qvm: recover single recipient payload

docs/ASSET_PIPELINE_TODO.md

@@ -943,3 +943,6 @@ Research progress: RE-760 [report](research/QVM_TEAM_COUNTERS.md); original asse
 
 
 Research progress: RE-761 [report](research/QVM_RECENT_AWARDS.md); original assets unchanged.
+
+
+Research progress: RE-762 [report](research/QVM_RECIPIENT_SINGLE.md); original assets unchanged.

docs/FINDINGS.md

@@ -1289,3 +1289,6 @@ RE-725–734 batch: [health, contact and Rust impulse findings](research/QVM_HEA
 
 
 **RE-761 — Complete recent record awards timestamp gates and index64 alias:** 285227 awards distinct enemy recipients when record count is at least40 and wrapped signed age is at most30000; index64 aliases the award word. [Evidence](research/QVM_RECENT_AWARDS.md).
+
+
+**RE-762 — Single recipient numeric payload cached ping and send requests:** 179736 numeric payload preserves cached follow ping, applies entity-flag publication override, and emits source status/time/packed-field arguments. [Evidence](research/QVM_RECIPIENT_SINGLE.md).

docs/PROVISIONAL_TODO.md

@@ -1284,3 +1284,6 @@ Research progress: RE-760 [report](research/QVM_TEAM_COUNTERS.md); full native/p
 
 
 Research progress: RE-761 [report](research/QVM_RECENT_AWARDS.md); full native/platform/game scope remains open.
+
+
+Research progress: RE-762 [report](research/QVM_RECIPIENT_SINGLE.md); full native/platform/game scope remains open.

docs/RESEARCH_LEDGER.md

@@ -1459,3 +1459,8 @@ Exactly ten task commits follow baseline `ae4d61e7`. Each task passed focused `c
 ## 2026-10-21 — RE-761 Complete recent record awards timestamp gates and index64 alias
 
 285227 awards distinct enemy recipients when record count is at least40 and wrapped signed age is at most30000; index64 aliases the award word. Focused `cargo xtask test-group recent-awards` passes (3 Python tests); selected reports regenerate twice byte-identically, with storage, links and whitespace guards. New report: 238290 bytes. Full-suite validation is deferred to the tenth batch commit. No original assets, Rust runtime or shared VM evaluator changed.
+
+
+## 2026-10-21 — RE-762 Single recipient numeric payload cached ping and send requests
+
+179736 numeric payload preserves cached follow ping, applies entity-flag publication override, and emits source status/time/packed-field arguments. Focused `cargo xtask test-group recipient-single` passes (3 Python tests); selected reports regenerate twice byte-identically, with storage, links and whitespace guards. New report: 417817 bytes. Full-suite validation is deferred to the tenth batch commit. No original assets, Rust runtime or shared VM evaluator changed.

docs/REVERSE_ENGINEERING_TODO.md

@@ -1327,3 +1327,6 @@ Purpose: turn the supplied installation into an evidence-backed specification of
 
 
 - [x] RE-761 Complete recent record awards timestamp gates and index64 alias ([report](research/QVM_RECENT_AWARDS.md)).
+
+
+- [x] RE-762 Single recipient numeric payload cached ping and send requests ([report](research/QVM_RECIPIENT_SINGLE.md)).

docs/research/QVM_RECIPIENT_SINGLE.md

@@ -0,0 +1,7 @@
+# Single recipient numeric payload cached ping and send requests
+
+RE-762. Reproduce with `python3 scripts/analyze_qvm_recipient_single.py`; validate with `cargo xtask test-group recipient-single`. See the [machine report](qvm-recipient-single.json).
+
+Recovered179740..180084 gates, cache writes and numeric formatter ABI over72 fixtures. Ping is capped only above999, negative ping survives, follow flag1024 reuses cache, and entity bit8 publishes-1 after cache handling. Status priority and class0..20 are checked independently. The initial unaligned literal-copy setup is excluded; strlen/copy/format/send effects remain supplied or captured, so serialized strings and native networking are not claimed.
+
+No original executable/full VM/native world collision or rendering runs. Supplied callback/native responses and fixture domains remain explicit; complete macOS/Linux Rust/Bevy/Solari gameplay remains open.

docs/research/README.md

@@ -879,3 +879,6 @@ The extension collector adds five focused tests for native tail calls, command-r
 
 
 [RE-761: Complete recent record awards timestamp gates and index64 alias](QVM_RECENT_AWARDS.md).
+
+
+[RE-762: Single recipient numeric payload cached ping and send requests](QVM_RECIPIENT_SINGLE.md).

scripts/analyze_qvm_recipient_single.py

@@ -0,0 +1,17 @@
+#!/usr/bin/env python3
+"""Single-recipient numeric score/status payload, excluding literal-copy setup."""
+import itertools
+from pathlib import Path
+from qvm_research_support import source
+from qvm_recipient_payload_support import seed,payload,TARGET,RECIPIENT
+from analyze_qvm import write_json
+
+def main():
+    q,raw,h,ins=source();rows=[]
+    cases=[dict(ping=p,connected=c,follow=int(f),pm_flags=1024 if f else 0,entity_flags=e,name_length=n) for (p,n),c,f,e in itertools.product([(-5,0),(998,1),(999,2),(1500,31)],[0,2],[False,True],[0,8])]
+    cases += [dict(health=health,protected=flags,special=special,**{'class':cl}) for health,flags,special,cl in itertools.product([0,100],[0,16384],[0,1],[-1,0,20,21])]
+    cases += [dict(null=True),dict(null_recipient=True),dict(active=0),dict(client=False),dict(recipient_active=0),dict(recipient_client=False),dict(follow=1,pm_flags=0),dict(now=-2147483648,entered=2147483647,extra_time=0,packed=0xffff00ff)]
+    for a in cases:
+        _,p=payload(ins,seed(**a),{8:0 if a.get('null') else TARGET,12:0 if a.get('null_recipient') else RECIPIENT},lengths=(a.get('name_length',0),0));p['input']=a;rows.append(p)
+    write_json(Path('docs/research/qvm-recipient-single.json'),{'source':q['source'],'sha256':q['sha256'],'probes':rows,'limits':'179740..180084 numeric body and gates; initial unaligned literal BLOCK_COPY excluded by start boundary. strlen lengths supplied;69338 copy/70458 format/-18 send captured. Numeric formatter arguments and ping-cache writes verified; no serialized text or networking parity.'})
+if __name__=='__main__':main()

scripts/qvm_recipient_payload_support.py

@@ -0,0 +1,35 @@
+"""179736/180087 numeric payload bodies; literal/copy/format boundaries explicit."""
+from qvm_health_effects_support import H,TARGET,ATTACKER
+from qvm_notification_support import POOL,CPOOL
+from qvm_trace_support import resume,captured
+S=H+0x170000
+BODY=H+0x180000
+RECIPIENT=POOL+3*880
+FIRST=CPOOL+6336
+SECOND=CPOOL+2*6336
+FIELDS=[12,140,208,220,248,280,300,308,452,468,576,696,3032,3692,3740,4324,4336,6160]
+
+def seed(**a):
+    m={34992496:CPOOL,34992532:a.get('now',121000),TARGET+520:FIRST if a.get('client',True) else 0,TARGET+532:a.get('active',1),ATTACKER+520:SECOND,ATTACKER+532:1,RECIPIENT+520:CPOOL+3*6336 if a.get('recipient_client',True) else 0,RECIPIENT+532:a.get('recipient_active',1)}
+    defaults={12:0,140:1,208:100,220:0,248:7,280:3,300:0x800001ff,308:17,452:70,468:2,576:1000,696:20,3032:4,3692:9,3740:0,4324:0,4336:60000,6160:77}
+    names={'ping':452,'connected':468,'follow':4324,'pm_flags':12,'health':208,'protected':220,'special':3740,'class':696,'cached':6160,'packed':300,'entered':576,'extra_time':4336}
+    for c,prefix,id in [(FIRST,'',1),(SECOND,'second_',2)]:
+        for o,v in defaults.items():m[c+o]=v
+        m[c+140]=id
+        for name,o in names.items():m[c+o]=a.get(prefix+name,defaults[o])
+        m[POOL+880*id+424]=a.get(prefix+'entity_flags',0)
+    if a.get('self'):m[ATTACKER+520]=FIRST
+    return m
+
+def numeric_state(m,c):return {str(o):m[c+o]&0xffffffff for o in FIELDS}
+
+def payload(ins,m,args,pair=False,lengths=(0,0)):
+    frame=276 if pair else 148;end=180740 if pair else 180085;start=180091 if pair else 179740
+    for o,v in args.items():m[S+frame+o]=v
+    initial=[numeric_state(m,c) for c in [FIRST,SECOND]];requests=[];name_calls=[]
+    def length(i,m,a):
+        pos=0 if a[8]==FIRST+3624 else 1;v=lengths[pos];name_calls.append({'pointer':a[8],'supplied_length':v});return m,v,{'supplied_length':v,'original_strlen_not_executed':True}
+    def formatted(i,m,a):requests.append({'target':70458,'arguments':a,'native_effect_not_executed':True});return m,BODY,{'supplied_pointer':BODY,'formatting_not_executed':True}
+    hs={36038:length,69338:captured(69338,requests),70458:formatted,-18:captured(-18,requests)}
+    m,e=resume(ins,start,end,m,S,handlers=hs)
+    return m,{'initial_clients':initial,'final_clients':[numeric_state(m,c) for c in [FIRST,SECOND]],'requests':requests,'name_calls':name_calls,'execution':e}

scripts/test_qvm_recipient_single.py

@@ -0,0 +1,31 @@
+import json,math,unittest
+from pathlib import Path
+from test_qvm_stat_totals import signed
+from qvm_recipient_payload_support import FIRST,S,BODY
+
+def numeric(c,entity_flags,now):
+    v=lambda o:signed(c[str(o)]);ping=min(v(452),999) if v(468)==2 else 999;cached=v(6160)
+    if v(4324) and v(12)&1024:ping=cached
+    else:cached=ping
+    if entity_flags&8:ping=-1
+    status=2 if v(3740) else 1 if v(4324) or v(208)<=0 or v(220)&16384 else 0
+    return cached,{'score':v(248),'ping':ping,'minutes':math.trunc(signed(signed(now-v(576))+v(4336))/60000),'status':status,'deaths':v(280),'field3692':v(3692),'packed_low':c['300']&255,'packed_high':v(300)>>8,'field308':v(308),'awards':v(3032),'class':v(696) if 0<=v(696)<=20 else 0}
+KEYS=['score','ping','minutes','status','deaths','field3692','packed_low','packed_high','field308','awards','class']
+class RecipientSingleTests(unittest.TestCase):
+    @classmethod
+    def setUpClass(cls):cls.ps=json.loads(Path('docs/research/qvm-recipient-single.json').read_text())['probes']
+    def test_independent_numeric_payload_and_cache(self):
+        for p in self.ps:
+            a=p['input'];active=not a.get('null') and not a.get('null_recipient') and a.get('active',1) and a.get('client',True) and a.get('recipient_active',1) and a.get('recipient_client',True);formats=[r for r in p['requests'] if r['target']==70458];self.assertEqual(len(formats),int(bool(active)))
+            expected=[dict(c) for c in p['initial_clients']]
+            if active:
+                cache,fields=numeric(expected[0],a.get('entity_flags',0),a.get('now',121000));expected[0]['6160']=cache&0xffffffff;args=formats[0]['arguments'];self.assertEqual(args['8'],79263);self.assertEqual(args['12'],1);self.assertEqual({key:args[str(16+4*j)] for j,key in enumerate(KEYS)},fields)
+            self.assertEqual(p['final_clients'],expected,a)
+    def test_copy_selection_and_send_abi(self):
+        for p in self.ps:
+            if not p['requests']:continue
+            a=p['input'];copies=[r for r in p['requests'] if r['target']==69338];self.assertEqual(copies[0]['arguments'],{'8':S+72,'12':FIRST+3624 if a.get('name_length',0)>=2 else S+112,'16':32});self.assertEqual(p['requests'][-1]['arguments'],{'8':3,'12':BODY})
+    def test_exit_and_domains(self):
+        self.assertEqual(len(self.ps),72)
+        for p in self.ps:self.assertEqual(p['execution']['stop'],180085)
+if __name__=='__main__':unittest.main()

xtask/checks.tsv

@@ -1284,3 +1284,6 @@ group	team-counters	scripts/analyze_qvm_team_counters.py
 report	scripts/analyze_qvm_recent_awards.py	docs/research/qvm-recent-awards.json
 edge	docs/research/qvm-recent-awards.json	scripts/test_qvm_recent_awards.py
 group	recent-awards	scripts/analyze_qvm_recent_awards.py
+report	scripts/analyze_qvm_recipient_single.py	docs/research/qvm-recipient-single.json
+edge	docs/research/qvm-recipient-single.json	scripts/test_qvm_recipient_single.py
+group	recipient-single	scripts/analyze_qvm_recipient_single.py