qvm: recover movement scratch and mode dispatch

docs/FINDINGS.md

@@ -1899,3 +1899,5 @@ RE-981: Rust matches96 original movement-setup cases, preserving type precedence
 RE-982: Forty-eight source154089 executions compose preparation, routing, rewritten inputs, actual inactivity and movement setup through154544. Blocking movement can turn an otherwise active command into a timeout; early exits retain preceding timestamp/command mutations. Inactivity receives the pre-round delta, including the allowed negative exception. Native routing/team/send/drop effects remain captured; scratch setup and actual movement are beyond the boundary. [Evidence](research/QVM_CLIENT_PRE_MOVEMENT.md).
 
 RE-983: Rust matches48 original pre-movement executions, composing shared timing/spectator state, command masking, actual inactivity policy and finite movement setup. Ordinary early exits commit preceding writes; unsupported typed domains stage all state and effects atomically. Unit tests verify blocked-activity timeout, pre-round delta forwarding, timestamp persistence on routing and rollback after a late float error. Captured callbacks and later physics remain open. [Evidence](research/RUST_CLIENT_PRE_MOVEMENT.md).
+
+RE-984: Twelve original-QVM probes recover a 268-byte zero fill at frame+56, preserving four-byte guards on both sides. Mode10 requests152792 then152673; mode8 requests153419; other modes request neither. Zeroing precedes callbacks. Native memset is modeled with coherent byte writes; callback bodies and their state feedback remain unresolved. [Evidence](research/QVM_CLIENT_MOVE_SCRATCH.md).

docs/PROVISIONAL_TODO.md

@@ -1955,3 +1955,5 @@ RE-964–973 completed timer deadline/phase/recovery contracts, whole-body compo
 - [x] RE-983 Rust composed pre-movement pipeline with source early-exit mutations ([evidence](research/RUST_CLIENT_PRE_MOVEMENT.md)).
 
 RE-974–983 completed routing, command rewrite, inactivity, movement-parameter setup and composed prefix through154544. RE-984 tracks later callbacks/physics and native/runtime integration. [Batch and next work](research/QVM_CLIENT_PROCESSING_BATCH.md).
+
+- [x] RE-984 Recover movement scratch initialization and mode dispatch ([evidence](research/QVM_CLIENT_MOVE_SCRATCH.md)).

docs/RESEARCH_LEDGER.md

@@ -2607,3 +2607,7 @@ Forty-eight source154089 executions compose preparation, routing, rewritten inpu
 Rust matches48 original pre-movement executions, composing shared timing/spectator state, command masking, actual inactivity policy and finite movement setup. Ordinary early exits commit preceding writes; unsupported typed domains stage all state and effects atomically. Unit tests verify blocked-activity timeout, pre-round delta forwarding, timestamp persistence on routing and rollback after a late float error. Captured callbacks and later physics remain open. Focused `cargo xtask test-group rust-client-pre-movement` passes with deterministic report regeneration, relevant regressions and storage/documentation/whitespace checks. Full suite deferred to the tenth-commit boundary. Original assets unchanged; native IO effects remain captured.
 
 Batch RE-974–983 boundary: the single `cargo xtask test-full --since 74af72a2` run after commit ten passed with the flake-declared Nix Python: 1,898 Python tests, 280 Rust tests (assets10, gameplay240, xtask30), 111 deterministic report producers, storage policy, 557 documentation files and whitespace guards. No generated report drift. Focused dependency-selection regression covers all five new source/Rust pairs and shared processing/timer/command/loading/lifecycle/native-policy/formatter inputs, including scoped gameplay test-count metadata. Validation notes were amended into task ten; original assets unchanged. See [batch findings and next work](research/QVM_CLIENT_PROCESSING_BATCH.md).
+
+## 2026-10-29 — RE-984 Recover movement scratch initialization and mode dispatch
+
+Twelve original-QVM probes recover a 268-byte zero fill at frame+56, preserving four-byte guards on both sides. Mode10 requests152792 then152673; mode8 requests153419; other modes request neither. Zeroing precedes callbacks. Native memset is modeled with coherent byte writes; callback bodies and their state feedback remain unresolved. Focused `cargo xtask test-group qvm-client-move-scratch` passes with deterministic report regeneration and selected regressions. Full suite deferred to task ten. Original assets unchanged; Python uses the flake-declared Nix runtime.

docs/REVERSE_ENGINEERING_TODO.md

@@ -1992,3 +1992,5 @@ RE-974–983 recover routing, command rewriting, inactivity and composed setup t
 - [x] RE-983 Rust composed pre-movement pipeline with source early-exit mutations ([evidence](research/RUST_CLIENT_PRE_MOVEMENT.md)).
 
 - [ ] RE-984 Recover movement scratch/callbacks and remaining caller paths, native feedback/ownership and full Rust/Bevy/Solari acceptance ([next work](research/QVM_CLIENT_PROCESSING_BATCH.md)).
+
+- [x] RE-984 Recover movement scratch initialization and mode dispatch ([evidence](research/QVM_CLIENT_MOVE_SCRATCH.md)).

docs/research/QVM_CLIENT_MOVE_SCRATCH.md

@@ -0,0 +1,5 @@
+# Recover movement scratch initialization and mode dispatch
+
+RE-984. Focused validation: `cargo xtask test-group qvm-client-move-scratch`. [Machine report](qvm-client-move-scratch.json).
+
+Twelve original-QVM probes recover a 268-byte zero fill at frame+56, preserving four-byte guards on both sides. Mode10 requests152792 then152673; mode8 requests153419; other modes request neither. Zeroing precedes callbacks. Native memset is modeled with coherent byte writes; callback bodies and their state feedback remain unresolved.

docs/research/README.md

@@ -1527,3 +1527,5 @@ The extension collector adds five focused tests for native tail calls, command-r
 - [RE-983: Rust composed pre-movement pipeline with source early-exit mutations](RUST_CLIENT_PRE_MOVEMENT.md).
 
 - [RE-974–983 client processing batch and RE-984 next work](QVM_CLIENT_PROCESSING_BATCH.md).
+
+- [RE-984: Recover movement scratch initialization and mode dispatch](QVM_CLIENT_MOVE_SCRATCH.md).

docs/research/qvm-client-move-scratch.json

@@ -0,0 +1,1178 @@
+{
+  "limits": "154544..154579: native memset modeled exactly; mode callbacks captured without feedback. No movement simulation.",
+  "probes": [
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 17,
+        "trace_sha256": "3ce2e9d2e50d38c84f3d006b95945877beb9cd1056c3a5f0de554412e58045ad"
+      },
+      "guards": [
+        "00000000",
+        "00000000"
+      ],
+      "input": {
+        "dirty": 0,
+        "mode": 0
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 17,
+        "trace_sha256": "3ce2e9d2e50d38c84f3d006b95945877beb9cd1056c3a5f0de554412e58045ad"
+      },
+      "guards": [
+        "a5a5a5a5",
+        "a5a5a5a5"
+      ],
+      "input": {
+        "dirty": 165,
+        "mode": 0
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 17,
+        "trace_sha256": "3ce2e9d2e50d38c84f3d006b95945877beb9cd1056c3a5f0de554412e58045ad"
+      },
+      "guards": [
+        "ffffffff",
+        "ffffffff"
+      ],
+      "input": {
+        "dirty": 255,
+        "mode": 0
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        },
+        {
+          "op": "callback",
+          "slot": 2,
+          "target": 153419
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 23,
+        "trace_sha256": "ac64b60842e8be6cbd5c366eba3ab6ea75835766e0c7db630f727f945c928ae2"
+      },
+      "guards": [
+        "00000000",
+        "00000000"
+      ],
+      "input": {
+        "dirty": 0,
+        "mode": 8
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        },
+        {
+          "op": "callback",
+          "slot": 2,
+          "target": 153419
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 23,
+        "trace_sha256": "ac64b60842e8be6cbd5c366eba3ab6ea75835766e0c7db630f727f945c928ae2"
+      },
+      "guards": [
+        "a5a5a5a5",
+        "a5a5a5a5"
+      ],
+      "input": {
+        "dirty": 165,
+        "mode": 8
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        },
+        {
+          "op": "callback",
+          "slot": 2,
+          "target": 153419
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 23,
+        "trace_sha256": "ac64b60842e8be6cbd5c366eba3ab6ea75835766e0c7db630f727f945c928ae2"
+      },
+      "guards": [
+        "ffffffff",
+        "ffffffff"
+      ],
+      "input": {
+        "dirty": 255,
+        "mode": 8
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        },
+        {
+          "op": "callback",
+          "slot": 2,
+          "target": 152792
+        },
+        {
+          "op": "callback",
+          "slot": 2,
+          "target": 152673
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 29,
+        "trace_sha256": "a7e35d82111427365fc7c826af34dcb38ab1ea1738e18955fe9f0b51859810d4"
+      },
+      "guards": [
+        "00000000",
+        "00000000"
+      ],
+      "input": {
+        "dirty": 0,
+        "mode": 10
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        },
+        {
+          "op": "callback",
+          "slot": 2,
+          "target": 152792
+        },
+        {
+          "op": "callback",
+          "slot": 2,
+          "target": 152673
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 29,
+        "trace_sha256": "a7e35d82111427365fc7c826af34dcb38ab1ea1738e18955fe9f0b51859810d4"
+      },
+      "guards": [
+        "a5a5a5a5",
+        "a5a5a5a5"
+      ],
+      "input": {
+        "dirty": 165,
+        "mode": 10
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        },
+        {
+          "op": "callback",
+          "slot": 2,
+          "target": 152792
+        },
+        {
+          "op": "callback",
+          "slot": 2,
+          "target": 152673
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 29,
+        "trace_sha256": "a7e35d82111427365fc7c826af34dcb38ab1ea1738e18955fe9f0b51859810d4"
+      },
+      "guards": [
+        "ffffffff",
+        "ffffffff"
+      ],
+      "input": {
+        "dirty": 255,
+        "mode": 10
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 17,
+        "trace_sha256": "3ce2e9d2e50d38c84f3d006b95945877beb9cd1056c3a5f0de554412e58045ad"
+      },
+      "guards": [
+        "00000000",
+        "00000000"
+      ],
+      "input": {
+        "dirty": 0,
+        "mode": 4294967295
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 17,
+        "trace_sha256": "3ce2e9d2e50d38c84f3d006b95945877beb9cd1056c3a5f0de554412e58045ad"
+      },
+      "guards": [
+        "a5a5a5a5",
+        "a5a5a5a5"
+      ],
+      "input": {
+        "dirty": 165,
+        "mode": 4294967295
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    },
+    {
+      "events": [
+        {
+          "count": 268,
+          "offset": 56,
+          "op": "zero"
+        }
+      ],
+      "execution": {
+        "stop": 154579,
+        "trace_length": 17,
+        "trace_sha256": "3ce2e9d2e50d38c84f3d006b95945877beb9cd1056c3a5f0de554412e58045ad"
+      },
+      "guards": [
+        "ffffffff",
+        "ffffffff"
+      ],
+      "input": {
+        "dirty": 255,
+        "mode": 4294967295
+      },
+      "words": [
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0,
+        0
+      ]
+    }
+  ],
+  "sha256": "a589351dfe517470a1b121dd2164714987d9e4577bf00c6486e1540035d7a79d",
+  "source": {
+    "archive": "zUrT43_qvm.pk3",
+    "archive_sha256": "b59bf0c5bedf11d50e0edd220da7eade96de40601e98ae14c54c819047df0796",
+    "member": {
+      "bytes": 983300,
+      "comment_hex": "",
+      "compressed_bytes": 246560,
+      "compression": 8,
+      "crc32": "98ea1768",
+      "create_system": 0,
+      "create_version": 63,
+      "date_time": [
+        2018,
+        6,
+        18,
+        22,
+        11,
+        50
+      ],
+      "directory": false,
+      "entry_index": 2,
+      "external_attr": 32,
+      "extra_hex": "0a0020000000000001001800d1e24e974007d40116dcbf962f1fd20116dcbf962f1fd201",
+      "extract_version": 20,
+      "flags": 0,
+      "header_offset": 221309,
+      "internal_attr": 0,
+      "occurrence": 0,
+      "output": "assets/extracted/zUrT43_qvm.pk3/members/000002/vm/qagame.qvm",
+      "path": "vm/qagame.qvm",
+      "sha256": "a589351dfe517470a1b121dd2164714987d9e4577bf00c6486e1540035d7a79d",
+      "type": "member",
+      "volume": 0
+    }
+  }
+}

scripts/analyze_qvm_client_move_scratch.py

@@ -0,0 +1,12 @@
+"""Verified original movement-context source contract."""
+from pathlib import Path
+from analyze_qvm import write_json
+from qvm_research_support import source
+from qvm_client_move_context_support import seed,scratch,scratch_fixtures
+
+def main():
+ q,raw,h,ins=source();probes=[]
+ for a in scratch_fixtures():
+  m,b=seed(raw,h,a);m,p,b=scratch(ins,m,b,a);p['input']=a;probes.append(p)
+ write_json(Path('docs/research/qvm-client-move-scratch.json'),dict(source=q['source'],sha256=q['sha256'],probes=probes,limits='154544..154579: native memset modeled exactly; mode callbacks captured without feedback. No movement simulation.'))
+if __name__=='__main__':main()

scripts/qvm_client_move_context_oracle.py

@@ -0,0 +1,4 @@
+"""Independent expectations for movement scratch and context contracts."""
+def scratch(a):
+ t=[152792,152673] if a['mode']==10 else [153419] if a['mode']==8 else []
+ return dict(events=[dict(op='zero',offset=56,count=268)]+[dict(op='callback',target=v,slot=2) for v in t],words=[0]*67,guards=[bytes([a['dirty']]*4).hex()]*2)

scripts/qvm_client_move_context_support.py

@@ -0,0 +1,29 @@
+"""Original154544 movement scratch/callback and collision-context boundaries."""
+from qvm_client_processing_support import seed as base_seed,execute,ROOT,ENTITY,CLIENT
+from qvm_byte_memory_support import write_bytes,read_bytes
+
+def seed(raw,h,a):return base_seed(raw,h,a)
+
+def scratch_fixtures():
+ return [dict(mode=mode,dirty=dirty) for mode in [0,8,10,0xffffffff] for dirty in [0,0xa5,0xff]]
+
+def scratch_seed(m,b,a):
+ m[34090788]=a['mode']
+ write_bytes(m,b,{ROOT+o:a['dirty'] for o in range(52,328)})
+
+def scratch_handlers(events):
+ def memset(i,m,a,bs):
+  assert a[8]==ROOT+56 and a[12]==0 and a[16]==268
+  data={a[8]+j:0 for j in range(a[16])};write_bytes(m,dict(bs),data)
+  events.append(dict(op='zero',offset=56,count=268))
+  return m,a[8],{'modeled_native_memset':True,'child_memory_bytes':data}
+ def callback(target):
+  def call(i,m,a,bs):
+   assert a[8]==ENTITY
+   events.append(dict(op='callback',target=target,slot=2));return m,0,{'captured_mode_callback':target}
+  return call
+ return {-101:memset,**{t:callback(t) for t in [152792,152673,153419]}}
+
+def scratch(ins,m,b,a):
+ scratch_seed(m,b,a);events=[];m,e,b=execute(ins,m,b,154544,154579,scratch_handlers(events))
+ return m,dict(events=events,words=[m[ROOT+o]&0xffffffff for o in range(56,324,4)],guards=[read_bytes(m,b,ROOT+52,4).hex(),read_bytes(m,b,ROOT+324,4).hex()],execution={k:e[k] for k in ['stop','trace_length','trace_sha256']}),b

scripts/test_qvm_client_move_scratch.py

@@ -0,0 +1,13 @@
+import json,unittest
+from pathlib import Path
+from qvm_client_move_context_oracle import scratch
+class OriginalTests(unittest.TestCase):
+ def test_original_contract(self):
+  rows=json.loads(Path('docs/research/qvm-client-move-scratch.json').read_text())['probes'];self.assertEqual(len(rows),12)
+  for p in rows:
+   with self.subTest(input=p['input']):
+    for k,v in scratch(p['input']).items():self.assertEqual(p[k],v,k)
+ def test_fixture_identity_and_trace(self):
+  r=json.loads(Path('docs/research/qvm-client-move-scratch.json').read_text());self.assertEqual(len(r['sha256']),64)
+  self.assertTrue(all(p['execution']['trace_length']>0 for p in r['probes']))
+if __name__=='__main__':unittest.main()

xtask/checks.tsv

@@ -3670,3 +3670,7 @@ edge	crates/urt-gameplay/src/client_timer.rs	scripts/analyze_rust_client_pre_mov
 edge	crates/urt-gameplay/src/bin/urt-client-timer.rs	scripts/analyze_rust_client_pre_movement.py
 edge	crates/urt-gameplay/src/client_processing.rs	scripts/analyze_rust_client_pre_movement.py
 edge	crates/urt-gameplay/src/bin/urt-client-processing.rs	scripts/analyze_rust_client_pre_movement.py
+report	scripts/analyze_qvm_client_move_scratch.py	docs/research/qvm-client-move-scratch.json
+edge	docs/research/qvm-client-move-scratch.json	scripts/test_qvm_client_move_scratch.py
+group	qvm-client-move-scratch	scripts/analyze_qvm_client_move_scratch.py
+edge	scripts/analyze_qvm_client_move_scratch.py	scripts/analyze_qvm_resumer_audit.py