qvm: rewind and restore selectors

docs/ASSET_PIPELINE_TODO.md

@@ -580,3 +580,6 @@ Research progress: RE-632 [report](research/QVM_REWIND_SNAPSHOT.md); remaining n
 
 
 Research progress: RE-633 [report](research/QVM_REWIND_RESTORE.md); remaining native/content/runtime/platform scope stays open.
+
+
+Research progress: RE-634 [report](research/QVM_REWIND_SELECTORS.md); remaining native/content/runtime/platform scope stays open.

docs/FINDINGS.md

@@ -932,3 +932,6 @@ Bounded qagame paths recover bomb-plant/inactivity correction requests, direct f
 
 
 **RE-633 — Complete rewind record restoration and byte widening:** 144165 restores saved vectors/client fields, zero-extends the two animation bytes, clears4408 and links once; a second call is inactive. [Evidence](research/QVM_REWIND_RESTORE.md).
+
+
+**RE-634 — Fixed player rewind selection and actual restore enumeration:** 144082 and144413 scan exactly64 source slots using matching client/in-use/state/exclusion gates; the restore selector now executes recovered144165. [Evidence](research/QVM_REWIND_SELECTORS.md).

docs/PROVISIONAL_TODO.md

@@ -900,3 +900,6 @@ Research progress: RE-632 [report](research/QVM_REWIND_SNAPSHOT.md); remaining n
 
 
 Research progress: RE-633 [report](research/QVM_REWIND_RESTORE.md); remaining native/content/runtime/platform scope stays open.
+
+
+Research progress: RE-634 [report](research/QVM_REWIND_SELECTORS.md); remaining native/content/runtime/platform scope stays open.

docs/RESEARCH_LEDGER.md

@@ -842,3 +842,8 @@ Whole291641 now follows supplied world/entity traces through retry, ordered reli
 ## 2026-10-20 — RE-633 Complete rewind record restoration and byte widening (separate task commit)
 
 144165 restores saved vectors/client fields, zero-extends the two animation bytes, clears4408 and links once; a second call is inactive. 16 fixtures independently reconstruct all entity/client words, verify snapshot round-trip byte loss and native link ordering/idempotence. Full suite: 1015 tests pass. Report regenerates byte-identically (601178 bytes). Storage/filter, links and whitespace checks pass. No assets/Rust runtime/shared VM evaluator changed; native/reference/legal/full platform scope remains open.
+
+
+## 2026-10-20 — RE-634 Fixed player rewind selection and actual restore enumeration (separate task commit)
+
+144082 and144413 scan exactly64 source slots using matching client/in-use/state/exclusion gates; the restore selector now executes recovered144165. 16 selector/exclusion/global-count/delta fixtures independently check all64 predicates, call order, time ABI and actual child restoration. Full suite: 1019 tests pass. Report regenerates byte-identically (1219554 bytes). Storage/filter, links and whitespace checks pass. No assets/Rust runtime/shared VM evaluator changed; native/reference/legal/full platform scope remains open.

docs/REVERSE_ENGINEERING_TODO.md

@@ -943,3 +943,6 @@ Purpose: turn the supplied installation into an evidence-backed specification of
 
 
 - [x] RE-633 Complete rewind record restoration and byte widening ([report](research/QVM_REWIND_RESTORE.md)).
+
+
+- [x] RE-634 Fixed player rewind selection and actual restore enumeration ([report](research/QVM_REWIND_SELECTORS.md)).

docs/research/QVM_REWIND_SELECTORS.md

@@ -0,0 +1,7 @@
+# Fixed player rewind selection and actual restore enumeration
+
+RE-634. Reproduce with `python3 scripts/analyze_qvm_rewind_selectors.py`; check with `python3 scripts/test_qvm_rewind_selectors.py`. The [machine report](qvm-rewind-selectors.json) retains source identity and bounded fixtures.
+
+Actual144082 selects client!=0, in-use!=0, signed client3096<3, not excluded,3740==0 and4324==0. Its143100 calls are explicitly recorded under a nonmutating child contract, not treated as executed history rewind. Actual144413 uses the same64-slot gates and dispatches recovered144165 for each selected record. The source loops ignore global entity count; fixtures set count0/1024 and include slot63 to retain that distinction. Delta is passed unchanged only to rewind. Independent predicates check every slot, including inactive, no-client, states3/4, both exclusion fields and state2. Restore child records match independent full-state oracles. Native linking remains captured and full143100 interpolation remains unresolved.
+
+No original executable/full QVM/native collision/physics/rendering executes. Native responses and legal input domains are supplied or unverified where stated; full runtime/macOS/Linux Rust/Bevy/Solari gameplay remains open.

docs/research/README.md

@@ -501,3 +501,6 @@ The extension collector adds five focused tests for native tail calls, command-r
 
 
 [RE-633: Complete rewind record restoration and byte widening](QVM_REWIND_RESTORE.md). Reproduce with `python3 scripts/analyze_qvm_rewind_restore.py`; check with `python3 scripts/test_qvm_rewind_restore.py`.
+
+
+[RE-634: Fixed player rewind selection and actual restore enumeration](QVM_REWIND_SELECTORS.md). Reproduce with `python3 scripts/analyze_qvm_rewind_selectors.py`; check with `python3 scripts/test_qvm_rewind_selectors.py`.

scripts/analyze_qvm_rewind_selectors.py

@@ -0,0 +1,51 @@
+#!/usr/bin/env python3
+"""Fixed64-slot rewind selection and actual recovered restoration selector."""
+import itertools
+from pathlib import Path
+from qvm_research_support import source,execute
+from analyze_qvm_rewind_snapshot import fixture as player_fixture,snapshot,CLIENT_OFFSETS
+from analyze_qvm_rewind_restore import restore_player
+from analyze_qvm_entity_init import POOL,STRIDE
+from qvm_server_fire_support import ENTITY
+from analyze_qvm import write_json
+LOCAL=0x79b00000
+
+
+def pool_fixture(raw,h,ins):
+    template=player_fixture(raw,h);template,_=snapshot(ins,template);source_client=template[ENTITY+520];m={34992508:0}
+    for index in range(64):
+        p=POOL+index*STRIDE
+        for o in range(0,STRIDE,4):m[p+o]=template[ENTITY+o]
+        m[p]=index;m[p+520]=0;m[p+532]=1
+    for index in [0,1,2,3,4,5,6,7,8,63]:
+        p=POOL+index*STRIDE;client=0x200000+index*0x2000;m[p+520]=client
+        for o in CLIENT_OFFSETS:m[client+o]=template[source_client+o]
+        m[client+3096]=0;m[client+3740]=0;m[client+4324]=0
+        for o in [24,28,32,36,40,44,60,64,68,488,492,496,196,200]:m[p+o]=0x99887766
+    m[POOL+2*STRIDE+520]=0;m[POOL+3*STRIDE+532]=0;m[0x200000+4*0x2000+3096]=3;m[0x200000+5*0x2000+3096]=4;m[0x200000+6*0x2000+3740]=1;m[0x200000+7*0x2000+4324]=1;m[0x200000+8*0x2000+3096]=2
+    return m
+
+
+def select(ins,m,entry,excluded,delta=1200):
+    m=dict(m);rows=[]
+    for index in range(64):
+        p=POOL+index*STRIDE;client=m[p+520];rows.append({'index':index,'pointer':p,'client':client,'used':m[p+532],'state3096':m.get(client+3096) if client else None,'field3740':m.get(client+3740) if client else None,'field4324':m.get(client+4324) if client else None})
+    requests=[];effects=[]
+    if entry==144082:
+        base=LOCAL;m[base+36]=delta;m[base+40]=excluded
+        def capture(i,m,a,c):e={'arguments':a,'child_not_executed':True};requests.append(e);return m,c,0,e
+        m,_,e=execute(ins,144083,144163,m,(0,0,0),base,{143100:capture});scope='selection-only-nonmutating-child-contract'
+    else:
+        assert entry==144413;base=LOCAL+0x1000;m[base+32]=excluded
+        def child(i,m,a,c):m,r=restore_player(i,m,a[8]);requests.append({'arguments':a});effects.append(r);return m,c,0,r
+        m,_,e=execute(ins,144414,144491,m,(0,0,0),base,{144165:child});scope='actual144165-restoration'
+    if entry==144413:e['children']=[{'call':child['call'],'effect':{'restore_effect_index':j}} for j,child in enumerate(e['children'])]
+    return m,{'entry':entry,'excluded':excluded,'delta':delta,'global_entity_count':m[34992508],'slots':rows,'requests':requests,'restore_effects':effects,'execution':e,'scope':scope}
+
+
+def main():
+    q,raw,h,ins=source();rows=[]
+    for entry,excluded,count,delta in itertools.product([144082,144413],[0,20],[0,1024],[0,1200]):
+        m=pool_fixture(raw,h,ins);m[34992508]=count;rows.append(select(ins,m,entry,POOL+excluded*STRIDE,delta)[1])
+    write_json(Path('docs/research/qvm-rewind-selectors.json'),{'source':q['source'],'sha256':q['sha256'],'probes':rows,'limits':'Actual64-slot144082 selection with nonmutating captured143100 calls, and actual144413→144165 restore. Captured rewind callbacks are not full rewind execution. Entity count global is intentionally ignored by source fixed64 loops; native links captured.'})
+if __name__=='__main__':main()

scripts/test_qvm_rewind_selectors.py

@@ -0,0 +1,25 @@
+import json,unittest
+from pathlib import Path
+from test_qvm_rewind_restore import expected
+class RewindSelectorTests(unittest.TestCase):
+    @classmethod
+    def setUpClass(cls):cls.r=json.loads(Path('docs/research/qvm-rewind-selectors.json').read_text())
+    def test_independent_all64_slot_predicate(self):
+        self.assertEqual(len(self.r['probes']),16)
+        for p in self.r['probes']:
+            eligible=[s['pointer'] for s in p['slots'] if s['client'] and s['used'] and s['state3096']<3 and s['pointer']!=p['excluded'] and not s['field3740'] and not s['field4324']];self.assertEqual([r['arguments']['8'] for r in p['requests']],eligible);self.assertEqual([s['index'] for s in p['slots']],list(range(64)))
+    def test_global_count_does_not_change_fixed_pool_scope(self):
+        for entry in [144082,144413]:
+            for excluded in [34091368,34091368+20*880]:
+                rows=[p for p in self.r['probes'] if p['entry']==entry and p['excluded']==excluded];self.assertTrue(all([r['arguments']['8'] for r in p['requests']]==[r['arguments']['8'] for r in rows[0]['requests']] for p in rows))
+    def test_rewind_requests_pass_delta_without_fake_effects(self):
+        for p in self.r['probes']:
+            if p['entry']==144082:
+                self.assertEqual(p['restore_effects'],[])
+                for r in p['requests']:self.assertEqual(r['arguments']['12'],p['delta']);self.assertTrue(r['child_not_executed'])
+    def test_restore_selector_executes_recovered_child(self):
+        for p in self.r['probes']:
+            if p['entry']==144413:
+                self.assertEqual([c['target'] for c in p['execution']['calls']],[144165]*len(p['requests']))
+                for r in p['restore_effects']:self.assertEqual((r['final_entity'],r['final_client']),expected(r));self.assertEqual(r['final_client']['4408'],0)
+if __name__=='__main__':unittest.main()