qvm: damage protection and armor gates

docs/ASSET_PIPELINE_TODO.md

@@ -772,3 +772,6 @@ Research progress: RE-700 [report](research/QVM_CONTACT_GATES.md); remaining nat
 
 
 Research progress: RE-701 [report](research/RUST_MD3.md); remaining native/content/runtime/platform scope stays open.
+
+
+Research progress: RE-703 [report](research/QVM_DAMAGE_PROTECTION.md); remaining native/content/runtime/platform scope stays open.

docs/FINDINGS.md

@@ -1118,3 +1118,6 @@ Bounded qagame paths recover bomb-plant/inactivity correction requests, direct f
 
 
 **RE-701 — Rust original-byte MD3 asset core and cross-language validation:** A dependency-free Rust asset crate parses all619 originals with Python parity for headers, surfaces, sampled packed geometry, frame/tag float bits, UVs, triangles and shaders. [Evidence](research/RUST_MD3.md).
+
+
+**RE-703 — Damage protection and armor location selection:** 289594 rejects mode9 and strictly active spawn protection before location output; actual32155/32117 reclassifies head/torso using live inventory low bytes and health, excluding slot16. [Evidence](research/QVM_DAMAGE_PROTECTION.md).

docs/PROVISIONAL_TODO.md

@@ -1107,3 +1107,6 @@ Research progress: RE-701 [report](research/RUST_MD3.md); remaining native/conte
 
 
 RE-692–701 batch complete: [original models and Rust asset foundation](research/ORIGINAL_MODELS_RUST_BATCH.md). RE-702 tracks Bevy integration, native parity and downstream contact/damage; playable macOS/Linux Solari gameplay remains open.
+
+
+Research progress: RE-703 [report](research/QVM_DAMAGE_PROTECTION.md); remaining native/content/runtime/platform scope stays open.

docs/RESEARCH_LEDGER.md

@@ -1152,3 +1152,8 @@ Original-asset runs retain measurable source-point differences from conventional
 ## 2026-10-21 — RE-701 Rust original-byte MD3 asset core and cross-language validation (separate task commit)
 
 A dependency-free Rust asset crate parses all619 originals with Python parity for headers, surfaces, sampled packed geometry, frame/tag float bits, UVs, triangles and shaders. Ten offline Rust unit tests plus four Python corpus-parity tests cover all619 originals and malformed CLI inputs; build/CLI execute locally on macOS. Full suite: 1259 tests pass. Report regenerates byte-identically (1812358 bytes). Storage/filter, links and whitespace checks pass. No original assets/shared VM evaluator changed; the safe dependency-free Rust asset crate and offline CLI are introduced; native/reference/legal/full platform scope remains open.
+
+
+## 2026-10-21 — RE-703 Damage protection and armor location selection (separate task commit)
+
+289594 rejects mode9 and strictly active spawn protection before location output; actual32155/32117 reclassifies head/torso using live inventory low bytes and health, excluding slot16. 356 gate/inventory fixtures and independent boundary/notification/location oracles pass. Full suite: 1263 tests pass. Report regenerates byte-identically (653493 bytes). Storage/filter, links and whitespace checks pass. No assets/Rust runtime/shared VM evaluator changed; native/reference/legal/full platform scope remains open.

docs/REVERSE_ENGINEERING_TODO.md

@@ -1150,3 +1150,6 @@ Purpose: turn the supplied installation into an evidence-backed specification of
 
 
 - [ ] RE-702 Integrate the verified Rust MD3 core with Bevy, port original transform/geometry contracts, recover native loader/reference behavior and complete contact/damage/shared-pellet callers toward a playable macOS/Linux Solari slice. See the [next ten tasks](research/ORIGINAL_MODELS_RUST_BATCH.md#remaining-limits-and-next-ten-tasks).
+
+
+- [x] RE-703 Damage protection and armor location selection ([report](research/QVM_DAMAGE_PROTECTION.md)).

docs/research/QVM_DAMAGE_PROTECTION.md

@@ -0,0 +1,7 @@
+# Damage protection and armor location selection
+
+RE-703. Reproduce with `python3 scripts/analyze_qvm_damage_protection.py`; check with `python3 scripts/test_qvm_damage_protection.py`. The [machine report](qvm-damage-protection.json) retains source identity and bounded fixtures.
+
+The source range289595–289761 uses signed millisecond arithmetic: time minus client4140 must be at least protection_seconds×1000. Mode9 returns zero first; active protection captures278003(attacker,110,targetID). Accepted inputs copy context68 to the location output. Locations1/2 resolve to1 without item22 or2 with it;3/4 resolve to3 without item17 or4 with it. Actual inventory routines require positive client208 and search exactly16 slots using the low byte. Slot16 is excluded. Clock, client presence and inventory inputs are explicit fixtures. Notification effects and damage continuation remain open.
+
+No original executable/full QVM/native collision/physics/rendering executes. Native responses and legal input domains are supplied or unverified where stated; full runtime/macOS/Linux Rust/Bevy/Solari gameplay remains open.

docs/research/README.md

@@ -708,3 +708,6 @@ The extension collector adds five focused tests for native tail calls, command-r
 
 
 [RE-692–701: Original models and Rust asset foundation](ORIGINAL_MODELS_RUST_BATCH.md), with validation limits and the next ten tasks.
+
+
+[RE-703: Damage protection and armor location selection](QVM_DAMAGE_PROTECTION.md). Reproduce with `python3 scripts/analyze_qvm_damage_protection.py`; check with `python3 scripts/test_qvm_damage_protection.py`.

scripts/analyze_qvm_damage_protection.py

@@ -0,0 +1,16 @@
+#!/usr/bin/env python3
+"""Damage-factor protection gates and actual inventory-based location selection."""
+import itertools
+from pathlib import Path
+from qvm_research_support import source
+from qvm_damage_support import seed,run
+from analyze_qvm import write_json
+
+def main():
+    q,raw,h,ins=source();rows=[]
+    cases=[dict(mode=mode,now=now,location=loc,vest_slot=slot if loc in (3,4) else -1,helmet_slot=slot if loc in (1,2) else -1) for mode,now,loc,slot in itertools.product([3,9],[3999,4000,4001],range(1,15),[-1,0,15,16])]
+    cases += [dict(location=loc,client=client,health=health,vest_slot=0,helmet_slot=15) for loc,client,health in itertools.product([1,2,3,4,14],[False,True],[0,100])]
+    for a in cases:
+        _,p=run(ins,seed(raw,h,**a),289595,289762);p['input']=a;rows.append(p)
+    write_json(Path('docs/research/qvm-damage-protection.json'),{'source':q['source'],'sha256':q['sha256'],'probes':rows,'limits':'Actual289595..289761,32155,32117. Notification278003 is captured without its effects; clock/client/inventory fixtures supplied. No health damage.'})
+if __name__=='__main__':main()

scripts/qvm_damage_support.py

@@ -0,0 +1,32 @@
+"""Explicit bounded fixtures for damage-factor289594 research; no engine model."""
+from qvm_research_support import constants
+from qvm_trace_support import resume,captured
+from analyze_qvm_interaction_request import inventory_check
+from analyze_qvm_acceleration import word
+L=0x79d00000
+ATTACKER=L+4096
+TARGET=L+8192
+CLIENT=L+12288
+CONTEXT=L+16384
+LOCATION=L+20480
+EXTRA=L+24576
+
+def seed(raw,h,**x):
+    m=constants(raw,h,list(range(4068,4068+432*34,4))+list(range(32796,32856,4)))
+    m.update({L+o:0 for o in range(0,120,4)})
+    m.update({CLIENT+o:0 for o in range(0,6312,4)})
+    m.update({L+92:ATTACKER,L+96:TARGET,L+100:x.get('weapon',3),L+104:CONTEXT,L+108:LOCATION,L+112:EXTRA,LOCATION:x.get('location',3),EXTRA:word(x.get('extra',0.25)),CONTEXT+68:x.get('location',3),CONTEXT+84:word(x.get('distance',0)),TARGET:65,TARGET+520:CLIENT if x.get('client',True) else 0,TARGET+552:x.get('entity_flags',0),TARGET+836:0,CLIENT+208:x.get('health',100),CLIENT+4140:x.get('spawn',1000),CLIENT+4312:word(x.get('stamina',0)),CLIENT+220:x.get('flags',8),CLIENT+192:x.get('location_flags',16),CLIENT+4300:99,CLIENT+4304:x.get('counter',0),CLIENT+4316:77,CLIENT+144:0,CLIENT+312:x.get('held',0),CLIENT+6304:123,34992532:x.get('now',5000),34074804:x.get('protection_seconds',3),34090788:x.get('mode',3),34066516:x.get('override',0),L+20:word(x.get('factor',0.4)),L+24:x.get('wound',1),L+28:x.get('protected',0),L+32:word(x.get('ratio',0)),L+36:word(1)})
+    for item,slot in [(17,x.get('vest_slot',-1)),(22,x.get('helmet_slot',-1))]:
+        if slot>=0:m[CLIENT+376+4*slot]=0xaa0000|item
+    return m
+
+def run(ins,m,start,stop):
+    notices=[]
+    def inventory(i,m,a):
+        m,_,v,r=inventory_check(i,m,a,(0,0,0));return m,v,r
+    before=snapshot(m)
+    m,e=resume(ins,start,stop,m,L,handlers={32155:inventory,278003:captured(278003,notices)})
+    return m,{'initial':before,'final':snapshot(m),'notices':notices,'execution':e}
+
+def snapshot(m):
+    return {'locals':{str(o):m.get(L+o,0)&0xffffffff for o in [20,24,28,32,36,40,44,48,52,56]},'location':m[LOCATION]&0xffffffff,'extra':m[EXTRA]&0xffffffff,'client':{str(o):m[CLIENT+o]&0xffffffff for o in [192,220,4300,4304,4312,4316,6304]},'attacker_pointer':m[TARGET+836]}

scripts/test_qvm_damage_protection.py

@@ -0,0 +1,27 @@
+import json,unittest
+from pathlib import Path
+class DamageProtectionTests(unittest.TestCase):
+    @classmethod
+    def setUpClass(cls):cls.ps=json.loads(Path('docs/research/qvm-damage-protection.json').read_text())['probes']
+    def test_strict_clock_and_mode_gates(self):
+        for p in self.ps:
+            a=p['input'];protected=a.get('now',5000)-1000<3000;blocked=a.get('mode',3)==9 or protected
+            self.assertEqual(p['execution']['return'],0 if blocked else None)
+            self.assertEqual(p['execution']['stop'],289641 if a.get('mode',3)==9 else 289661 if protected else 289762)
+    def test_actual_low_byte_inventory_reclassification(self):
+        for p in self.ps:
+            a=p['input'];loc=a['location'];blocked=a.get('mode',3)==9 or a.get('now',5000)-1000<3000
+            if not blocked and a.get('client',True):
+                if loc in (1,2):loc=2 if a.get('health',100)>0 and 0<=a.get('helmet_slot',-1)<16 else 1
+                if loc in (3,4):loc=4 if a.get('health',100)>0 and 0<=a.get('vest_slot',-1)<16 else 3
+            self.assertEqual(p['final']['location'],loc)
+    def test_protection_notification_arguments(self):
+        from qvm_damage_support import ATTACKER
+        for p in self.ps:
+            a=p['input'];notify=a.get('mode',3)!=9 and a.get('now',5000)-1000<3000
+            self.assertEqual(len(p['notices']),int(notify))
+            if notify:self.assertEqual(p['notices'][0]['arguments'],{'8':ATTACKER,'12':110,'16':65})
+    def test_inventory_slot_sixteen_is_excluded(self):
+        rows=[p for p in self.ps if p['input'].get('vest_slot')==16 and p['input']['location']==4 and p['execution']['return'] is None]
+        self.assertTrue(rows);self.assertTrue(all(p['final']['location']==3 for p in rows))
+if __name__=='__main__':unittest.main()