qvm: conditional aim jitter

docs/ASSET_PIPELINE_TODO.md

@@ -526,3 +526,6 @@ Research progress: RE-613 [report](research/QVM_SHARED_SHOT_BASIS.md); remaining
 
 
 Research progress: RE-615 [report](research/QVM_AIM_TRIG.md); remaining native/content/runtime/platform scope stays open.
+
+
+Research progress: RE-616 [report](research/QVM_AIM_EXTRA_OFFSETS.md); remaining native/content/runtime/platform scope stays open.

docs/FINDINGS.md

@@ -881,3 +881,6 @@ Bounded qagame paths recover bomb-plant/inactivity correction requests, direct f
 
 
 **RE-615 — Aim airborne adjustment and trigonometric offsets:** The airborne44 multiplier precedes sampling; three sin/cos pairs create horizontal and vertical offsets, then future field6304 can clear flag84. [Evidence](research/QVM_AIM_TRIG.md).
+
+
+**RE-616 — Conditional aim jitter and additional RNG draws:** IDs10/14/23 may add two RNG offsets; flag84 and the strict150-time boundary control the branch, with a distinct ID23 scale. [Evidence](research/QVM_AIM_EXTRA_OFFSETS.md).

docs/PROVISIONAL_TODO.md

@@ -846,3 +846,6 @@ Research progress: RE-613 [report](research/QVM_SHARED_SHOT_BASIS.md); remaining
 
 
 Research progress: RE-615 [report](research/QVM_AIM_TRIG.md); remaining native/content/runtime/platform scope stays open.
+
+
+Research progress: RE-616 [report](research/QVM_AIM_EXTRA_OFFSETS.md); remaining native/content/runtime/platform scope stays open.

docs/RESEARCH_LEDGER.md

@@ -757,3 +757,8 @@ Each spread candidate consumes four actual36717 draws; acceptance requires radiu
 ## 2026-10-20 — RE-615 Aim airborne adjustment and trigonometric offsets (separate task commit)
 
 The airborne44 multiplier precedes sampling; three sin/cos pairs create horizontal and vertical offsets, then future field6304 can clear flag84. 37 fixtures check independent f32 offsets, trig arguments/order and explicit zero-seed exhaustion. Existing default sampler output stays identical. Full suite: 955 tests pass. Report regenerates byte-identically (437425 bytes). Storage/filter, links and whitespace checks pass. No assets/Rust runtime/shared VM evaluator changed; native/reference/legal/full platform scope remains open.
+
+
+## 2026-10-20 — RE-616 Conditional aim jitter and additional RNG draws (separate task commit)
+
+IDs10/14/23 may add two RNG offsets; flag84 and the strict150-time boundary control the branch, with a distinct ID23 scale. 72 ID/flag/time/future-field fixtures independently check every added draw, offsets and final seed. Full suite: 958 tests pass. Report regenerates byte-identically (958589 bytes). Storage/filter, links and whitespace checks pass. No assets/Rust runtime/shared VM evaluator changed; native/reference/legal/full platform scope remains open.

docs/REVERSE_ENGINEERING_TODO.md

@@ -889,3 +889,6 @@ Purpose: turn the supplied installation into an evidence-backed specification of
 
 
 - [x] RE-615 Aim airborne adjustment and trigonometric offsets ([report](research/QVM_AIM_TRIG.md)).
+
+
+- [x] RE-616 Conditional aim jitter and additional RNG draws ([report](research/QVM_AIM_EXTRA_OFFSETS.md)).

docs/research/QVM_AIM_EXTRA_OFFSETS.md

@@ -0,0 +1,7 @@
+# Conditional aim jitter and additional RNG draws
+
+RE-616. Reproduce with `python3 scripts/analyze_qvm_aim_extra_offsets.py`; check with `python3 scripts/test_qvm_aim_extra_offsets.py`. The [machine report](qvm-aim-extra-offsets.json) retains source identity and bounded fixtures.
+
+Actual291315–291475 follows the recovered trig stage without resetting RNG or local offsets. Flag0 adds two draws for IDs10/14/23, using ID23-specific scale/bias. Flag1 adds two draws only for IDs10/14 when now−PS4404<150; equality150 suppresses them. Future timestamps produce negative elapsed values and follow the source comparison, but are not asserted legal live inputs. For IDs14/23 the preceding futurePS6304 override may clear flag84 and select the other branch. All72 probes reconstruct extra samples from an independent xor-shift/f32 oracle and retain actual36717 call evidence. The endpoint is still untouched at291476.
+
+No original executable/full QVM/native collision/physics/rendering executes. Native responses and legal input domains are supplied or unverified where stated; full runtime/macOS/Linux Rust/Bevy/Solari gameplay remains open.

docs/research/README.md

@@ -447,3 +447,6 @@ The extension collector adds five focused tests for native tail calls, command-r
 
 
 [RE-615: Aim airborne adjustment and trigonometric offsets](QVM_AIM_TRIG.md). Reproduce with `python3 scripts/analyze_qvm_aim_trig.py`; check with `python3 scripts/test_qvm_aim_trig.py`.
+
+
+[RE-616: Conditional aim jitter and additional RNG draws](QVM_AIM_EXTRA_OFFSETS.md). Reproduce with `python3 scripts/analyze_qvm_aim_extra_offsets.py`; check with `python3 scripts/test_qvm_aim_extra_offsets.py`.

scripts/analyze_qvm_aim_extra_offsets.py

@@ -0,0 +1,25 @@
+#!/usr/bin/env python3
+"""Actual291315–291475 conditional additional RNG offsets."""
+import itertools
+from pathlib import Path
+from qvm_research_support import source,execute
+from qvm_server_fire_support import seed
+from analyze_qvm_aim_trig import aim_trig
+from analyze_qvm_spread_parameters import LOCAL
+from analyze_qvm_server_shot_setup import random_word
+from analyze_qvm_acceleration import PS
+from analyze_qvm import write_json
+
+def extra_offsets(ins,m):
+    m,p=aim_trig(ins,m);before=m[21044]&0xffffffff;r={'aim':p,'initial_seed':before,'execution':None,'status':p['status']}
+    if p['status']!='extra-offsets-pending':return m,r
+    def rng(i,m,a,c):m,e=random_word(i,m);return m,c,e['result'],e
+    m,_,e=execute(ins,291315,291476,m,(0,0,0),LOCAL,{36717:rng});r.update({'execution':e,'final_seed':m[21044]&0xffffffff,'offsets':{str(o):m[LOCAL+o]&0xffffffff for o in [76,52]},'status':'endpoint-pending'})
+    return m,r
+
+def main():
+    q,raw,h,ins=source();rows=[]
+    for ident,flags,elapsed,future in itertools.product([2,10,14,23],[0,8192,16384],[150,149,-1],[False,True]):
+        m=seed(raw,h,ident);m[PS+144]=0;m[PS+312]=ident;m[PS+4048]=flags;m[PS+4404]=5000-elapsed;m[PS+6304]=5001 if future else 5000;m[21044]=1;rows.append(extra_offsets(ins,m)[1])
+    write_json(Path('docs/research/qvm-aim-extra-offsets.json'),{'source':q['source'],'sha256':q['sha256'],'probes':rows,'limits':'Actual aim preparation and291315–291475; actual36717 for added draws. Negative elapsed/future timestamps are synthetic boundary probes, not established legal live inputs. No endpoint/trace/damage.'})
+if __name__=='__main__':main()

scripts/test_qvm_aim_extra_offsets.py

@@ -0,0 +1,27 @@
+import json,unittest
+from pathlib import Path
+from test_qvm_ground import word,n,f
+from test_qvm_server_shot_setup import random_oracle
+
+def expected(p):
+    a=p['aim'];ident=a['speed']['parameters']['initial']['id'];active=(a['flag84']==0 and ident in [10,14,23]) or (a['flag84']==1 and ident in [10,14] and a['time']-a['fields']['4404']<150);seed=p['initial_seed'];out=dict(a['offsets']);draws=[]
+    if active:
+        scale,bias=(1031799040,1149239296) if ident==23 else (1040187648,1157627904)
+        for key in ['76','52']:
+            seed,v=random_oracle(seed);draws.append(v);out[key]=word(f(n(out[key])+f(f(float(v)*n(scale))-n(bias))))
+    return seed,out,draws
+class AimExtraOffsetTests(unittest.TestCase):
+    @classmethod
+    def setUpClass(cls):cls.r=json.loads(Path('docs/research/qvm-aim-extra-offsets.json').read_text())
+    def test_independent_extra_offsets_rng_and_final_seed(self):
+        self.assertEqual(len(self.r['probes']),72)
+        for p in self.r['probes']:
+            seed,out,draws=expected(p);self.assertEqual(p['final_seed'],seed);self.assertEqual(p['offsets'],out);self.assertEqual([c['effect']['result'] for c in p['execution']['children']],draws)
+    def test_exact_recent_boundary(self):
+        rows=[p for p in self.r['probes'] if p['aim']['speed']['parameters']['initial']['id']==10 and p['aim']['flag84']==1]
+        for p in rows:self.assertEqual(len(p['execution']['calls']),0 if p['aim']['time']-p['aim']['fields']['4404']==150 else 2)
+    def test_future_field_overrides_id23_flags(self):
+        for p in self.r['probes']:
+            a=p['aim']
+            if a['speed']['parameters']['initial']['id']==23:self.assertEqual(len(p['execution']['calls']),2 if a['flag84']==0 else 0)
+if __name__=='__main__':unittest.main()