7eb635d422ae04ecc1512c14a"
+      },
+      "length": 32,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97e0",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 32,
+        "trace": null,
+        "trace_length": 351,
+        "trace_sha256": "b5df56e509ca1751636a17709152c512c89862b7eb635d422ae04ecc1512c14a"
+      },
+      "length": 32,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97e0",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 33,
+        "trace": null,
+        "trace_length": 365,
+        "trace_sha256": "04420de3e2f27c210efd23ad0fcd0bd3a340d981727132e7a778fe9fae7a9769"
+      },
+      "length": 33,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97e02a",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 33,
+        "trace": null,
+        "trace_length": 365,
+        "trace_sha256": "04420de3e2f27c210efd23ad0fcd0bd3a340d981727132e7a778fe9fae7a9769"
+      },
+      "length": 33,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97e02a",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 127,
+        "trace": null,
+        "trace_length": 1320,
+        "trace_sha256": "c4f955de298a56fbb666c040f5324a49d130ca2995a387e4c41f48e624a8ebb9"
+      },
+      "length": 127,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97e02a73bc064f98e12b74bd075099e22c75be08519ae32d76bf09529be42e77c00a539ce52f78c10b549de63079c20c559ee7317ac30d569fe8327bc40e57a0e9337cc50f58a1ea347dc61059a2eb357ec7115aa3ec367fc8125ba4ed3780c913",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 127,
+        "trace": null,
+        "trace_length": 1320,
+        "trace_sha256": "c4f955de298a56fbb666c040f5324a49d130ca2995a387e4c41f48e624a8ebb9"
+      },
+      "length": 127,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97e02a73bc064f98e12b74bd075099e22c75be08519ae32d76bf09529be42e77c00a539ce52f78c10b549de63079c20c559ee7317ac30d569fe8327bc40e57a0e9337cc50f58a1ea347dc61059a2eb357ec7115aa3ec367fc8125ba4ed3780c913",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 128,
+        "trace": null,
+        "trace_length": 1335,
+        "trace_sha256": "41ee86dcc7439acaf85c000622740a1bff61721b2ca55b940964d77074fd768c"
+      },
+      "length": 128,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97e02a73bc064f98e12b74bd075099e22c75be08519ae32d76bf09529be42e77c00a539ce52f78c10b549de63079c20c559ee7317ac30d569fe8327bc40e57a0e9337cc50f58a1ea347dc61059a2eb357ec7115aa3ec367fc8125ba4ed3780c9135c",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 128,
+        "trace": null,
+        "trace_length": 1335,
+        "trace_sha256": "41ee86dcc7439acaf85c000622740a1bff61721b2ca55b940964d77074fd768c"
+      },
+      "length": 128,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97e02a73bc064f98e12b74bd075099e22c75be08519ae32d76bf09529be42e77c00a539ce52f78c10b549de63079c20c559ee7317ac30d569fe8327bc40e57a0e9337cc50f58a1ea347dc61059a2eb357ec7115aa3ec367fc8125ba4ed3780c9135c",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 129,
+        "trace": null,
+        "trace_length": 1349,
+        "trace_sha256": "531b016f83e6d280e16dbc668c73c6d6aa6746de2a41cf4de8c964618e2ed9f3"
+      },
+      "length": 129,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97e02a73bc064f98e12b74bd075099e22c75be08519ae32d76bf09529be42e77c00a539ce52f78c10b549de63079c20c559ee7317ac30d569fe8327bc40e57a0e9337cc50f58a1ea347dc61059a2eb357ec7115aa3ec367fc8125ba4ed3780c9135ca5",
+      "pointer": 2018512896,
+      "word_memory_unchanged": true
+    },
+    {
+      "execution": {
+        "byte_writes": [],
+        "calls": [],
+        "children": [],
+        "return": 129,
+        "trace": null,
+        "trace_length": 1349,
+        "trace_sha256": "531b016f83e6d280e16dbc668c73c6d6aa6746de2a41cf4de8c964618e2ed9f3"
+      },
+      "length": 129,
+      "payload_hex": "014a93dc266fb8024b94dd2770b9034c95de2871ba044d96df2972bb054e97e02a73bc064f98e12b74bd075099e22c75be08519ae32d76bf09529be42e77c00a539ce52f78c10b549de63079c20c559ee7317ac30d569fe8327bc40e57a0e9337cc50f58a1ea347dc61059a2eb357ec7115aa3ec367fc8125ba4ed3780c9135ca5",
+      "pointer": 2018512897,
+      "word_memory_unchanged": true
+    }
+  ],
+  "sha256": "a589351dfe517470a1b121dd2164714987d9e4577bf00c6486e1540035d7a79d",
+  "source": {
+    "archive": "zUrT43_qvm.pk3",
+    "archive_sha256": "b59bf0c5bedf11d50e0edd220da7eade96de40601e98ae14c54c819047df0796",
+    "member": {
+      "bytes": 983300,
+      "comment_hex": "",
+      "compressed_bytes": 246560,
+      "compression": 8,
+      "crc32": "98ea1768",
+      "create_system": 0,
+      "create_version": 63,
+      "date_time": [
+        2018,
+        6,
+        18,
+        22,
+        11,
+        50
+      ],
+      "directory": false,
+      "entry_index": 2,
+      "external_attr": 32,
+      "extra_hex": "0a0020000000000001001800d1e24e974007d40116dcbf962f1fd20116dcbf962f1fd201",
+      "extract_version": 20,
+      "flags": 0,
+      "header_offset": 221309,
+      "internal_attr": 0,
+      "occurrence": 0,
+      "output": "assets/extracted/zUrT43_qvm.pk3/members/000002/vm/qagame.qvm",
+      "path": "vm/qagame.qvm",
+      "sha256": "a589351dfe517470a1b121dd2164714987d9e4577bf00c6486e1540035d7a79d",
+      "type": "member",
+      "volume": 0
+    }
+  }
+}

scripts/analyze_qvm_word_strlen.py

@@ -0,0 +1,21 @@
+#!/usr/bin/env python3
+"""Complete36038 packed-word NUL length, used by string resource release."""
+import itertools
+from pathlib import Path
+from qvm_research_support import source,execute
+from analyze_qvm import write_json
+LOCAL=0x78500000
+POINTER=LOCAL+4096
+
+def length(ins,m,pointer):
+    m=dict(m);m[LOCAL+28]=pointer;m,_,e=execute(ins,36039,36121,m,(0,0,0),LOCAL);return m,{'pointer':pointer,'length':e['return'],'execution':e}
+
+def pack(pointer,payload):
+    data=payload+b'\0'+b'XYZ';data+=b'Q'*((-len(data))%4);return {pointer+j:int.from_bytes(data[j:j+4],'little') for j in range(0,len(data),4)}
+
+def main():
+    q,raw,h,ins=source();rows=[]
+    for size,offset in itertools.product(list(range(18))+[31,32,33,127,128,129],[0,1]):
+        pointer=POINTER+offset;payload=bytes(1+(j*73)%255 for j in range(size));m=pack(pointer,payload);after,r=length(ins,m,pointer);r['payload_hex']=payload.hex();r['word_memory_unchanged']=all(after[a]==v for a,v in m.items());rows.append(r)
+    write_json(Path('docs/research/qvm-word-strlen.json'),{'source':q['source'],'sha256':q['sha256'],'probes':rows,'limits':'Actual36039–36120 over explicit word-addressed memory containing a NUL. Packed LOAD4 can read bytes after NUL. Unaligned fixture keys are evaluator inputs, not native alignment/page-safety evidence. Missing memory rejects.'})
+if __name__=='__main__':main()

scripts/test_qvm_word_strlen.py

@@ -0,0 +1,16 @@
+import json,unittest
+from pathlib import Path
+class WordLengthTests(unittest.TestCase):
+    @classmethod
+    def setUpClass(cls):cls.rows=json.loads(Path('docs/research/qvm-word-strlen.json').read_text())['probes']
+    def test_independent_byte_length_across_word_boundaries(self):
+        self.assertEqual(len(self.rows),48)
+        for p in self.rows:self.assertEqual(p['length'],len(bytes.fromhex(p['payload_hex'])))
+    def test_high_bit_bytes_are_not_terminators(self):self.assertTrue(any(any(v>127 for v in bytes.fromhex(p['payload_hex'])) for p in self.rows))
+    def test_no_memory_changes_or_native_calls(self):
+        for p in self.rows:self.assertTrue(p['word_memory_unchanged']);self.assertEqual(p['execution']['calls'],[])
+    def test_missing_terminator_memory_rejected(self):
+        from qvm_research_support import source
+        from analyze_qvm_word_strlen import length,POINTER
+        with self.assertRaisesRegex(ValueError,'unknown'):length(source()[3],{POINTER:0x41414141},POINTER)
+if __name__=='__main__':unittest.main()