gameplay: port exact-match filter removal

crates/urt-gameplay/src/bin/urt-filter-policy.rs

@@ -20,23 +20,70 @@ fn export_json(p: Option<FilterExport>) -> String {
         ),
     }
 }
-fn main() {
-    let mut args = std::env::args().skip(1);
-    let kind = args.next().unwrap();
-    let w: Vec<u32> = args.map(|s| s.parse().unwrap()).collect();
-    let n = w[0] as usize;
-    let handle = w[1];
-    assert_eq!(w.len(), 2 + 3 * n);
-    let rows: Vec<_> = w[2..]
-        .chunks_exact(3)
+fn rows(w: &[u32]) -> Vec<FilterRecord> {
+    w.chunks_exact(3)
         .map(|r| FilterRecord {
             mask: r[0],
             comparison: r[1],
             metadata: r[2],
         })
-        .collect();
+        .collect()
+}
+fn rows_json(rows: &[FilterRecord]) -> String {
+    format!(
+        "[{}]",
+        rows.iter()
+            .map(|r| format!("[{},{},{}]", r.mask, r.comparison, r.metadata))
+            .collect::<Vec<_>>()
+            .join(",")
+    )
+}
+fn mutation_json(p: FilterMutation, rows: &[FilterRecord], exported: Vec<String>) -> String {
+    let notices = p
+        .notices
+        .iter()
+        .map(|n| match n {
+            FilterNotice::Removed => "{\"op\":\"removed\"}".into(),
+            FilterNotice::BadAddress(t) => {
+                format!("{{\"op\":\"bad-address\",\"text\":\"{}\"}}", hex(t))
+            }
+            FilterNotice::NotFound(t) => {
+                format!("{{\"op\":\"not-found\",\"text\":\"{}\"}}", hex(t))
+            }
+        })
+        .collect::<Vec<String>>()
+        .join(",");
+    format!(
+        "{{\"result\":{},\"diagnostics\":[{}],\"exports\":[{}],\"exported\":[{}],\"rows\":{}}}",
+        u8::from(p.result),
+        notices,
+        if p.export { "252500" } else { "" },
+        exported.join(","),
+        rows_json(rows)
+    )
+}
+fn main() {
+    let mut args = std::env::args().skip(1);
+    let kind = args.next().unwrap();
+    let w: Vec<u32> = args.map(|s| s.parse().unwrap()).collect();
+    let n = w[0] as usize;
+    if kind == "export" {
+        assert_eq!(w.len(), 2 + 3 * n);
+        println!(
+            "{}",
+            export_json(export_filters(&rows(&w[2..]), w[1]).unwrap())
+        );
+        return;
+    }
+    let l = w[4] as usize;
+    let text: Vec<u8> = w[5..5 + l].iter().map(|v| *v as u8).collect();
+    assert_eq!(w.len(), 5 + l + 3 * n);
+    let mut records = rows(&w[5 + l..]);
     match kind.as_str() {
-        "export" => println!("{}", export_json(export_filters(&rows, handle).unwrap())),
+        "remove" => {
+            let p = remove_filter(&mut records, &text).unwrap();
+            println!("{}", mutation_json(p, &records, vec![]));
+        }
         _ => panic!("unknown policy"),
     }
 }

crates/urt-gameplay/src/filter_lifecycle.rs

@@ -65,3 +65,78 @@ mod tests {
         assert!(export_filters(&vec![row; 4097], 7).is_err());
     }
 }
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub enum FilterNotice {
+    BadAddress(Vec<u8>),
+    NotFound(Vec<u8>),
+    Removed,
+}
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct FilterMutation {
+    pub result: bool,
+    pub notices: Vec<FilterNotice>,
+    pub export: bool,
+}
+/// Original253296 removes only the first exact mask/comparison pair. The count,
+/// mask and metadata survive; even an already-hole sentinel can match.
+pub fn remove_filter(records: &mut [FilterRecord], text: &[u8]) -> Result<FilterMutation, Error> {
+    if records.len() > 4096 {
+        return Err(Error::InvalidCount);
+    }
+    let parsed = crate::native_policy::parse_filter(text)?;
+    let mut notices = vec![];
+    let mut found = false;
+    match parsed {
+        Err(remaining) => notices.push(FilterNotice::BadAddress(remaining)),
+        Ok((mask, comparison)) => {
+            if let Some(row) = records
+                .iter_mut()
+                .find(|r| r.mask == mask && r.comparison == comparison)
+            {
+                row.comparison = u32::MAX;
+                found = true;
+                notices.push(FilterNotice::Removed);
+            } else {
+                notices.push(FilterNotice::NotFound(
+                    text.split(|b| *b == 0).next().unwrap_or_default().to_vec(),
+                ));
+            }
+        }
+    }
+    Ok(FilterMutation {
+        result: found,
+        notices,
+        export: found,
+    })
+}
+#[cfg(test)]
+mod removal_tests {
+    use super::*;
+    #[test]
+    fn only_first_duplicate_changes_and_repeated_hole_can_match() {
+        let row = FilterRecord {
+            mask: u32::MAX,
+            comparison: 0x04030201,
+            metadata: 9,
+        };
+        let mut rows = [row, row];
+        assert!(remove_filter(&mut rows, b"1.2.3.4").unwrap().export);
+        assert_eq!(rows[1], row);
+        assert_eq!(rows[0].metadata, 9);
+        assert!(remove_filter(&mut rows, b"255.255.255.255").unwrap().result);
+    }
+    #[test]
+    fn unsupported_parser_input_is_atomic() {
+        let mut rows = [FilterRecord {
+            mask: 7,
+            comparison: 8,
+            metadata: 9,
+        }];
+        let before = rows;
+        assert!(remove_filter(&mut rows, &[b'1'; 128]).is_err());
+        assert_eq!(rows, before);
+        assert!(!remove_filter(&mut rows, b"bad").unwrap().export);
+        assert_eq!(rows, before);
+    }
+}

crates/urt-gameplay/src/native_policy.rs

@@ -3131,7 +3131,7 @@ pub struct FilterInsert {
 }
 /// Original252304 safe token subset: missing components remain wildcarded;
 /// a sole * is wildcard, other digit/* tokens use numeric-prefix conversion.
-fn parse_filter(text: &[u8]) -> Result<Result<(u32, u32), Vec<u8>>, Error> {
+pub(crate) fn parse_filter(text: &[u8]) -> Result<Result<(u32, u32), Vec<u8>>, Error> {
     let text = cbytes(text);
     if text.len() > 1024 {
         return Err(Error::InvalidInput);

docs/FINDINGS.md

@@ -1805,3 +1805,5 @@ RE-934: Actual252500 exports comparison bytes and signed metadata while ignoring
 RE-935: Rust matches all18 original export cases, including mask loss, all-hole truncation, invalid handles and original INT_MIN formatter bytes. Empty tables produce no plan; other tables produce ordered print/open/write/close effects. A4096-row table is bounded by28 bytes per row, below the131072-byte source buffer; unit tests check that maximum and reject4097 rows. Native IO remains an adapter boundary. [Evidence](research/RUST_FILTER_EXPORT.md).
 
 RE-936: Thirty actual253296 cases execute parser252304/37159, scan exact mask/comparison pairs and remove only the first duplicate by storing comparison-1. Mask/metadata/count remain unchanged. Parse failure and no match return0; successful removal prints Removed and requests export. A preexisting comparison-1 record can match255.255.255.255 and report successful removal again. Export is captured in this stage. [Evidence](research/QVM_FILTER_REMOVE.md).
+
+RE-937: Rust matches all30 original removal cases, retaining first-match ordering, unchanged mask/metadata/count, repeated sentinel matches, parser diagnostics and conditional export requests. Unsupported token domains fail atomically. Unit tests cover duplicate preservation and unsupported input without mutation; native export remains captured at this stage. [Evidence](research/RUST_FILTER_REMOVE.md).

docs/PROVISIONAL_TODO.md

@@ -1851,3 +1851,5 @@ RE-924–933 completed bounded bot settings, announcement, connect-child composi
 - [x] RE-935 Rust filter export policy and bounded storage ([evidence](research/RUST_FILTER_EXPORT.md)).
 
 - [x] RE-936 Original exact-match filter removal ([evidence](research/QVM_FILTER_REMOVE.md)).
+
+- [x] RE-937 Rust exact-match filter removal and diagnostics ([evidence](research/RUST_FILTER_REMOVE.md)).

docs/RESEARCH_LEDGER.md

@@ -2409,3 +2409,7 @@ Rust matches all18 original export cases, including mask loss, all-hole truncati
 ## 2026-10-28 — RE-936 Original exact-match filter removal
 
 Thirty actual253296 cases execute parser252304/37159, scan exact mask/comparison pairs and remove only the first duplicate by storing comparison-1. Mask/metadata/count remain unchanged. Parse failure and no match return0; successful removal prints Removed and requests export. A preexisting comparison-1 record can match255.255.255.255 and report successful removal again. Export is captured in this stage. Focused `cargo xtask test-group qvm-filter-remove` passes with deterministic report regeneration, relevant regressions and storage/documentation/whitespace checks. Full suite deferred to the tenth-commit boundary. Original assets unchanged; native IO effects remain captured.
+
+## 2026-10-28 — RE-937 Rust exact-match filter removal and diagnostics
+
+Rust matches all30 original removal cases, retaining first-match ordering, unchanged mask/metadata/count, repeated sentinel matches, parser diagnostics and conditional export requests. Unsupported token domains fail atomically. Unit tests cover duplicate preservation and unsupported input without mutation; native export remains captured at this stage. Focused `cargo xtask test-group rust-filter-remove` passes with deterministic report regeneration, relevant regressions and storage/documentation/whitespace checks. Full suite deferred to the tenth-commit boundary. Original assets unchanged; native IO effects remain captured.

docs/REVERSE_ENGINEERING_TODO.md

@@ -1888,3 +1888,5 @@ Purpose: turn the supplied installation into an evidence-backed specification of
 - [x] RE-935 Rust filter export policy and bounded storage ([evidence](research/RUST_FILTER_EXPORT.md)).
 
 - [x] RE-936 Original exact-match filter removal ([evidence](research/QVM_FILTER_REMOVE.md)).
+
+- [x] RE-937 Rust exact-match filter removal and diagnostics ([evidence](research/RUST_FILTER_REMOVE.md)).

docs/research/README.md

@@ -1423,3 +1423,5 @@ The extension collector adds five focused tests for native tail calls, command-r
 - [RE-935: Rust filter export policy and bounded storage](RUST_FILTER_EXPORT.md).
 
 - [RE-936: Original exact-match filter removal](QVM_FILTER_REMOVE.md).
+
+- [RE-937: Rust exact-match filter removal and diagnostics](RUST_FILTER_REMOVE.md).

docs/research/RUST_FILTER_REMOVE.md

@@ -0,0 +1,5 @@
+# Rust exact-match filter removal and diagnostics
+
+RE-937. Focused validation: `cargo xtask test-group rust-filter-remove`. [Machine report](rust-filter-remove.json).
+
+Rust matches all30 original removal cases, retaining first-match ordering, unchanged mask/metadata/count, repeated sentinel matches, parser diagnostics and conditional export requests. Unsupported token domains fail atomically. Unit tests cover duplicate preservation and unsupported input without mutation; native export remains captured at this stage.

docs/research/rust-filter-remove.json

@@ -0,0 +1,1267 @@
+{
+  "limits": "Finite recovered policy parity; native filesystem/network effects are not executed.",
+  "probes": [
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e322e332e34"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e322e332e34"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": "626164"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": "626164"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "3235352e3235352e3235352e323535"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "3235352e3235352e3235352e323535"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": ""
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": ""
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": []
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": "626164"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": "626164"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "3235352e3235352e3235352e323535"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "3235352e3235352e3235352e323535"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": ""
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": ""
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": "626164"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": "626164"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "3235352e3235352e3235352e323535"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "3235352e3235352e3235352e323535"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": ""
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": ""
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            67305985,
+            9
+          ],
+          [
+            4294967295,
+            67305985,
+            10
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            4294967295,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            4294967295,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            255,
+            4294967295,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            255,
+            4294967295,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": "626164"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": "626164"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "3235352e3235352e3235352e323535"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "3235352e3235352e3235352e323535"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": ""
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": ""
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            255,
+            1,
+            11
+          ],
+          [
+            4294967295,
+            67305985,
+            9
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e322e332e34"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e322e332e34"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "not-found",
+            "text": "312e2a"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            4294967295,
+            13
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            4294967295,
+            13
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": "626164"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": "626164"
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "removed"
+          }
+        ],
+        "exported": [],
+        "exports": [
+          252500
+        ],
+        "result": 1,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ]
+      }
+    },
+    {
+      "rust": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": ""
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ]
+      },
+      "source": {
+        "diagnostics": [
+          {
+            "op": "bad-address",
+            "text": ""
+          }
+        ],
+        "exported": [],
+        "exports": [],
+        "result": 0,
+        "rows": [
+          [
+            4294967295,
+            4294967295,
+            12
+          ],
+          [
+            0,
+            0,
+            13
+          ]
+        ]
+      }
+    }
+  ],
+  "source_report": "docs/research/qvm-filter-remove.json",
+  "source_report_sha256": "fedeb203df06443948adcb4be594d75cc402642496fb5be9436547abea67ddd8"
+}

docs/research/rust-health-impulse.json

@@ -2985,7 +2985,7 @@
       "exit_code": 2
     }
   ],
-  "rust_unit_tests": 187,
+  "rust_unit_tests": 189,
   "source_report": "docs/research/qvm-health-impulse.json",
   "source_report_sha256": "625fd8064004ea6dbdf398d51d0af844d9c635ff04c0a0790886dddb6ab81e71"
 }

scripts/analyze_rust_filter_remove.py

@@ -0,0 +1,18 @@
+"""Compare the Rust filter policy with the original QVM report."""
+import hashlib,json,os,subprocess
+from pathlib import Path
+from analyze_qvm import write_json
+from rust_lifecycle_support import result
+
+def main():
+ subprocess.run(['cargo','build','--offline','--package','urt-gameplay','--bin','urt-filter-policy'],check=True,capture_output=True)
+ binary=Path(os.environ.get('CARGO_TARGET_DIR','target'))/'debug'/'urt-filter-policy'
+ path=Path('docs/research/qvm-filter-remove.json');data=path.read_bytes();probes=[]
+ for p in json.loads(data)['probes']:
+  a=p['input'];words=encode(a)
+  probes.append(dict(source={k:p[k] for k in ['result', 'diagnostics', 'exports', 'exported', 'rows']},rust=result(binary,'remove',words)))
+ write_json(Path('docs/research/rust-filter-remove.json'),dict(source_report=str(path),source_report_sha256=hashlib.sha256(data).hexdigest(),probes=probes,limits='Finite recovered policy parity; native filesystem/network effects are not executed.'))
+
+def encode(a):
+ text=bytes.fromhex(a['text']);return [len(a['rows']),a['metadata'],a['save'],a['handle'],len(text),*text,*[v for r in a['rows'] for v in r]]
+if __name__=='__main__':main()

scripts/test_rust_filter_remove.py

@@ -0,0 +1,9 @@
+import hashlib,json,unittest
+from pathlib import Path
+class PortTests(unittest.TestCase):
+ def test_original_parity(self):
+  r=json.loads(Path('docs/research/rust-filter-remove.json').read_text());self.assertGreaterEqual(len(r['probes']),18)
+  for p in r['probes']:self.assertEqual(p['source'],p['rust'])
+ def test_identity(self):
+  r=json.loads(Path('docs/research/rust-filter-remove.json').read_text());self.assertEqual(hashlib.sha256(Path(r['source_report']).read_bytes()).hexdigest(),r['source_report_sha256'])
+if __name__=='__main__':unittest.main()

xtask/checks.tsv

@@ -3128,3 +3128,17 @@ report	scripts/analyze_qvm_filter_remove.py	docs/research/qvm-filter-remove.json
 edge	docs/research/qvm-filter-remove.json	scripts/test_qvm_filter_remove.py
 group	qvm-filter-remove	scripts/analyze_qvm_filter_remove.py
 edge	scripts/analyze_qvm_filter_remove.py	scripts/analyze_qvm_resumer_audit.py
+report	scripts/analyze_rust_filter_remove.py	docs/research/rust-filter-remove.json
+edge	docs/research/rust-filter-remove.json	scripts/test_rust_filter_remove.py
+group	rust-filter-remove	scripts/analyze_rust_filter_remove.py
+edge	scripts/analyze_rust_filter_remove.py	scripts/analyze_qvm_resumer_audit.py
+edge	Cargo.toml	scripts/analyze_rust_filter_remove.py
+edge	Cargo.lock	scripts/analyze_rust_filter_remove.py
+edge	crates/urt-gameplay/Cargo.toml	scripts/analyze_rust_filter_remove.py
+edge	crates/urt-gameplay/src/lib.rs	scripts/analyze_rust_filter_remove.py
+edge	crates/urt-gameplay/src/filter_lifecycle.rs	scripts/analyze_rust_filter_remove.py
+edge	crates/urt-gameplay/src/native_policy.rs	scripts/analyze_rust_filter_remove.py
+edge	crates/urt-gameplay/src/bin/urt-filter-policy.rs	scripts/analyze_rust_filter_remove.py
+edge	docs/research/qvm-filter-remove.json	scripts/analyze_rust_filter_remove.py
+group	rust-filter-remove	scripts/analyze_rust_health_impulse.py
+group	gameplay	scripts/analyze_rust_filter_remove.py