qvm: recover post-map client callback ordering

docs/FINDINGS.md

@@ -1631,3 +1631,6 @@ RE-813–822 replaces the scoreboard decimal assumption with actual37914 executi
 
 
 **RE-877:** Rust matches all64 actual121987 fitness/selection/interbreed/mutation/reset transcripts, including callback activation before the counter reset. API validates supplied indices before mutation and retains inactive counters. Native bot selection and genetic mutation are explicit answer/effect boundaries, not Rust implementations of botlib. [Evidence](research/RUST_BOT_BREED.md).
+
+
+**RE-878:** 72 actual249007 cases recover signed live client-count iteration and connected-state2 gating. Each accepted client calls246746 then246963 unconditionally; a supplied first-child disconnect does not suppress its second child, and activation of a later slot affects subsequent dispatch. This uses level count34992524, not max-clients cvar34089604. Child bodies, native effects and callback changes to count/base pointer remain open. [Evidence](research/QVM_POST_MAP_CLIENTS.md).

docs/PROVISIONAL_TODO.md

@@ -1659,3 +1659,6 @@ RE-876: 64 actual121987 cases recover all64 native fitness words, supplied nativ
 
 
 RE-877: Rust matches all64 actual121987 fitness/selection/interbreed/mutation/reset transcripts, including callback activation before the counter reset. API validates supplied indices before mutation and retains inactive counters. Native bot selection and genetic mutation are explicit answer/effect boundaries, not Rust implementations of botlib. Full runtime completion remains open. [Evidence](research/RUST_BOT_BREED.md).
+
+
+RE-878: 72 actual249007 cases recover signed live client-count iteration and connected-state2 gating. Each accepted client calls246746 then246963 unconditionally; a supplied first-child disconnect does not suppress its second child, and activation of a later slot affects subsequent dispatch. This uses level count34992524, not max-clients cvar34089604. Child bodies, native effects and callback changes to count/base pointer remain open. Full runtime completion remains open. [Evidence](research/QVM_POST_MAP_CLIENTS.md).

docs/RESEARCH_LEDGER.md

@@ -2090,3 +2090,8 @@ Rust matches all64 original bot winner cases, with wrapping fitness arithmetic b
 ## 2026-10-28 — RE-877 Rust bot breeding and post-callback reset
 
 Rust matches all64 actual121987 fitness/selection/interbreed/mutation/reset transcripts, including callback activation before the counter reset. API validates supplied indices before mutation and retains inactive counters. Native bot selection and genetic mutation are explicit answer/effect boundaries, not Rust implementations of botlib. Focused `cargo xtask test-group rust-bot-breed` passes (9 Python tests); selected reports regenerate twice deterministically, with storage, documentation links and whitespace guards. Full suite deferred to task ten. Original assets unchanged; source fixtures do not establish complete native/runtime parity.
+
+
+## 2026-10-28 — RE-878 Original post-map connected-client callbacks
+
+72 actual249007 cases recover signed live client-count iteration and connected-state2 gating. Each accepted client calls246746 then246963 unconditionally; a supplied first-child disconnect does not suppress its second child, and activation of a later slot affects subsequent dispatch. This uses level count34992524, not max-clients cvar34089604. Child bodies, native effects and callback changes to count/base pointer remain open. Focused `cargo xtask test-group qvm-post-map-clients` passes (4 Python tests); selected reports regenerate twice deterministically, with storage, documentation links and whitespace guards. Full suite deferred to task ten. Original assets unchanged; source fixtures do not establish complete native/runtime parity.

docs/REVERSE_ENGINEERING_TODO.md

@@ -1696,3 +1696,6 @@ Purpose: turn the supplied installation into an evidence-backed specification of
 
 
 - [x] RE-877 Rust bot breeding and post-callback reset ([evidence](research/RUST_BOT_BREED.md)).
+
+
+- [x] RE-878 Original post-map connected-client callbacks ([evidence](research/QVM_POST_MAP_CLIENTS.md)).

docs/research/QVM_POST_MAP_CLIENTS.md

@@ -0,0 +1,7 @@
+# Original post-map connected-client callbacks
+
+RE-878. Reproduce with `python3 scripts/analyze_qvm_post_map_clients.py`; focused validation: `cargo xtask test-group qvm-post-map-clients`. [Machine report](qvm-post-map-clients.json).
+
+72 actual249007 cases recover signed live client-count iteration and connected-state2 gating. Each accepted client calls246746 then246963 unconditionally; a supplied first-child disconnect does not suppress its second child, and activation of a later slot affects subsequent dispatch. This uses level count34992524, not max-clients cvar34089604. Child bodies, native effects and callback changes to count/base pointer remain open.
+
+Original executable/native runtime and complete Linux/macOS Rust/Bevy/Solari acceptance remain unverified.

docs/research/README.md

@@ -1231,3 +1231,6 @@ The extension collector adds five focused tests for native tail calls, command-r
 
 
 [RE-877: Rust bot breeding and post-callback reset](RUST_BOT_BREED.md).
+
+
+[RE-878: Original post-map connected-client callbacks](QVM_POST_MAP_CLIENTS.md).

scripts/analyze_qvm_post_map_clients.py

@@ -0,0 +1,26 @@
+#!/usr/bin/env python3
+"""Execute the verified original QVM body; native effects are supplied or captured."""
+import itertools
+from pathlib import Path
+from qvm_research_support import source,constants
+from qvm_camera_world_support import B,run
+from qvm_exit_rules_support import POOL,CPOOL
+from analyze_qvm_acceleration import word,number
+from analyze_qvm import write_json
+
+def main():
+ q,raw,h,ins=source();rows=[]
+ for count,pattern,mutation in itertools.product([-1,0,1,4,8,64],range(4),range(3)):
+  records=[(j+pattern)%4 for j in range(64)];m={34992524:count,34992496:CPOOL};m.update({CPOOL+6336*j+468:v for j,v in enumerate(records)});calls=[]
+  def capture(t):
+   def call(i,m,a,b):
+    j=(a[8]-CPOOL)//6336;calls.append([t,j,m[a[8]+468]&0xffffffff])
+    if t==246746:
+     if mutation==1:m[a[8]+468]=0
+     if mutation==2 and j+1<64:m[CPOOL+6336*(j+1)+468]=2
+    return m,0,{'native_child_captured':True,'connection_change_supplied':mutation}
+   return call
+  m,v,p,b=run(ins,m,249007,249058,16,handlers={246746:capture(246746),246963:capture(246963)});p.update(input=dict(count=count,records=records,mutation=mutation),calls=calls,after=[m[CPOOL+6336*j+468]&0xffffffff for j in range(64)]);rows.append(p)
+
+ write_json(Path('docs/research/qvm-post-map-clients.json'),{'source':q['source'],'sha256':q['sha256'],'root':249007,'probes':rows,'limits':'72 actual249007 cases recover signed live client-count iteration and connected-state2 gating. Each accepted client calls246746 then246963 unconditionally; a supplied first-child disconnect does not suppress its second child, and activation of a later slot affects subsequent dispatch. This uses level count34992524, not max-clients cvar34089604. Child bodies, native effects and callback changes to count/base pointer remain open.'})
+if __name__=='__main__':main()

scripts/test_qvm_post_map_clients.py

@@ -0,0 +1,18 @@
+import json,unittest
+from pathlib import Path
+class OriginalTests(unittest.TestCase):
+ def test_instruction_results(self):
+  rows=json.loads(Path('docs/research/qvm-post-map-clients.json').read_text())['probes']
+  self.assertEqual(len(rows),72)
+  for p in rows:
+   a=p['input'];end=list(a['records']);calls=[]
+   for j in range(max(0,a['count'])):
+    if end[j]!=2:continue
+    calls.append([246746,j,end[j]])
+    if a['mutation']==1:end[j]=0
+    if a['mutation']==2 and j+1<64:end[j+1]=2
+    calls.append([246963,j,end[j]])
+   self.assertEqual(p['calls'],calls);self.assertEqual(p['after'],end)
+  self.assertTrue(any([c for c in p['calls'] if c[0]==246963 and c[2]==0] for p in rows))
+
+if __name__=='__main__':unittest.main()

xtask/checks.tsv

@@ -2552,3 +2552,7 @@ report	scripts/analyze_rust_bot_breed.py	docs/research/rust-bot-breed.json
 edge	docs/research/rust-bot-breed.json	scripts/test_rust_bot_breed.py
 group	rust-bot-breed	scripts/analyze_rust_bot_breed.py
 edge	scripts/analyze_rust_bot_breed.py	scripts/analyze_qvm_resumer_audit.py
+report	scripts/analyze_qvm_post_map_clients.py	docs/research/qvm-post-map-clients.json
+edge	docs/research/qvm-post-map-clients.json	scripts/test_qvm_post_map_clients.py
+group	qvm-post-map-clients	scripts/analyze_qvm_post_map_clients.py
+edge	scripts/analyze_qvm_post_map_clients.py	scripts/analyze_qvm_resumer_audit.py