qvm: firing availability failure

docs/ASSET_PIPELINE_TODO.md

@@ -433,3 +433,6 @@ Research progress: RE-580 [report](research/QVM_WEAPON_RETURN_CHAINS.md); remain
 
 
 Research progress: RE-582 [report](research/QVM_FIRE_GATE.md); remaining native/content/runtime/platform scope stays open.
+
+
+Research progress: RE-583 [report](research/QVM_FIRE_AVAILABILITY.md); remaining native/content/runtime/platform scope stays open.

docs/FINDINGS.md

@@ -791,3 +791,6 @@ Bounded qagame paths recover bomb-plant/inactivity correction requests, direct f
 
 
 **RE-582 — Firing charge hold release and ordinary input gate:** 51802..52084 uses mode flag8 to availability-gate a state32/64 charge latch and event1, handles requested-ID exceptions11/12, and otherwise lets nonzero burst counters bypass absent button1. [Evidence](research/QVM_FIRE_GATE.md).
+
+
+**RE-583 — Availability failure event and timer exception:** 52085..52153 exits state1 before querying availability; unavailable ID27 returns unchanged, while other unavailable weapons zero counter204, queue29 and add500 to the timer. [Evidence](research/QVM_FIRE_AVAILABILITY.md).

docs/PROVISIONAL_TODO.md

@@ -749,3 +749,6 @@ Research progress: RE-580 [report](research/QVM_WEAPON_RETURN_CHAINS.md); remain
 
 
 Research progress: RE-582 [report](research/QVM_FIRE_GATE.md); remaining native/content/runtime/platform scope stays open.
+
+
+Research progress: RE-583 [report](research/QVM_FIRE_AVAILABILITY.md); remaining native/content/runtime/platform scope stays open.

docs/RESEARCH_LEDGER.md

@@ -603,3 +603,8 @@ RE-580 additional regression: all19 reports from RE-560–569 and RE-571–579 r
 ## 2026-10-20 — RE-582 Firing charge hold release and ordinary input gate (separate task commit)
 
 51802..52084 uses mode flag8 to availability-gate a state32/64 charge latch and event1, handles requested-ID exceptions11/12, and otherwise lets nonzero burst counters bypass absent button1. 203 independent fixtures check charge start/hold/release/cancel, flags4 availability, command mismatch exceptions and signed nonzero counters without altering ammo or published request fields. Full suite: 843 tests pass. Report regenerates byte-identically (1209597 bytes). Storage/filter, links and whitespace checks pass. No assets/Rust runtime/shared VM evaluator changed; native/reference/legal/full platform scope remains open.
+
+
+## 2026-10-20 — RE-583 Availability failure event and timer exception (separate task commit)
+
+52085..52153 exits state1 before querying availability; unavailable ID27 returns unchanged, while other unavailable weapons zero counter204, queue29 and add500 to the timer. 110 probes check actual50309/39238 order, flag4 versus magazine, state1 priority, ID27, signed timer overflow and queue wrap without ammo/request writes. Full suite: 847 tests pass. Report regenerates byte-identically (661634 bytes). Storage/filter, links and whitespace checks pass. No assets/Rust runtime/shared VM evaluator changed; native/reference/legal/full platform scope remains open.

docs/REVERSE_ENGINEERING_TODO.md

@@ -790,3 +790,6 @@ Purpose: turn the supplied installation into an evidence-backed specification of
 
 
 - [x] RE-582 Firing charge hold release and ordinary input gate ([report](research/QVM_FIRE_GATE.md)).
+
+
+- [x] RE-583 Availability failure event and timer exception ([report](research/QVM_FIRE_AVAILABILITY.md)).

docs/research/QVM_FIRE_AVAILABILITY.md

@@ -0,0 +1,11 @@
+# Availability failure event and timer exception
+
+RE-583. Reproduce with `python3 scripts/analyze_qvm_fire_availability.py`; check with `python3 scripts/test_qvm_fire_availability.py`. The [machine report](qvm-fire-availability.json) retains source identity and bounded fixtures.
+
+State1 exits immediately. Otherwise actual50309 reads packed mode flags4 or magazine>0. Available proceeds52154. Unavailable selectedID27 exits without mutation; other IDs zero PS204, emit29 with parameter0 and add500 to PS44 using32-bit arithmetic before returning53046. Timer addition is not a replacement or clamp.
+
+110 fixtures cover IDs1/22/27, empty/nonempty magazines, mode flag4, state0/1/3, negative and near-overflow timers and sequence wrap. The body publishes no firing request and consumes no ammunition. Numeric event29 is not assumed to correspond to a specific sound asset until its consumers/assets are mapped.
+
+These are standalone slice entries; earlier gates can prevent some supplied states. Next: magazine debit and animation dispatch only on the source paths that reach52154.
+
+No original executable/full QVM/native collision/physics/rendering executes. Native responses and legal input domains are supplied or unverified where stated; full runtime/macOS/Linux Rust/Bevy/Solari gameplay remains open.

docs/research/README.md

@@ -350,3 +350,6 @@ The extension collector adds five focused tests for native tail calls, command-r
 
 
 [RE-582: Firing charge hold release and ordinary input gate](QVM_FIRE_GATE.md). Reproduce with `python3 scripts/analyze_qvm_fire_gate.py`; check with `python3 scripts/test_qvm_fire_gate.py`.
+
+
+[RE-583: Availability failure event and timer exception](QVM_FIRE_AVAILABILITY.md). Reproduce with `python3 scripts/analyze_qvm_fire_availability.py`; check with `python3 scripts/test_qvm_fire_availability.py`.

scripts/analyze_qvm_fire_availability.py

@@ -0,0 +1,19 @@
+#!/usr/bin/env python3
+"""52085..52153 availability failure and ID27/event/timer exceptions."""
+import itertools
+from pathlib import Path
+from qvm_research_support import source
+from qvm_firing_support import seed,segment
+from analyze_qvm_acceleration import PS
+from analyze_qvm import write_json
+
+def availability(ins,m,cmd=(0,0,0),preserve_locals=False):return segment(ins,m,52085,[52154],cmd,preserve_locals)
+
+def main():
+    q,raw,h,ins=source();rows=[]
+    for ident,mag,flags,ws,timer in itertools.product([1,22,27],[0,1],[0,4],[0,1,3],[0,-1,0x7fffffff-100]):
+        m=seed(raw,h,ident,mag);m.update({4244+432*ident+4:flags,PS+148:ws,PS+44:timer,PS+204:7});rows.append(availability(ins,m)[1])
+    for seq in [1,0xffffffff]:
+        m=seed(raw,h,22,0);m.update({4244+432*22+4:0,PS+108:seq,PS+204:7});rows.append(availability(ins,m)[1])
+    write_json(Path('docs/research/qvm-fire-availability.json'),{'source':q['source'],'sha256':q['sha256'],'probes':rows,'limits':'Finite52085..52153; actual50309/39238. Standalone negative/overflow timer and state1 isolate literal source behavior; caller legality and audible empty-weapon effect unverified.'})
+if __name__=='__main__':main()

scripts/test_qvm_fire_availability.py

@@ -0,0 +1,29 @@
+import json,unittest,copy
+from pathlib import Path
+from test_qvm_water_events import enqueue
+
+def availability_state(p):
+    a=copy.deepcopy(p['initial'])
+    if a['weapon_state']==1:return a,53046
+    available=bool(a['packed']&65280 or p['config']['packed_flags']&4)
+    if available:return a,52154
+    if a['packed']&255!=27:a['counter204']=0;a['queue']=enqueue(a['queue'],[29]);a['weapon_timer']=(a['weapon_timer']+500)&0xffffffff
+    return a,53046
+class FireAvailabilityTests(unittest.TestCase):
+    @classmethod
+    def setUpClass(cls):cls.r=json.loads(Path('docs/research/qvm-fire-availability.json').read_text())
+    def test_exact_availability_and_state(self):
+        self.assertEqual(len(self.r['probes']),110)
+        for p in self.r['probes']:a,stop=availability_state(p);self.assertEqual(p['final'],a);self.assertEqual(p['execution']['stop'],stop)
+    def test_actual_child_order_and_parameter_zero(self):
+        for p in self.r['probes']:
+            calls=[] if p['initial']['weapon_state']==1 else [50309]
+            if p['initial']['queue']!=p['final']['queue']:calls.append(39238);self.assertEqual(p['final']['queue']['parameters'][(p['initial']['queue']['sequence'])&1],0)
+            self.assertEqual([c['target'] for c in p['execution']['calls']],calls)
+    def test_id27_no_failure_side_effect(self):
+        rows=[p for p in self.r['probes'] if p['initial']['packed']&255==27 and p['execution']['stop']==53046];self.assertTrue(rows)
+        for p in rows:self.assertEqual(p['initial'],p['final'])
+    def test_no_ammo_consumption_and_request_publication(self):
+        for p in self.r['probes']:
+            for k in ['weapons','request260','request264','resource','field216']:self.assertEqual(p['initial'][k],p['final'][k])
+if __name__=='__main__':unittest.main()