{ "schemaVersion": 1, "game": "mvsc / Europe 980123", "scope": "21 playable characters; every normal table record, structurally reviewed packed attack/throw selector entry, and 24 character/form contexts. Each row has a local route receipt. Named gameplay semantics, human reachability and global/child closure are explicitly incomplete.", "completeSemanticInventory": false, "excluded": [ "Onslaught IDs 00 and 22", "exhaustive team/assist permutations" ], "romSha256": "fbb9c9a0fc44c6f26481cc018bdd13d9aac5376806e736c428c4b54b274c032c", "dataViewSha256": "d464d1c27542678b8b83ecf1af0a072f0a0ffc383dd6adff21cf8d7e9c7112cd", "opcodeViewSha256": "7ede16dc56ffbefe899f98608c6b0a01f2304cd3e8c46da9f912ee0b9bcf7490", "coverage": [ { "character": "War Machine", "id": "0x02", "normalTableRecords": 24, "specialTableRows": 13, "throwTableRows": 3, "commandCandidates": 13, "contexts": 1, "semanticCompleteness": false }, { "character": "Captain America", "id": "0x04", "normalTableRecords": 24, "specialTableRows": 14, "throwTableRows": 5, "commandCandidates": 12, "contexts": 1, "semanticCompleteness": false }, { "character": "Hulk", "id": "0x06", "normalTableRecords": 24, "specialTableRows": 13, "throwTableRows": 3, "commandCandidates": 13, "contexts": 1, "semanticCompleteness": false }, { "character": "Wolverine", "id": "0x08", "normalTableRecords": 24, "specialTableRows": 17, "throwTableRows": 3, "commandCandidates": 15, "contexts": 1, "semanticCompleteness": false }, { "character": "Gambit", "id": "0x0A", "normalTableRecords": 24, "specialTableRows": 15, "throwTableRows": 3, "commandCandidates": 16, "contexts": 1, "semanticCompleteness": false }, { "character": "Venom", "id": "0x0C", "normalTableRecords": 24, "specialTableRows": 15, "throwTableRows": 5, "commandCandidates": 10, "contexts": 1, "semanticCompleteness": false }, { "character": "Spider-Man", "id": "0x0E", "normalTableRecords": 24, "specialTableRows": 16, "throwTableRows": 6, "commandCandidates": 13, "contexts": 1, "semanticCompleteness": false }, { "character": "Roll", "id": "0x10", "normalTableRecords": 24, "specialTableRows": 14, "throwTableRows": 2, "commandCandidates": 15, "contexts": 1, "semanticCompleteness": false }, { "character": "Ryu", "id": "0x12", "normalTableRecords": 24, "specialTableRows": 27, "throwTableRows": 8, "commandCandidates": 40, "contexts": 3, "semanticCompleteness": false }, { "character": "Captain Commando", "id": "0x14", "normalTableRecords": 24, "specialTableRows": 13, "throwTableRows": 6, "commandCandidates": 13, "contexts": 1, "semanticCompleteness": false }, { "character": "Chun-Li", "id": "0x16", "normalTableRecords": 24, "specialTableRows": 15, "throwTableRows": 2, "commandCandidates": 15, "contexts": 1, "semanticCompleteness": false }, { "character": "Jin", "id": "0x18", "normalTableRecords": 24, "specialTableRows": 13, "throwTableRows": 5, "commandCandidates": 10, "contexts": 1, "semanticCompleteness": false }, { "character": "Zangief", "id": "0x1A", "normalTableRecords": 24, "specialTableRows": 21, "throwTableRows": 14, "commandCandidates": 23, "contexts": 2, "semanticCompleteness": false }, { "character": "Strider Hiryu", "id": "0x1C", "normalTableRecords": 24, "specialTableRows": 22, "throwTableRows": 4, "commandCandidates": 22, "contexts": 1, "semanticCompleteness": false }, { "character": "Morrigan", "id": "0x1E", "normalTableRecords": 24, "specialTableRows": 14, "throwTableRows": 6, "commandCandidates": 16, "contexts": 1, "semanticCompleteness": false }, { "character": "Mega Man", "id": "0x20", "normalTableRecords": 24, "specialTableRows": 14, "throwTableRows": 2, "commandCandidates": 14, "contexts": 1, "semanticCompleteness": false }, { "character": "Red Venom", "id": "0x24", "normalTableRecords": 24, "specialTableRows": 16, "throwTableRows": 5, "commandCandidates": 12, "contexts": 1, "semanticCompleteness": false }, { "character": "Orange Hulk", "id": "0x26", "normalTableRecords": 24, "specialTableRows": 13, "throwTableRows": 3, "commandCandidates": 13, "contexts": 1, "semanticCompleteness": false }, { "character": "Gold War Machine", "id": "0x28", "normalTableRecords": 24, "specialTableRows": 13, "throwTableRows": 3, "commandCandidates": 13, "contexts": 1, "semanticCompleteness": false }, { "character": "Shadow Lady", "id": "0x2A", "normalTableRecords": 24, "specialTableRows": 21, "throwTableRows": 2, "commandCandidates": 14, "contexts": 1, "semanticCompleteness": false }, { "character": "Lilith", "id": "0x2C", "normalTableRecords": 24, "specialTableRows": 15, "throwTableRows": 6, "commandCandidates": 13, "contexts": 1, "semanticCompleteness": false } ], "rowCount": 1111, "rows": [ { "id": "02-base-normal-0-lp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8130", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=0, 4D=0", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "New LP only: fighter +$D4 & $0010 Clears +$3C, toggles +$380 and chooses animation-bank offsets $2A/$00 versus $10/$00 before calling $0135E6 at $029AB4. It also resets attack fields +$80/+$84/+$86.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029A7E\u21920x001DD8 (external jsr); 0x029A86\u21920x016FBA (external jmp); 0x029AB4\u21920x0135E6 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x029A8C" ], "gate": "Animation updater $001DD8 has not ended the move, and the animation flag byte +$3C is nonzero.", "effect": "Clears +$3C, toggles +$380 and chooses animation-bank offsets $2A/$00 versus $10/$00 before calling $0135E6 at $029AB4. It also resets attack fields +$80/+$84/+$86.", "limit": "No explicit finite mash-credit count in this local branch. The animation window and ordinary state transitions still gate each restart. No maximum or live extra-hit total established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-0-lp", "localInstructionCount": 42, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#02-base-normal-0-lp", "animationInstallAddresses": [ "0x0294A6" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#02-base-normal-0-lp" }, { "id": "02-base-normal-0-mp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8132", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029AE2\u21920x001DD8 (external jsr); 0x029AEA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#02-base-normal-0-mp", "animationInstallAddresses": [ "0x0294D6" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-0-hp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8134", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "35 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029B3E\u21920x001DD8 (external jsr); 0x029B48\u21920x016FBA (external jmp); 0x029B1C\u21920x0135E6 (external jmp); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-0-hp", "localInstructionCount": 35, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#02-base-normal-0-hp", "animationInstallAddresses": [ "0x029506" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-0-lk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8136", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029D0A\u21920x001DD8 (external jsr); 0x029D12\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#02-base-normal-0-lk", "animationInstallAddresses": [ "0x0295E8" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-0-mk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8138", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "24 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029D1A\u21920x001DD8 (external jsr); 0x029D22\u21920x016FBA (external jmp); 0x029D3A\u21920x094D7A (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-0-mk", "localInstructionCount": 24, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#02-base-normal-0-mk", "animationInstallAddresses": [ "0x029618" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-0-hk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E813A", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "24 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029D40\u21920x001DD8 (external jsr); 0x029D48\u21920x016FBA (external jmp); 0x029D60\u21920x094D7A (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-0-hk", "localInstructionCount": 24, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#02-base-normal-0-hk", "animationInstallAddresses": [ "0x029650" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-1-lp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E813C", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029B62\u21920x001DD8 (external jsr); 0x029B6A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#02-base-normal-1-lp", "animationInstallAddresses": [ "0x029542" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-1-mp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E813E", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029B62\u21920x001DD8 (external jsr); 0x029B6A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#02-base-normal-1-mp", "animationInstallAddresses": [ "0x029572" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-1-hp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8140", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "26 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029B7A\u21920x001DD8 (external jsr); 0x029B82\u21920x016FBA (external jmp); 0x029B9A\u21920x094D7A (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-1-hp", "localInstructionCount": 26, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#02-base-normal-1-hp", "animationInstallAddresses": [ "0x0295A2" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-1-lk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8142", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029D7A\u21920x001DD8 (external jsr); 0x029D82\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#02-base-normal-1-lk", "animationInstallAddresses": [ "0x029694" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-1-mk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8144", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "47 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029DDC\u21920x002490 (external jsr); 0x029DE2\u21920x001DD8 (external jsr); 0x029DFC\u21920x016FBA (external jmp); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-1-mk", "localInstructionCount": 47, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#02-base-normal-1-mk", "animationInstallAddresses": [ "0x0296DA" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-1-hk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8146", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "24 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029E1A\u21920x001DD8 (external jsr); 0x029E22\u21920x016FBA (external jmp); 0x029E3A\u21920x094D7A (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-1-hk", "localInstructionCount": 24, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#02-base-normal-1-hk", "animationInstallAddresses": [ "0x02970C" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-2-lp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8148", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "33 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029E8C\u21920x017588 (external jsr); 0x029E94\u21920x0178C8 (external jmp); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-2-lp", "localInstructionCount": 33, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#02-base-normal-2-lp", "animationInstallAddresses": [ "0x0297E2" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-2-mp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E814A", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "33 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029E8C\u21920x017588 (external jsr); 0x029E94\u21920x0178C8 (external jmp); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-2-mp", "localInstructionCount": 33, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#02-base-normal-2-mp", "animationInstallAddresses": [ "0x029812" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-2-hp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E814C", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029E8C\u21920x017588 (external jsr); 0x029E94\u21920x0178C8 (external jmp); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-2-hp", "localInstructionCount": 27, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#02-base-normal-2-hp", "animationInstallAddresses": [ "0x02984E", "0x02989C", "0x0298C4" ], "directionVariantGroups": 3 }, { "id": "02-base-normal-2-lk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E814E", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "30 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029F0C\u21920x017588 (external jsr); 0x029F14\u21920x0178C8 (external jmp); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-2-lk", "localInstructionCount": 30, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#02-base-normal-2-lk", "animationInstallAddresses": [ "0x029912" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-2-mk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8150", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "76 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029F0C\u21920x017588 (external jsr); 0x029F14\u21920x0178C8 (external jmp); 15 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-2-mk", "localInstructionCount": 76, "externalFrontierCount": 20, "initializerSource": "normal-initializer-receipts.json#02-base-normal-2-mk", "animationInstallAddresses": [ "0x02995E", "0x0299B8" ], "directionVariantGroups": 2 }, { "id": "02-base-normal-2-hk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8152", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029F0C\u21920x017588 (external jsr); 0x029F14\u21920x0178C8 (external jmp); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-2-hk", "localInstructionCount": 27, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#02-base-normal-2-hk", "animationInstallAddresses": [ "0x0299F2", "0x029A22" ], "directionVariantGroups": 2 }, { "id": "02-base-normal-3-lp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8154", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "37 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-3-lp", "localInstructionCount": 37, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#02-base-normal-3-lp", "animationInstallAddresses": [ "0x0297E2" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-3-mp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8156", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "37 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-3-mp", "localInstructionCount": 37, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#02-base-normal-3-mp", "animationInstallAddresses": [ "0x029812" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-3-hp", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8158", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "31 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-3-hp", "localInstructionCount": 31, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#02-base-normal-3-hp", "animationInstallAddresses": [ "0x02984E", "0x02989C", "0x0298C4" ], "directionVariantGroups": 3 }, { "id": "02-base-normal-3-lk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E815A", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "34 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-3-lk", "localInstructionCount": 34, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#02-base-normal-3-lk", "animationInstallAddresses": [ "0x029912" ], "directionVariantGroups": 0 }, { "id": "02-base-normal-3-mk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E815C", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "80 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 17 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-3-mk", "localInstructionCount": 80, "externalFrontierCount": 22, "initializerSource": "normal-initializer-receipts.json#02-base-normal-3-mk", "animationInstallAddresses": [ "0x02995E", "0x0299B8" ], "directionVariantGroups": 2 }, { "id": "02-base-normal-3-hk", "character": "War Machine", "characterId": "0x02", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E815E", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "31 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E60\u21920x0191A0 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "normal-route-receipts.json#02-base-normal-3-hk", "localInstructionCount": 31, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#02-base-normal-3-hk", "animationInstallAddresses": [ "0x0299F2", "0x029A22" ], "directionVariantGroups": 2 }, { "id": "02-base-attack-00", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x00", "command": "F \u2192 DF \u2192 D \u2192 DB \u2192 B + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x02A42C", "handlerAddress": "0x02A47C", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "71 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02A47C: unresolved shared/indirect closure: 0x02A582\u21920x001DD8 (external jsr); 0x02A59E\u21920x016FBA (external jmp); 0x02A566\u21920x001DD8 (external jsr); 0x02A57C\u21920x0135E6 (external jmp); 0x02A524\u21920x001DD8 (external jsr); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-00", "commandSources": [ "0x02BD6A", "0x02BD7E" ], "localInstructionCount": 71, "externalFrontierCount": 12 }, { "id": "02-base-attack-02", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "War Machine Proton Cannon", "command": "QCF + two punches", "variant": "Stock character", "tableAddress": "0x02A42E", "handlerAddress": "0x02A5A4", "selector": "B0=0x2A, E6=0x02", "status": "tested: differs from Gold missile path", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "The ordinary beam path does not inherit the direction-sensitive Gold missile scheduler.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Ordinary ID $02; same E6=$02 dispatch includes character-specific logic.", "effect": "The ordinary beam path does not inherit the direction-sensitive Gold missile scheduler.", "limit": "Do not transfer Gold results to ordinary War Machine.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-02", "commandSources": [], "localInstructionCount": 140, "externalFrontierCount": 18, "reviewSource": "../../war-machine.md" }, { "id": "02-base-attack-04", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x02A430", "handlerAddress": "0x02A9DE", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "164 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02A9DE: unresolved shared/indirect closure: 0x02AB40\u21920x001DD8 (external jsr); 0x02AB5C\u21920x016FBA (external jmp); 0x02AB0A\u21920x001DD8 (external jsr); 0x02AB22\u21920x0D4E18 (external jsr); 0x02AB34\u21920x0135E6 (external jmp); 22 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-04", "commandSources": [ "0x02BDA4", "0x02BDB4" ], "localInstructionCount": 164, "externalFrontierCount": 27 }, { "id": "02-base-attack-06", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x06", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x02A432", "handlerAddress": "0x02AE78", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "113 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02AE78: unresolved shared/indirect closure: 0x02AEEA\u21920x001DD8 (external jsr); 0x02AF06\u21920x016FBA (external jmp); 0x02AF1C\u21920x0775E8 (external jsr); 0x02AF26\u21920x0775E8 (external jsr); 0x02AF32\u21920x00433A (external jsr); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-06", "commandSources": [ "0x02BE04" ], "localInstructionCount": 113, "externalFrontierCount": 17 }, { "id": "02-base-attack-08", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x08", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A434", "handlerAddress": "0x02B044", "selector": "B0=0x2A, E6=0x08", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B044: unresolved shared/indirect closure: 0x02B06C\u21920x001DD8 (external jsr); 0x02B088\u21920x016FBA (external jmp); 0x02B05A\u21920x01CD1E (external jsr); 0x02B066\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-08", "commandSources": [], "localInstructionCount": 18, "externalFrontierCount": 4 }, { "id": "02-base-attack-0a", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x0A", "command": "D \u2192 DB \u2192 B + K", "variant": "Stock character", "tableAddress": "0x02A436", "handlerAddress": "0x02B08E", "selector": "B0=0x2A, E6=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "45 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B08E: unresolved shared/indirect closure: 0x02B10E\u21920x002490 (external jsr); 0x02B114\u21920x001DD8 (external jsr); 0x02B130\u21920x016FBA (external jmp); 0x02B0B2\u21920x0B5E20 (external jsr); 0x02B0F4\u21920x0135E6 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-0a", "commandSources": [ "0x02BDF4" ], "localInstructionCount": 45, "externalFrontierCount": 8 }, { "id": "02-base-attack-0c", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A438", "handlerAddress": "0x02B156", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "104 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B156: unresolved shared/indirect closure: 0x02B298\u21920x001DD8 (external jsr); 0x02B2B2\u21920x016FBA (external jmp); 0x02B27C\u21920x001DD8 (external jsr); 0x02B28C\u21920x0135E6 (external jsr); 0x02B1F6\u21920x001DD8 (external jsr); 16 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-0c", "commandSources": [], "localInstructionCount": 104, "externalFrontierCount": 21 }, { "id": "02-base-attack-0e", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A43A", "handlerAddress": "0x02B2E0", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "54 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B2E0: unresolved shared/indirect closure: 0x02B3B0\u21920x001DD8 (external jsr); 0x02B3B8\u21920x015EF4 (external jmp); 0x02B372\u21920x001DD8 (external jsr); 0x02B378\u21920x002490 (external jsr); 0x02B37E\u21920x017588 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-0e", "commandSources": [], "localInstructionCount": 54, "externalFrontierCount": 9 }, { "id": "02-base-attack-10", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A43C", "handlerAddress": "0x02A446", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02A446: unresolved shared/indirect closure: 0x02A446\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-10", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "02-base-attack-12", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A43E", "handlerAddress": "0x02A44C", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02A44C: unresolved shared/indirect closure: 0x02A44C\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "02-base-attack-14", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A440", "handlerAddress": "0x02B2E0", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "46 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B2E0: unresolved shared/indirect closure: 0x02B3B0\u21920x001DD8 (external jsr); 0x02B3B8\u21920x015EF4 (external jmp); 0x02B372\u21920x001DD8 (external jsr); 0x02B378\u21920x002490 (external jsr); 0x02B37E\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-14", "commandSources": [], "localInstructionCount": 46, "externalFrontierCount": 8 }, { "id": "02-base-attack-16", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A442", "handlerAddress": "0x02A452", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02A452: unresolved shared/indirect closure: 0x02A452\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-16", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "02-base-attack-18", "character": "War Machine", "characterId": "0x02", "category": "special / super", "name": "Native attack selector 0x18", "command": "D \u2192 DF \u2192 F + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x02A444", "handlerAddress": "0x02B3C0", "selector": "B0=0x2A, E6=0x18", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "85 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B3C0: unresolved shared/indirect closure: 0x02B512\u21920x001DD8 (external jsr); 0x02B52E\u21920x016FBA (external jmp); 0x02B4E2\u21920x001DD8 (external jsr); 0x02B4FA\u21920x0D4E18 (external jsr); 0x02B50C\u21920x0135E6 (external jmp); 9 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-attack-18", "commandSources": [ "0x02BDDA", "0x02BDEA" ], "localInstructionCount": 85, "externalFrontierCount": 14 }, { "id": "02-base-throw-00", "character": "War Machine", "characterId": "0x02", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x02B616; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02B698", "handlerAddress": "0x02B69E", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x02B6AA. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02B69E: unresolved shared/indirect closure: 0x02B6CA\u21920x0BD606 (external jsr); 0x02B6D0\u21920x01CD1C (external jsr); 0x02B6DA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x02B6AA" ], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-throw-00", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "02-base-throw-02", "character": "War Machine", "characterId": "0x02", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x02B616; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02B69A", "handlerAddress": "0x02B6E0", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x02B6EC. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02B6E0: unresolved shared/indirect closure: 0x02B70C\u21920x0BD606 (external jsr); 0x02B712\u21920x01CD1C (external jsr); 0x02B71C\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x02B6EC" ], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-throw-02", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "02-base-throw-04", "character": "War Machine", "characterId": "0x02", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x02B616; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02B69C", "handlerAddress": "0x02B722", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x02B72E. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02B722: unresolved shared/indirect closure: 0x02B74E\u21920x0BD606 (external jsr); 0x02B754\u21920x01CD1C (external jsr); 0x02B75E\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x02B72E" ], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#02", "codeSource": "context-route-receipts.json#leaves/02-base-throw-04", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "04-base-normal-0-lp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8160", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=0, B5=0, 4D=0", "status": "local normal-repeat/variant branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit4, normalized new/buffered LP Clears buffer; resets +$80/+$84/+$86; decrements +$BD at $02CE10 and chooses attack attribute $1A when nonpositive. Animation $10/$06 or $10/$00 is installed at $02CE2A, depending on +$3C.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02CDAE\u21920x001DD8 (external jsr); 0x02CDB6\u21920x016FBA (external jmp); 0x02CDC2\u21920x0176B6 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x02CDD2", "0x02CDD6", "0x02CDEE" ], "gate": "Nonzero animation flag +$3C; normal animation has not ended; shared posture/normal-transition gates must permit continuation. Calls $0176B6 and $01741E.", "effect": "Clears buffer; resets +$80/+$84/+$86; decrements +$BD at $02CE10 and chooses attack attribute $1A when nonpositive. Animation $10/$06 or $10/$00 is installed at $02CE2A, depending on +$3C.", "limit": "No explicit finite bonus-hit allowance is established in this local branch. This is a code-verified normal animation restart, not a measured hit increase or a Hyper extension. The +$BD branch changes an attribute rather than directly refusing another restart.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-0-lp", "localInstructionCount": 49, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#04-base-normal-0-lp", "animationInstallAddresses": [ "0x02C744" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#04-base-normal-0-lp" }, { "id": "04-base-normal-0-mp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8162", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02CE38\u21920x001DD8 (external jsr); 0x02CE40\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#04-base-normal-0-mp", "animationInstallAddresses": [ "0x02C798" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-0-hp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8164", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02CE38\u21920x001DD8 (external jsr); 0x02CE40\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#04-base-normal-0-hp", "animationInstallAddresses": [ "0x02C822", "0x02C852" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-0-lk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8166", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02CF16\u21920x001DD8 (external jsr); 0x02CF1E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#04-base-normal-0-lk", "animationInstallAddresses": [ "0x02CA1A" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-0-mk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8168", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=0, B5=2, 4D=2", "status": "one additional local normal-continuation stage verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit9, normalized new/buffered MK Installs animation $12/$08 at $02CFD8, resets attack fields, clears buffer at $02D004 and advances +$08 by2 at $02D008. State2 dispatches directly to ordinary animation update $02D00C, bypassing the input branch.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02D00C\u21920x001DD8 (external jsr); 0x02D014\u21920x016FBA (external jmp); 0x02CFB2\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x02CFC6", "0x02CFCA", "0x02D004" ], "gate": "+$08 dispatch state is zero; +$3C is nonzero and normal animation has not ended.", "effect": "Installs animation $12/$08 at $02CFD8, resets attack fields, clears buffer at $02D004 and advances +$08 by2 at $02D008. State2 dispatches directly to ordinary animation update $02D00C, bypassing the input branch.", "limit": "The local two-state path allows one additional continuation after entry at state0. Native normal entry clears +$08 at $0185AC. This is not a count of guaranteed additional connected hits.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-0-mk", "localInstructionCount": 45, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#04-base-normal-0-mk", "animationInstallAddresses": [ "0x02CA4A" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#04-base-normal-0-mk" }, { "id": "04-base-normal-0-hk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E816A", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "55 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02D0BC\u21920x001DD8 (external jsr); 0x02D0C4\u21920x016FBA (external jmp); 0x02D086\u21920x001DD8 (external jsr); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-0-hk", "localInstructionCount": 55, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#04-base-normal-0-hk", "animationInstallAddresses": [ "0x02CA7E" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-1-lp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E816C", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02CE5C\u21920x001DD8 (external jsr); 0x02CE64\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#04-base-normal-1-lp", "animationInstallAddresses": [ "0x02C8B2" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-1-mp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E816E", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02CEE8\u21920x001DD8 (external jsr); 0x02CEF0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#04-base-normal-1-mp", "animationInstallAddresses": [ "0x02C90A" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-1-hp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8170", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02CEE8\u21920x001DD8 (external jsr); 0x02CEF0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#04-base-normal-1-hp", "animationInstallAddresses": [ "0x02C946", "0x02C976", "0x02C9A4", "0x02C9D4" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-1-lk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8172", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02D0E0\u21920x001DD8 (external jsr); 0x02D0E8\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#04-base-normal-1-lk", "animationInstallAddresses": [ "0x02CABA" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-1-mk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8174", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02D16C\u21920x001DD8 (external jsr); 0x02D174\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#04-base-normal-1-mk", "animationInstallAddresses": [ "0x02CAEA" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-1-hk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8176", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02CD7C\u21920x002490 (external jsr); 0x02CD82\u21920x017540 (external jsr); 0x02D17C\u21920x001DD8 (external jsr); 0x02D184\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#04-base-normal-1-hk", "animationInstallAddresses": [ "0x02CB1A" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-2-lp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8178", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1BA\u21920x017588 (external jsr); 0x02D1C2\u21920x0178C8 (external jmp); 0x02D1D0\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#04-base-normal-2-lp", "animationInstallAddresses": [ "0x02CB90" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-2-mp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E817A", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1BA\u21920x017588 (external jsr); 0x02D1C2\u21920x0178C8 (external jmp); 0x02D1D0\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#04-base-normal-2-mp", "animationInstallAddresses": [ "0x02CBE8" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-2-hp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E817C", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1BA\u21920x017588 (external jsr); 0x02D1C2\u21920x0178C8 (external jmp); 0x02D1D0\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#04-base-normal-2-hp", "animationInstallAddresses": [ "0x02CC1E", "0x02CC4E" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-2-lk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E817E", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1EE\u21920x017588 (external jsr); 0x02D1F6\u21920x0178C8 (external jmp); 0x02D204\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#04-base-normal-2-lk", "animationInstallAddresses": [ "0x02CC9C" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-2-mk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8180", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1EE\u21920x017588 (external jsr); 0x02D1F6\u21920x0178C8 (external jmp); 0x02D204\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#04-base-normal-2-mk", "animationInstallAddresses": [ "0x02CCCC" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-2-hk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8182", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "23 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1EE\u21920x017588 (external jsr); 0x02D1F6\u21920x0178C8 (external jmp); 0x02D214\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-2-hk", "localInstructionCount": 23, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#04-base-normal-2-hk", "animationInstallAddresses": [ "0x02CD52" ], "directionVariantGroups": 9 }, { "id": "04-base-normal-3-lp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8184", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D18C\u21920x01485C (external jsr); 0x02D192\u21920x013E92 (external jsr); 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1BA\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#04-base-normal-3-lp", "animationInstallAddresses": [ "0x02CB90" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-3-mp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8186", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D18C\u21920x01485C (external jsr); 0x02D192\u21920x013E92 (external jsr); 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1BA\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#04-base-normal-3-mp", "animationInstallAddresses": [ "0x02CBE8" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-3-hp", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8188", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D18C\u21920x01485C (external jsr); 0x02D192\u21920x013E92 (external jsr); 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1BA\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#04-base-normal-3-hp", "animationInstallAddresses": [ "0x02CC1E", "0x02CC4E" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-3-lk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E818A", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D18C\u21920x01485C (external jsr); 0x02D192\u21920x013E92 (external jsr); 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1EE\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#04-base-normal-3-lk", "animationInstallAddresses": [ "0x02CC9C" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-3-mk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E818C", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D18C\u21920x01485C (external jsr); 0x02D192\u21920x013E92 (external jsr); 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1EE\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#04-base-normal-3-mk", "animationInstallAddresses": [ "0x02CCCC" ], "directionVariantGroups": 0 }, { "id": "04-base-normal-3-hk", "character": "Captain America", "characterId": "0x04", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E818E", "handlerAddress": "0x02C6E0", "updateHandlerAddress": "0x02CD60", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02C6E0: unresolved shared/indirect closure: 0x02D18C\u21920x01485C (external jsr); 0x02D192\u21920x013E92 (external jsr); 0x02D198\u21920x013EFC (external jsr); 0x02D19E\u21920x013E64 (external jsr); 0x02D1EE\u21920x017588 (external jsr); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "normal-route-receipts.json#04-base-normal-3-hk", "localInstructionCount": 25, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#04-base-normal-3-hk", "animationInstallAddresses": [ "0x02CD52" ], "directionVariantGroups": 9 }, { "id": "04-base-attack-00", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x00", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x02D7B4", "handlerAddress": "0x02D80E", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "119 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02D80E: unresolved shared/indirect closure: 0x02D902\u21920x001DD8 (external jsr); 0x02D90C\u21920x017540 (external jsr); 0x02D912\u21920x002490 (external jsr); 0x02D990\u21920x0A3644 (external jsr); 0x02D99A\u21920x0D5A7E (external jmp); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-00", "commandSources": [ "0x02F65A", "0x02F6DE" ], "localInstructionCount": 119, "externalFrontierCount": 12 }, { "id": "04-base-attack-02", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x02", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x02D7B6", "handlerAddress": "0x02D9C6", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "147 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02D9C6: unresolved shared/indirect closure: 0x02DBC2\u21920x001DD8 (external jsr); 0x02DBCA\u21920x016FBA (external jmp); 0x02DB8A\u21920x001DD8 (external jsr); 0x02DB90\u21920x002490 (external jsr); 0x02DB96\u21920x017588 (external jsr); 15 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-02", "commandSources": [ "0x02F66A", "0x02F6E8" ], "localInstructionCount": 147, "externalFrontierCount": 20 }, { "id": "04-base-attack-04", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x04", "command": "F \u2192 DF \u2192 D \u2192 DB \u2192 B + P", "variant": "Stock character", "tableAddress": "0x02D7B8", "handlerAddress": "0x02DBD2", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "33 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02DBD2: unresolved shared/indirect closure: 0x02DC22\u21920x001DD8 (external jsr); 0x02DC30\u21920x002490 (external jmp); 0x02DC50\u21920x0176B6 (external jsr); 0x02DC58\u21920x016FBA (external jmp); 0x02DC0A\u21920x0B5E20 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-04", "commandSources": [ "0x02F68A" ], "localInstructionCount": 33, "externalFrontierCount": 7 }, { "id": "04-base-attack-06", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x06", "command": "D \u2192 DF \u2192 F + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x02D7BA", "handlerAddress": "0x02DC60", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "121 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02DC60: unresolved shared/indirect closure: 0x02DDAC\u21920x001DD8 (external jsr); 0x02DDB4\u21920x002490 (external jmp); 0x02DDBA\u21920x016FBA (external jmp); 0x02DD8E\u21920x001DD8 (external jsr); 0x02DD9A\u21920x002490 (external jmp); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-06", "commandSources": [ "0x02F67A", "0x02F6F2" ], "localInstructionCount": 121, "externalFrontierCount": 17 }, { "id": "04-base-attack-08", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x08", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02D7BC", "handlerAddress": "0x02DE50", "selector": "B0=0x2A, E6=0x08", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "26 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02DE50: unresolved shared/indirect closure: 0x02DEAA\u21920x001DD8 (external jsr); 0x02DEB2\u21920x016FBA (external jmp); 0x02DE8C\u21920x001DD8 (external jsr); 0x02DEA2\u21920x0135E6 (external jmp); 0x02DE7C\u21920x0135E6 (external jsr); 1 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-08", "commandSources": [], "localInstructionCount": 26, "externalFrontierCount": 6 }, { "id": "04-base-attack-0a", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02D7BE", "handlerAddress": "0x02DEBA", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "54 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02DEBA: unresolved shared/indirect closure: 0x02DF6C\u2192indirect (indirect jmp unresolved); 0x02DF06\u21920x001DD8 (external jsr); 0x02DF36\u21920x015A12 (external jsr); 0x02DF56\u21920x0148FE (external jmp); 0x02DF5C\u21920x014A2E (external jmp); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-0a", "commandSources": [], "localInstructionCount": 54, "externalFrontierCount": 8 }, { "id": "04-base-attack-0c", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02D7C0", "handlerAddress": "0x02E3A6", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "272 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02E3A6: unresolved shared/indirect closure: 0x02E7D2\u21920x001DD8 (external jsr); 0x02E7DE\u21920x002490 (external jsr); 0x02E7F4\u21920x0B62B6 (external jsr); 0x02E7FA\u21920x0178C8 (external jmp); 0x02E7CC\u21920x0135E6 (external jmp); 28 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-0c", "commandSources": [], "localInstructionCount": 272, "externalFrontierCount": 33 }, { "id": "04-base-attack-0e", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02D7C2", "handlerAddress": "0x02E800", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "48 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02E800: unresolved shared/indirect closure: 0x02E8BC\u21920x001DD8 (external jsr); 0x02E8C4\u21920x015EF4 (external jmp); 0x02E87E\u21920x001DD8 (external jsr); 0x02E884\u21920x002490 (external jsr); 0x02E88A\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-0e", "commandSources": [], "localInstructionCount": 48, "externalFrontierCount": 8 }, { "id": "04-base-attack-10", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02D7C4", "handlerAddress": "0x02E8CC", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "192 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02E8CC: unresolved shared/indirect closure: 0x02EB3C\u21920x001DD8 (external jsr); 0x02EB4A\u21920x002490 (external jmp); 0x02EB50\u21920x016FBA (external jmp); 0x02EB10\u21920x001DD8 (external jsr); 0x02EB18\u21920x002490 (external jmp); 22 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-10", "commandSources": [], "localInstructionCount": 192, "externalFrontierCount": 27 }, { "id": "04-base-attack-12", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02D7C6", "handlerAddress": "0x02D7D6", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02D7D6: unresolved shared/indirect closure: 0x02D7D6\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "04-base-attack-14", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02D7C8", "handlerAddress": "0x02D7D0", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02D7D0: unresolved shared/indirect closure: 0x02D7D0\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "04-base-attack-16", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02D7CA", "handlerAddress": "0x02E8CC", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "193 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02E8CC: unresolved shared/indirect closure: 0x02EB3C\u21920x001DD8 (external jsr); 0x02EB4A\u21920x002490 (external jmp); 0x02EB50\u21920x016FBA (external jmp); 0x02EB10\u21920x001DD8 (external jsr); 0x02EB18\u21920x002490 (external jmp); 22 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-16", "commandSources": [], "localInstructionCount": 193, "externalFrontierCount": 27 }, { "id": "04-base-attack-18", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02D7CC", "handlerAddress": "0x02D7DC", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02D7DC: unresolved shared/indirect closure: 0x02D7DC\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-18", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "04-base-attack-1a", "character": "Captain America", "characterId": "0x04", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02D7CE", "handlerAddress": "0x02E800", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "46 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02E800: unresolved shared/indirect closure: 0x02E8BC\u21920x001DD8 (external jsr); 0x02E8C4\u21920x015EF4 (external jmp); 0x02E87E\u21920x001DD8 (external jsr); 0x02E884\u21920x002490 (external jsr); 0x02E88A\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-attack-1a", "commandSources": [], "localInstructionCount": 46, "externalFrontierCount": 7 }, { "id": "04-base-throw-00", "character": "Captain America", "characterId": "0x04", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x02EB58; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02EBE0", "handlerAddress": "0x02EBEA", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x02EBF0. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02EBEA: unresolved shared/indirect closure: 0x02EC12\u21920x0BD606 (external jsr); 0x02EC1E\u21920x01CD1C (external jsr); 0x02EC28\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x02EBF0" ], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-throw-00", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "04-base-throw-02", "character": "Captain America", "characterId": "0x04", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x02EB58; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02EBE2", "handlerAddress": "0x02EC2E", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x02EC34. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02EC2E: unresolved shared/indirect closure: 0x02EC56\u21920x0BD606 (external jsr); 0x02EC62\u21920x01CD1C (external jsr); 0x02EC6C\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x02EC34" ], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-throw-02", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "04-base-throw-04", "character": "Captain America", "characterId": "0x04", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x02EB58; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02EBE4", "handlerAddress": "0x02EC72", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x02EC78. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02EC72: unresolved shared/indirect closure: 0x02EC9A\u21920x0BD606 (external jsr); 0x02ECA6\u21920x01CD1C (external jsr); 0x02ECB0\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x02EC78" ], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-throw-04", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "04-base-throw-06", "character": "Captain America", "characterId": "0x04", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x02EB58; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02EBE6", "handlerAddress": "0x02ECB6", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "5 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02ECB6: unresolved shared/indirect closure: 0x02ECC4\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-throw-06", "localInstructionCount": 5, "externalFrontierCount": 1 }, { "id": "04-base-throw-08", "character": "Captain America", "characterId": "0x04", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x02EB58; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02EBE8", "handlerAddress": "0x02ECCA", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "5 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02ECCA: unresolved shared/indirect closure: 0x02ECD8\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#04", "codeSource": "context-route-receipts.json#leaves/04-base-throw-08", "localInstructionCount": 5, "externalFrontierCount": 1 }, { "id": "06-base-normal-0-lp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8190", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309B4\u21920x001DD8 (external jsr); 0x0309BC\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#06-base-normal-0-lp", "animationInstallAddresses": [ "0x03057E" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-0-mp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8192", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309B4\u21920x001DD8 (external jsr); 0x0309BC\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#06-base-normal-0-mp", "animationInstallAddresses": [ "0x0305AE" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-0-hp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8194", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309B4\u21920x001DD8 (external jsr); 0x0309BC\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#06-base-normal-0-hp", "animationInstallAddresses": [ "0x0305D6" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-0-lk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8196", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=2, 4D=0", "status": "one-use local normal-repeat allowance verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "Facing-normalized new/buffered LK: (+$DA | +$DE) bit 8 Spends +$3A1 at $030AAC, clears input buffer +$DE at $030AB6, then starts animation $12/$00 through $0135E6 at $030AC2.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030A6A\u21920x001DD8 (external jsr); 0x030A72\u21920x016FBA (external jmp); 0x030A80\u21920x0176B6 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x030A94", "0x030A98", "0x030AB6" ], "gate": "Nonzero animation flag +$3C; common $0176B6 and $01741E gates return zero; repeat allowance +$3A1 is nonzero.", "effect": "Spends +$3A1 at $030AAC, clears input buffer +$DE at $030AB6, then starts animation $12/$00 through $0135E6 at $030AC2.", "limit": "Initializer $0306D0 sets +$3A1 to 1. One qualifying restart can spend that allowance; this is not a super extension or a guaranteed extra connected hit.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-0-lk", "localInstructionCount": 46, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#06-base-normal-0-lk", "animationInstallAddresses": [ "0x0306DA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#06-base-normal-0-lk" }, { "id": "06-base-normal-0-mk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8198", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030AE8\u21920x001DD8 (external jsr); 0x030AF0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#06-base-normal-0-mk", "animationInstallAddresses": [ "0x03070A" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-0-hk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E819A", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030AF8\u21920x001DD8 (external jsr); 0x030B00\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-0-hk", "localInstructionCount": 41, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#06-base-normal-0-hk", "animationInstallAddresses": [ "0x03073A" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-1-lp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E819C", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309D8\u21920x001DD8 (external jsr); 0x0309E0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#06-base-normal-1-lp", "animationInstallAddresses": [ "0x030612" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-1-mp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E819E", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309D8\u21920x001DD8 (external jsr); 0x0309E0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#06-base-normal-1-mp", "animationInstallAddresses": [ "0x030642" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-1-hp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81A0", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "42 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309E8\u21920x001DD8 (external jsr); 0x030A46\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-1-hp", "localInstructionCount": 42, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#06-base-normal-1-hp", "animationInstallAddresses": [ "0x03068E" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-1-lk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81A2", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=2, 4D=0", "status": "one-use local normal-repeat allowance verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "Facing-normalized new/buffered LK: (+$DA | +$DE) bit 8 Spends +$3A1 at $030BA6, clears +$DE at $030BB0, and restarts animation $16/$00 at $030BBC.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030B6E\u21920x001DD8 (external jsr); 0x030B76\u21920x016FBA (external jmp); 0x030B84\u21920x0176B6 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x030B8E", "0x030B92", "0x030BB0" ], "gate": "Nonzero animation flag +$3C, common $0176B6 gate returns zero and +$3A1 remains nonzero.", "effect": "Spends +$3A1 at $030BA6, clears +$DE at $030BB0, and restarts animation $16/$00 at $030BBC.", "limit": "Initializer $030772 sets +$3A1 to 1. One qualifying local restart, not an added-hit guarantee.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-1-lk", "localInstructionCount": 44, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#06-base-normal-1-lk", "animationInstallAddresses": [ "0x03077C" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#06-base-normal-1-lk" }, { "id": "06-base-normal-1-mk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81A4", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030BE2\u21920x001DD8 (external jsr); 0x030BEA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#06-base-normal-1-mk", "animationInstallAddresses": [ "0x0307AC" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-1-hk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81A6", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030BE2\u21920x001DD8 (external jsr); 0x030BEA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#06-base-normal-1-hk", "animationInstallAddresses": [ "0x0307DC" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-2-lp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E81A8", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 0x030C28\u21920x0178C8 (external jmp); 0x030C36\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#06-base-normal-2-lp", "animationInstallAddresses": [ "0x030852" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-2-mp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E81AA", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 0x030C28\u21920x0178C8 (external jmp); 0x030C36\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#06-base-normal-2-mp", "animationInstallAddresses": [ "0x030882" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-2-hp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81AC", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "32 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 0x030C28\u21920x0178C8 (external jmp); 0x030C46\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-2-hp", "localInstructionCount": 32, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#06-base-normal-2-hp", "animationInstallAddresses": [ "0x0308B2" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-2-lk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81AE", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 0x030CA4\u21920x0178C8 (external jmp); 0x030CB2\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#06-base-normal-2-lk", "animationInstallAddresses": [ "0x030900" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-2-mk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81B0", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 0x030CA4\u21920x0178C8 (external jmp); 0x030CB2\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#06-base-normal-2-mk", "animationInstallAddresses": [ "0x030930" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-2-hk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81B2", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 0x030CA4\u21920x0178C8 (external jmp); 0x030CB2\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#06-base-normal-2-hk", "animationInstallAddresses": [ "0x030960" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-3-lp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E81B4", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#06-base-normal-3-lp", "animationInstallAddresses": [ "0x030852" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-3-mp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E81B6", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#06-base-normal-3-mp", "animationInstallAddresses": [ "0x030882" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-3-hp", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81B8", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "34 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-3-hp", "localInstructionCount": 34, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#06-base-normal-3-hp", "animationInstallAddresses": [ "0x0308B2" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-3-lk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81BA", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#06-base-normal-3-lk", "animationInstallAddresses": [ "0x030900" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-3-mk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81BC", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#06-base-normal-3-mk", "animationInstallAddresses": [ "0x030930" ], "directionVariantGroups": 0 }, { "id": "06-base-normal-3-hk", "character": "Hulk", "characterId": "0x06", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81BE", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "normal-route-receipts.json#06-base-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#06-base-normal-3-hk", "animationInstallAddresses": [ "0x030960" ], "directionVariantGroups": 0 }, { "id": "06-base-attack-00", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Native attack selector 0x00", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x030FB0", "handlerAddress": "0x03104C", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "233 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03104C: unresolved shared/indirect closure: 0x0314C6\u21920x001DD8 (external jsr); 0x0314E2\u21920x016FBA (external jmp); 0x031488\u21920x001DD8 (external jsr); 0x03148E\u21920x0024B2 (external jsr); 0x031494\u21920x017588 (external jsr); 30 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-00", "commandSources": [ "0x032886", "0x032894" ], "localInstructionCount": 233, "externalFrontierCount": 35 }, { "id": "06-base-attack-02", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Native attack selector 0x02", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FB2", "handlerAddress": "0x0315A0", "selector": "B0=0x2A, E6=0x02", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "50 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0315A0: unresolved shared/indirect closure: 0x031662\u21920x001DD8 (external jsr); 0x03166A\u21920x015EF4 (external jmp); 0x031624\u21920x001DD8 (external jsr); 0x03162A\u21920x002490 (external jsr); 0x031630\u21920x017588 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-02", "commandSources": [], "localInstructionCount": 50, "externalFrontierCount": 9 }, { "id": "06-base-attack-04", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x030FB4", "handlerAddress": "0x031672", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "66 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x031672: unresolved shared/indirect closure: 0x0316D8\u21920x001DD8 (external jsr); 0x031706\u21920x078484 (external jsr); 0x03171C\u21920x09F40E (external jsr); 0x031738\u21920x078484 (external jsr); 0x03174C\u21920x078484 (external jsr); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-04", "commandSources": [ "0x03292A", "0x03293A" ], "localInstructionCount": 66, "externalFrontierCount": 13 }, { "id": "06-base-attack-06", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Gamma Crush", "command": "QCB + two punches", "variant": "Stock character", "tableAddress": "0x030FB6", "handlerAddress": "0x031792", "selector": "B0=0x2A, E6=0x06", "status": "tested: trajectory selection, no added hits", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Direction chooses descent variant +$380; the earlier five conditions observed four contacts each. This is aiming, not an edge-count budget.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x031C4C", "0x031C56" ], "gate": "Held normalized direction byte +$D7 is read once at $031C56.", "effect": "Direction chooses descent variant +$380; the earlier five conditions observed four contacts each. This is aiming, not an edge-count budget.", "limit": "Four is fixture-specific; meteor child rearming is automatic.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-06", "commandSources": [], "localInstructionCount": 326, "externalFrontierCount": 32, "reviewSource": "../../hulk.md" }, { "id": "06-base-attack-08", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Native attack selector 0x08", "command": "F \u2192 DF \u2192 D \u2192 DB \u2192 B + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x030FB8", "handlerAddress": "0x031CFC", "selector": "B0=0x2A, E6=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "64 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x031CFC: unresolved shared/indirect closure: 0x031DEE\u21920x001DD8 (external jsr); 0x031E0A\u21920x016FBA (external jmp); 0x031D62\u21920x001DD8 (external jsr); 0x031D7A\u21920x0135E6 (external jmp); 0x031DE8\u21920x0187CA (external jmp); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-08", "commandSources": [ "0x0328C4", "0x0328D8" ], "localInstructionCount": 64, "externalFrontierCount": 9 }, { "id": "06-base-attack-0a", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Native attack selector 0x0A", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x030FBA", "handlerAddress": "0x031E10", "selector": "B0=0x2A, E6=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "262 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x031278, 0x032046, 0x032052, 0x03205E.", "uncertainty": "Handler 0x031E10: unresolved shared/indirect closure: 0x0322A4\u21920x001DD8 (external jsr); 0x0322C0\u21920x016FBA (external jmp); 0x032266\u21920x001DD8 (external jsr); 0x03226C\u21920x0024B2 (external jsr); 0x032272\u21920x017588 (external jsr); 37 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x031278", "0x032046", "0x032052", "0x03205E" ], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-0a", "commandSources": [ "0x0328EC", "0x0328FA" ], "localInstructionCount": 262, "externalFrontierCount": 42 }, { "id": "06-base-attack-0c", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Gamma Wave", "command": "QCF + two punches", "variant": "Stock character", "tableAddress": "0x030FBC", "handlerAddress": "0x03238E", "selector": "B0=0x2A, E6=0x0C", "status": "tested: fixed wave schedule", "staticStatus": "named causal path reviewed", "runtimeStatus": "MAME 0.287: ten controlled trials, three identical baselines; no live move-state writes", "finding": "Eight wave-child allocations in every input condition. Children continue after Hulk recovers; measuring only the attacker state hides the later contacts. First attacker-state combo 3\u21923; tail-inclusive peak before late control 11\u219211. Ten conditions, three identical baseline trace digests.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Controller $09F576/$09F596/$09F59E drives the cadence; child allocation write $09F442.", "effect": "Eight wave-child allocations in every input condition. Children continue after Hulk recovers; measuring only the attacker state hides the later contacts. First attacker-state combo 3\u21923; tail-inclusive peak before late control 11\u219211. Ten conditions, three identical baseline trace digests.", "limit": "Eight allocations in these traces; 11 tail-inclusive contacts in this fixture, not a universal hit count.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-0c", "commandSources": [], "localInstructionCount": 85, "externalFrontierCount": 16, "reviewSource": "hulk_gamma_wave/summary.json", "runtimeEvidence": { "case": "hulk_gamma_wave", "source": "hulk_gamma_wave/summary.json", "baselineDigestsMatch": true, "baselinePeak": 3, "tappedPeak": 3, "baselineTailPeak": 11, "tappedTailPeak": 11 } }, { "id": "06-base-attack-0e", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FBE", "handlerAddress": "0x030FCA", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x030FCA: unresolved shared/indirect closure: 0x030FCA\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-0e", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "06-base-attack-10", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FC0", "handlerAddress": "0x030FD0", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x030FD0: unresolved shared/indirect closure: 0x030FD0\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-10", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "06-base-attack-12", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FC2", "handlerAddress": "0x030FDC", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x030FDC: unresolved shared/indirect closure: 0x03102A\u21920x001DD8 (external jsr); 0x031044\u21920x016FBA (external jmp); 0x031012\u21920x017634 (external jsr); 0x03101A\u21920x01CD1E (external jsr); 0x031024\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-12", "commandSources": [], "localInstructionCount": 27, "externalFrontierCount": 5 }, { "id": "06-base-attack-14", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Gamma Quake", "command": "QCF + two kicks", "variant": "Stock character", "tableAddress": "0x030FC4", "handlerAddress": "0x0324D6", "selector": "B0=0x2A, E6=0x14", "status": "tested: fixed object schedule", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Earlier instrumented trials each produced 11 subtype-2 rocks and 22 subtype-4 debris objects, with seven connected hits in the fixture.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Controller $0A96DA initializes 48; $0A96F6 decrements; nonzero multiples of four emit.", "effect": "Earlier instrumented trials each produced 11 subtype-2 rocks and 22 subtype-4 debris objects, with seven connected hits in the fixture.", "limit": "Object counts are distinct from contacts; rock positions vary.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-14", "commandSources": [], "localInstructionCount": 65, "externalFrontierCount": 11, "reviewSource": "../../hulk.md" }, { "id": "06-base-attack-16", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FC6", "handlerAddress": "0x0315A0", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "42 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0315A0: unresolved shared/indirect closure: 0x031662\u21920x001DD8 (external jsr); 0x03166A\u21920x015EF4 (external jmp); 0x031624\u21920x001DD8 (external jsr); 0x03162A\u21920x002490 (external jsr); 0x031630\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-16", "commandSources": [], "localInstructionCount": 42, "externalFrontierCount": 8 }, { "id": "06-base-attack-18", "character": "Hulk", "characterId": "0x06", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FC8", "handlerAddress": "0x030FD6", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x030FD6: unresolved shared/indirect closure: 0x030FD6\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-attack-18", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "06-base-throw-00", "character": "Hulk", "characterId": "0x06", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x0325E0; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03266A", "handlerAddress": "0x032670", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x032670: unresolved shared/indirect closure: 0x032690\u21920x0BD606 (external jsr); 0x032696\u21920x01CD1C (external jsr); 0x0326A0\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-throw-00", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "06-base-throw-02", "character": "Hulk", "characterId": "0x06", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x0325E0; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03266C", "handlerAddress": "0x0326A6", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "9 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0326A6: unresolved shared/indirect closure: 0x0326B4\u21920x0BD606 (external jsr); 0x0326C0\u21920x01CD1C (external jsr); 0x0326CA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-throw-02", "localInstructionCount": 9, "externalFrontierCount": 3 }, { "id": "06-base-throw-04", "character": "Hulk", "characterId": "0x06", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x0325E0; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03266E", "handlerAddress": "0x0326D0", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0326D0: unresolved shared/indirect closure: 0x0326DC\u21920x0BD606 (external jsr); 0x0326F8\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#06", "codeSource": "context-route-receipts.json#leaves/06-base-throw-04", "localInstructionCount": 11, "externalFrontierCount": 2 }, { "id": "08-base-normal-0-lp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E81C0", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=0, B5=0, 4D=0", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit 4; clears +$DE before testing the saved word Accepted LP reaches attack-field reset and animation $10/$06 through $0135E6 at $03404E.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x033FDE\u21920x001DD8 (external jsr); 0x033FE6\u21920x016FBA (external jmp); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x03400C", "0x034010", "0x034014" ], "gate": "Animation flag +$3C and common $0176B6, $01741E, $0181C8 gates.", "effect": "Accepted LP reaches attack-field reset and animation $10/$06 through $0135E6 at $03404E.", "limit": "No fixed credit bound established for this local path. Common gates, animation windows and initialization remain part of its reachability.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-0-lp", "localInstructionCount": 46, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#08-base-normal-0-lp", "animationInstallAddresses": [ "0x033ADA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#08-base-normal-0-lp" }, { "id": "08-base-normal-0-mp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E81C2", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=0, B5=0, 4D=2", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit 5 Clears buffer, resets attack fields, and alternates +$111 parity. The selected animation is $10/$08 or $10/$02, loaded at $0340CA.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x034054\u21920x001DD8 (external jsr); 0x03405C\u21920x016FBA (external jmp); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x03407A", "0x03407E", "0x034088" ], "gate": "Animation flag +$3C and common $0176B6/$01741E gates.", "effect": "Clears buffer, resets attack fields, and alternates +$111 parity. The selected animation is $10/$08 or $10/$02, loaded at $0340CA.", "limit": "Alternating animation offsets are proven; a universal repeat cap or live hit gain is not.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-0-mp", "localInstructionCount": 48, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#08-base-normal-0-mp", "animationInstallAddresses": [ "0x033B0A" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#08-base-normal-0-mp" }, { "id": "08-base-normal-0-hp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81C4", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "23 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x0340D0\u21920x001DD8 (external jsr); 0x0340E2\u21920x0780E8 (external jmp); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-0-hp", "localInstructionCount": 23, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#08-base-normal-0-hp", "animationInstallAddresses": [ "0x033B3A" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-0-lk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81C6", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "19 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x034298\u21920x001DD8 (external jsr); 0x0342A2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-0-lk", "localInstructionCount": 19, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#08-base-normal-0-lk", "animationInstallAddresses": [ "0x033C94" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-0-mk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81C8", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=0, B5=2, 4D=2", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit 9 Clears buffer and resets attack fields before animation $12/$08 at $0342FA.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x0342AA\u21920x001DD8 (external jsr); 0x0342CA\u21920x018624 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x0342B8", "0x0342BC", "0x0342C6" ], "gate": "Animation updater has not ended the move and +$3C is nonzero.", "effect": "Clears buffer and resets attack fields before animation $12/$08 at $0342FA.", "limit": "No explicit finite allowance established from this local branch; collision and all shared paths were not measured.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-0-mk", "localInstructionCount": 40, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#08-base-normal-0-mk", "animationInstallAddresses": [ "0x033CC4" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#08-base-normal-0-mk" }, { "id": "08-base-normal-0-hk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81CA", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "19 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x034298\u21920x001DD8 (external jsr); 0x0342A2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-0-hk", "localInstructionCount": 19, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#08-base-normal-0-hk", "animationInstallAddresses": [ "0x033CFC" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-1-lp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E81CC", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=2, B5=0, 4D=0", "status": "local normal-repeat/variant branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit 4 Clears buffer and chooses between animation $14/$00 and $14/$06 based on +$84 and +$387. +$387 is decremented at $034160 or initialized to 1 at $03418E.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x034104\u21920x001DD8 (external jsr); 0x03410C\u21920x016FBA (external jmp); 7 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x03413A", "0x03413E", "0x034148" ], "gate": "Animation +$3C, common $0176B6/$0181C8 and conditional $017456 gate; latter consulted when +$127 < 6.", "effect": "Clears buffer and chooses between animation $14/$00 and $14/$06 based on +$84 and +$387. +$387 is decremented at $034160 or initialized to 1 at $03418E.", "limit": "The local counter selects a repeat variant; it is not by itself proof of a whole-move maximum.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-1-lp", "localInstructionCount": 64, "externalFrontierCount": 12, "initializerSource": "normal-initializer-receipts.json#08-base-normal-1-lp", "animationInstallAddresses": [ "0x033B84" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#08-base-normal-1-lp" }, { "id": "08-base-normal-1-mp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E81CE", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "23 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x0341BC\u21920x001DD8 (external jsr); 0x0341CE\u21920x0780E8 (external jmp); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-1-mp", "localInstructionCount": 23, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#08-base-normal-1-mp", "animationInstallAddresses": [ "0x033BB4" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-1-hp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81D0", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "57 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x0341EA\u21920x0024C4 (external jsr); 0x0341F0\u21920x001DD8 (external jsr); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-1-hp", "localInstructionCount": 57, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#08-base-normal-1-hp", "animationInstallAddresses": [ "0x033BFC", "0x033C46" ], "directionVariantGroups": 2 }, { "id": "08-base-normal-1-lk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81D2", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "19 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x034314\u21920x001DD8 (external jsr); 0x03431C\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-1-lk", "localInstructionCount": 19, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#08-base-normal-1-lk", "animationInstallAddresses": [ "0x033D40" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-1-mk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81D4", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "19 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x034314\u21920x001DD8 (external jsr); 0x03431C\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-1-mk", "localInstructionCount": 19, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#08-base-normal-1-mk", "animationInstallAddresses": [ "0x033D70" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-1-hk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81D6", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "24 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x033FA6\u21920x002490 (external jsr); 0x033FAC\u21920x017540 (external jsr); 0x033FB2\u21920x0B5C92 (external jsr); 0x034324\u21920x001DD8 (external jsr); 0x03433E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-1-hk", "localInstructionCount": 24, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#08-base-normal-1-hk", "animationInstallAddresses": [ "0x033D98" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-2-lp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E81D8", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "26 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x03437E\u21920x017588 (external jsr); 0x034386\u21920x0178C8 (external jmp); 0x034394\u21920x001DD8 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-2-lp", "localInstructionCount": 26, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#08-base-normal-2-lp", "animationInstallAddresses": [ "0x033E0E" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-2-mp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E81DA", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "input reference does not establish local repeat", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "Same (+$DA | +$DE) bit 5 read as BA!=0 Can clear the buffer and call $018624, but bypasses the local attack-field reset and animation restart at $0343DE\u2013$034400.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x03437E\u21920x017588 (external jsr); 0x034386\u21920x0178C8 (external jmp); 0x0343B2\u21920x001DD8 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x0343C0", "0x0343C4", "0x0343CE" ], "gate": "+$BA=0 takes $0343DC to RTS $03440E.", "effect": "Can clear the buffer and call $018624, but bypasses the local attack-field reset and animation restart at $0343DE\u2013$034400.", "limit": "Counterexample to labeling every input reader mashable. This is not a negative verdict on all common air-normal transitions.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-2-mp", "localInstructionCount": 33, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#08-base-normal-2-mp", "animationInstallAddresses": [ "0x033E3E" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#08-base-normal-2-mp" }, { "id": "08-base-normal-2-hp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81DC", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "26 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x03437E\u21920x017588 (external jsr); 0x034386\u21920x0178C8 (external jmp); 0x034394\u21920x001DD8 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-2-hp", "localInstructionCount": 26, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#08-base-normal-2-hp", "animationInstallAddresses": [ "0x033E6E" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-2-lk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81DE", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x034424\u21920x001DD8 (external jsr); 0x03442C\u21920x017588 (external jsr); 0x034434\u21920x0178C8 (external jmp); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-2-lk", "localInstructionCount": 22, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#08-base-normal-2-lk", "animationInstallAddresses": [ "0x033EC6" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-2-mk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81E0", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x034424\u21920x001DD8 (external jsr); 0x03442C\u21920x017588 (external jsr); 0x034434\u21920x0178C8 (external jmp); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-2-mk", "localInstructionCount": 22, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#08-base-normal-2-mk", "animationInstallAddresses": [ "0x033EFA" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-2-hk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81E2", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "70 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x034526\u21920x001DD8 (external jsr); 0x03452E\u21920x016FBA (external jmp); 0x0344AE\u21920x001DD8 (external jsr); 9 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-2-hk", "localInstructionCount": 70, "externalFrontierCount": 14, "initializerSource": "normal-initializer-receipts.json#08-base-normal-2-hk", "animationInstallAddresses": [ "0x033F62", "0x033F8A" ], "directionVariantGroups": 2 }, { "id": "08-base-normal-3-lp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E81E4", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "28 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034344\u21920x01485C (external jsr); 0x03434A\u21920x013E92 (external jsr); 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x03437E\u21920x017588 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-3-lp", "localInstructionCount": 28, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#08-base-normal-3-lp", "animationInstallAddresses": [ "0x033E0E" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-3-mp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E81E6", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "conditional local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit 5 Clears buffer, then reaches attack-field reset and animation $18/$08 through $0135E6 at $034400.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034344\u21920x01485C (external jsr); 0x03434A\u21920x013E92 (external jsr); 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x03437E\u21920x017588 (external jsr); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x0343C0", "0x0343C4", "0x0343CE" ], "gate": "Nonzero +$3C, animation not finished, and +$BA != 0 at $0343D8.", "effect": "Clears buffer, then reaches attack-field reset and animation $18/$08 through $0135E6 at $034400.", "limit": "BA is preserved as the exact native flag; no unsupported jump-type name or live hit total assigned.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-3-mp", "localInstructionCount": 45, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#08-base-normal-3-mp", "animationInstallAddresses": [ "0x033E3E" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#08-base-normal-3-mp" }, { "id": "08-base-normal-3-hp", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81E8", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "28 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034344\u21920x01485C (external jsr); 0x03434A\u21920x013E92 (external jsr); 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x03437E\u21920x017588 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-3-hp", "localInstructionCount": 28, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#08-base-normal-3-hp", "animationInstallAddresses": [ "0x033E6E" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-3-lk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81EA", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "24 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034344\u21920x01485C (external jsr); 0x03434A\u21920x013E92 (external jsr); 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x034424\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-3-lk", "localInstructionCount": 24, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#08-base-normal-3-lk", "animationInstallAddresses": [ "0x033EC6" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-3-mk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81EC", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "24 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034344\u21920x01485C (external jsr); 0x03434A\u21920x013E92 (external jsr); 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x034424\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-3-mk", "localInstructionCount": 24, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#08-base-normal-3-mk", "animationInstallAddresses": [ "0x033EFA" ], "directionVariantGroups": 0 }, { "id": "08-base-normal-3-hk", "character": "Wolverine", "characterId": "0x08", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81EE", "handlerAddress": "0x033A68", "updateHandlerAddress": "0x033F90", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "73 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x033A68: unresolved shared/indirect closure: 0x034344\u21920x01485C (external jsr); 0x03434A\u21920x013E92 (external jsr); 0x034356\u21920x013EFC (external jsr); 0x03435C\u21920x013E64 (external jsr); 0x034526\u21920x001DD8 (external jsr); 11 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "normal-route-receipts.json#08-base-normal-3-hk", "localInstructionCount": 73, "externalFrontierCount": 16, "initializerSource": "normal-initializer-receipts.json#08-base-normal-3-hk", "animationInstallAddresses": [ "0x033F62", "0x033F8A" ], "directionVariantGroups": 2 }, { "id": "08-base-attack-00", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Tornado Claw", "command": "DP + punch", "variant": "Stock character", "tableAddress": "0x03466E", "handlerAddress": "0x034936", "selector": "B0=0x2A, E6=0x00", "status": "tested: punch-driven continuation", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Accepted punches set +$4E=1 and clear buffer, permitting continuation stages; earlier LP fixture 3\u21925.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x034A8E", "0x034A92", "0x034AA2", "0x034B5C", "0x034B60", "0x034B70", "0x034C64", "0x034C68", "0x034C78", "0x034D12", "0x034D16", "0x034D26" ], "gate": "($D4|$DE)&$0070 at $034A8E/$034B5C/$034C64/$034D12 in animation windows.", "effect": "Accepted punches set +$4E=1 and clear buffer, permitting continuation stages; earlier LP fixture 3\u21925.", "limit": "Stage/strength limits remain move-specific; no universal hit maximum.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-00", "commandSources": [ "0x036A02", "0x036A12" ], "localInstructionCount": 295, "externalFrontierCount": 31, "reviewSource": "../../roster.md" }, { "id": "08-base-attack-02", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x02", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x034670", "handlerAddress": "0x034DA0", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "262 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x034F4A, 0x034F62, 0x034FF0, 0x035008.", "uncertainty": "Handler 0x034DA0: unresolved shared/indirect closure: 0x0350E6\u21920x002490 (external jsr); 0x0350EC\u21920x017588 (external jsr); 0x0350F4\u21920x001DD8 (external jmp); 0x0350FA\u21920x0178C8 (external jmp); 0x035088\u21920x002490 (external jsr); 25 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x034F4A", "0x034F62", "0x034FF0", "0x035008" ], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-02", "commandSources": [ "0x036A9C" ], "localInstructionCount": 262, "externalFrontierCount": 30 }, { "id": "08-base-attack-04", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Berserker Barrage", "command": "QCF + punch", "variant": "Stock character", "tableAddress": "0x034672", "handlerAddress": "0x0351D4", "selector": "B0=0x2A, E6=0x04", "status": "tested: bounded repeated attack cycles", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Accepted punch latches +$4F, checked at $035302 to continue alternating attacks; earlier LP fixture 2\u21924.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x0352D8" ], "gate": "$035224\u2013$03522A initializes 3+strength repeat count; $0352D8\u2013$0352E4 tests D4&$0070.", "effect": "Accepted punch latches +$4F, checked at $035302 to continue alternating attacks; earlier LP fixture 2\u21924.", "limit": "Strength-dependent finite repeat count, not an unlimited extension.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-04", "commandSources": [ "0x036A1C", "0x036A2C" ], "localInstructionCount": 121, "externalFrontierCount": 16, "reviewSource": "../../roster.md" }, { "id": "08-base-attack-06", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x06", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x034674", "handlerAddress": "0x03569C", "selector": "B0=0x2A, E6=0x06", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "218 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03569C: unresolved shared/indirect closure: 0x03599C\u21920x002490 (external jsr); 0x0359A2\u21920x001DD8 (external jsr); 0x0359C0\u21920x0B62B6 (external jsr); 0x0359CA\u21920x0135E6 (external jmp); 0x0359D0\u21920x001DD8 (external jsr); 21 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-06", "commandSources": [], "localInstructionCount": 218, "externalFrontierCount": 26 }, { "id": "08-base-attack-08", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x08", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x034676", "handlerAddress": "0x035476", "selector": "B0=0x2A, E6=0x08", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "141 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035476: unresolved shared/indirect closure: 0x03564C\u21920x001DD8 (external jsr); 0x035656\u21920x016FBA (external jmp); 0x03558A\u21920x002490 (external jsr); 0x0355A4\u21920x001DD8 (external jsr); 0x0355F2\u21920x0135E6 (external jmp); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-08", "commandSources": [], "localInstructionCount": 141, "externalFrontierCount": 16 }, { "id": "08-base-attack-0a", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x034678", "handlerAddress": "0x035CBC", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "16 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035CBC: unresolved shared/indirect closure: 0x035CD6\u21920x0135E6 (external jmp); 0x035CDE\u21920x001DD8 (external jsr); 0x035CF0\u21920x0780E8 (external jmp); 0x035CF6\u21920x016FBA (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-0a", "commandSources": [], "localInstructionCount": 16, "externalFrontierCount": 4 }, { "id": "08-base-attack-0c", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03467A", "handlerAddress": "0x035CFC", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035CFC: unresolved shared/indirect closure: 0x035DA8\u21920x001DD8 (external jsr); 0x035DB0\u21920x015EF4 (external jmp); 0x035D76\u21920x001DD8 (external jsr); 0x035D7C\u21920x002490 (external jsr); 0x035D82\u21920x017588 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-0c", "commandSources": [], "localInstructionCount": 43, "externalFrontierCount": 9 }, { "id": "08-base-attack-0e", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03467C", "handlerAddress": "0x035A18", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "164 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035A18: unresolved shared/indirect closure: 0x035C72\u21920x001DD8 (external jsr); 0x035C78\u21920x002490 (external jsr); 0x035C96\u21920x0B62B6 (external jsr); 0x035CA0\u21920x0135E6 (external jmp); 0x035CA6\u21920x001DD8 (external jsr); 15 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-0e", "commandSources": [], "localInstructionCount": 164, "externalFrontierCount": 20 }, { "id": "08-base-attack-10", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03467E", "handlerAddress": "0x035360", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "68 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035360: unresolved shared/indirect closure: 0x03540C\u21920x001DD8 (external jsr); 0x03541E\u21920x0780E8 (external jmp); 0x035424\u21920x016FBA (external jmp); 0x0353CA\u21920x001DD8 (external jsr); 0x0353F0\u21920x080B80 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-10", "commandSources": [], "localInstructionCount": 68, "externalFrontierCount": 9 }, { "id": "08-base-attack-12", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x034680", "handlerAddress": "0x035DBC", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035DBC: unresolved shared/indirect closure: 0x035DBC\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "08-base-attack-14", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x034682", "handlerAddress": "0x035DB6", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035DB6: unresolved shared/indirect closure: 0x035DB6\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "08-base-attack-16", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x034684", "handlerAddress": "0x035CFC", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035CFC: unresolved shared/indirect closure: 0x035DA8\u21920x001DD8 (external jsr); 0x035DB0\u21920x015EF4 (external jmp); 0x035D76\u21920x001DD8 (external jsr); 0x035D7C\u21920x002490 (external jsr); 0x035D82\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-16", "commandSources": [], "localInstructionCount": 41, "externalFrontierCount": 8 }, { "id": "08-base-attack-18", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x034686", "handlerAddress": "0x035DC2", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035DC2: unresolved shared/indirect closure: 0x035DC2\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-18", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "08-base-attack-1a", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x1A", "command": "D \u2192 DB \u2192 B + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x034688", "handlerAddress": "0x034696", "selector": "B0=0x2A, E6=0x1A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "99 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x034696: unresolved shared/indirect closure: 0x0347FE\u21920x001DD8 (external jsr); 0x034806\u21920x016FBA (external jmp); 0x0347BC\u21920x078002 (external jsr); 0x0347C6\u21920x002490 (external jsr); 0x0347DE\u21920x001DD8 (external jsr); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-1a", "commandSources": [ "0x036AA6", "0x036AB6" ], "localInstructionCount": 99, "externalFrontierCount": 16 }, { "id": "08-base-attack-1c", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03468A", "handlerAddress": "0x03480E", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "73 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03480E: unresolved shared/indirect closure: 0x034928\u21920x001DD8 (external jsr); 0x034930\u21920x016FBA (external jmp); 0x0348B4\u21920x078002 (external jsr); 0x0348BA\u21920x001DD8 (external jsr); 0x0348C0\u21920x002490 (external jsr); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-1c", "commandSources": [], "localInstructionCount": 73, "externalFrontierCount": 11 }, { "id": "08-base-attack-1e", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x1E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03468C", "handlerAddress": "0x035476", "selector": "B0=0x2A, E6=0x1E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "142 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035476: unresolved shared/indirect closure: 0x03564C\u21920x001DD8 (external jsr); 0x035656\u21920x016FBA (external jmp); 0x03558A\u21920x002490 (external jsr); 0x0355A4\u21920x001DD8 (external jsr); 0x0355F2\u21920x0135E6 (external jmp); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-1e", "commandSources": [], "localInstructionCount": 142, "externalFrontierCount": 16 }, { "id": "08-base-attack-20", "character": "Wolverine", "characterId": "0x08", "category": "special / super", "name": "Native attack selector 0x20", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03468E", "handlerAddress": "0x035476", "selector": "B0=0x2A, E6=0x20", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "142 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x035476: unresolved shared/indirect closure: 0x03564C\u21920x001DD8 (external jsr); 0x035656\u21920x016FBA (external jmp); 0x03558A\u21920x002490 (external jsr); 0x0355A4\u21920x001DD8 (external jsr); 0x0355F2\u21920x0135E6 (external jmp); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x20; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-attack-20", "commandSources": [], "localInstructionCount": 142, "externalFrontierCount": 16 }, { "id": "08-base-throw-00", "character": "Wolverine", "characterId": "0x08", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x03619E; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x036238", "handlerAddress": "0x03623E", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03623E: unresolved shared/indirect closure: 0x036240\u21920x01439A (external jsr); 0x036248\u21920x014388 (external jsr); 0x036258\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-throw-00", "localInstructionCount": 8, "externalFrontierCount": 3 }, { "id": "08-base-throw-02", "character": "Wolverine", "characterId": "0x08", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x03619E; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03623A", "handlerAddress": "0x03625E", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03625E: unresolved shared/indirect closure: 0x036260\u21920x01439A (external jsr); 0x036268\u21920x014388 (external jsr); 0x03628C\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-throw-02", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "08-base-throw-04", "character": "Wolverine", "characterId": "0x08", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x03619E; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03623C", "handlerAddress": "0x036292", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "10 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x036292: unresolved shared/indirect closure: 0x036294\u21920x01439A (external jsr); 0x03629C\u21920x014388 (external jsr); 0x0362BC\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#08", "codeSource": "context-route-receipts.json#leaves/08-base-throw-04", "localInstructionCount": 10, "externalFrontierCount": 3 }, { "id": "0a-base-normal-0-lp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E81F0", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037AC4\u21920x001DD8 (external jsr); 0x037ACC\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-0-lp", "animationInstallAddresses": [ "0x0376AE" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-0-mp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E81F2", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037AD4\u21920x001DD8 (external jsr); 0x037B06\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-0-mp", "localInstructionCount": 29, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-0-mp", "animationInstallAddresses": [ "0x0376DE" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-0-hp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81F4", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037B0C\u21920x001DD8 (external jsr); 0x037B16\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-0-hp", "animationInstallAddresses": [ "0x037706" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-0-lk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81F6", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037B7E\u21920x001DD8 (external jsr); 0x037B88\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-0-lk", "animationInstallAddresses": [ "0x0377E8" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-0-mk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81F8", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037B8E\u21920x001DD8 (external jsr); 0x037B98\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-0-mk", "animationInstallAddresses": [ "0x037818" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-0-hk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81FA", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037B9E\u21920x001DD8 (external jsr); 0x037BA8\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-0-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-0-hk", "animationInstallAddresses": [ "0x037848" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-1-lp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E81FC", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037B30\u21920x001DD8 (external jsr); 0x037B38\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-1-lp", "animationInstallAddresses": [ "0x037742" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-1-mp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E81FE", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037B40\u21920x001DD8 (external jsr); 0x037B4A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-1-mp", "animationInstallAddresses": [ "0x037772" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-1-hp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8200", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037B50\u21920x001DD8 (external jsr); 0x037B5A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-1-hp", "animationInstallAddresses": [ "0x0377A2" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-1-lk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8202", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037BC2\u21920x001DD8 (external jsr); 0x037BCC\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-1-lk", "animationInstallAddresses": [ "0x03788C" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-1-mk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8204", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037BD2\u21920x001DD8 (external jsr); 0x037BDA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-1-mk", "animationInstallAddresses": [ "0x0378BC" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-1-hk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8206", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037A92\u21920x002490 (external jsr); 0x037A98\u21920x017540 (external jsr); 0x037BE2\u21920x001DD8 (external jsr); 0x037BEA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-1-hk", "animationInstallAddresses": [ "0x0378EC" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-2-lp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8208", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C20\u21920x017588 (external jsr); 0x037C28\u21920x0178C8 (external jmp); 0x037C36\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-2-lp", "animationInstallAddresses": [ "0x037962" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-2-mp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E820A", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C20\u21920x017588 (external jsr); 0x037C28\u21920x0178C8 (external jmp); 0x037C36\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-2-mp", "animationInstallAddresses": [ "0x037992" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-2-hp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E820C", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C20\u21920x017588 (external jsr); 0x037C28\u21920x0178C8 (external jmp); 0x037C36\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-2-hp", "animationInstallAddresses": [ "0x0379BA" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-2-lk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E820E", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C54\u21920x017588 (external jsr); 0x037C5C\u21920x0178C8 (external jmp); 0x037C6A\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-2-lk", "animationInstallAddresses": [ "0x037A08" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-2-mk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8210", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C54\u21920x017588 (external jsr); 0x037C5C\u21920x0178C8 (external jmp); 0x037C6A\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-2-mk", "animationInstallAddresses": [ "0x037A38" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-2-hk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8212", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C54\u21920x017588 (external jsr); 0x037C5C\u21920x0178C8 (external jmp); 0x037C6A\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-2-hk", "animationInstallAddresses": [ "0x037A68" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-3-lp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8214", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BF2\u21920x01485C (external jsr); 0x037BF8\u21920x013E92 (external jsr); 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C20\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-3-lp", "animationInstallAddresses": [ "0x037962" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-3-mp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8216", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BF2\u21920x01485C (external jsr); 0x037BF8\u21920x013E92 (external jsr); 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C20\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-3-mp", "animationInstallAddresses": [ "0x037992" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-3-hp", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8218", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BF2\u21920x01485C (external jsr); 0x037BF8\u21920x013E92 (external jsr); 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C20\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-3-hp", "animationInstallAddresses": [ "0x0379BA" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-3-lk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E821A", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BF2\u21920x01485C (external jsr); 0x037BF8\u21920x013E92 (external jsr); 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C54\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-3-lk", "animationInstallAddresses": [ "0x037A08" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-3-mk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E821C", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BF2\u21920x01485C (external jsr); 0x037BF8\u21920x013E92 (external jsr); 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C54\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-3-mk", "animationInstallAddresses": [ "0x037A38" ], "directionVariantGroups": 0 }, { "id": "0a-base-normal-3-hk", "character": "Gambit", "characterId": "0x0A", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E821E", "handlerAddress": "0x03764A", "updateHandlerAddress": "0x037A76", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03764A: unresolved shared/indirect closure: 0x037BF2\u21920x01485C (external jsr); 0x037BF8\u21920x013E92 (external jsr); 0x037BFE\u21920x013EFC (external jsr); 0x037C04\u21920x013E64 (external jsr); 0x037C54\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "normal-route-receipts.json#0a-base-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0a-base-normal-3-hk", "animationInstallAddresses": [ "0x037A68" ], "directionVariantGroups": 0 }, { "id": "0a-base-attack-00", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x00", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x037FB6", "handlerAddress": "0x03800E", "selector": "B0=0x2A, E6=0x00", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "39 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03800E: unresolved shared/indirect closure: 0x0380A8\u21920x001DD8 (external jsr); 0x0380B0\u21920x015EF4 (external jmp); 0x03807E\u21920x001DD8 (external jsr); 0x038084\u21920x002490 (external jsr); 0x03808A\u21920x017588 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-00", "commandSources": [], "localInstructionCount": 39, "externalFrontierCount": 9 }, { "id": "0a-base-attack-02", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x02", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x037FB8", "handlerAddress": "0x0384D4", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "90 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0384D4: unresolved shared/indirect closure: 0x0384DC\u21920x013EFC (external jsr); 0x0385A6\u21920x001DD8 (external jsr); 0x0385C2\u21920x0A74F4 (external jsr); 0x0385DC\u21920x0A74F4 (external jmp); 0x0385EC\u21920x016FBA (external jmp); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-02", "commandSources": [ "0x039624", "0x0396B0" ], "localInstructionCount": 90, "externalFrontierCount": 11 }, { "id": "0a-base-attack-04", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DB \u2192 B + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x037FBA", "handlerAddress": "0x038602", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "47 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x038602: unresolved shared/indirect closure: 0x03866C\u21920x001DD8 (external jsr); 0x038680\u21920x0A74F4 (external jsr); 0x038692\u21920x016FBA (external jmp); 0x038648\u21920x0135E6 (external jsr); 0x038650\u21920x0A74F4 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-04", "commandSources": [ "0x039644", "0x0396C4" ], "localInstructionCount": 47, "externalFrontierCount": 8 }, { "id": "0a-base-attack-06", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x06", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x037FBC", "handlerAddress": "0x038698", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "132 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x038698: unresolved shared/indirect closure: 0x0387BE\u21920x001DD8 (external jsr); 0x0387D8\u21920x016FBA (external jmp); 0x038820\u21920x002490 (external jsr); 0x038762\u21920x001DD8 (external jsr); 0x038768\u21920x002490 (external jsr); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-06", "commandSources": [ "0x039654", "0x0396CE" ], "localInstructionCount": 132, "externalFrontierCount": 13 }, { "id": "0a-base-attack-08", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x08", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x037FBE", "handlerAddress": "0x038888", "selector": "B0=0x2A, E6=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "178 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x038902, 0x038A46.", "uncertainty": "Handler 0x038888: unresolved shared/indirect closure: 0x038B5C\u21920x001DD8 (external jsr); 0x038B76\u21920x016FBA (external jmp); 0x038AFC\u21920x001DD8 (external jsr); 0x038B02\u21920x002490 (external jsr); 0x038B08\u21920x017588 (external jsr); 16 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x038902", "0x038A46" ], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-08", "commandSources": [ "0x039664", "0x0396D8" ], "localInstructionCount": 178, "externalFrontierCount": 21 }, { "id": "0a-base-attack-0a", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x037FC0", "handlerAddress": "0x038D76", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "98 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x038D76: unresolved shared/indirect closure: 0x038ED6\u21920x001DD8 (external jsr); 0x038EE0\u21920x016FBA (external jmp); 0x038E5A\u21920x001DD8 (external jsr); 0x038E70\u21920x0135E6 (external jmp); 0x038E8E\u21920x0A74F4 (external jsr); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-0a", "commandSources": [], "localInstructionCount": 98, "externalFrontierCount": 16 }, { "id": "0a-base-attack-0c", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x037FC2", "handlerAddress": "0x038EE6", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x038EE6: unresolved shared/indirect closure: 0x038F04\u21920x0135E6 (external jmp); 0x038F0A\u21920x001DD8 (external jsr); 0x038F14\u21920x016FBA (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-0c", "commandSources": [], "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "0a-base-attack-0e", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x0E", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x037FC4", "handlerAddress": "0x038B7E", "selector": "B0=0x2A, E6=0x0E", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "190 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x038902, 0x038C58, 0x038CE6, 0x038D2E.", "uncertainty": "Handler 0x038B7E: unresolved shared/indirect closure: 0x038B5C\u21920x001DD8 (external jsr); 0x038B76\u21920x016FBA (external jmp); 0x038CC4\u21920x001DD8 (external jsr); 0x038CCE\u21920x002490 (external jsr); 0x038D40\u21920x0135E6 (external jsr); 16 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x038902", "0x038C58", "0x038CE6", "0x038D2E" ], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-0e", "commandSources": [ "0x039672" ], "localInstructionCount": 190, "externalFrontierCount": 21 }, { "id": "0a-base-attack-10", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x037FC6", "handlerAddress": "0x038008", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x038008: unresolved shared/indirect closure: 0x038008\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-10", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0a-base-attack-12", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x12", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x037FC8", "handlerAddress": "0x0384D4", "selector": "B0=0x2A, E6=0x12", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "80 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0384D4: unresolved shared/indirect closure: 0x0384DC\u21920x013EFC (external jsr); 0x0385A6\u21920x001DD8 (external jsr); 0x0385C2\u21920x0A74F4 (external jsr); 0x0385DC\u21920x0A74F4 (external jmp); 0x0385EC\u21920x016FBA (external jmp); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-12", "commandSources": [ "0x039634", "0x0396BA" ], "localInstructionCount": 80, "externalFrontierCount": 10 }, { "id": "0a-base-attack-14", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x037FCA", "handlerAddress": "0x038F1A", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "141 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x038F1A: unresolved shared/indirect closure: 0x039100\u21920x001DD8 (external jsr); 0x03911A\u21920x016FBA (external jmp); 0x0390DA\u21920x001DD8 (external jsr); 0x0390EE\u21920x0A8EAC (external jmp); 0x0390FA\u21920x0177B6 (external jmp); 13 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-14", "commandSources": [], "localInstructionCount": 141, "externalFrontierCount": 18 }, { "id": "0a-base-attack-16", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x037FCC", "handlerAddress": "0x037FFC", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x037FFC: unresolved shared/indirect closure: 0x037FFC\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-16", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0a-base-attack-18", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x037FCE", "handlerAddress": "0x038002", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x038002: unresolved shared/indirect closure: 0x038002\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-18", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0a-base-attack-1a", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x037FD0", "handlerAddress": "0x0380B8", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "31 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0380B8: unresolved shared/indirect closure: 0x038126\u21920x001DD8 (external jsr); 0x03812C\u21920x002490 (external jsr); 0x038132\u21920x017588 (external jsr); 0x03813A\u21920x015EF4 (external jmp); 0x0380CC\u21920x00A4B0 (external jsr); 1 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-1a", "commandSources": [], "localInstructionCount": 31, "externalFrontierCount": 6 }, { "id": "0a-base-attack-1c", "character": "Gambit", "characterId": "0x0A", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x037FD2", "handlerAddress": "0x038F1A", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "137 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x038F1A: unresolved shared/indirect closure: 0x039100\u21920x001DD8 (external jsr); 0x03911A\u21920x016FBA (external jmp); 0x0390DA\u21920x001DD8 (external jsr); 0x0390EE\u21920x0A8EAC (external jmp); 0x0390FA\u21920x0177B6 (external jmp); 13 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-attack-1c", "commandSources": [], "localInstructionCount": 137, "externalFrontierCount": 18 }, { "id": "0a-base-throw-00", "character": "Gambit", "characterId": "0x0A", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x039122; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x0391C4", "handlerAddress": "0x0391E2", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0391E2: unresolved shared/indirect closure: 0x03920C\u21920x0BD606 (external jsr); 0x03921C\u21920x0135E6 (external jsr); 0x039224\u21920x0A74F4 (external jsr). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-throw-00", "localInstructionCount": 25, "externalFrontierCount": 3 }, { "id": "0a-base-throw-02", "character": "Gambit", "characterId": "0x0A", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x039122; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x0391C6", "handlerAddress": "0x039234", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x039234: unresolved shared/indirect closure: 0x03925E\u21920x0BD606 (external jsr); 0x039278\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-throw-02", "localInstructionCount": 22, "externalFrontierCount": 2 }, { "id": "0a-base-throw-04", "character": "Gambit", "characterId": "0x0A", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x039122; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x0391C8", "handlerAddress": "0x03927E", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03927E: unresolved shared/indirect closure: 0x0392AA\u21920x0BD606 (external jsr); 0x0392BA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0A", "codeSource": "context-route-receipts.json#leaves/0a-base-throw-04", "localInstructionCount": 20, "externalFrontierCount": 2 }, { "id": "0c-base-normal-0-lp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8220", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=0, B5=0, 4D=0", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit4, normalized new/buffered LP Clears buffer at $03A6FA, writes attack attribute $13, clears +$84/+$86 and installs animation $10/$06 at $03A720.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A6BA\u21920x001DD8 (external jsr); 0x03A6C2\u21920x016FBA (external jmp); 0x03A6CE\u21920x0176B6 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x03A6E6", "0x03A6EA", "0x03A6FA" ], "gate": "Nonzero animation flag +$3C; normal animation has not ended; shared posture/normal-transition gates must permit continuation. Calls $0176B6, $01741E and $0181C8.", "effect": "Clears buffer at $03A6FA, writes attack attribute $13, clears +$84/+$86 and installs animation $10/$06 at $03A720.", "limit": "No explicit finite bonus-hit allowance is established in this local branch. This is a code-verified normal animation restart, not a measured hit increase or a Hyper extension.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-0-lp", "localInstructionCount": 43, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-0-lp", "animationInstallAddresses": [ "0x03A304" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#0c-base-normal-0-lp" }, { "id": "0c-base-normal-0-mp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8222", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A728\u21920x001DD8 (external jsr); 0x03A730\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-0-mp", "animationInstallAddresses": [ "0x03A334" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-0-hp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8224", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A728\u21920x001DD8 (external jsr); 0x03A730\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-0-hp", "animationInstallAddresses": [ "0x03A35C" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-0-lk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8226", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=0, B5=2, 4D=0", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit8, normalized new/buffered LK Clears buffer at $03A7A4, writes attack attribute $14, clears +$84/+$86 and installs animation $12/$06 at $03A7CA.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A764\u21920x001DD8 (external jsr); 0x03A76C\u21920x016FBA (external jmp); 0x03A778\u21920x0176B6 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x03A790", "0x03A794", "0x03A7A4" ], "gate": "Nonzero animation flag +$3C; normal animation has not ended; shared posture/normal-transition gates must permit continuation. Calls $0176B6, $01741E and $0181C8.", "effect": "Clears buffer at $03A7A4, writes attack attribute $14, clears +$84/+$86 and installs animation $12/$06 at $03A7CA.", "limit": "No explicit finite bonus-hit allowance is established in this local branch. This is a code-verified normal animation restart, not a measured hit increase or a Hyper extension.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-0-lk", "localInstructionCount": 43, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-0-lk", "animationInstallAddresses": [ "0x03A42E" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#0c-base-normal-0-lk" }, { "id": "0c-base-normal-0-mk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8228", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "28 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A7D2\u21920x001DD8 (external jsr); 0x03A7DA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-0-mk", "localInstructionCount": 28, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-0-mk", "animationInstallAddresses": [ "0x03A456" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-0-hk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E822A", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "28 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A808\u21920x001DD8 (external jsr); 0x03A810\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-0-hk", "localInstructionCount": 28, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-0-hk", "animationInstallAddresses": [ "0x03A47E" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-1-lp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E822C", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A736\u21920x001DD8 (external jsr); 0x03A73E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-1-lp", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-1-lp", "animationInstallAddresses": [ "0x03A398" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-1-mp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E822E", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A736\u21920x001DD8 (external jsr); 0x03A73E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-1-mp", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-1-mp", "animationInstallAddresses": [ "0x03A3C0" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-1-hp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8230", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A736\u21920x001DD8 (external jsr); 0x03A73E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-1-hp", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-1-hp", "animationInstallAddresses": [ "0x03A3E8" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-1-lk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8232", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A83E\u21920x001DD8 (external jsr); 0x03A846\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-1-lk", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-1-lk", "animationInstallAddresses": [ "0x03A4BA" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-1-mk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8234", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A83E\u21920x001DD8 (external jsr); 0x03A846\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-1-mk", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-1-mk", "animationInstallAddresses": [ "0x03A4E2" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-1-hk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8236", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A688\u21920x002490 (external jsr); 0x03A68E\u21920x017540 (external jsr); 0x03A83E\u21920x001DD8 (external jsr); 0x03A846\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-1-hk", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-1-hk", "animationInstallAddresses": [ "0x03A50A" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-2-lp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8238", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A87C\u21920x017588 (external jsr); 0x03A884\u21920x0178C8 (external jmp); 0x03A892\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-2-lp", "animationInstallAddresses": [ "0x03A578" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-2-mp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E823A", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A87C\u21920x017588 (external jsr); 0x03A884\u21920x0178C8 (external jmp); 0x03A892\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-2-mp", "animationInstallAddresses": [ "0x03A5A0" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-2-hp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E823C", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "32 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A87C\u21920x017588 (external jsr); 0x03A884\u21920x0178C8 (external jmp); 0x03A8A2\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-2-hp", "localInstructionCount": 32, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-2-hp", "animationInstallAddresses": [ "0x03A5C8" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-2-lk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E823E", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A918\u21920x017588 (external jsr); 0x03A920\u21920x0178C8 (external jmp); 0x03A92E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-2-lk", "animationInstallAddresses": [ "0x03A616" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-2-mk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8240", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A918\u21920x017588 (external jsr); 0x03A920\u21920x0178C8 (external jmp); 0x03A92E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-2-mk", "animationInstallAddresses": [ "0x03A63E" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-2-hk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8242", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "32 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A918\u21920x017588 (external jsr); 0x03A920\u21920x0178C8 (external jmp); 0x03A93E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-2-hk", "localInstructionCount": 32, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-2-hk", "animationInstallAddresses": [ "0x03A666" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-3-lp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8244", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A84E\u21920x01485C (external jsr); 0x03A854\u21920x013E92 (external jsr); 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A87C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-3-lp", "animationInstallAddresses": [ "0x03A578" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-3-mp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8246", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A84E\u21920x01485C (external jsr); 0x03A854\u21920x013E92 (external jsr); 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A87C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-3-mp", "animationInstallAddresses": [ "0x03A5A0" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-3-hp", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8248", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "34 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A84E\u21920x01485C (external jsr); 0x03A854\u21920x013E92 (external jsr); 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A87C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-3-hp", "localInstructionCount": 34, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-3-hp", "animationInstallAddresses": [ "0x03A5C8" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-3-lk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E824A", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A84E\u21920x01485C (external jsr); 0x03A854\u21920x013E92 (external jsr); 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A918\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-3-lk", "animationInstallAddresses": [ "0x03A616" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-3-mk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E824C", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A84E\u21920x01485C (external jsr); 0x03A854\u21920x013E92 (external jsr); 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A918\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-3-mk", "animationInstallAddresses": [ "0x03A63E" ], "directionVariantGroups": 0 }, { "id": "0c-base-normal-3-hk", "character": "Venom", "characterId": "0x0C", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E824E", "handlerAddress": "0x03A2A0", "updateHandlerAddress": "0x03A66C", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "34 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03A2A0: unresolved shared/indirect closure: 0x03A84E\u21920x01485C (external jsr); 0x03A854\u21920x013E92 (external jsr); 0x03A85A\u21920x013EFC (external jsr); 0x03A860\u21920x013E64 (external jsr); 0x03A918\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "normal-route-receipts.json#0c-base-normal-3-hk", "localInstructionCount": 34, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0c-base-normal-3-hk", "animationInstallAddresses": [ "0x03A666" ], "directionVariantGroups": 0 }, { "id": "0c-base-attack-00", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x00", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x03AB24", "handlerAddress": "0x03AB48", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "125 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03AB48: unresolved shared/indirect closure: 0x03AD20\u21920x001DD8 (external jsr); 0x03AD40\u21920x016FBA (external jmp); 0x03AD52\u21920x077146 (external jmp); 0x03ABE8\u21920x001DD8 (external jsr); 0x03AC06\u21920x077146 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-00", "commandSources": [ "0x03BB86", "0x03BBDA" ], "localInstructionCount": 125, "externalFrontierCount": 15 }, { "id": "0c-base-attack-02", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Web Throw", "command": "HCB + punch", "variant": "Stock character", "tableAddress": "0x03AB26", "handlerAddress": "0x03AD5A", "selector": "B0=0x2A, E6=0x02", "status": "tested: extra slam-animation cycle", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Threshold completion writes $01FF to word +$50 at $03B04A. Animation boundary $03AF30 consumes one loop credit: two slams become four. Native combo display remains 1.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x03B03A" ], "gate": "New normalized direction or punch DA&$007F at $03B03A; 22-event threshold.", "effect": "Threshold completion writes $01FF to word +$50 at $03B04A. Animation boundary $03AF30 consumes one loop credit: two slams become four. Native combo display remains 1.", "limit": "One additional two-slam cycle; extra slams are not guaranteed extra total damage.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-02", "commandSources": [ "0x03BB96", "0x03BBE4" ], "localInstructionCount": 178, "externalFrontierCount": 21, "reviewSource": "../../roster-additions.md" }, { "id": "0c-base-attack-04", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DF \u2192 F + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x03AB28", "handlerAddress": "0x03B052", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "58 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B052: unresolved shared/indirect closure: 0x03B12C\u21920x001DD8 (external jsr); 0x03B134\u21920x016FBA (external jmp); 0x03B0CE\u21920x001DD8 (external jsr); 0x03B0E2\u21920x01CD1E (external jsr); 0x03B0FE\u21920x0817DC (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-04", "commandSources": [ "0x03BBAA", "0x03BBEE" ], "localInstructionCount": 58, "externalFrontierCount": 10 }, { "id": "0c-base-attack-06", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x06", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB2A", "handlerAddress": "0x03B13A", "selector": "B0=0x2A, E6=0x06", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "235 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B13A: unresolved shared/indirect closure: 0x03B50C\u21920x001DD8 (external jsr); 0x03B514\u21920x016FBA (external jmp); 0x03B4D8\u21920x001DD8 (external jsr); 0x03B4DE\u21920x002490 (external jsr); 0x03B4FC\u21920x0B62B6 (external jsr); 31 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-06", "commandSources": [], "localInstructionCount": 235, "externalFrontierCount": 36 }, { "id": "0c-base-attack-08", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x08", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB2C", "handlerAddress": "0x03B51C", "selector": "B0=0x2A, E6=0x08", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "85 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B51C: unresolved shared/indirect closure: 0x03B672\u21920x001DD8 (external jsr); 0x03B67A\u21920x016FBA (external jmp); 0x03B640\u21920x001DD8 (external jsr); 0x03B66A\u21920x0135E6 (external jmp); 0x03B616\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-08", "commandSources": [], "localInstructionCount": 85, "externalFrontierCount": 15 }, { "id": "0c-base-attack-0a", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB2E", "handlerAddress": "0x03B680", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "19 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B680: unresolved shared/indirect closure: 0x03B6C0\u21920x001DD8 (external jsr); 0x03B6C8\u21920x016FBA (external jmp); 0x03B6BA\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-0a", "commandSources": [], "localInstructionCount": 19, "externalFrontierCount": 3 }, { "id": "0c-base-attack-0c", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB30", "handlerAddress": "0x03B6D0", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "50 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B6D0: unresolved shared/indirect closure: 0x03B794\u21920x001DD8 (external jsr); 0x03B79C\u21920x016FBA (external jmp); 0x03B74A\u21920x001DD8 (external jsr); 0x03B750\u21920x002490 (external jsr); 0x03B78C\u21920x0135E6 (external jmp); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-0c", "commandSources": [], "localInstructionCount": 50, "externalFrontierCount": 7 }, { "id": "0c-base-attack-0e", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB32", "handlerAddress": "0x03AB42", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03AB42: unresolved shared/indirect closure: 0x03AB42\u21920x016FBA (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-0e", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0c-base-attack-10", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB34", "handlerAddress": "0x03AB48", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "125 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03AB48: unresolved shared/indirect closure: 0x03AD20\u21920x001DD8 (external jsr); 0x03AD40\u21920x016FBA (external jmp); 0x03AD52\u21920x077146 (external jmp); 0x03ABE8\u21920x001DD8 (external jsr); 0x03AC06\u21920x077146 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-10", "commandSources": [], "localInstructionCount": 125, "externalFrontierCount": 15 }, { "id": "0c-base-attack-12", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB36", "handlerAddress": "0x03B7A2", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B7A2: unresolved shared/indirect closure: 0x03B7A2\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0c-base-attack-14", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB38", "handlerAddress": "0x03B7A8", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B7A8: unresolved shared/indirect closure: 0x03B7A8\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0c-base-attack-16", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB3A", "handlerAddress": "0x03B6D0", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "48 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B6D0: unresolved shared/indirect closure: 0x03B794\u21920x001DD8 (external jsr); 0x03B79C\u21920x016FBA (external jmp); 0x03B74A\u21920x001DD8 (external jsr); 0x03B750\u21920x002490 (external jsr); 0x03B6EC\u21920x00A4B0 (external jsr); 1 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-16", "commandSources": [], "localInstructionCount": 48, "externalFrontierCount": 6 }, { "id": "0c-base-attack-18", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB3C", "handlerAddress": "0x03B7AE", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B7AE: unresolved shared/indirect closure: 0x03B7AE\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-18", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0c-base-attack-1a", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB3E", "handlerAddress": "0x03B51C", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "86 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B51C: unresolved shared/indirect closure: 0x03B672\u21920x001DD8 (external jsr); 0x03B67A\u21920x016FBA (external jmp); 0x03B640\u21920x001DD8 (external jsr); 0x03B66A\u21920x0135E6 (external jmp); 0x03B616\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-1a", "commandSources": [], "localInstructionCount": 86, "externalFrontierCount": 15 }, { "id": "0c-base-attack-1c", "character": "Venom", "characterId": "0x0C", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03AB40", "handlerAddress": "0x03B51C", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "86 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03B51C: unresolved shared/indirect closure: 0x03B672\u21920x001DD8 (external jsr); 0x03B67A\u21920x016FBA (external jmp); 0x03B640\u21920x001DD8 (external jsr); 0x03B66A\u21920x0135E6 (external jmp); 0x03B616\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-attack-1c", "commandSources": [], "localInstructionCount": 86, "externalFrontierCount": 15 }, { "id": "0c-base-throw-00", "character": "Venom", "characterId": "0x0C", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x03B7B4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03B828", "handlerAddress": "0x03B834", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03B83A. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03B834: unresolved shared/indirect closure: 0x03B850\u21920x01CD1C (external jsr); 0x03B85E\u21920x0BD606 (external jsr); 0x03B872\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x03B83A" ], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-throw-00", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "0c-base-throw-02", "character": "Venom", "characterId": "0x0C", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x03B7B4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03B82A", "handlerAddress": "0x03B878", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03B87E. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03B878: unresolved shared/indirect closure: 0x03B894\u21920x01CD1C (external jsr); 0x03B8A2\u21920x0BD606 (external jsr); 0x03B8B6\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x03B87E" ], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-throw-02", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "0c-base-throw-04", "character": "Venom", "characterId": "0x0C", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x03B7B4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03B82C", "handlerAddress": "0x03B8BC", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03B8C2. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03B8BC: unresolved shared/indirect closure: 0x03B8D8\u21920x01CD1C (external jsr); 0x03B8E6\u21920x0BD606 (external jsr); 0x03B8FA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x03B8C2" ], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-throw-04", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "0c-base-throw-06", "character": "Venom", "characterId": "0x0C", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x03B7B4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03B82E", "handlerAddress": "0x03B832", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03B832: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-throw-06", "localInstructionCount": 1, "externalFrontierCount": 0 }, { "id": "0c-base-throw-08", "character": "Venom", "characterId": "0x0C", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x03B7B4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03B830", "handlerAddress": "0x03B832", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03B832: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0C", "codeSource": "context-route-receipts.json#leaves/0c-base-throw-08", "localInstructionCount": 1, "externalFrontierCount": 0 }, { "id": "0e-base-normal-0-lp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8250", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=0, B5=0, 4D=0", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit4, normalized new/buffered LP Clears buffer at $03D03A, sets attack attribute $19, clears +$84/+$86 and installs animation $10/$06 at $03D060.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03CFF8\u21920x001DD8 (external jsr); 0x03D000\u21920x016FBA (external jmp); 0x03D00E\u21920x0176B6 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x03D026", "0x03D02A", "0x03D03A" ], "gate": "Nonzero animation flag +$3C; normal animation has not ended; shared posture/normal-transition gates must permit continuation. Calls $0176B6, $01741E and $0181C8.", "effect": "Clears buffer at $03D03A, sets attack attribute $19, clears +$84/+$86 and installs animation $10/$06 at $03D060.", "limit": "No explicit finite bonus-hit allowance is established in this local branch. This is a code-verified normal animation restart, not a measured hit increase or a Hyper extension.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-0-lp", "localInstructionCount": 43, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-0-lp", "animationInstallAddresses": [ "0x03CBAA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#0e-base-normal-0-lp" }, { "id": "0e-base-normal-0-mp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8252", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D066\u21920x001DD8 (external jsr); 0x03D06E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-0-mp", "animationInstallAddresses": [ "0x03CBE2" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-0-hp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8254", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D066\u21920x001DD8 (external jsr); 0x03D06E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-0-hp", "animationInstallAddresses": [ "0x03CC12" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-0-lk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8256", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D126\u21920x001DD8 (external jsr); 0x03D12E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-0-lk", "animationInstallAddresses": [ "0x03CD04" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-0-mk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8258", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D126\u21920x001DD8 (external jsr); 0x03D12E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-0-mk", "animationInstallAddresses": [ "0x03CD34" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-0-hk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E825A", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D126\u21920x001DD8 (external jsr); 0x03D12E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-0-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-0-hk", "animationInstallAddresses": [ "0x03CD6C" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-1-lp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E825C", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=2, B5=0, 4D=0", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit4, normalized new/buffered LP Clears buffer at $03D0CC, sets attack attribute $1A, clears +$84/+$86 and installs animation $14/$06 at $03D0F2.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D08A\u21920x001DD8 (external jsr); 0x03D092\u21920x016FBA (external jmp); 0x03D0A0\u21920x0176B6 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x03D0B8", "0x03D0BC", "0x03D0CC" ], "gate": "Nonzero animation flag +$3C; normal animation has not ended; shared posture/normal-transition gates must permit continuation. Calls $0176B6, $017456 and $0181C8.", "effect": "Clears buffer at $03D0CC, sets attack attribute $1A, clears +$84/+$86 and installs animation $14/$06 at $03D0F2.", "limit": "No explicit finite bonus-hit allowance is established in this local branch. This is a code-verified normal animation restart, not a measured hit increase or a Hyper extension.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-1-lp", "localInstructionCount": 43, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-1-lp", "animationInstallAddresses": [ "0x03CC56" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#0e-base-normal-1-lp" }, { "id": "0e-base-normal-1-mp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E825E", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D0F8\u21920x001DD8 (external jsr); 0x03D100\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-1-mp", "animationInstallAddresses": [ "0x03CC86" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-1-hp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8260", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D0F8\u21920x001DD8 (external jsr); 0x03D100\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-1-hp", "animationInstallAddresses": [ "0x03CCB6" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-1-lk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8262", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D14A\u21920x001DD8 (external jsr); 0x03D152\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-1-lk", "animationInstallAddresses": [ "0x03CDB0" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-1-mk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8264", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D14A\u21920x001DD8 (external jsr); 0x03D152\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-1-mk", "animationInstallAddresses": [ "0x03CDE0" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-1-hk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8266", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03CFC6\u21920x002490 (external jsr); 0x03CFCC\u21920x017540 (external jsr); 0x03D14A\u21920x001DD8 (external jsr); 0x03D152\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-1-hk", "animationInstallAddresses": [ "0x03CE10" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-2-lp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8268", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D188\u21920x017588 (external jsr); 0x03D190\u21920x0178C8 (external jmp); 0x03D19E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-2-lp", "animationInstallAddresses": [ "0x03CE86" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-2-mp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E826A", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D188\u21920x017588 (external jsr); 0x03D190\u21920x0178C8 (external jmp); 0x03D19E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-2-mp", "animationInstallAddresses": [ "0x03CEB6" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-2-hp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E826C", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D188\u21920x017588 (external jsr); 0x03D190\u21920x0178C8 (external jmp); 0x03D19E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-2-hp", "animationInstallAddresses": [ "0x03CEE6" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-2-lk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E826E", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D1BC\u21920x017588 (external jsr); 0x03D1C4\u21920x0178C8 (external jmp); 0x03D1D2\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-2-lk", "animationInstallAddresses": [ "0x03CF3C" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-2-mk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8270", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D1BC\u21920x017588 (external jsr); 0x03D1C4\u21920x0178C8 (external jmp); 0x03D1D2\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-2-mk", "animationInstallAddresses": [ "0x03CF6C" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-2-hk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8272", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D1BC\u21920x017588 (external jsr); 0x03D1C4\u21920x0178C8 (external jmp); 0x03D1D2\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-2-hk", "animationInstallAddresses": [ "0x03CF9C" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-3-lp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8274", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D15A\u21920x01485C (external jsr); 0x03D160\u21920x013E92 (external jsr); 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D188\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-3-lp", "animationInstallAddresses": [ "0x03CE86" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-3-mp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8276", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D15A\u21920x01485C (external jsr); 0x03D160\u21920x013E92 (external jsr); 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D188\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-3-mp", "animationInstallAddresses": [ "0x03CEB6" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-3-hp", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8278", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D15A\u21920x01485C (external jsr); 0x03D160\u21920x013E92 (external jsr); 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D188\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-3-hp", "animationInstallAddresses": [ "0x03CEE6" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-3-lk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E827A", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D15A\u21920x01485C (external jsr); 0x03D160\u21920x013E92 (external jsr); 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D1BC\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-3-lk", "animationInstallAddresses": [ "0x03CF3C" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-3-mk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E827C", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D15A\u21920x01485C (external jsr); 0x03D160\u21920x013E92 (external jsr); 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D1BC\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-3-mk", "animationInstallAddresses": [ "0x03CF6C" ], "directionVariantGroups": 0 }, { "id": "0e-base-normal-3-hk", "character": "Spider-Man", "characterId": "0x0E", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E827E", "handlerAddress": "0x03CB46", "updateHandlerAddress": "0x03CFAA", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03CB46: unresolved shared/indirect closure: 0x03D15A\u21920x01485C (external jsr); 0x03D160\u21920x013E92 (external jsr); 0x03D166\u21920x013EFC (external jsr); 0x03D16C\u21920x013E64 (external jsr); 0x03D1BC\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "normal-route-receipts.json#0e-base-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#0e-base-normal-3-hk", "animationInstallAddresses": [ "0x03CF9C" ], "directionVariantGroups": 0 }, { "id": "0e-base-attack-00", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x00", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x03D83A", "handlerAddress": "0x03D860", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "172 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03D9C4.", "uncertainty": "Handler 0x03D860: unresolved shared/indirect closure: 0x03DAFC\u21920x001DD8 (external jsr); 0x03DB04\u21920x016FBA (external jmp); 0x03DAA2\u21920x001DD8 (external jsr); 0x03DAA8\u21920x002490 (external jsr); 0x03DADC\u21920x0B62B6 (external jsr); 16 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x03D9C4" ], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-00", "commandSources": [ "0x03F8BE", "0x03F942" ], "localInstructionCount": 172, "externalFrontierCount": 21 }, { "id": "0e-base-attack-02", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x02", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x03D83C", "handlerAddress": "0x03DB0A", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "86 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03DB0A: unresolved shared/indirect closure: 0x03DC20\u21920x001DD8 (external jsr); 0x03DC28\u21920x016FBA (external jmp); 0x03DC2E\u21920x002490 (external jsr); 0x03DC48\u21920x0178C8 (external jmp); 0x03DC4E\u21920x001DD8 (external jsr); 9 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-02", "commandSources": [ "0x03F8CE", "0x03F94C" ], "localInstructionCount": 86, "externalFrontierCount": 14 }, { "id": "0e-base-attack-04", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x03D83E", "handlerAddress": "0x03DC76", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "197 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03DC76: unresolved shared/indirect closure: 0x03DE68\u21920x002490 (external jsr); 0x03DE82\u21920x017634 (external jsr); 0x03DE8E\u21920x0178C8 (external jmp); 0x03DE98\u21920x0B62B6 (external jsr); 0x03DEA2\u21920x0135E6 (external jmp); 19 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-04", "commandSources": [ "0x03F8DE", "0x03F956" ], "localInstructionCount": 197, "externalFrontierCount": 24 }, { "id": "0e-base-attack-06", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Web Throw", "command": "HCB + punch; rotate directions", "variant": "Stock character", "tableAddress": "0x03D840", "handlerAddress": "0x03DF76", "selector": "B0=0x2A, E6=0x06", "status": "static: rotation/throw-parameter mechanic", "staticStatus": "named causal path reviewed", "runtimeStatus": "static only", "finding": "Grants spin credit +$38D, advances animation/damage-related parameters; defender escape helper can counteract them.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x03E318" ], "gate": "Held normalized D6&$000F at $03E318 must collect all four cardinals twice within the window.", "effect": "Grants spin credit +$38D, advances animation/damage-related parameters; defender escape helper can counteract them.", "limit": "Separate five-rotation cap; extra connected hits not established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-06", "commandSources": [ "0x03F8EE", "0x03F960" ], "localInstructionCount": 231, "externalFrontierCount": 23, "reviewSource": "../../roster-additions.md" }, { "id": "0e-base-attack-08", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Maximum Spider", "command": "QCF + two punches", "variant": "Stock character", "tableAddress": "0x03D842", "handlerAddress": "0x03E374", "selector": "B0=0x2A, E6=0x08", "status": "tested: no added hits in this fixture", "staticStatus": "named causal path reviewed", "runtimeStatus": "MAME 0.287: ten controlled trials, three identical baselines; no live move-state writes", "finding": "The examined local routine selects approach direction and uses finite continuation/retry counters initialized at $03E3A2\u2013$03E3B4. No attack-button-driven additional-hit path was observed. First attacker-state combo 5\u21925; tail-inclusive peak before late control 5\u21925. Ten conditions, three identical baseline trace digests.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x03EB98" ], "gate": "$03EB98 reads held direction, $03EB9C masks $000F for approach selection.", "effect": "The examined local routine selects approach direction and uses finite continuation/retry counters initialized at $03E3A2\u2013$03E3B4. No attack-button-driven additional-hit path was observed. First attacker-state combo 5\u21925; tail-inclusive peak before late control 5\u21925. Ten conditions, three identical baseline trace digests.", "limit": "The 25-hit claim is not reproduced. Five is the observed fixture result, not a global cap.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-08", "commandSources": [], "localInstructionCount": 622, "externalFrontierCount": 40, "reviewSource": "maximum_spider/summary.json", "runtimeEvidence": { "case": "maximum_spider", "source": "maximum_spider/summary.json", "baselineDigestsMatch": true, "baselinePeak": 5, "tappedPeak": 5, "baselineTailPeak": 5, "tappedTailPeak": 5 } }, { "id": "0e-base-attack-0a", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D844", "handlerAddress": "0x03EC72", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "82 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03EC72: unresolved shared/indirect closure: 0x03EDB4\u21920x001DD8 (external jsr); 0x03EDBC\u21920x016FBA (external jmp); 0x03ED3A\u21920x0024C4 (external jsr); 0x03ED40\u21920x001DD8 (external jsr); 0x03ED72\u21920x0135E6 (external jmp); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-0a", "commandSources": [], "localInstructionCount": 82, "externalFrontierCount": 12 }, { "id": "0e-base-attack-0c", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D846", "handlerAddress": "0x03F156", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "50 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03F188.", "uncertainty": "Handler 0x03F156: unresolved shared/indirect closure: 0x03F164\u21920x0135E6 (external jmp); 0x03F16A\u21920x001DD8 (external jsr); 0x03F172\u21920x00A4B0 (external jsr); 0x03F178\u21920x016FBA (external jmp); 0x03F1A4\u21920x001920 (external jsr); 1 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x03F188" ], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-0c", "commandSources": [], "localInstructionCount": 50, "externalFrontierCount": 6 }, { "id": "0e-base-attack-0e", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D848", "handlerAddress": "0x03F216", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "50 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03F216: unresolved shared/indirect closure: 0x03F2DE\u21920x001DD8 (external jsr); 0x03F2E6\u21920x015EF4 (external jmp); 0x03F294\u21920x001DD8 (external jsr); 0x03F29A\u21920x002490 (external jsr); 0x03F2D6\u21920x0135E6 (external jmp); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-0e", "commandSources": [], "localInstructionCount": 50, "externalFrontierCount": 7 }, { "id": "0e-base-attack-10", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D84A", "handlerAddress": "0x03DC76", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "197 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03DC76: unresolved shared/indirect closure: 0x03DE68\u21920x002490 (external jsr); 0x03DE82\u21920x017634 (external jsr); 0x03DE8E\u21920x0178C8 (external jmp); 0x03DE98\u21920x0B62B6 (external jsr); 0x03DEA2\u21920x0135E6 (external jmp); 19 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-10", "commandSources": [], "localInstructionCount": 197, "externalFrontierCount": 24 }, { "id": "0e-base-attack-12", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D84C", "handlerAddress": "0x03F2EC", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03F2EC: unresolved shared/indirect closure: 0x03F2EC\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0e-base-attack-14", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D84E", "handlerAddress": "0x03EC72", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "81 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03EC72: unresolved shared/indirect closure: 0x03EDB4\u21920x001DD8 (external jsr); 0x03EDBC\u21920x016FBA (external jmp); 0x03ED3A\u21920x0024C4 (external jsr); 0x03ED40\u21920x001DD8 (external jsr); 0x03ED72\u21920x0135E6 (external jmp); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-14", "commandSources": [], "localInstructionCount": 81, "externalFrontierCount": 12 }, { "id": "0e-base-attack-16", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D850", "handlerAddress": "0x03EC72", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "81 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03EC72: unresolved shared/indirect closure: 0x03EDB4\u21920x001DD8 (external jsr); 0x03EDBC\u21920x016FBA (external jmp); 0x03ED3A\u21920x0024C4 (external jsr); 0x03ED40\u21920x001DD8 (external jsr); 0x03ED72\u21920x0135E6 (external jmp); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-16", "commandSources": [], "localInstructionCount": 81, "externalFrontierCount": 12 }, { "id": "0e-base-attack-18", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D852", "handlerAddress": "0x03EDC4", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "226 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03EDC4: unresolved shared/indirect closure: 0x03F0CE\u21920x001DD8 (external jsr); 0x03F0D8\u21920x002490 (external jsr); 0x03F112\u21920x0B62B6 (external jsr); 0x03F126\u21920x0135E6 (external jmp); 0x03F12E\u21920x001DD8 (external jsr); 20 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-18", "commandSources": [], "localInstructionCount": 226, "externalFrontierCount": 25 }, { "id": "0e-base-attack-1a", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D854", "handlerAddress": "0x03F2F2", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03F2F2: unresolved shared/indirect closure: 0x03F2F2\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-1a", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0e-base-attack-1c", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D856", "handlerAddress": "0x03F216", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "48 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03F216: unresolved shared/indirect closure: 0x03F2DE\u21920x001DD8 (external jsr); 0x03F2E6\u21920x015EF4 (external jmp); 0x03F294\u21920x001DD8 (external jsr); 0x03F29A\u21920x002490 (external jsr); 0x03F22C\u21920x00A4B0 (external jsr); 1 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-1c", "commandSources": [], "localInstructionCount": 48, "externalFrontierCount": 6 }, { "id": "0e-base-attack-1e", "character": "Spider-Man", "characterId": "0x0E", "category": "special / super", "name": "Native attack selector 0x1E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x03D858", "handlerAddress": "0x03F2F8", "selector": "B0=0x2A, E6=0x1E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03F2F8: unresolved shared/indirect closure: 0x03F2F8\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-attack-1e", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0e-base-throw-00", "character": "Spider-Man", "characterId": "0x0E", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x03F2FE; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03F36A", "handlerAddress": "0x03F37C", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03F382. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03F37C: unresolved shared/indirect closure: 0x03F398\u21920x01CD1C (external jsr); 0x03F3A6\u21920x0BD606 (external jsr); 0x03F3BA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x03F382" ], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-throw-00", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "0e-base-throw-02", "character": "Spider-Man", "characterId": "0x0E", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x03F2FE; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03F36C", "handlerAddress": "0x03F3C0", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03F3C6. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03F3C0: unresolved shared/indirect closure: 0x03F3DC\u21920x01CD1C (external jsr); 0x03F3EA\u21920x0BD606 (external jsr); 0x03F3FE\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x03F3C6" ], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-throw-02", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "0e-base-throw-04", "character": "Spider-Man", "characterId": "0x0E", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x03F2FE; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03F36E", "handlerAddress": "0x03F404", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03F40A. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03F404: unresolved shared/indirect closure: 0x03F420\u21920x01CD1C (external jsr); 0x03F42E\u21920x0BD606 (external jsr); 0x03F442\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x03F40A" ], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-throw-04", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "0e-base-throw-06", "character": "Spider-Man", "characterId": "0x0E", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x03F2FE; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03F370", "handlerAddress": "0x03F376", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03F376: unresolved shared/indirect closure: 0x03F376\u21920x016FBA (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-throw-06", "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0e-base-throw-08", "character": "Spider-Man", "characterId": "0x0E", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x03F2FE; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03F372", "handlerAddress": "0x03F376", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03F376: unresolved shared/indirect closure: 0x03F376\u21920x016FBA (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-throw-08", "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "0e-base-throw-0a", "character": "Spider-Man", "characterId": "0x0E", "category": "throw", "name": "Native throw selector 0x0A", "command": "Native throw detector 0x03F2FE; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03F374", "handlerAddress": "0x03F376", "selector": "E4=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03F376: unresolved shared/indirect closure: 0x03F376\u21920x016FBA (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#0E", "codeSource": "context-route-receipts.json#leaves/0e-base-throw-0a", "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "10-base-normal-0-lp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8280", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040C38\u21920x001DD8 (external jsr); 0x040C40\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-0-lp", "animationInstallAddresses": [ "0x0407BA" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-0-mp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8282", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040C38\u21920x001DD8 (external jsr); 0x040C40\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-0-mp", "animationInstallAddresses": [ "0x0407EA" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-0-hp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8284", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "40 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040C48\u21920x001DD8 (external jsr); 0x040C50\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-0-hp", "localInstructionCount": 40, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-0-hp", "animationInstallAddresses": [ "0x04081A" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-0-lk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8286", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040CE8\u21920x001DD8 (external jsr); 0x040CF0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-0-lk", "animationInstallAddresses": [ "0x04090C" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-0-mk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8288", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040CE8\u21920x001DD8 (external jsr); 0x040CF0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-0-mk", "animationInstallAddresses": [ "0x04093C" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-0-hk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E828A", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040CE8\u21920x001DD8 (external jsr); 0x040CF0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-0-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-0-hk", "animationInstallAddresses": [ "0x040974" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-1-lp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E828C", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040CBA\u21920x001DD8 (external jsr); 0x040CC2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-1-lp", "animationInstallAddresses": [ "0x04085E" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-1-mp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E828E", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040CBA\u21920x001DD8 (external jsr); 0x040CC2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-1-mp", "animationInstallAddresses": [ "0x04088E" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-1-hp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8290", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040CBA\u21920x001DD8 (external jsr); 0x040CC2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-1-hp", "animationInstallAddresses": [ "0x0408BE" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-1-lk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8292", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040D0C\u21920x001DD8 (external jsr); 0x040D14\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-1-lk", "animationInstallAddresses": [ "0x0409B8" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-1-mk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8294", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040D0C\u21920x001DD8 (external jsr); 0x040D14\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#10-base-normal-1-mk", "animationInstallAddresses": [ "0x0409E8" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-1-hk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8296", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "35 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040C06\u21920x002490 (external jsr); 0x040C0C\u21920x017540 (external jsr); 0x040D1C\u21920x001DD8 (external jsr); 0x040D24\u21920x016FBA (external jmp); 0x040D6A\u21920x0B5D30 (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-1-hk", "localInstructionCount": 35, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#10-base-normal-1-hk", "animationInstallAddresses": [ "0x040A18" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-2-lp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8298", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040D9E\u21920x017588 (external jsr); 0x040DA6\u21920x0178C8 (external jmp); 0x040DB4\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#10-base-normal-2-lp", "animationInstallAddresses": [ "0x040A8E" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-2-mp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E829A", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040D9E\u21920x017588 (external jsr); 0x040DA6\u21920x0178C8 (external jmp); 0x040DB4\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#10-base-normal-2-mp", "animationInstallAddresses": [ "0x040ABE" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-2-hp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E829C", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040D9E\u21920x017588 (external jsr); 0x040DA6\u21920x0178C8 (external jmp); 0x040DB4\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#10-base-normal-2-hp", "animationInstallAddresses": [ "0x040AEE" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-2-lk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E829E", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040DD2\u21920x017588 (external jsr); 0x040DDA\u21920x0178C8 (external jmp); 0x040DE8\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#10-base-normal-2-lk", "animationInstallAddresses": [ "0x040B44" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-2-mk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E82A0", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040DD2\u21920x017588 (external jsr); 0x040DDA\u21920x0178C8 (external jmp); 0x040DE8\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#10-base-normal-2-mk", "animationInstallAddresses": [ "0x040B74" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-2-hk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E82A2", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040DD2\u21920x017588 (external jsr); 0x040DDA\u21920x0178C8 (external jmp); 0x040DE8\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#10-base-normal-2-hk", "animationInstallAddresses": [ "0x040BAC", "0x040BDC" ], "directionVariantGroups": 2 }, { "id": "10-base-normal-3-lp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E82A4", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D70\u21920x01485C (external jsr); 0x040D76\u21920x013E92 (external jsr); 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040D9E\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#10-base-normal-3-lp", "animationInstallAddresses": [ "0x040A8E" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-3-mp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E82A6", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D70\u21920x01485C (external jsr); 0x040D76\u21920x013E92 (external jsr); 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040D9E\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#10-base-normal-3-mp", "animationInstallAddresses": [ "0x040ABE" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-3-hp", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E82A8", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D70\u21920x01485C (external jsr); 0x040D76\u21920x013E92 (external jsr); 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040D9E\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#10-base-normal-3-hp", "animationInstallAddresses": [ "0x040AEE" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-3-lk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E82AA", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D70\u21920x01485C (external jsr); 0x040D76\u21920x013E92 (external jsr); 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040DD2\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#10-base-normal-3-lk", "animationInstallAddresses": [ "0x040B44" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-3-mk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E82AC", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D70\u21920x01485C (external jsr); 0x040D76\u21920x013E92 (external jsr); 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040DD2\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#10-base-normal-3-mk", "animationInstallAddresses": [ "0x040B74" ], "directionVariantGroups": 0 }, { "id": "10-base-normal-3-hk", "character": "Roll", "characterId": "0x10", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E82AE", "handlerAddress": "0x040756", "updateHandlerAddress": "0x040BEA", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x040756: unresolved shared/indirect closure: 0x040D70\u21920x01485C (external jsr); 0x040D76\u21920x013E92 (external jsr); 0x040D7C\u21920x013EFC (external jsr); 0x040D82\u21920x013E64 (external jsr); 0x040DD2\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "normal-route-receipts.json#10-base-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#10-base-normal-3-hk", "animationInstallAddresses": [ "0x040BAC", "0x040BDC" ], "directionVariantGroups": 2 }, { "id": "10-base-attack-00", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x00", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x041740", "handlerAddress": "0x0418D0", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "144 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0418D0: unresolved shared/indirect closure: 0x041A56\u21920x001DD8 (external jsr); 0x041A68\u21920x0177B6 (external jmp); 0x041A70\u21920x002490 (external jsr); 0x041A1E\u21920x001DD8 (external jsr); 0x041A40\u21920x07A5F6 (external jsr); 15 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-00", "commandSources": [ "0x0441DE", "0x0441EE" ], "localInstructionCount": 144, "externalFrontierCount": 20 }, { "id": "10-base-attack-02", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x02", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x041742", "handlerAddress": "0x041A8A", "selector": "B0=0x2A, E6=0x02", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x041A8A: unresolved shared/indirect closure: 0x041B7E\u21920x001DD8 (external jsr); 0x041B86\u21920x015EF4 (external jmp); 0x041B52\u21920x001DD8 (external jsr); 0x041B58\u21920x002490 (external jsr); 0x041B5E\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-02", "commandSources": [], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "10-base-attack-04", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DB \u2192 B + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x041744", "handlerAddress": "0x04175C", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "98 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04175C: unresolved shared/indirect closure: 0x0418B6\u21920x001DD8 (external jsr); 0x0418C8\u21920x0177B6 (external jmp); 0x041A70\u21920x002490 (external jsr); 0x041894\u21920x001DD8 (external jsr); 0x0418AA\u21920x0B0B8C (external jmp); 13 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-04", "commandSources": [ "0x0441F8", "0x044208" ], "localInstructionCount": 98, "externalFrontierCount": 18 }, { "id": "10-base-attack-06", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x06", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x041746", "handlerAddress": "0x041B8E", "selector": "B0=0x2A, E6=0x06", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x041B8E: unresolved shared/indirect closure: 0x041BAC\u21920x001DD8 (external jsr); 0x041BB4\u21920x016FBA (external jmp); 0x041BA6\u21920x0135E6 (external jsr). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-06", "commandSources": [], "localInstructionCount": 11, "externalFrontierCount": 3 }, { "id": "10-base-attack-08", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Roll Beat Plane", "command": "QCF + two kicks", "variant": "Stock character", "tableAddress": "0x041748", "handlerAddress": "0x041BBC", "selector": "B0=0x2A, E6=0x08", "status": "tested: fresh-button firing within fixed lifetime", "staticStatus": "named causal path reviewed", "runtimeStatus": "MAME 0.287: ten controlled trials, three identical baselines; no live move-state writes", "finding": "Accepted buttons enter firing phase +$0A=$0E and clear +$3A4. Shared allocator $0A05D6 creates type $84, subtype $04 firing objects: zero baseline, four with taps. First attacker-state combo 3\u219223; tail-inclusive peak before late control 3\u219223. Ten conditions, three identical baseline trace digests.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x0421A2", "0x0421AE" ], "gate": "$0421A2 held gate then $0421AE fresh attacks; fresh mask $0770, eligible flight/fire subphase.", "effect": "Accepted buttons enter firing phase +$0A=$0E and clear +$3A4. Shared allocator $0A05D6 creates type $84, subtype $04 firing objects: zero baseline, four with taps. First attacker-state combo 3\u219223; tail-inclusive peak before late control 3\u219223. Ten conditions, three identical baseline trace digests.", "limit": "Lifetime +$39E=180 is initialized at $041C96 and decremented at $0406EA. Every condition spends all 180 decrements; pressing does not refill it. The 36-hit claim is not established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-08", "commandSources": [], "localInstructionCount": 354, "externalFrontierCount": 37, "reviewSource": "roll_beat_plane/summary.json", "runtimeEvidence": { "case": "roll_beat_plane", "source": "roll_beat_plane/summary.json", "baselineDigestsMatch": true, "baselinePeak": 3, "tappedPeak": 23, "baselineTailPeak": 3, "tappedTailPeak": 23 } }, { "id": "10-base-attack-0a", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04174A", "handlerAddress": "0x0422DC", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "224 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x0425BA, 0x0425D8.", "uncertainty": "Handler 0x0422DC: unresolved shared/indirect closure: 0x042582\u21920x002490 (external jsr); 0x04259A\u21920x00A4B0 (external jsr); 0x0425A0\u21920x0177B6 (external jmp); 0x0425AA\u21920x001DD8 (external jmp); 0x042568\u21920x001DD8 (external jsr); 23 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x0425BA", "0x0425D8" ], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-0a", "commandSources": [], "localInstructionCount": 224, "externalFrontierCount": 28 }, { "id": "10-base-attack-0c", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x0C", "command": "D \u2192 DF \u2192 F + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x04174C", "handlerAddress": "0x042694", "selector": "B0=0x2A, E6=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "204 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x042694: unresolved shared/indirect closure: 0x0429C0\u21920x001DD8 (external jsr); 0x0429D2\u21920x0177B6 (external jmp); 0x041A70\u21920x002490 (external jsr); 0x0429A4\u21920x001DD8 (external jsr); 0x042942\u21920x017634 (external jsr); 38 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "4 command candidates survive character/style filter (4 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-0c", "commandSources": [ "0x04424A", "0x04424A", "0x04425A", "0x04425A" ], "localInstructionCount": 204, "externalFrontierCount": 43 }, { "id": "10-base-attack-0e", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Hyper Roll", "command": "QCF + two punches", "variant": "Stock character", "tableAddress": "0x04174E", "handlerAddress": "0x0429DA", "selector": "B0=0x2A, E6=0x0E", "status": "tested: projectile scheduler acceleration", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Normally subtracts one scheduler tick; a fresh attack subtracts four more. Earlier successful object allocations 12\u219220 despite unchanged connected-hit totals.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x042E5C" ], "gate": "Scheduler $042E56; attack helper $042E5C.", "effect": "Normally subtracts one scheduler tick; a fresh attack subtracts four more. Earlier successful object allocations 12\u219220 despite unchanged connected-hit totals.", "limit": "Finite emission schedule; distinct from the QCF+KK Beat Plane firing mechanism.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-0e", "commandSources": [], "localInstructionCount": 293, "externalFrontierCount": 40, "reviewSource": "../../roster.md" }, { "id": "10-base-attack-10", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x041750", "handlerAddress": "0x043182", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x043182: unresolved shared/indirect closure: 0x043182\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-10", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "10-base-attack-12", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x041752", "handlerAddress": "0x043188", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x043188: unresolved shared/indirect closure: 0x043188\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "10-base-attack-14", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x041754", "handlerAddress": "0x041A8A", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "38 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x041A8A: unresolved shared/indirect closure: 0x041B7E\u21920x001DD8 (external jsr); 0x041B86\u21920x015EF4 (external jmp); 0x041B52\u21920x001DD8 (external jsr); 0x041B58\u21920x002490 (external jsr); 0x041B5E\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-14", "commandSources": [], "localInstructionCount": 38, "externalFrontierCount": 7 }, { "id": "10-base-attack-16", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x041756", "handlerAddress": "0x04318E", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04318E: unresolved shared/indirect closure: 0x04318E\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-16", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "10-base-attack-18", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x18", "command": "D \u2192 DB \u2192 B + K", "variant": "Stock character", "tableAddress": "0x041758", "handlerAddress": "0x042F76", "selector": "B0=0x2A, E6=0x18", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x042F76: unresolved shared/indirect closure: 0x042FE2\u21920x001DD8 (external jsr); 0x042FEA\u21920x016FBA (external jmp); 0x042FC0\u21920x001DD8 (external jsr); 0x042FDA\u21920x0AF434 (external jmp); 0x042F8C\u21920x017634 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-18", "commandSources": [ "0x044280" ], "localInstructionCount": 29, "externalFrontierCount": 8 }, { "id": "10-base-attack-1a", "character": "Roll", "characterId": "0x10", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04175A", "handlerAddress": "0x042FF2", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "138 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x042FF2: unresolved shared/indirect closure: 0x043168\u21920x001DD8 (external jsr); 0x043174\u21920x00A4B0 (external jsr); 0x04317A\u21920x016FBA (external jmp); 0x043150\u21920x001DD8 (external jsr); 0x043162\u21920x0135E6 (external jmp); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-attack-1a", "commandSources": [], "localInstructionCount": 138, "externalFrontierCount": 17 }, { "id": "10-base-throw-00", "character": "Roll", "characterId": "0x10", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x043194; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x0431F8", "handlerAddress": "0x0431FC", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0431FC: unresolved shared/indirect closure: 0x043214\u21920x0BD606 (external jsr); 0x043224\u21920x0135E6 (external jsr); 0x04322A\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-throw-00", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "10-base-throw-02", "character": "Roll", "characterId": "0x10", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x043194; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x0431FA", "handlerAddress": "0x043230", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x043230: unresolved shared/indirect closure: 0x04328A\u21920x0BD606 (external jsr); 0x04329A\u21920x0135E6 (external jsr); 0x0432A0\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#10", "codeSource": "context-route-receipts.json#leaves/10-base-throw-02", "localInstructionCount": 29, "externalFrontierCount": 3 }, { "id": "12-base-normal-0-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82B0", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=0, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x04640E\u21920x001DD8 (external jsr); 0x046416\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-base-normal-0-lp", "animationInstallAddresses": [ "0x045D70" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-0-lp" }, { "id": "12-base-normal-0-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82B2", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=0, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x046424\u21920x001DD8 (external jsr); 0x04642C\u21920x016FBA (external jmp); 0x046434\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-0-mp", "localInstructionCount": 44, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-base-normal-0-mp", "animationInstallAddresses": [ "0x045DB6", "0x045DF4" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-base-normal-0-mp" }, { "id": "12-base-normal-0-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82B4", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=0, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464CA\u21920x001DD8 (external jsr); 0x0464D2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-base-normal-0-hp", "animationInstallAddresses": [ "0x045E4A" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-0-hp" }, { "id": "12-base-normal-0-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82B6", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=2, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x04651C\u21920x001DD8 (external jsr); 0x046524\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-base-normal-0-lk", "animationInstallAddresses": [ "0x045F44" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-0-lk" }, { "id": "12-base-normal-0-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82B8", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=2, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x046532\u21920x001DD8 (external jsr); 0x04653A\u21920x016FBA (external jmp); 0x046616\u21920x001DD8 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-0-mk", "localInstructionCount": 78, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#12-base-normal-0-mk", "animationInstallAddresses": [ "0x045F8A", "0x04600A" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-base-normal-0-mk" }, { "id": "12-base-normal-0-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82BA", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=2, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x046686\u21920x001DD8 (external jsr); 0x04668E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-0-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-base-normal-0-hk", "animationInstallAddresses": [ "0x046070" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-0-hk" }, { "id": "12-base-normal-1-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82BC", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=0, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464EE\u21920x001DD8 (external jsr); 0x0464F6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-base-normal-1-lp", "animationInstallAddresses": [ "0x045E8E" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-1-lp" }, { "id": "12-base-normal-1-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82BE", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=0, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464EE\u21920x001DD8 (external jsr); 0x0464F6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-base-normal-1-mp", "animationInstallAddresses": [ "0x045EBE" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-1-mp" }, { "id": "12-base-normal-1-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82C0", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=0, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464EE\u21920x001DD8 (external jsr); 0x0464F6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-base-normal-1-hp", "animationInstallAddresses": [ "0x045EF6" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-1-hp" }, { "id": "12-base-normal-1-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82C2", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=2, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0466AA\u21920x001DD8 (external jsr); 0x0466B2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-base-normal-1-lk", "animationInstallAddresses": [ "0x0460E4" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-1-lk" }, { "id": "12-base-normal-1-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82C4", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=2, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0466AA\u21920x001DD8 (external jsr); 0x0466B2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-base-normal-1-mk", "animationInstallAddresses": [ "0x046114" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-1-mk" }, { "id": "12-base-normal-1-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82C6", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=2, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0466AA\u21920x001DD8 (external jsr); 0x0466B2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-base-normal-1-hk", "animationInstallAddresses": [ "0x046144" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-1-hk" }, { "id": "12-base-normal-2-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82C8", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 0x0466F0\u21920x0178C8 (external jmp); 0x0466FE\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-base-normal-2-lp", "animationInstallAddresses": [ "0x0461BA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-2-lp" }, { "id": "12-base-normal-2-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82CA", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 0x0466F0\u21920x0178C8 (external jmp); 0x04670E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-2-mp", "localInstructionCount": 33, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-base-normal-2-mp", "animationInstallAddresses": [ "0x0461F0" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-2-mp" }, { "id": "12-base-normal-2-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82CC", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 0x0466F0\u21920x0178C8 (external jmp); 0x04674C\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-base-normal-2-hp", "animationInstallAddresses": [ "0x046254" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-2-hp" }, { "id": "12-base-normal-2-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82CE", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 0x046772\u21920x0178C8 (external jmp); 0x046780\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-base-normal-2-lk", "animationInstallAddresses": [ "0x0462AA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-2-lk" }, { "id": "12-base-normal-2-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82D0", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 0x046772\u21920x0178C8 (external jmp); 0x046780\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-base-normal-2-mk", "animationInstallAddresses": [ "0x0462EA", "0x04634A" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-base-normal-2-mk" }, { "id": "12-base-normal-2-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82D2", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 0x046772\u21920x0178C8 (external jmp); 0x046780\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-base-normal-2-hk", "animationInstallAddresses": [ "0x046382", "0x0463B2" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-base-normal-2-hk" }, { "id": "12-base-normal-3-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82D4", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-base-normal-3-lp", "animationInstallAddresses": [ "0x0461BA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-3-lp" }, { "id": "12-base-normal-3-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82D6", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-3-mp", "localInstructionCount": 35, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-base-normal-3-mp", "animationInstallAddresses": [ "0x0461F0" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-3-mp" }, { "id": "12-base-normal-3-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82D8", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-base-normal-3-hp", "animationInstallAddresses": [ "0x046254" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-3-hp" }, { "id": "12-base-normal-3-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82DA", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-base-normal-3-lk", "animationInstallAddresses": [ "0x0462AA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-base-normal-3-lk" }, { "id": "12-base-normal-3-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82DC", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-base-normal-3-mk", "animationInstallAddresses": [ "0x0462EA", "0x04634A" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-base-normal-3-mk" }, { "id": "12-base-normal-3-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Ryu style +0x385=0", "tableAddress": "0x0E82DE", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-base-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-base-normal-3-hk", "animationInstallAddresses": [ "0x046382", "0x0463B2" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-base-normal-3-hk" }, { "id": "12-base-attack-00", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x00", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047016", "handlerAddress": "0x04704C", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "42 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04704C: unresolved shared/indirect closure: 0x0470AE\u21920x001DD8 (external jsr); 0x0470B8\u21920x016FBA (external jmp); 0x0470E4\u21920x0D5A7E (external jsr); 0x0470EE\u21920x0D5A7E (external jsr); 0x0470F6\u21920x093210 (external jmp); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-00", "commandSources": [ "0x0498FE", "0x049B16" ], "localInstructionCount": 42, "externalFrontierCount": 9 }, { "id": "12-base-attack-02", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x02", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047018", "handlerAddress": "0x0470FE", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "3 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0470FE: unresolved shared/indirect closure: 0x047106\u2192indirect (indirect jmp unresolved). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-02", "commandSources": [ "0x049918", "0x049B20" ], "localInstructionCount": 3, "externalFrontierCount": 1 }, { "id": "12-base-attack-04", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04701A", "handlerAddress": "0x0472E6", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "109 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0472E6: unresolved shared/indirect closure: 0x04744C\u21920x001DD8 (external jsr); 0x047456\u21920x016FBA (external jmp); 0x047414\u21920x002490 (external jsr); 0x04743A\u21920x0135E6 (external jsr); 0x047440\u21920x0B62B6 (external jmp); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-04", "commandSources": [ "0x049942", "0x049B2A" ], "localInstructionCount": 109, "externalFrontierCount": 16 }, { "id": "12-base-attack-06", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x06", "command": "D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04701C", "handlerAddress": "0x04766C", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "91 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04766C: unresolved shared/indirect closure: 0x047762\u21920x001DD8 (external jsr); 0x04777C\u21920x016FBA (external jmp); 0x047724\u21920x002490 (external jsr); 0x047734\u21920x001DD8 (external jsr); 0x04773C\u21920x0177B6 (external jmp); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-06", "commandSources": [ "0x04995C", "0x049B34" ], "localInstructionCount": 91, "externalFrontierCount": 12 }, { "id": "12-base-attack-08", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x08", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04701E", "handlerAddress": "0x0477C6", "selector": "B0=0x2A, E6=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "67 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0477C6: unresolved shared/indirect closure: 0x04789E\u21920x001DD8 (external jsr); 0x0478B0\u21920x0177B6 (external jmp); 0x0478B8\u21920x002490 (external jsr); 0x04784C\u21920x001DD8 (external jsr); 0x04787C\u21920x0D5A7E (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-08", "commandSources": [ "0x049976", "0x049B3E" ], "localInstructionCount": 67, "externalFrontierCount": 9 }, { "id": "12-base-attack-0a", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Shinkuu Hadoken", "command": "QCF + two punches", "variant": "Ryu style +0x385=0", "tableAddress": "0x047020", "handlerAddress": "0x0478D2", "selector": "B0=0x2A, E6=0x0A", "status": "tested: finite timer reimbursement", "staticStatus": "named causal path reviewed", "runtimeStatus": "MAME and FBNeo repeated-baseline fixtures", "finding": "Fresh attack edge spends one credit at $047ABE and skips timer decrement $047AC4. Paired MAME and independent FBNeo fixtures corroborate 9\u219210 connected hits; other spacing can change contacts.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x047AB6" ], "gate": "Human +$382=12 at $0478FE\u2013$047908; active timer=64 at $047926. $047AB6 calls $01A3CC.", "effect": "Fresh attack edge spends one credit at $047ABE and skips timer decrement $047AC4. Paired MAME and independent FBNeo fixtures corroborate 9\u219210 connected hits; other spacing can change contacts.", "limit": "Twelve human credits reimburse twelve active updates at most on this setup path, not twelve bonus hits.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-0a", "commandSources": [], "localInstructionCount": 136, "externalFrontierCount": 19, "reviewSource": "../core/result-summary.json" }, { "id": "12-base-attack-0c", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Shinkuu Tatsumaki Senpukyaku", "command": "QCB + two kicks", "variant": "Ryu style +0x385=0", "tableAddress": "0x047022", "handlerAddress": "0x047B1A", "selector": "B0=0x2A, E6=0x0C", "status": "tested: fixed native loop", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Earlier tested button conditions stayed at 18 contacts with no press reimbursement in this loop.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "$047C38 initializes +$4E=8; $047C62 consumes the loop allowance.", "effect": "Earlier tested button conditions stayed at 18 contacts with no press reimbursement in this loop.", "limit": "Eight native loop units, not eight connected hits.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-0c", "commandSources": [], "localInstructionCount": 135, "externalFrontierCount": 22, "reviewSource": "../../ryu.md" }, { "id": "12-base-attack-0e", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047024", "handlerAddress": "0x047D5E", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047D5E: unresolved shared/indirect closure: 0x047E04\u21920x001DD8 (external jsr); 0x047E0C\u21920x015EF4 (external jmp); 0x047DD8\u21920x001DD8 (external jsr); 0x047DDE\u21920x002490 (external jsr); 0x047DE4\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-0e", "commandSources": [], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "12-base-attack-10", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047026", "handlerAddress": "0x047E14", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E14: unresolved shared/indirect closure: 0x047E32\u21920x001DD8 (external jsr); 0x047E3A\u21920x016FBA (external jmp); 0x047E2C\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-10", "commandSources": [], "localInstructionCount": 11, "externalFrontierCount": 3 }, { "id": "12-base-attack-12", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047028", "handlerAddress": "0x047E42", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E42: unresolved shared/indirect closure: 0x047E42\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "12-base-attack-14", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04702A", "handlerAddress": "0x047E48", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E48: unresolved shared/indirect closure: 0x047E48\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "12-base-attack-16", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Shin Shoryuken", "command": "DP + two punches", "variant": "Ryu style +0x385=0", "tableAddress": "0x04702C", "handlerAddress": "0x047E4E", "selector": "B0=0x2A, E6=0x16", "status": "tested: no extra contacts in examined fixture", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Earlier five input conditions each produced three contacts; this is separate from Ken-style Shinryuken.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Base style +$385=0; E6=$16.", "effect": "Earlier five input conditions each produced three contacts; this is separate from Ken-style Shinryuken.", "limit": "No universal maximum established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-16", "commandSources": [], "localInstructionCount": 156, "externalFrontierCount": 21, "reviewSource": "../../ryu.md" }, { "id": "12-base-attack-18", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04702E", "handlerAddress": "0x048090", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "40 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048090: unresolved shared/indirect closure: 0x0470AE\u21920x001DD8 (external jsr); 0x0470B8\u21920x016FBA (external jmp); 0x0470E4\u21920x0D5A7E (external jsr); 0x0470EE\u21920x0D5A7E (external jsr); 0x0470F6\u21920x093210 (external jmp); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-18", "commandSources": [], "localInstructionCount": 40, "externalFrontierCount": 8 }, { "id": "12-base-attack-1a", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Ryu style change", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047030", "handlerAddress": "0x0480E8", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "35 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0480E8: unresolved shared/indirect closure: 0x04817E\u21920x001DD8 (external jsr); 0x048186\u21920x016FBA (external jmp); 0x048120\u21920x001DD8 (external jsr); 0x048140\u21920x0D5A7E (external jsr); 0x048150\u21920x0148FE (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Native style transition to +$385=0; same-style reachability is governed by the recorded command filter.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-1a", "commandSources": [], "localInstructionCount": 35, "externalFrontierCount": 9 }, { "id": "12-base-attack-1c", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047032", "handlerAddress": "0x0482F2", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "128 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x048428.", "uncertainty": "Handler 0x0482F2: unresolved shared/indirect closure: 0x0484A2\u21920x001DD8 (external jsr); 0x0484AA\u21920x016FBA (external jmp); 0x048456\u21920x001DD8 (external jsr); 0x04845C\u21920x0024B2 (external jsr); 0x04847E\u21920x0B62B6 (external jsr); 14 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x048428" ], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-1c", "commandSources": [], "localInstructionCount": 128, "externalFrontierCount": 19 }, { "id": "12-base-attack-1e", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x1E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047034", "handlerAddress": "0x048512", "selector": "B0=0x2A, E6=0x1E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "60 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048512: unresolved shared/indirect closure: 0x0485C6\u21920x001DD8 (external jsr); 0x0485CC\u21920x002490 (external jsr); 0x0485EE\u21920x016FBA (external jmp); 0x0485F4\u21920x0D7526 (external jsr); 0x048610\u21920x0187CA (external jmp); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1E; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-1e", "commandSources": [], "localInstructionCount": 60, "externalFrontierCount": 11 }, { "id": "12-base-attack-20", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x20", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047036", "handlerAddress": "0x048618", "selector": "B0=0x2A, E6=0x20", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "86 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048618: unresolved shared/indirect closure: 0x04873E\u21920x001DD8 (external jsr); 0x04874A\u21920x0177B6 (external jmp); 0x048752\u21920x002490 (external jsr); 0x04876E\u21920x0B62B6 (external jmp); 0x0486FC\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x20; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-20", "commandSources": [], "localInstructionCount": 86, "externalFrontierCount": 15 }, { "id": "12-base-attack-22", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x22", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047038", "handlerAddress": "0x048776", "selector": "B0=0x2A, E6=0x22", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "155 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048776: unresolved shared/indirect closure: 0x0489A4\u21920x001DD8 (external jsr); 0x0489BE\u21920x016FBA (external jmp); 0x048990\u21920x001DD8 (external jmp); 0x04899E\u21920x0B62B6 (external jsr); 0x0489CA\u21920x0024B2 (external jsr); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x22; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-22", "commandSources": [], "localInstructionCount": 155, "externalFrontierCount": 17 }, { "id": "12-base-attack-24", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x24", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04703A", "handlerAddress": "0x0489E2", "selector": "B0=0x2A, E6=0x24", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "75 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0489E2: unresolved shared/indirect closure: 0x048AE6\u21920x001DD8 (external jsr); 0x048AEE\u21920x016FBA (external jmp); 0x048AA0\u21920x017634 (external jsr); 0x048AB4\u21920x002490 (external jsr); 0x048AD2\u21920x001DD8 (external jmp); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (4 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x24; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-24", "commandSources": [], "localInstructionCount": 75, "externalFrontierCount": 13 }, { "id": "12-base-attack-26", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x26", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04703C", "handlerAddress": "0x048AF6", "selector": "B0=0x2A, E6=0x26", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "74 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048AF6: unresolved shared/indirect closure: 0x048BF6\u21920x001DD8 (external jsr); 0x048BFE\u21920x016FBA (external jmp); 0x048BB8\u21920x017634 (external jsr); 0x048BC8\u21920x002490 (external jsr); 0x048BE2\u21920x001DD8 (external jmp); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (3 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x26; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-26", "commandSources": [], "localInstructionCount": 74, "externalFrontierCount": 13 }, { "id": "12-base-attack-28", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x28", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04703E", "handlerAddress": "0x048C06", "selector": "B0=0x2A, E6=0x28", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "80 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048C06: unresolved shared/indirect closure: 0x048CD6\u21920x001DD8 (external jsr); 0x048CF0\u21920x016FBA (external jmp); 0x048C92\u21920x001DD8 (external jsr); 0x048C9E\u21920x002490 (external jsr); 0x048CC8\u21920x0135E6 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x28; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-28", "commandSources": [], "localInstructionCount": 80, "externalFrontierCount": 9 }, { "id": "12-base-attack-2a", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x2A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047040", "handlerAddress": "0x048CF8", "selector": "B0=0x2A, E6=0x2A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048CF8: unresolved shared/indirect closure: 0x048CF8\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x2A; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-2a", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "12-base-attack-2c", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x2C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047042", "handlerAddress": "0x047D5E", "selector": "B0=0x2A, E6=0x2C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047D5E: unresolved shared/indirect closure: 0x047E04\u21920x001DD8 (external jsr); 0x047E0C\u21920x015EF4 (external jmp); 0x047DD8\u21920x001DD8 (external jsr); 0x047DDE\u21920x002490 (external jsr); 0x047DE4\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x2C; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-2c", "commandSources": [], "localInstructionCount": 41, "externalFrontierCount": 7 }, { "id": "12-base-attack-2e", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x2E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047044", "handlerAddress": "0x048CFE", "selector": "B0=0x2A, E6=0x2E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "74 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048CFE: unresolved shared/indirect closure: 0x048E18\u21920x001DD8 (external jsr); 0x048E34\u21920x016FBA (external jmp); 0x048DDE\u21920x0024B2 (external jsr); 0x048DEE\u21920x001DD8 (external jmp); 0x048E0C\u21920x0135E6 (external jsr); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x2E; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-2e", "commandSources": [], "localInstructionCount": 74, "externalFrontierCount": 12 }, { "id": "12-base-attack-30", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Ken style change", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047046", "handlerAddress": "0x04818E", "selector": "B0=0x2A, E6=0x30", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "40 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04818E: unresolved shared/indirect closure: 0x048234\u21920x001DD8 (external jsr); 0x04823C\u21920x016FBA (external jmp); 0x0481C6\u21920x001DD8 (external jsr); 0x0481E6\u21920x0D5A7E (external jsr); 0x0481F6\u21920x0148FE (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x30; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Native style transition to +$385=2; same-style reachability is governed by the recorded command filter.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-30", "commandSources": [], "localInstructionCount": 40, "externalFrontierCount": 10 }, { "id": "12-base-attack-32", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Akuma style change", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x047048", "handlerAddress": "0x048244", "selector": "B0=0x2A, E6=0x32", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "37 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048244: unresolved shared/indirect closure: 0x0482E2\u21920x001DD8 (external jsr); 0x0482EA\u21920x016FBA (external jmp); 0x04827C\u21920x001DD8 (external jsr); 0x04829C\u21920x0D5A7E (external jsr); 0x0482AC\u21920x0148FE (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x32; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "Native style transition to +$385=4; same-style reachability is governed by the recorded command filter.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-32", "commandSources": [], "localInstructionCount": 37, "externalFrontierCount": 10 }, { "id": "12-base-attack-34", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x34", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04704A", "handlerAddress": "0x048E3C", "selector": "B0=0x2A, E6=0x34", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "153 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048E3C: unresolved shared/indirect closure: 0x04905C\u21920x001DD8 (external jsr); 0x049076\u21920x016FBA (external jmp); 0x04903A\u21920x001DD8 (external jsr); 0x049054\u21920x016FBA (external jmp); 0x049004\u21920x001DD8 (external jsr); 17 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x34; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-attack-34", "commandSources": [], "localInstructionCount": 153, "externalFrontierCount": 22 }, { "id": "12-base-throw-00", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x049188", "handlerAddress": "0x049198", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x049198: unresolved shared/indirect closure: 0x0491B6\u21920x0BD606 (external jsr); 0x0491C6\u21920x0135E6 (external jsr); 0x0491CC\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-throw-00", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-base-throw-02", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04918A", "handlerAddress": "0x0491D2", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0491D2: unresolved shared/indirect closure: 0x0491EA\u21920x0BD606 (external jsr); 0x049200\u21920x0135E6 (external jsr); 0x049206\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-throw-02", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-base-throw-04", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04918C", "handlerAddress": "0x04920C", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04920C: unresolved shared/indirect closure: 0x049224\u21920x0BD606 (external jsr); 0x049234\u21920x0135E6 (external jsr); 0x04923A\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-throw-04", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "12-base-throw-06", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x04918E", "handlerAddress": "0x049240", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x049240: unresolved shared/indirect closure: 0x04924E\u21920x0BD606 (external jsr); 0x049270\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-throw-06", "localInstructionCount": 12, "externalFrontierCount": 2 }, { "id": "12-base-throw-08", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x049190", "handlerAddress": "0x049276", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x049276: unresolved shared/indirect closure: 0x04928E\u21920x0BD606 (external jsr); 0x0492A4\u21920x0135E6 (external jsr); 0x0492AA\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-throw-08", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-base-throw-0a", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x0A", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x049192", "handlerAddress": "0x0492B0", "selector": "E4=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0492B0: unresolved shared/indirect closure: 0x0492C8\u21920x0BD606 (external jsr); 0x0492D8\u21920x0135E6 (external jsr); 0x0492DE\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0A; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-throw-0a", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "12-base-throw-0c", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x0C", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x049194", "handlerAddress": "0x0492E4", "selector": "E4=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0492E4: unresolved shared/indirect closure: 0x0492FC\u21920x0BD606 (external jsr); 0x049312\u21920x0135E6 (external jsr); 0x049318\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0C; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-throw-0c", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-base-throw-0e", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x0E", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ryu style +0x385=0", "tableAddress": "0x049196", "handlerAddress": "0x04931E", "selector": "E4=0x0E", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04931E: unresolved shared/indirect closure: 0x049322\u21920x0BD606 (external jsr); 0x049332\u21920x0135E6 (external jsr); 0x049338\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0E; Ryu style +0x385=0. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-base-throw-0e", "localInstructionCount": 8, "externalFrontierCount": 3 }, { "id": "12-ken-normal-0-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82B0", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=0, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x04640E\u21920x001DD8 (external jsr); 0x046416\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-0-lp", "animationInstallAddresses": [ "0x045D70" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-0-lp" }, { "id": "12-ken-normal-0-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82B2", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=0, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x046424\u21920x001DD8 (external jsr); 0x04642C\u21920x016FBA (external jmp); 0x046434\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-0-mp", "localInstructionCount": 44, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-0-mp", "animationInstallAddresses": [ "0x045DB6" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-0-mp" }, { "id": "12-ken-normal-0-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82B4", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=0, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464CA\u21920x001DD8 (external jsr); 0x0464D2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-0-hp", "animationInstallAddresses": [ "0x045E4A" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-0-hp" }, { "id": "12-ken-normal-0-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82B6", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=2, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x04651C\u21920x001DD8 (external jsr); 0x046524\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-0-lk", "animationInstallAddresses": [ "0x045F44" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-0-lk" }, { "id": "12-ken-normal-0-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82B8", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=2, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x046532\u21920x001DD8 (external jsr); 0x04653A\u21920x016FBA (external jmp); 0x04663A\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-0-mk", "localInstructionCount": 59, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-0-mk", "animationInstallAddresses": [ "0x045FBA", "0x046038" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-ken-normal-0-mk" }, { "id": "12-ken-normal-0-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82BA", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=2, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x046686\u21920x001DD8 (external jsr); 0x04668E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-0-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-0-hk", "animationInstallAddresses": [ "0x0460A0" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-0-hk" }, { "id": "12-ken-normal-1-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82BC", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=0, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464EE\u21920x001DD8 (external jsr); 0x0464F6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-1-lp", "animationInstallAddresses": [ "0x045E8E" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-1-lp" }, { "id": "12-ken-normal-1-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82BE", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=0, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464EE\u21920x001DD8 (external jsr); 0x0464F6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-1-mp", "animationInstallAddresses": [ "0x045EBE" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-1-mp" }, { "id": "12-ken-normal-1-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82C0", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=0, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464EE\u21920x001DD8 (external jsr); 0x0464F6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-1-hp", "animationInstallAddresses": [ "0x045EF6" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-1-hp" }, { "id": "12-ken-normal-1-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82C2", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=2, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0466AA\u21920x001DD8 (external jsr); 0x0466B2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-1-lk", "animationInstallAddresses": [ "0x0460E4" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-1-lk" }, { "id": "12-ken-normal-1-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82C4", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=2, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0466AA\u21920x001DD8 (external jsr); 0x0466B2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-1-mk", "animationInstallAddresses": [ "0x046114" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-1-mk" }, { "id": "12-ken-normal-1-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82C6", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=2, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0466AA\u21920x001DD8 (external jsr); 0x0466B2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-1-hk", "animationInstallAddresses": [ "0x046144" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-1-hk" }, { "id": "12-ken-normal-2-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82C8", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 0x0466F0\u21920x0178C8 (external jmp); 0x0466FE\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-2-lp", "animationInstallAddresses": [ "0x0461BA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-2-lp" }, { "id": "12-ken-normal-2-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82CA", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 0x0466F0\u21920x0178C8 (external jmp); 0x04670E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-2-mp", "localInstructionCount": 33, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-2-mp", "animationInstallAddresses": [ "0x0461F0" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-2-mp" }, { "id": "12-ken-normal-2-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82CC", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 0x0466F0\u21920x0178C8 (external jmp); 0x04674C\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-2-hp", "animationInstallAddresses": [ "0x046254" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-2-hp" }, { "id": "12-ken-normal-2-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82CE", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 0x046772\u21920x0178C8 (external jmp); 0x046780\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-2-lk", "animationInstallAddresses": [ "0x0462AA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-2-lk" }, { "id": "12-ken-normal-2-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82D0", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 0x046772\u21920x0178C8 (external jmp); 0x046780\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-2-mk", "animationInstallAddresses": [ "0x04631A", "0x04634A" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-ken-normal-2-mk" }, { "id": "12-ken-normal-2-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82D2", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 0x046772\u21920x0178C8 (external jmp); 0x046780\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-2-hk", "animationInstallAddresses": [ "0x046382", "0x0463B2" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-ken-normal-2-hk" }, { "id": "12-ken-normal-3-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82D4", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-3-lp", "animationInstallAddresses": [ "0x0461BA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-3-lp" }, { "id": "12-ken-normal-3-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82D6", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-3-mp", "localInstructionCount": 35, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-3-mp", "animationInstallAddresses": [ "0x0461F0" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-3-mp" }, { "id": "12-ken-normal-3-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82D8", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-3-hp", "animationInstallAddresses": [ "0x046254" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-3-hp" }, { "id": "12-ken-normal-3-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82DA", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-3-lk", "animationInstallAddresses": [ "0x0462AA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-ken-normal-3-lk" }, { "id": "12-ken-normal-3-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82DC", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-3-mk", "animationInstallAddresses": [ "0x04631A", "0x04634A" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-ken-normal-3-mk" }, { "id": "12-ken-normal-3-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Ken style +0x385=2", "tableAddress": "0x0E82DE", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-ken-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-ken-normal-3-hk", "animationInstallAddresses": [ "0x046382", "0x0463B2" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-ken-normal-3-hk" }, { "id": "12-ken-attack-00", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x00", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047016", "handlerAddress": "0x04704C", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "42 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04704C: unresolved shared/indirect closure: 0x0470AE\u21920x001DD8 (external jsr); 0x0470B8\u21920x016FBA (external jmp); 0x0470E4\u21920x0D5A7E (external jsr); 0x0470EE\u21920x0D5A7E (external jsr); 0x0470F6\u21920x093210 (external jmp); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-00", "commandSources": [ "0x0498FE", "0x049B16" ], "localInstructionCount": 42, "externalFrontierCount": 9 }, { "id": "12-ken-attack-02", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x02", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047018", "handlerAddress": "0x0470FE", "selector": "B0=0x2A, E6=0x02", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "3 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0470FE: unresolved shared/indirect closure: 0x047106\u2192indirect (indirect jmp unresolved). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-02", "commandSources": [], "localInstructionCount": 3, "externalFrontierCount": 1 }, { "id": "12-ken-attack-04", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04701A", "handlerAddress": "0x0472E6", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "116 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0472E6: unresolved shared/indirect closure: 0x04762A\u21920x001DD8 (external jsr); 0x047632\u21920x016FBA (external jmp); 0x0475F2\u21920x002490 (external jsr); 0x047618\u21920x0135E6 (external jsr); 0x04761E\u21920x0B62B6 (external jmp); 13 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-04", "commandSources": [ "0x049942", "0x049B2A" ], "localInstructionCount": 116, "externalFrontierCount": 18 }, { "id": "12-ken-attack-06", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x06", "command": "D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04701C", "handlerAddress": "0x04766C", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "91 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04766C: unresolved shared/indirect closure: 0x047762\u21920x001DD8 (external jsr); 0x04777C\u21920x016FBA (external jmp); 0x047724\u21920x002490 (external jsr); 0x047734\u21920x001DD8 (external jsr); 0x04773C\u21920x0177B6 (external jmp); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-06", "commandSources": [ "0x04995C", "0x049B34" ], "localInstructionCount": 91, "externalFrontierCount": 12 }, { "id": "12-ken-attack-08", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x08", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04701E", "handlerAddress": "0x0477C6", "selector": "B0=0x2A, E6=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "67 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0477C6: unresolved shared/indirect closure: 0x04789E\u21920x001DD8 (external jsr); 0x0478B0\u21920x0177B6 (external jmp); 0x0478B8\u21920x002490 (external jsr); 0x04784C\u21920x001DD8 (external jsr); 0x04787C\u21920x0D5A7E (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-08", "commandSources": [ "0x049976", "0x049B3E" ], "localInstructionCount": 67, "externalFrontierCount": 9 }, { "id": "12-ken-attack-0a", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047020", "handlerAddress": "0x0478D2", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "137 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x047AB6.", "uncertainty": "Handler 0x0478D2: unresolved shared/indirect closure: 0x047AEE\u21920x001DD8 (external jsr); 0x047B02\u21920x016FBA (external jmp); 0x047B12\u21920x0177B6 (external jmp); 0x047AB6\u21920x01A3CC (external jsr); 0x047AE2\u21920x001DD8 (external jmp); 14 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x047AB6" ], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-0a", "commandSources": [], "localInstructionCount": 137, "externalFrontierCount": 19 }, { "id": "12-ken-attack-0c", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047022", "handlerAddress": "0x047B1A", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "135 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047B1A: unresolved shared/indirect closure: 0x047CF4\u21920x001DD8 (external jsr); 0x047D00\u21920x016FBA (external jmp); 0x047CBC\u21920x002490 (external jsr); 0x047CE2\u21920x0135E6 (external jsr); 0x047CE8\u21920x0B62B6 (external jmp); 17 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-0c", "commandSources": [], "localInstructionCount": 135, "externalFrontierCount": 22 }, { "id": "12-ken-attack-0e", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047024", "handlerAddress": "0x047D5E", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047D5E: unresolved shared/indirect closure: 0x047E04\u21920x001DD8 (external jsr); 0x047E0C\u21920x015EF4 (external jmp); 0x047DD8\u21920x001DD8 (external jsr); 0x047DDE\u21920x002490 (external jsr); 0x047DE4\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-0e", "commandSources": [], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "12-ken-attack-10", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047026", "handlerAddress": "0x047E14", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E14: unresolved shared/indirect closure: 0x047E32\u21920x001DD8 (external jsr); 0x047E3A\u21920x016FBA (external jmp); 0x047E2C\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-10", "commandSources": [], "localInstructionCount": 11, "externalFrontierCount": 3 }, { "id": "12-ken-attack-12", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047028", "handlerAddress": "0x047E42", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E42: unresolved shared/indirect closure: 0x047E42\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "12-ken-attack-14", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04702A", "handlerAddress": "0x047E48", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E48: unresolved shared/indirect closure: 0x047E48\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "12-ken-attack-16", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04702C", "handlerAddress": "0x047E4E", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "156 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E4E: unresolved shared/indirect closure: 0x048080\u21920x001DD8 (external jsr); 0x048088\u21920x016FBA (external jmp); 0x04803E\u21920x001DD8 (external jsr); 0x048044\u21920x002490 (external jsr); 0x048072\u21920x0135E6 (external jsr); 16 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-16", "commandSources": [], "localInstructionCount": 156, "externalFrontierCount": 21 }, { "id": "12-ken-attack-18", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04702E", "handlerAddress": "0x048090", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "40 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048090: unresolved shared/indirect closure: 0x0470AE\u21920x001DD8 (external jsr); 0x0470B8\u21920x016FBA (external jmp); 0x0470E4\u21920x0D5A7E (external jsr); 0x0470EE\u21920x0D5A7E (external jsr); 0x0470F6\u21920x093210 (external jmp); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-18", "commandSources": [], "localInstructionCount": 40, "externalFrontierCount": 8 }, { "id": "12-ken-attack-1a", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Ryu style change", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047030", "handlerAddress": "0x0480E8", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "35 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0480E8: unresolved shared/indirect closure: 0x04817E\u21920x001DD8 (external jsr); 0x048186\u21920x016FBA (external jmp); 0x048120\u21920x001DD8 (external jsr); 0x048140\u21920x0D5A7E (external jsr); 0x048150\u21920x0148FE (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Native style transition to +$385=0; same-style reachability is governed by the recorded command filter.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-1a", "commandSources": [], "localInstructionCount": 35, "externalFrontierCount": 9 }, { "id": "12-ken-attack-1c", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Shinryuken", "command": "Ken style: QCF + two kicks", "variant": "Ken style +0x385=2", "tableAddress": "0x047032", "handlerAddress": "0x0482F2", "selector": "B0=0x2A, E6=0x1C", "status": "tested: animation acceleration", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Accepted edges write animation delay +$3E=1 at $048432; $048438 advances animation. Earlier fixture 12\u219215.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x048428" ], "gate": "$048428 reads D4; $04842C masks $0770.", "effect": "Accepted edges write animation delay +$3E=1 at $048432; $048438 advances animation. Earlier fixture 12\u219215.", "limit": "Ascent and state transitions bound opportunities; no universal hit cap.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-1c", "commandSources": [], "localInstructionCount": 128, "externalFrontierCount": 19, "reviewSource": "../../ryu.md" }, { "id": "12-ken-attack-1e", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x1E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047034", "handlerAddress": "0x048512", "selector": "B0=0x2A, E6=0x1E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "60 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048512: unresolved shared/indirect closure: 0x0485C6\u21920x001DD8 (external jsr); 0x0485CC\u21920x002490 (external jsr); 0x0485EE\u21920x016FBA (external jmp); 0x0485F4\u21920x0D7526 (external jsr); 0x048610\u21920x0187CA (external jmp); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1E; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-1e", "commandSources": [], "localInstructionCount": 60, "externalFrontierCount": 11 }, { "id": "12-ken-attack-20", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x20", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047036", "handlerAddress": "0x048618", "selector": "B0=0x2A, E6=0x20", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "86 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048618: unresolved shared/indirect closure: 0x04873E\u21920x001DD8 (external jsr); 0x04874A\u21920x0177B6 (external jmp); 0x048752\u21920x002490 (external jsr); 0x04876E\u21920x0B62B6 (external jmp); 0x0486FC\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x20; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-20", "commandSources": [], "localInstructionCount": 86, "externalFrontierCount": 15 }, { "id": "12-ken-attack-22", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x22", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047038", "handlerAddress": "0x048776", "selector": "B0=0x2A, E6=0x22", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "155 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048776: unresolved shared/indirect closure: 0x0489A4\u21920x001DD8 (external jsr); 0x0489BE\u21920x016FBA (external jmp); 0x048990\u21920x001DD8 (external jmp); 0x04899E\u21920x0B62B6 (external jsr); 0x0489CA\u21920x0024B2 (external jsr); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x22; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-22", "commandSources": [], "localInstructionCount": 155, "externalFrontierCount": 17 }, { "id": "12-ken-attack-24", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x24", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04703A", "handlerAddress": "0x0489E2", "selector": "B0=0x2A, E6=0x24", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "75 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0489E2: unresolved shared/indirect closure: 0x048AE6\u21920x001DD8 (external jsr); 0x048AEE\u21920x016FBA (external jmp); 0x048AA0\u21920x017634 (external jsr); 0x048AB4\u21920x002490 (external jsr); 0x048AD2\u21920x001DD8 (external jmp); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (4 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x24; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-24", "commandSources": [], "localInstructionCount": 75, "externalFrontierCount": 13 }, { "id": "12-ken-attack-26", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x26", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04703C", "handlerAddress": "0x048AF6", "selector": "B0=0x2A, E6=0x26", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "74 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048AF6: unresolved shared/indirect closure: 0x048BF6\u21920x001DD8 (external jsr); 0x048BFE\u21920x016FBA (external jmp); 0x048BB8\u21920x017634 (external jsr); 0x048BC8\u21920x002490 (external jsr); 0x048BE2\u21920x001DD8 (external jmp); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (3 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x26; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-26", "commandSources": [], "localInstructionCount": 74, "externalFrontierCount": 13 }, { "id": "12-ken-attack-28", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x28", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04703E", "handlerAddress": "0x048C06", "selector": "B0=0x2A, E6=0x28", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "80 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048C06: unresolved shared/indirect closure: 0x048CD6\u21920x001DD8 (external jsr); 0x048CF0\u21920x016FBA (external jmp); 0x048C92\u21920x001DD8 (external jsr); 0x048C9E\u21920x002490 (external jsr); 0x048CC8\u21920x0135E6 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x28; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-28", "commandSources": [], "localInstructionCount": 80, "externalFrontierCount": 9 }, { "id": "12-ken-attack-2a", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x2A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047040", "handlerAddress": "0x048CF8", "selector": "B0=0x2A, E6=0x2A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048CF8: unresolved shared/indirect closure: 0x048CF8\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x2A; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-2a", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "12-ken-attack-2c", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x2C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047042", "handlerAddress": "0x047D5E", "selector": "B0=0x2A, E6=0x2C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047D5E: unresolved shared/indirect closure: 0x047E04\u21920x001DD8 (external jsr); 0x047E0C\u21920x015EF4 (external jmp); 0x047DD8\u21920x001DD8 (external jsr); 0x047DDE\u21920x002490 (external jsr); 0x047DE4\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x2C; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-2c", "commandSources": [], "localInstructionCount": 41, "externalFrontierCount": 7 }, { "id": "12-ken-attack-2e", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x2E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047044", "handlerAddress": "0x048CFE", "selector": "B0=0x2A, E6=0x2E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "74 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048CFE: unresolved shared/indirect closure: 0x048E18\u21920x001DD8 (external jsr); 0x048E34\u21920x016FBA (external jmp); 0x048DDE\u21920x0024B2 (external jsr); 0x048DEE\u21920x001DD8 (external jmp); 0x048E0C\u21920x0135E6 (external jsr); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x2E; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-2e", "commandSources": [], "localInstructionCount": 74, "externalFrontierCount": 12 }, { "id": "12-ken-attack-30", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Ken style change", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047046", "handlerAddress": "0x04818E", "selector": "B0=0x2A, E6=0x30", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "40 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04818E: unresolved shared/indirect closure: 0x048234\u21920x001DD8 (external jsr); 0x04823C\u21920x016FBA (external jmp); 0x0481C6\u21920x001DD8 (external jsr); 0x0481E6\u21920x0D5A7E (external jsr); 0x0481F6\u21920x0148FE (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x30; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Native style transition to +$385=2; same-style reachability is governed by the recorded command filter.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-30", "commandSources": [], "localInstructionCount": 40, "externalFrontierCount": 10 }, { "id": "12-ken-attack-32", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Akuma style change", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x047048", "handlerAddress": "0x048244", "selector": "B0=0x2A, E6=0x32", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "37 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048244: unresolved shared/indirect closure: 0x0482E2\u21920x001DD8 (external jsr); 0x0482EA\u21920x016FBA (external jmp); 0x04827C\u21920x001DD8 (external jsr); 0x04829C\u21920x0D5A7E (external jsr); 0x0482AC\u21920x0148FE (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x32; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "Native style transition to +$385=4; same-style reachability is governed by the recorded command filter.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-32", "commandSources": [], "localInstructionCount": 37, "externalFrontierCount": 10 }, { "id": "12-ken-attack-34", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x34", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04704A", "handlerAddress": "0x048E3C", "selector": "B0=0x2A, E6=0x34", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "153 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048E3C: unresolved shared/indirect closure: 0x04905C\u21920x001DD8 (external jsr); 0x049076\u21920x016FBA (external jmp); 0x04903A\u21920x001DD8 (external jsr); 0x049054\u21920x016FBA (external jmp); 0x049004\u21920x001DD8 (external jsr); 17 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x34; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-attack-34", "commandSources": [], "localInstructionCount": 153, "externalFrontierCount": 22 }, { "id": "12-ken-throw-00", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x049188", "handlerAddress": "0x049198", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x049198: unresolved shared/indirect closure: 0x0491B6\u21920x0BD606 (external jsr); 0x0491C6\u21920x0135E6 (external jsr); 0x0491CC\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-throw-00", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-ken-throw-02", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04918A", "handlerAddress": "0x0491D2", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0491D2: unresolved shared/indirect closure: 0x0491EA\u21920x0BD606 (external jsr); 0x049200\u21920x0135E6 (external jsr); 0x049206\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-throw-02", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-ken-throw-04", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04918C", "handlerAddress": "0x04920C", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04920C: unresolved shared/indirect closure: 0x049224\u21920x0BD606 (external jsr); 0x049234\u21920x0135E6 (external jsr); 0x04923A\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-throw-04", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "12-ken-throw-06", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x04918E", "handlerAddress": "0x049240", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x049240: unresolved shared/indirect closure: 0x04924E\u21920x0BD606 (external jsr); 0x049270\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-throw-06", "localInstructionCount": 12, "externalFrontierCount": 2 }, { "id": "12-ken-throw-08", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x049190", "handlerAddress": "0x049276", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x049276: unresolved shared/indirect closure: 0x04928E\u21920x0BD606 (external jsr); 0x0492A4\u21920x0135E6 (external jsr); 0x0492AA\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-throw-08", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-ken-throw-0a", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x0A", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x049192", "handlerAddress": "0x0492B0", "selector": "E4=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0492B0: unresolved shared/indirect closure: 0x0492C8\u21920x0BD606 (external jsr); 0x0492D8\u21920x0135E6 (external jsr); 0x0492DE\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0A; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-throw-0a", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "12-ken-throw-0c", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x0C", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x049194", "handlerAddress": "0x0492E4", "selector": "E4=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0492E4: unresolved shared/indirect closure: 0x0492FC\u21920x0BD606 (external jsr); 0x049312\u21920x0135E6 (external jsr); 0x049318\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0C; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-throw-0c", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-ken-throw-0e", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x0E", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Ken style +0x385=2", "tableAddress": "0x049196", "handlerAddress": "0x04931E", "selector": "E4=0x0E", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04931E: unresolved shared/indirect closure: 0x049322\u21920x0BD606 (external jsr); 0x049332\u21920x0135E6 (external jsr); 0x049338\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0E; Ken style +0x385=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-ken-throw-0e", "localInstructionCount": 8, "externalFrontierCount": 3 }, { "id": "12-akuma-normal-0-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82B0", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=0, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x04640E\u21920x001DD8 (external jsr); 0x046416\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-0-lp", "animationInstallAddresses": [ "0x045D70" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-0-lp" }, { "id": "12-akuma-normal-0-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82B2", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=0, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x046424\u21920x001DD8 (external jsr); 0x04642C\u21920x016FBA (external jmp); 0x046434\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-0-mp", "localInstructionCount": 44, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-0-mp", "animationInstallAddresses": [ "0x045DB6", "0x045E22" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-akuma-normal-0-mp" }, { "id": "12-akuma-normal-0-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82B4", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=0, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464CA\u21920x001DD8 (external jsr); 0x0464D2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-0-hp", "animationInstallAddresses": [ "0x045E4A" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-0-hp" }, { "id": "12-akuma-normal-0-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82B6", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=2, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x04651C\u21920x001DD8 (external jsr); 0x046524\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-0-lk", "animationInstallAddresses": [ "0x045F44" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-0-lk" }, { "id": "12-akuma-normal-0-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82B8", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=2, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x046532\u21920x001DD8 (external jsr); 0x04653A\u21920x016FBA (external jmp); 0x046616\u21920x001DD8 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-0-mk", "localInstructionCount": 78, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-0-mk", "animationInstallAddresses": [ "0x045F8A", "0x04600A" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-akuma-normal-0-mk" }, { "id": "12-akuma-normal-0-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82BA", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=0, B5=2, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x046686\u21920x001DD8 (external jsr); 0x04668E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-0-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-0-hk", "animationInstallAddresses": [ "0x046070" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-0-hk" }, { "id": "12-akuma-normal-1-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82BC", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=0, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464EE\u21920x001DD8 (external jsr); 0x0464F6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-1-lp", "animationInstallAddresses": [ "0x045E8E" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-1-lp" }, { "id": "12-akuma-normal-1-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82BE", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=0, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464EE\u21920x001DD8 (external jsr); 0x0464F6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-1-mp", "animationInstallAddresses": [ "0x045EBE" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-1-mp" }, { "id": "12-akuma-normal-1-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82C0", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=0, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0464EE\u21920x001DD8 (external jsr); 0x0464F6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-1-hp", "animationInstallAddresses": [ "0x045EF6" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-1-hp" }, { "id": "12-akuma-normal-1-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82C2", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=2, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0466AA\u21920x001DD8 (external jsr); 0x0466B2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-1-lk", "animationInstallAddresses": [ "0x0460E4" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-1-lk" }, { "id": "12-akuma-normal-1-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82C4", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=2, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0466AA\u21920x001DD8 (external jsr); 0x0466B2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-1-mk", "animationInstallAddresses": [ "0x046114" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-1-mk" }, { "id": "12-akuma-normal-1-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82C6", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=2, B5=2, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0463DC\u21920x002490 (external jsr); 0x0463E2\u21920x017540 (external jsr); 0x0466AA\u21920x001DD8 (external jsr); 0x0466B2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-1-hk", "animationInstallAddresses": [ "0x046144" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-1-hk" }, { "id": "12-akuma-normal-2-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82C8", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 0x0466F0\u21920x0178C8 (external jmp); 0x0466FE\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-2-lp", "animationInstallAddresses": [ "0x0461BA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-2-lp" }, { "id": "12-akuma-normal-2-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82CA", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 0x0466F0\u21920x0178C8 (external jmp); 0x04670E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-2-mp", "localInstructionCount": 33, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-2-mp", "animationInstallAddresses": [ "0x0461F0" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-2-mp" }, { "id": "12-akuma-normal-2-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82CC", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 0x0466F0\u21920x0178C8 (external jmp); 0x04674C\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-2-hp", "animationInstallAddresses": [ "0x046254" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-2-hp" }, { "id": "12-akuma-normal-2-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82CE", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 0x046772\u21920x0178C8 (external jmp); 0x046780\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-2-lk", "animationInstallAddresses": [ "0x0462AA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-2-lk" }, { "id": "12-akuma-normal-2-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82D0", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 0x046772\u21920x0178C8 (external jmp); 0x046780\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-2-mk", "animationInstallAddresses": [ "0x0462EA", "0x04634A" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-akuma-normal-2-mk" }, { "id": "12-akuma-normal-2-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82D2", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 0x046772\u21920x0178C8 (external jmp); 0x046780\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-2-hk", "animationInstallAddresses": [ "0x046382", "0x0463B2" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-akuma-normal-2-hk" }, { "id": "12-akuma-normal-3-lp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82D4", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-3-lp", "animationInstallAddresses": [ "0x0461BA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-3-lp" }, { "id": "12-akuma-normal-3-mp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82D6", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-3-mp", "localInstructionCount": 35, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-3-mp", "animationInstallAddresses": [ "0x0461F0" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-3-mp" }, { "id": "12-akuma-normal-3-hp", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82D8", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x0466E8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-3-hp", "animationInstallAddresses": [ "0x046254" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-3-hp" }, { "id": "12-akuma-normal-3-lk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82DA", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-3-lk", "animationInstallAddresses": [ "0x0462AA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#12-akuma-normal-3-lk" }, { "id": "12-akuma-normal-3-mk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82DC", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-3-mk", "animationInstallAddresses": [ "0x0462EA", "0x04634A" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-akuma-normal-3-mk" }, { "id": "12-akuma-normal-3-hk", "character": "Ryu", "characterId": "0x12", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Akuma style +0x385=4", "tableAddress": "0x0E82DE", "handlerAddress": "0x045D0C", "updateHandlerAddress": "0x0463C0", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x045D0C: unresolved shared/indirect closure: 0x0466BA\u21920x01485C (external jsr); 0x0466C0\u21920x013E92 (external jsr); 0x0466C6\u21920x013EFC (external jsr); 0x0466CC\u21920x013E64 (external jsr); 0x04676A\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#12", "codeSource": "normal-route-receipts.json#12-akuma-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#12-akuma-normal-3-hk", "animationInstallAddresses": [ "0x046382", "0x0463B2" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#12-akuma-normal-3-hk" }, { "id": "12-akuma-attack-00", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x00", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047016", "handlerAddress": "0x04704C", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04704C: unresolved shared/indirect closure: 0x0470AE\u21920x001DD8 (external jsr); 0x0470B8\u21920x016FBA (external jmp); 0x0470E4\u21920x0D5A7E (external jsr); 0x0470EE\u21920x0D5A7E (external jsr); 0x0470F6\u21920x093210 (external jmp); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-00", "commandSources": [ "0x0498FE", "0x049B16" ], "localInstructionCount": 43, "externalFrontierCount": 9 }, { "id": "12-akuma-attack-02", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x02", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047018", "handlerAddress": "0x0470FE", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "3 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0470FE: unresolved shared/indirect closure: 0x047106\u2192indirect (indirect jmp unresolved). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-02", "commandSources": [ "0x049918", "0x049B20" ], "localInstructionCount": 3, "externalFrontierCount": 1 }, { "id": "12-akuma-attack-04", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04701A", "handlerAddress": "0x0472E6", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "113 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0472E6: unresolved shared/indirect closure: 0x04744C\u21920x001DD8 (external jsr); 0x047456\u21920x016FBA (external jmp); 0x047414\u21920x002490 (external jsr); 0x04743A\u21920x0135E6 (external jsr); 0x047440\u21920x0B62B6 (external jmp); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-04", "commandSources": [ "0x049942", "0x049B2A" ], "localInstructionCount": 113, "externalFrontierCount": 16 }, { "id": "12-akuma-attack-06", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x06", "command": "D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04701C", "handlerAddress": "0x04766C", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "91 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04766C: unresolved shared/indirect closure: 0x047762\u21920x001DD8 (external jsr); 0x04777C\u21920x016FBA (external jmp); 0x047724\u21920x002490 (external jsr); 0x047734\u21920x001DD8 (external jsr); 0x04773C\u21920x0177B6 (external jmp); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-06", "commandSources": [ "0x04995C", "0x049B34" ], "localInstructionCount": 91, "externalFrontierCount": 12 }, { "id": "12-akuma-attack-08", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x08", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04701E", "handlerAddress": "0x0477C6", "selector": "B0=0x2A, E6=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "68 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0477C6: unresolved shared/indirect closure: 0x04789E\u21920x001DD8 (external jsr); 0x0478B0\u21920x0177B6 (external jmp); 0x0478B8\u21920x002490 (external jsr); 0x04784C\u21920x001DD8 (external jsr); 0x04787C\u21920x0D5A7E (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-08", "commandSources": [ "0x049976", "0x049B3E" ], "localInstructionCount": 68, "externalFrontierCount": 9 }, { "id": "12-akuma-attack-0a", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Messatsu Gou Hadou", "command": "Akuma style: QCB + two punches", "variant": "Akuma style +0x385=4", "tableAddress": "0x047020", "handlerAddress": "0x0478D2", "selector": "B0=0x2A, E6=0x0A", "status": "tested: shared finite timer reimbursement", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "The shared beam spends human credits at $047ABE; the earlier native Akuma-style fixture observed 9\u219210.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x047AB6" ], "gate": "Style +$385=4; same beam handler $0478D2 and reader/spend as base Ryu.", "effect": "The shared beam spends human credits at $047ABE; the earlier native Akuma-style fixture observed 9\u219210.", "limit": "Twelve human timer credits; no universal hit maximum.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-0a", "commandSources": [], "localInstructionCount": 148, "externalFrontierCount": 19, "reviewSource": "../../ryu.md" }, { "id": "12-akuma-attack-0c", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047022", "handlerAddress": "0x047B1A", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "135 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047B1A: unresolved shared/indirect closure: 0x047CF4\u21920x001DD8 (external jsr); 0x047D00\u21920x016FBA (external jmp); 0x047CBC\u21920x002490 (external jsr); 0x047CE2\u21920x0135E6 (external jsr); 0x047CE8\u21920x0B62B6 (external jmp); 17 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-0c", "commandSources": [], "localInstructionCount": 135, "externalFrontierCount": 22 }, { "id": "12-akuma-attack-0e", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047024", "handlerAddress": "0x047D5E", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047D5E: unresolved shared/indirect closure: 0x047E04\u21920x001DD8 (external jsr); 0x047E0C\u21920x015EF4 (external jmp); 0x047DD8\u21920x001DD8 (external jsr); 0x047DDE\u21920x002490 (external jsr); 0x047DE4\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-0e", "commandSources": [], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "12-akuma-attack-10", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047026", "handlerAddress": "0x047E14", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E14: unresolved shared/indirect closure: 0x047E32\u21920x001DD8 (external jsr); 0x047E3A\u21920x016FBA (external jmp); 0x047E2C\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-10", "commandSources": [], "localInstructionCount": 11, "externalFrontierCount": 3 }, { "id": "12-akuma-attack-12", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047028", "handlerAddress": "0x047E42", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E42: unresolved shared/indirect closure: 0x047E42\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "12-akuma-attack-14", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04702A", "handlerAddress": "0x047E48", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E48: unresolved shared/indirect closure: 0x047E48\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "12-akuma-attack-16", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04702C", "handlerAddress": "0x047E4E", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "156 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047E4E: unresolved shared/indirect closure: 0x048080\u21920x001DD8 (external jsr); 0x048088\u21920x016FBA (external jmp); 0x04803E\u21920x001DD8 (external jsr); 0x048044\u21920x002490 (external jsr); 0x048072\u21920x0135E6 (external jsr); 16 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-16", "commandSources": [], "localInstructionCount": 156, "externalFrontierCount": 21 }, { "id": "12-akuma-attack-18", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04702E", "handlerAddress": "0x048090", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048090: unresolved shared/indirect closure: 0x0470AE\u21920x001DD8 (external jsr); 0x0470B8\u21920x016FBA (external jmp); 0x0470E4\u21920x0D5A7E (external jsr); 0x0470EE\u21920x0D5A7E (external jsr); 0x0470F6\u21920x093210 (external jmp); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-18", "commandSources": [], "localInstructionCount": 41, "externalFrontierCount": 8 }, { "id": "12-akuma-attack-1a", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Ryu style change", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047030", "handlerAddress": "0x0480E8", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "35 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0480E8: unresolved shared/indirect closure: 0x04817E\u21920x001DD8 (external jsr); 0x048186\u21920x016FBA (external jmp); 0x048120\u21920x001DD8 (external jsr); 0x048140\u21920x0D5A7E (external jsr); 0x048150\u21920x0148FE (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Native style transition to +$385=0; same-style reachability is governed by the recorded command filter.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-1a", "commandSources": [], "localInstructionCount": 35, "externalFrontierCount": 9 }, { "id": "12-akuma-attack-1c", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047032", "handlerAddress": "0x0482F2", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "128 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x048428.", "uncertainty": "Handler 0x0482F2: unresolved shared/indirect closure: 0x0484A2\u21920x001DD8 (external jsr); 0x0484AA\u21920x016FBA (external jmp); 0x048456\u21920x001DD8 (external jsr); 0x04845C\u21920x0024B2 (external jsr); 0x04847E\u21920x0B62B6 (external jsr); 14 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x048428" ], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-1c", "commandSources": [], "localInstructionCount": 128, "externalFrontierCount": 19 }, { "id": "12-akuma-attack-1e", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x1E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047034", "handlerAddress": "0x048512", "selector": "B0=0x2A, E6=0x1E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "60 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048512: unresolved shared/indirect closure: 0x0485C6\u21920x001DD8 (external jsr); 0x0485CC\u21920x002490 (external jsr); 0x0485EE\u21920x016FBA (external jmp); 0x0485F4\u21920x0D7526 (external jsr); 0x048610\u21920x0187CA (external jmp); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1E; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-1e", "commandSources": [], "localInstructionCount": 60, "externalFrontierCount": 11 }, { "id": "12-akuma-attack-20", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x20", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047036", "handlerAddress": "0x048618", "selector": "B0=0x2A, E6=0x20", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "86 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048618: unresolved shared/indirect closure: 0x04873E\u21920x001DD8 (external jsr); 0x04874A\u21920x0177B6 (external jmp); 0x048752\u21920x002490 (external jsr); 0x04876E\u21920x0B62B6 (external jmp); 0x0486FC\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x20; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-20", "commandSources": [], "localInstructionCount": 86, "externalFrontierCount": 15 }, { "id": "12-akuma-attack-22", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x22", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047038", "handlerAddress": "0x048776", "selector": "B0=0x2A, E6=0x22", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "163 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048776: unresolved shared/indirect closure: 0x0489A4\u21920x001DD8 (external jsr); 0x0489BE\u21920x016FBA (external jmp); 0x048990\u21920x001DD8 (external jmp); 0x04899E\u21920x0B62B6 (external jsr); 0x0489CA\u21920x0024B2 (external jsr); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x22; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-22", "commandSources": [], "localInstructionCount": 163, "externalFrontierCount": 17 }, { "id": "12-akuma-attack-24", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x24", "command": "F \u2192 D \u2192 DF + attack / raw descriptor; matcher semantics unresolved / native input-transition mask = 0x0700", "variant": "Akuma style +0x385=4", "tableAddress": "0x04703A", "handlerAddress": "0x0489E2", "selector": "B0=0x2A, E6=0x24", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "75 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0489E2: unresolved shared/indirect closure: 0x048AE6\u21920x001DD8 (external jsr); 0x048AEE\u21920x016FBA (external jmp); 0x048AA0\u21920x017634 (external jsr); 0x048AB4\u21920x002490 (external jsr); 0x048AD2\u21920x001DD8 (external jmp); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "3 command candidates survive character/style filter (4 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x24; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-24", "commandSources": [ "0x049A90", "0x049AA0", "0x04569A" ], "localInstructionCount": 75, "externalFrontierCount": 13 }, { "id": "12-akuma-attack-26", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x26", "command": "B \u2192 D \u2192 DB + attack / native input-transition mask = 0x0700", "variant": "Akuma style +0x385=4", "tableAddress": "0x04703C", "handlerAddress": "0x048AF6", "selector": "B0=0x2A, E6=0x26", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "74 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048AF6: unresolved shared/indirect closure: 0x048BF6\u21920x001DD8 (external jsr); 0x048BFE\u21920x016FBA (external jmp); 0x048BB8\u21920x017634 (external jsr); 0x048BC8\u21920x002490 (external jsr); 0x048BE2\u21920x001DD8 (external jmp); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (3 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x26; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-26", "commandSources": [ "0x049AAA", "0x0457F0" ], "localInstructionCount": 74, "externalFrontierCount": 13 }, { "id": "12-akuma-attack-28", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x28", "command": "D \u2192 DF \u2192 F + K / raw descriptor; matcher semantics unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04703E", "handlerAddress": "0x048C06", "selector": "B0=0x2A, E6=0x28", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "80 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048C06: unresolved shared/indirect closure: 0x048CD6\u21920x001DD8 (external jsr); 0x048CF0\u21920x016FBA (external jmp); 0x048C92\u21920x001DD8 (external jsr); 0x048C9E\u21920x002490 (external jsr); 0x048CC8\u21920x0135E6 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x28; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-28", "commandSources": [ "0x049AE2", "0x049AF2" ], "localInstructionCount": 80, "externalFrontierCount": 9 }, { "id": "12-akuma-attack-2a", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x2A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047040", "handlerAddress": "0x048CF8", "selector": "B0=0x2A, E6=0x2A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048CF8: unresolved shared/indirect closure: 0x048CF8\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x2A; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-2a", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "12-akuma-attack-2c", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x2C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047042", "handlerAddress": "0x047D5E", "selector": "B0=0x2A, E6=0x2C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x047D5E: unresolved shared/indirect closure: 0x047E04\u21920x001DD8 (external jsr); 0x047E0C\u21920x015EF4 (external jmp); 0x047DD8\u21920x001DD8 (external jsr); 0x047DDE\u21920x002490 (external jsr); 0x047DE4\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x2C; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-2c", "commandSources": [], "localInstructionCount": 41, "externalFrontierCount": 7 }, { "id": "12-akuma-attack-2e", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x2E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047044", "handlerAddress": "0x048CFE", "selector": "B0=0x2A, E6=0x2E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "74 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048CFE: unresolved shared/indirect closure: 0x048E18\u21920x001DD8 (external jsr); 0x048E34\u21920x016FBA (external jmp); 0x048DDE\u21920x0024B2 (external jsr); 0x048DEE\u21920x001DD8 (external jmp); 0x048E0C\u21920x0135E6 (external jsr); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x2E; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-2e", "commandSources": [], "localInstructionCount": 74, "externalFrontierCount": 12 }, { "id": "12-akuma-attack-30", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Ken style change", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047046", "handlerAddress": "0x04818E", "selector": "B0=0x2A, E6=0x30", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "40 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04818E: unresolved shared/indirect closure: 0x048234\u21920x001DD8 (external jsr); 0x04823C\u21920x016FBA (external jmp); 0x0481C6\u21920x001DD8 (external jsr); 0x0481E6\u21920x0D5A7E (external jsr); 0x0481F6\u21920x0148FE (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x30; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Native style transition to +$385=2; same-style reachability is governed by the recorded command filter.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-30", "commandSources": [], "localInstructionCount": 40, "externalFrontierCount": 10 }, { "id": "12-akuma-attack-32", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Akuma style change", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x047048", "handlerAddress": "0x048244", "selector": "B0=0x2A, E6=0x32", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "37 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048244: unresolved shared/indirect closure: 0x0482E2\u21920x001DD8 (external jsr); 0x0482EA\u21920x016FBA (external jmp); 0x04827C\u21920x001DD8 (external jsr); 0x04829C\u21920x0D5A7E (external jsr); 0x0482AC\u21920x0148FE (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x32; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "Native style transition to +$385=4; same-style reachability is governed by the recorded command filter.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-32", "commandSources": [], "localInstructionCount": 37, "externalFrontierCount": 10 }, { "id": "12-akuma-attack-34", "character": "Ryu", "characterId": "0x12", "category": "special / super", "name": "Native attack selector 0x34", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04704A", "handlerAddress": "0x048E3C", "selector": "B0=0x2A, E6=0x34", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "153 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x048E3C: unresolved shared/indirect closure: 0x04905C\u21920x001DD8 (external jsr); 0x049076\u21920x016FBA (external jmp); 0x04903A\u21920x001DD8 (external jsr); 0x049054\u21920x016FBA (external jmp); 0x049004\u21920x001DD8 (external jsr); 17 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x34; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-attack-34", "commandSources": [], "localInstructionCount": 153, "externalFrontierCount": 22 }, { "id": "12-akuma-throw-00", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x049188", "handlerAddress": "0x049198", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x049198: unresolved shared/indirect closure: 0x0491B6\u21920x0BD606 (external jsr); 0x0491C6\u21920x0135E6 (external jsr); 0x0491CC\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-throw-00", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-akuma-throw-02", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04918A", "handlerAddress": "0x0491D2", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0491D2: unresolved shared/indirect closure: 0x0491EA\u21920x0BD606 (external jsr); 0x049200\u21920x0135E6 (external jsr); 0x049206\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-throw-02", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-akuma-throw-04", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04918C", "handlerAddress": "0x04920C", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04920C: unresolved shared/indirect closure: 0x049224\u21920x0BD606 (external jsr); 0x049234\u21920x0135E6 (external jsr); 0x04923A\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-throw-04", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "12-akuma-throw-06", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x04918E", "handlerAddress": "0x049240", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x049240: unresolved shared/indirect closure: 0x04924E\u21920x0BD606 (external jsr); 0x049270\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-throw-06", "localInstructionCount": 12, "externalFrontierCount": 2 }, { "id": "12-akuma-throw-08", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x049190", "handlerAddress": "0x049276", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x049276: unresolved shared/indirect closure: 0x04928E\u21920x0BD606 (external jsr); 0x0492A4\u21920x0135E6 (external jsr); 0x0492AA\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-throw-08", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-akuma-throw-0a", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x0A", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x049192", "handlerAddress": "0x0492B0", "selector": "E4=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0492B0: unresolved shared/indirect closure: 0x0492C8\u21920x0BD606 (external jsr); 0x0492D8\u21920x0135E6 (external jsr); 0x0492DE\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0A; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-throw-0a", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "12-akuma-throw-0c", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x0C", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x049194", "handlerAddress": "0x0492E4", "selector": "E4=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0492E4: unresolved shared/indirect closure: 0x0492FC\u21920x0BD606 (external jsr); 0x049312\u21920x0135E6 (external jsr); 0x049318\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0C; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-throw-0c", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "12-akuma-throw-0e", "character": "Ryu", "characterId": "0x12", "category": "throw", "name": "Native throw selector 0x0E", "command": "Native throw detector 0x0490C0; individual direction/button predicate unresolved", "variant": "Akuma style +0x385=4", "tableAddress": "0x049196", "handlerAddress": "0x04931E", "selector": "E4=0x0E", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04931E: unresolved shared/indirect closure: 0x049322\u21920x0BD606 (external jsr); 0x049332\u21920x0135E6 (external jsr); 0x049338\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0E; Akuma style +0x385=4. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#12", "codeSource": "context-route-receipts.json#leaves/12-akuma-throw-0e", "localInstructionCount": 8, "externalFrontierCount": 3 }, { "id": "14-base-normal-0-lp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E82E0", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04A98E\u21920x001DD8 (external jsr); 0x04A996\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-0-lp", "animationInstallAddresses": [ "0x04A558" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-0-mp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E82E2", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04A98E\u21920x001DD8 (external jsr); 0x04A996\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-0-mp", "animationInstallAddresses": [ "0x04A588" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-0-hp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E82E4", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04A99E\u21920x001DD8 (external jsr); 0x04A9C0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-0-hp", "localInstructionCount": 25, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-0-hp", "animationInstallAddresses": [ "0x04A5B8" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-0-lk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E82E6", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04AA08\u21920x001DD8 (external jsr); 0x04AA10\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-0-lk", "animationInstallAddresses": [ "0x04A6A2" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-0-mk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E82E8", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04AA08\u21920x001DD8 (external jsr); 0x04AA10\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-0-mk", "animationInstallAddresses": [ "0x04A6D2" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-0-hk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E82EA", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "51 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04AAA2\u21920x001DD8 (external jsr); 0x04AAAA\u21920x016FBA (external jmp); 0x04AA6A\u21920x001DD8 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-0-hk", "localInstructionCount": 51, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#14-base-normal-0-hk", "animationInstallAddresses": [ "0x04A70A" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-1-lp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E82EC", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04A9DA\u21920x001DD8 (external jsr); 0x04A9E2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-1-lp", "animationInstallAddresses": [ "0x04A5F4" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-1-mp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E82EE", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04A9DA\u21920x001DD8 (external jsr); 0x04A9E2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-1-mp", "animationInstallAddresses": [ "0x04A62C" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-1-hp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E82F0", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04A9DA\u21920x001DD8 (external jsr); 0x04A9E2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-1-hp", "animationInstallAddresses": [ "0x04A65C" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-1-lk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E82F2", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04AAC6\u21920x001DD8 (external jsr); 0x04AACE\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-1-lk", "animationInstallAddresses": [ "0x04A74E" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-1-mk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E82F4", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04AAC6\u21920x001DD8 (external jsr); 0x04AACE\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-1-mk", "animationInstallAddresses": [ "0x04A77E" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-1-hk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E82F6", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04A95C\u21920x002490 (external jsr); 0x04A962\u21920x017540 (external jsr); 0x04AAC6\u21920x001DD8 (external jsr); 0x04AACE\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#14-base-normal-1-hk", "animationInstallAddresses": [ "0x04A7AE" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-2-lp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E82F8", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB04\u21920x017588 (external jsr); 0x04AB0C\u21920x0178C8 (external jmp); 0x04AB1A\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#14-base-normal-2-lp", "animationInstallAddresses": [ "0x04A824" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-2-mp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E82FA", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB04\u21920x017588 (external jsr); 0x04AB0C\u21920x0178C8 (external jmp); 0x04AB1A\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#14-base-normal-2-mp", "animationInstallAddresses": [ "0x04A854" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-2-hp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E82FC", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB04\u21920x017588 (external jsr); 0x04AB0C\u21920x0178C8 (external jmp); 0x04AB1A\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#14-base-normal-2-hp", "animationInstallAddresses": [ "0x04A884" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-2-lk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E82FE", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB38\u21920x017588 (external jsr); 0x04AB40\u21920x0178C8 (external jmp); 0x04AB4E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#14-base-normal-2-lk", "animationInstallAddresses": [ "0x04A8D2" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-2-mk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8300", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB38\u21920x017588 (external jsr); 0x04AB40\u21920x0178C8 (external jmp); 0x04AB4E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#14-base-normal-2-mk", "animationInstallAddresses": [ "0x04A902" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-2-hk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8302", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB38\u21920x017588 (external jsr); 0x04AB40\u21920x0178C8 (external jmp); 0x04AB4E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#14-base-normal-2-hk", "animationInstallAddresses": [ "0x04A932" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-3-lp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8304", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAD6\u21920x01485C (external jsr); 0x04AADC\u21920x013E92 (external jsr); 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB04\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#14-base-normal-3-lp", "animationInstallAddresses": [ "0x04A824" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-3-mp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8306", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAD6\u21920x01485C (external jsr); 0x04AADC\u21920x013E92 (external jsr); 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB04\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#14-base-normal-3-mp", "animationInstallAddresses": [ "0x04A854" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-3-hp", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8308", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAD6\u21920x01485C (external jsr); 0x04AADC\u21920x013E92 (external jsr); 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB04\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#14-base-normal-3-hp", "animationInstallAddresses": [ "0x04A884" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-3-lk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E830A", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAD6\u21920x01485C (external jsr); 0x04AADC\u21920x013E92 (external jsr); 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB38\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#14-base-normal-3-lk", "animationInstallAddresses": [ "0x04A8D2" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-3-mk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E830C", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAD6\u21920x01485C (external jsr); 0x04AADC\u21920x013E92 (external jsr); 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB38\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#14-base-normal-3-mk", "animationInstallAddresses": [ "0x04A902" ], "directionVariantGroups": 0 }, { "id": "14-base-normal-3-hk", "character": "Captain Commando", "characterId": "0x14", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E830E", "handlerAddress": "0x04A4F4", "updateHandlerAddress": "0x04A940", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04A4F4: unresolved shared/indirect closure: 0x04AAD6\u21920x01485C (external jsr); 0x04AADC\u21920x013E92 (external jsr); 0x04AAE2\u21920x013EFC (external jsr); 0x04AAE8\u21920x013E64 (external jsr); 0x04AB38\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "normal-route-receipts.json#14-base-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#14-base-normal-3-hk", "animationInstallAddresses": [ "0x04A932" ], "directionVariantGroups": 0 }, { "id": "14-base-attack-00", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x00", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04B012", "handlerAddress": "0x04B02C", "selector": "B0=0x2A, E6=0x00", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "78 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04B02C: unresolved shared/indirect closure: 0x04B10E\u21920x001DD8 (external jsr); 0x04B116\u21920x016FBA (external jmp); 0x04B144\u21920x09119E (external jmp); 0x04B0D6\u21920x001DD8 (external jsr); 0x04B0EE\u21920x094306 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-00", "commandSources": [], "localInstructionCount": 78, "externalFrontierCount": 15 }, { "id": "14-base-attack-02", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x02", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x04B014", "handlerAddress": "0x04B14C", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04B14C: unresolved shared/indirect closure: 0x04B1BE\u21920x001DD8 (external jsr); 0x04B1C6\u21920x016FBA (external jmp); 0x04B1A0\u21920x001DD8 (external jsr); 0x04B1B6\u21920x09119E (external jmp); 0x04B186\u21920x01CD1E (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-02", "commandSources": [ "0x04C7FE", "0x04C86E" ], "localInstructionCount": 41, "externalFrontierCount": 8 }, { "id": "14-base-attack-04", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DB \u2192 B + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x04B016", "handlerAddress": "0x04B1CE", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "76 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04B1CE: unresolved shared/indirect closure: 0x04B2E2\u21920x001DD8 (external jsr); 0x04B2EA\u21920x016FBA (external jmp); 0x04B268\u21920x001DD8 (external jsr); 0x04B27A\u21920x00A4B0 (external jmp); 0x04B230\u21920x001DD8 (external jsr); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-04", "commandSources": [ "0x04C81E", "0x04C878" ], "localInstructionCount": 76, "externalFrontierCount": 11 }, { "id": "14-base-attack-06", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x06", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04B018", "handlerAddress": "0x04B2F2", "selector": "B0=0x2A, E6=0x06", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04B2F2: unresolved shared/indirect closure: 0x04B386\u21920x001DD8 (external jsr); 0x04B3A0\u21920x016FBA (external jmp); 0x04B362\u21920x001DD8 (external jsr); 0x04B368\u21920x002490 (external jsr); 0x04B36E\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-06", "commandSources": [], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "14-base-attack-08", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x08", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x04B01A", "handlerAddress": "0x04B444", "selector": "B0=0x2A, E6=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "49 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04B444: unresolved shared/indirect closure: 0x04B444\u21920x013EFC (external jsr); 0x04B4EC\u21920x001DD8 (external jsr); 0x04B4FE\u21920x0177B6 (external jmp); 0x04B4CE\u21920x001DD8 (external jsr); 0x04B4E4\u21920x09119E (external jmp); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-08", "commandSources": [ "0x04C80E", "0x04C88C" ], "localInstructionCount": 49, "externalFrontierCount": 8 }, { "id": "14-base-attack-0a", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04B01C", "handlerAddress": "0x04B506", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04B506: unresolved shared/indirect closure: 0x04B506\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-0a", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "14-base-attack-0c", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04B01E", "handlerAddress": "0x04B50C", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "346 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04B50C: unresolved shared/indirect closure: 0x04B948\u21920x001DD8 (external jsr); 0x04B95C\u21920x09119E (external jmp); 0x04B964\u21920x0CB574 (external jsr); 0x04B96A\u21920x0CB5A0 (external jsr); 0x04B970\u21920x016FBA (external jmp); 35 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-0c", "commandSources": [], "localInstructionCount": 346, "externalFrontierCount": 40 }, { "id": "14-base-attack-0e", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04B020", "handlerAddress": "0x04B9EC", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "46 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04B9EC: unresolved shared/indirect closure: 0x04BA0E\u21920x001DD8 (external jsr); 0x04BA16\u21920x016FBA (external jmp); 0x04BA08\u21920x0135E6 (external jmp); 0x04AFFE\u21920x017634 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-0e", "commandSources": [], "localInstructionCount": 46, "externalFrontierCount": 4 }, { "id": "14-base-attack-10", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x10", "command": "D \u2192 DF \u2192 F + K", "variant": "Stock character", "tableAddress": "0x04B022", "handlerAddress": "0x04BA78", "selector": "B0=0x2A, E6=0x10", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "44 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04BA78: unresolved shared/indirect closure: 0x04BAE6\u21920x001DD8 (external jsr); 0x04BAEE\u21920x016FBA (external jmp); 0x04BB06\u21920x09119E (external jsr); 0x04BA92\u21920x01CD1E (external jsr); 0x04BAC8\u21920x0135E6 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-10", "commandSources": [ "0x04C84E" ], "localInstructionCount": 44, "externalFrontierCount": 7 }, { "id": "14-base-attack-12", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04B024", "handlerAddress": "0x04BB14", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04BB14: unresolved shared/indirect closure: 0x04BB14\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "14-base-attack-14", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04B026", "handlerAddress": "0x04B3A8", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "36 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04B3A8: unresolved shared/indirect closure: 0x04B416\u21920x001DD8 (external jsr); 0x04B41C\u21920x002490 (external jsr); 0x04B422\u21920x017588 (external jsr); 0x04B43C\u21920x016FBA (external jmp); 0x04B3BC\u21920x00A4B0 (external jsr); 1 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-14", "commandSources": [], "localInstructionCount": 36, "externalFrontierCount": 6 }, { "id": "14-base-attack-16", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04B028", "handlerAddress": "0x04BB1A", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04BB1A: unresolved shared/indirect closure: 0x04BB1A\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-16", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "14-base-attack-18", "character": "Captain Commando", "characterId": "0x14", "category": "special / super", "name": "Native attack selector 0x18", "command": "D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x04B02A", "handlerAddress": "0x04BB20", "selector": "B0=0x2A, E6=0x18", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "104 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04BB20: unresolved shared/indirect closure: 0x04BC76\u21920x001DD8 (external jsr); 0x04BC7E\u21920x016FBA (external jmp); 0x04BC38\u21920x002490 (external jsr); 0x04BC3E\u21920x017588 (external jsr); 0x04BC5C\u21920x0B62B6 (external jsr); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-attack-18", "commandSources": [ "0x04C85E", "0x04C882" ], "localInstructionCount": 104, "externalFrontierCount": 16 }, { "id": "14-base-throw-00", "character": "Captain Commando", "characterId": "0x14", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x04BD34; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x04BDF4", "handlerAddress": "0x04BE00", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "30 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04BE00: unresolved shared/indirect closure: 0x04BE28\u21920x0BD606 (external jsr); 0x04BE3A\u21920x0135E6 (external jsr); 0x04BE4C\u21920x09119E (external jsr); 0x04BE54\u21920x09119E (external jsr); 0x04BE6E\u21920x0D5A7E (external jsr). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-throw-00", "localInstructionCount": 30, "externalFrontierCount": 5 }, { "id": "14-base-throw-02", "character": "Captain Commando", "characterId": "0x14", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x04BD34; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x04BDF6", "handlerAddress": "0x04BE90", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04BE90: unresolved shared/indirect closure: 0x04BEBE\u21920x0BD606 (external jsr); 0x04BEC8\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-throw-02", "localInstructionCount": 13, "externalFrontierCount": 2 }, { "id": "14-base-throw-04", "character": "Captain Commando", "characterId": "0x14", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x04BD34; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x04BDF8", "handlerAddress": "0x04BECE", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "21 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04BECE: unresolved shared/indirect closure: 0x04BF02\u21920x0BD606 (external jsr); 0x04BF0C\u21920x0135E6 (external jsr); 0x04BF16\u21920x09119E (external jsr); 0x04BF24\u21920x01439A (external jsr); 0x04BF2C\u21920x014388 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-throw-04", "localInstructionCount": 21, "externalFrontierCount": 5 }, { "id": "14-base-throw-06", "character": "Captain Commando", "characterId": "0x14", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x04BD34; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x04BDFA", "handlerAddress": "0x04BE00", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "30 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04BE00: unresolved shared/indirect closure: 0x04BE28\u21920x0BD606 (external jsr); 0x04BE3A\u21920x0135E6 (external jsr); 0x04BE4C\u21920x09119E (external jsr); 0x04BE54\u21920x09119E (external jsr); 0x04BE6E\u21920x0D5A7E (external jsr). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-throw-06", "localInstructionCount": 30, "externalFrontierCount": 5 }, { "id": "14-base-throw-08", "character": "Captain Commando", "characterId": "0x14", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x04BD34; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x04BDFC", "handlerAddress": "0x04BE00", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "30 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04BE00: unresolved shared/indirect closure: 0x04BE28\u21920x0BD606 (external jsr); 0x04BE3A\u21920x0135E6 (external jsr); 0x04BE4C\u21920x09119E (external jsr); 0x04BE54\u21920x09119E (external jsr); 0x04BE6E\u21920x0D5A7E (external jsr). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-throw-08", "localInstructionCount": 30, "externalFrontierCount": 5 }, { "id": "14-base-throw-0a", "character": "Captain Commando", "characterId": "0x14", "category": "throw", "name": "Native throw selector 0x0A", "command": "Native throw detector 0x04BD34; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x04BDFE", "handlerAddress": "0x04BE00", "selector": "E4=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "30 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04BE00: unresolved shared/indirect closure: 0x04BE28\u21920x0BD606 (external jsr); 0x04BE3A\u21920x0135E6 (external jsr); 0x04BE4C\u21920x09119E (external jsr); 0x04BE54\u21920x09119E (external jsr); 0x04BE6E\u21920x0D5A7E (external jsr). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#14", "codeSource": "context-route-receipts.json#leaves/14-base-throw-0a", "localInstructionCount": 30, "externalFrontierCount": 5 }, { "id": "16-base-normal-0-lp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8310", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=0, B5=0, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D85C\u21920x001DD8 (external jsr); 0x04D864\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#16-base-normal-0-lp", "animationInstallAddresses": [ "0x04D352" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-0-lp" }, { "id": "16-base-normal-0-mp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8312", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=0, B5=0, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D86C\u21920x001DD8 (external jsr); 0x04D876\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#16-base-normal-0-mp", "animationInstallAddresses": [ "0x04D382" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-0-mp" }, { "id": "16-base-normal-0-hp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8314", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=0, B5=0, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D882\u21920x001DD8 (external jsr); 0x04D88C\u21920x016FBA (external jmp); 0x04D8E8\u21920x001DD8 (external jsr); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-0-hp", "localInstructionCount": 44, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#16-base-normal-0-hp", "animationInstallAddresses": [ "0x04D3BA", "0x04D3F0" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#16-base-normal-0-hp" }, { "id": "16-base-normal-0-lk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8316", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=0, B5=2, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D95A\u21920x001DD8 (external jsr); 0x04D962\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#16-base-normal-0-lk", "animationInstallAddresses": [ "0x04D4E2" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-0-lk" }, { "id": "16-base-normal-0-mk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8318", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=0, B5=2, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D96A\u21920x001DD8 (external jsr); 0x04D972\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#16-base-normal-0-mk", "animationInstallAddresses": [ "0x04D512" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-0-mk" }, { "id": "16-base-normal-0-hk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E831A", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=0, B5=2, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D97A\u21920x001DD8 (external jsr); 0x04D982\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-0-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#16-base-normal-0-hk", "animationInstallAddresses": [ "0x04D55A" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-0-hk" }, { "id": "16-base-normal-1-lp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E831C", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=2, B5=0, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D90C\u21920x001DD8 (external jsr); 0x04D914\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#16-base-normal-1-lp", "animationInstallAddresses": [ "0x04D434" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-1-lp" }, { "id": "16-base-normal-1-mp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E831E", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=2, B5=0, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D91C\u21920x001DD8 (external jsr); 0x04D926\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#16-base-normal-1-mp", "animationInstallAddresses": [ "0x04D464" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-1-mp" }, { "id": "16-base-normal-1-hp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8320", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=2, B5=0, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D92C\u21920x001DD8 (external jsr); 0x04D936\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#16-base-normal-1-hp", "animationInstallAddresses": [ "0x04D494" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-1-hp" }, { "id": "16-base-normal-1-lk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8322", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=2, B5=2, 4D=0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D99E\u21920x001DD8 (external jsr); 0x04D9A6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#16-base-normal-1-lk", "animationInstallAddresses": [ "0x04D59E" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-1-lk" }, { "id": "16-base-normal-1-mk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8324", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=2, B5=2, 4D=2", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D9AE\u21920x001DD8 (external jsr); 0x04D9B6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#16-base-normal-1-mk", "animationInstallAddresses": [ "0x04D5CE" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-1-mk" }, { "id": "16-base-normal-1-hk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8326", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=2, B5=2, 4D=4", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04D82A\u21920x002490 (external jsr); 0x04D830\u21920x017540 (external jsr); 0x04D9C4\u21920x001DD8 (external jsr); 0x04D9CC\u21920x016FBA (external jmp); 0x04DA7A\u21920x001DD8 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-1-hk", "localInstructionCount": 64, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#16-base-normal-1-hk", "animationInstallAddresses": [ "0x04D614", "0x04D644" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#16-base-normal-1-hk" }, { "id": "16-base-normal-2-lp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8328", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAB8\u21920x017588 (external jsr); 0x04DAC0\u21920x0178C8 (external jmp); 0x04DACE\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#16-base-normal-2-lp", "animationInstallAddresses": [ "0x04D6BA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-2-lp" }, { "id": "16-base-normal-2-mp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E832A", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAB8\u21920x017588 (external jsr); 0x04DAC0\u21920x0178C8 (external jmp); 0x04DACE\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#16-base-normal-2-mp", "animationInstallAddresses": [ "0x04D6EA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-2-mp" }, { "id": "16-base-normal-2-hp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E832C", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAB8\u21920x017588 (external jsr); 0x04DAC0\u21920x0178C8 (external jmp); 0x04DACE\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#16-base-normal-2-hp", "animationInstallAddresses": [ "0x04D71A" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-2-hp" }, { "id": "16-base-normal-2-lk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E832E", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAEC\u21920x017588 (external jsr); 0x04DAF4\u21920x0178C8 (external jmp); 0x04DB02\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#16-base-normal-2-lk", "animationInstallAddresses": [ "0x04D772" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#16-base-normal-2-lk" }, { "id": "16-base-normal-2-mk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8330", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAEC\u21920x017588 (external jsr); 0x04DAF4\u21920x0178C8 (external jmp); 0x04DB18\u21920x001DD8 (external jsr); 9 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-2-mk", "localInstructionCount": 80, "externalFrontierCount": 14, "initializerSource": "normal-initializer-receipts.json#16-base-normal-2-mk", "animationInstallAddresses": [ "0x04D7D0" ], "directionVariantGroups": 9, "reviewSource": "normal-review/findings.json#16-base-normal-2-mk" }, { "id": "16-base-normal-2-hk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8332", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAEC\u21920x017588 (external jsr); 0x04DAF4\u21920x0178C8 (external jmp); 0x04DC1A\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-2-hk", "localInstructionCount": 31, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#16-base-normal-2-hk", "animationInstallAddresses": [ "0x04D800" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-2-hk" }, { "id": "16-base-normal-3-lp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8334", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA8A\u21920x01485C (external jsr); 0x04DA90\u21920x013E92 (external jsr); 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAB8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#16-base-normal-3-lp", "animationInstallAddresses": [ "0x04D6BA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-3-lp" }, { "id": "16-base-normal-3-mp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8336", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA8A\u21920x01485C (external jsr); 0x04DA90\u21920x013E92 (external jsr); 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAB8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#16-base-normal-3-mp", "animationInstallAddresses": [ "0x04D6EA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-3-mp" }, { "id": "16-base-normal-3-hp", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8338", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA8A\u21920x01485C (external jsr); 0x04DA90\u21920x013E92 (external jsr); 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAB8\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#16-base-normal-3-hp", "animationInstallAddresses": [ "0x04D71A" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-3-hp" }, { "id": "16-base-normal-3-lk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E833A", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA8A\u21920x01485C (external jsr); 0x04DA90\u21920x013E92 (external jsr); 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAEC\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#16-base-normal-3-lk", "animationInstallAddresses": [ "0x04D772" ], "directionVariantGroups": 2, "reviewSource": "normal-review/findings.json#16-base-normal-3-lk" }, { "id": "16-base-normal-3-mk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E833C", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA8A\u21920x01485C (external jsr); 0x04DA90\u21920x013E92 (external jsr); 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAEC\u21920x017588 (external jsr); 11 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-3-mk", "localInstructionCount": 82, "externalFrontierCount": 16, "initializerSource": "normal-initializer-receipts.json#16-base-normal-3-mk", "animationInstallAddresses": [ "0x04D7D0" ], "directionVariantGroups": 9, "reviewSource": "normal-review/findings.json#16-base-normal-3-mk" }, { "id": "16-base-normal-3-hk", "character": "Chun-Li", "characterId": "0x16", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E833E", "handlerAddress": "0x04D2EE", "updateHandlerAddress": "0x04D80E", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "no local input reference in reviewed update paths", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "No direct +$D0\u2013+$DF input operand or shared mash-helper call in the selector-filtered local bodies. Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "uncertainty": "Handler 0x04D2EE: unresolved shared/indirect closure: 0x04DA8A\u21920x01485C (external jsr); 0x04DA90\u21920x013E92 (external jsr); 0x04DA96\u21920x013EFC (external jsr); 0x04DA9C\u21920x013E64 (external jsr); 0x04DAEC\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "Local instructions and exact selector dispatches are enumerated in reviewed-routes.json.", "limit": "Not a negative gameplay verdict: global callees, initialization-direction variants and animation data remain a frontier. Fresh normals, chains, command normals and rapid-button specials must not be conflated.", "source": "native-tables.json#16", "codeSource": "normal-route-receipts.json#16-base-normal-3-hk", "localInstructionCount": 33, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#16-base-normal-3-hk", "animationInstallAddresses": [ "0x04D800" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#16-base-normal-3-hk" }, { "id": "16-base-attack-00", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x00", "command": "B \u2192 DB \u2192 D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x04DE4A", "handlerAddress": "0x04DE94", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "40 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04DE94: unresolved shared/indirect closure: 0x04DEEA\u21920x001DD8 (external jsr); 0x04DEF2\u21920x016FBA (external jmp); 0x04DF08\u21920x0983CC (external jmp); 0x04DECA\u21920x01CD1E (external jsr); 0x04DEDE\u21920x0135E6 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-00", "commandSources": [ "0x04F30A", "0x04F31E" ], "localInstructionCount": 40, "externalFrontierCount": 7 }, { "id": "16-base-attack-02", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x02", "command": "F \u2192 D \u2192 DF + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x04DE4C", "handlerAddress": "0x04DF10", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "100 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04DF10: unresolved shared/indirect closure: 0x04E0A2\u21920x001DD8 (external jsr); 0x04E0B0\u21920x016FBA (external jmp); 0x04E018\u21920x001DD8 (external jsr); 0x04E022\u21920x002490 (external jsr); 0x04E066\u21920x017588 (external jsr); 9 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-02", "commandSources": [ "0x04F328", "0x04F338" ], "localInstructionCount": 100, "externalFrontierCount": 14 }, { "id": "16-base-attack-04", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x04", "command": "F \u2192 DF \u2192 D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x04DE4E", "handlerAddress": "0x04E0B8", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "80 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04E0B8: unresolved shared/indirect closure: 0x04E0C8\u2192indirect (undecodable boundary); 0x04E0BA\u2192indirect (undecodable boundary); 0x04E070\u2192indirect (undecodable boundary); 0x04E1AC\u21920x001DD8 (external jsr); 0x04E1C8\u21920x016FBA (external jmp); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-04", "commandSources": [ "0x04F342", "0x04F356" ], "localInstructionCount": 80, "externalFrontierCount": 16 }, { "id": "16-base-attack-06", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Kikosho", "command": "QCF + two punches", "variant": "Stock character", "tableAddress": "0x04DE50", "handlerAddress": "0x04E1CE", "selector": "B0=0x2A, E6=0x06", "status": "tested: child repeat-count extension", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Each even remaining budget reaches $04E310\u2013$04E314 and increments the child repeat counter +$50 through pointer +$392. The child starts with eight repeats at $0986FA and rearms through $09879A\u2013$0987CE.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x04E2FA" ], "gate": "Budget8 at $04E2A4; button helper $04E2FA; credit spend $04E302.", "effect": "Each even remaining budget reaches $04E310\u2013$04E314 and increments the child repeat counter +$50 through pointer +$392. The child starts with eight repeats at $0986FA and rearms through $09879A\u2013$0987CE.", "limit": "Eight accepted input events grant four additional child repeats; connected hits still depend on collision.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-06", "commandSources": [], "localInstructionCount": 96, "externalFrontierCount": 16, "reviewSource": "../../chun-li.md" }, { "id": "16-base-attack-08", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Senretsukyaku", "command": "QCF + two kicks", "variant": "Stock character", "tableAddress": "0x04DE52", "handlerAddress": "0x04E32A", "selector": "B0=0x2A, E6=0x08", "status": "tested: finite timer reimbursement", "staticStatus": "named causal path reviewed", "runtimeStatus": "MAME and independent FBNeo repeated-baseline fixtures", "finding": "Accepted edges spend one credit at $04E44E and skip the timer decrement at $04E454. The revised core trials consume all 60 credits; measured contacts depend on target and fixture.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x04E446" ], "gate": "Human budget60 at $04E348; active timer60 at $04E35A; helper $04E446.", "effect": "Accepted edges spend one credit at $04E44E and skip the timer decrement at $04E454. The revised core trials consume all 60 credits; measured contacts depend on target and fixture.", "limit": "Sixty credits are not sixty bonus hits; the earlier 25 observation is not a cap.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-08", "commandSources": [], "localInstructionCount": 116, "externalFrontierCount": 16, "reviewSource": "../core/result-summary.json" }, { "id": "16-base-attack-0a", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04DE54", "handlerAddress": "0x04E4D4", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "121 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04E4D4: unresolved shared/indirect closure: 0x04E68E\u21920x001DD8 (external jsr); 0x04E69C\u21920x016FBA (external jmp); 0x04E638\u21920x001DD8 (external jsr); 0x04E642\u21920x002490 (external jsr); 0x04E65E\u21920x017588 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-0a", "commandSources": [], "localInstructionCount": 121, "externalFrontierCount": 15 }, { "id": "16-base-attack-0c", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x0C", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x04DE56", "handlerAddress": "0x04E6A4", "selector": "B0=0x2A, E6=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "142 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x04E7E2.", "uncertainty": "Handler 0x04E6A4: unresolved shared/indirect closure: 0x04E6AC\u21920x013EFC (external jsr); 0x04E6C4\u21920x016FBA (external jmp); 0x04E8A4\u21920x001DD8 (external jsr); 0x04E8C6\u21920x016FBA (external jmp); 0x04E8D6\u21920x0177B6 (external jmp); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x04E7E2" ], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-0c", "commandSources": [ "0x04F3C8", "0x04F3D2" ], "localInstructionCount": 142, "externalFrontierCount": 15 }, { "id": "16-base-attack-0e", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04DE58", "handlerAddress": "0x04E8DE", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04E8DE: unresolved shared/indirect closure: 0x04E984\u21920x001DD8 (external jsr); 0x04E98C\u21920x015EF4 (external jmp); 0x04E94E\u21920x001DD8 (external jsr); 0x04E954\u21920x002490 (external jsr); 0x04E95A\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-0e", "commandSources": [], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "16-base-attack-10", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04DE5A", "handlerAddress": "0x04EE06", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "21 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04EE06: unresolved shared/indirect closure: 0x04EE42\u21920x0135E6 (external jmp); 0x04EE48\u21920x001DD8 (external jsr); 0x04EE52\u21920x016FBA (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-10", "commandSources": [], "localInstructionCount": 21, "externalFrontierCount": 3 }, { "id": "16-base-attack-12", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04DE5C", "handlerAddress": "0x04EA1E", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04EA1E: unresolved shared/indirect closure: 0x04EA1E\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "16-base-attack-14", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04DE5E", "handlerAddress": "0x04ED26", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04ED26: unresolved shared/indirect closure: 0x04ED26\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "16-base-attack-16", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04DE60", "handlerAddress": "0x04EA24", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "179 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04EA24: unresolved shared/indirect closure: 0x04ED16\u21920x001DD8 (external jsr); 0x04ED1E\u21920x016FBA (external jmp); 0x04ECD4\u21920x001DD8 (external jsr); 0x04ECDA\u21920x002490 (external jsr); 0x04ECE0\u21920x017588 (external jsr); 19 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-16", "commandSources": [], "localInstructionCount": 179, "externalFrontierCount": 24 }, { "id": "16-base-attack-18", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04DE62", "handlerAddress": "0x04DE94", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04DE94: unresolved shared/indirect closure: 0x04DEEA\u21920x001DD8 (external jsr); 0x04DEF2\u21920x016FBA (external jmp); 0x04DF08\u21920x0983CC (external jmp); 0x04DECA\u21920x01CD1E (external jsr); 0x04DEDE\u21920x0135E6 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-18", "commandSources": [], "localInstructionCount": 41, "externalFrontierCount": 7 }, { "id": "16-base-attack-1a", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04DE64", "handlerAddress": "0x04ED2C", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04ED2C: unresolved shared/indirect closure: 0x04ED2C\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-1a", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "16-base-attack-1c", "character": "Chun-Li", "characterId": "0x16", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x04DE66", "handlerAddress": "0x04E994", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "31 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04E994: unresolved shared/indirect closure: 0x04EA02\u21920x001DD8 (external jsr); 0x04EA08\u21920x002490 (external jsr); 0x04EA0E\u21920x017588 (external jsr); 0x04EA16\u21920x015EF4 (external jmp); 0x04E9A8\u21920x00A4B0 (external jsr); 1 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-attack-1c", "commandSources": [], "localInstructionCount": 31, "externalFrontierCount": 6 }, { "id": "16-base-throw-00", "character": "Chun-Li", "characterId": "0x16", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x04F118; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x04F1AA", "handlerAddress": "0x04F1AE", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04F1AE: unresolved shared/indirect closure: 0x04F1D6\u21920x0BD606 (external jsr); 0x04F1E6\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-throw-00", "localInstructionCount": 13, "externalFrontierCount": 2 }, { "id": "16-base-throw-02", "character": "Chun-Li", "characterId": "0x16", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x04F118; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x04F1AC", "handlerAddress": "0x04F1EC", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04F1EC: unresolved shared/indirect closure: 0x04F246\u21920x0BD606 (external jsr); 0x04F256\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#16", "codeSource": "context-route-receipts.json#leaves/16-base-throw-02", "localInstructionCount": 27, "externalFrontierCount": 2 }, { "id": "18-base-normal-0-lp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8340", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=0, B5=0, 4D=0", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit4, normalized new/buffered LP Clears buffer at $0504A4, sets attack attribute $1C, clears +$84/+$86 and local substate +$08 at $0504C6, then installs animation $10/$06 at $0504D4.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x05046A\u21920x001DD8 (external jsr); 0x050472\u21920x016FBA (external jmp); 0x050480\u21920x0176B6 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x050494", "0x050498", "0x0504A4" ], "gate": "Nonzero animation flag +$3C; normal animation has not ended; shared posture/normal-transition gates must permit continuation. Calls $0176B6 and $01741E.", "effect": "Clears buffer at $0504A4, sets attack attribute $1C, clears +$84/+$86 and local substate +$08 at $0504C6, then installs animation $10/$06 at $0504D4.", "limit": "No explicit finite bonus-hit allowance is established in this local branch. This is a code-verified normal animation restart, not a measured hit increase or a Hyper extension.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-0-lp", "localInstructionCount": 42, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#18-base-normal-0-lp", "animationInstallAddresses": [ "0x04FFBA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#18-base-normal-0-lp" }, { "id": "18-base-normal-0-mp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8342", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x0504DA\u21920x001DD8 (external jsr); 0x0504E2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#18-base-normal-0-mp", "animationInstallAddresses": [ "0x04FFF2" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-0-hp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8344", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "47 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x0504EA\u21920x0B5C92 (external jsr); 0x0504F0\u21920x001DD8 (external jsr); 0x050508\u21920x016FBA (external jmp); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-0-hp", "localInstructionCount": 47, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#18-base-normal-0-hp", "animationInstallAddresses": [ "0x050022" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-0-lk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8346", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "26 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x050648\u21920x001DD8 (external jsr); 0x050650\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-0-lk", "localInstructionCount": 26, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#18-base-normal-0-lk", "animationInstallAddresses": [ "0x050114" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-0-mk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8348", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "63 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x0506CA\u21920x001DD8 (external jsr); 0x0506E2\u21920x079094 (external jsr); 0x0506FA\u21920x079094 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-0-mk", "localInstructionCount": 63, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#18-base-normal-0-mk", "animationInstallAddresses": [ "0x05015C" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-0-hk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E834A", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "63 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x050816\u21920x0B5C92 (external jsr); 0x05081C\u21920x001DD8 (external jsr); 0x050824\u21920x016FBA (external jmp); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-0-hk", "localInstructionCount": 63, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#18-base-normal-0-hk", "animationInstallAddresses": [ "0x050188" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-1-lp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E834C", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=2, B5=0, 4D=0", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit4, normalized new/buffered LP Clears buffer at $0505C0, sets attack attribute $1D, clears +$84/+$86 and local substate +$08 at $0505E2, then installs animation $14/$06 at $0505F0.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x050586\u21920x001DD8 (external jsr); 0x05058E\u21920x016FBA (external jmp); 0x05059C\u21920x0176B6 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x0505B0", "0x0505B4", "0x0505C0" ], "gate": "Nonzero animation flag +$3C; normal animation has not ended; shared posture/normal-transition gates must permit continuation. Calls $0176B6 and $017456.", "effect": "Clears buffer at $0505C0, sets attack attribute $1D, clears +$84/+$86 and local substate +$08 at $0505E2, then installs animation $14/$06 at $0505F0.", "limit": "No explicit finite bonus-hit allowance is established in this local branch. This is a code-verified normal animation restart, not a measured hit increase or a Hyper extension.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-1-lp", "localInstructionCount": 42, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#18-base-normal-1-lp", "animationInstallAddresses": [ "0x050066" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#18-base-normal-1-lp" }, { "id": "18-base-normal-1-mp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E834E", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "24 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x0505F6\u21920x001DD8 (external jsr); 0x0505FE\u21920x016FBA (external jmp); 0x050612\u21920x079094 (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-1-mp", "localInstructionCount": 24, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#18-base-normal-1-mp", "animationInstallAddresses": [ "0x050096" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-1-hp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8350", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x05061A\u21920x001DD8 (external jsr); 0x050622\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#18-base-normal-1-hp", "animationInstallAddresses": [ "0x0500C6" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-1-lk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8352", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x050840\u21920x001DD8 (external jsr); 0x050848\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#18-base-normal-1-lk", "animationInstallAddresses": [ "0x0501CC" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-1-mk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8354", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "63 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x0508AA\u21920x001DD8 (external jsr); 0x0508C2\u21920x079094 (external jsr); 0x0508DA\u21920x079094 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-1-mk", "localInstructionCount": 63, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#18-base-normal-1-mk", "animationInstallAddresses": [ "0x050200" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-1-hk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8356", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "46 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x050438\u21920x002490 (external jsr); 0x05043E\u21920x017540 (external jsr); 0x05099C\u21920x0B5C92 (external jsr); 0x0509A2\u21920x001DD8 (external jsr); 0x0509AA\u21920x016FBA (external jmp); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-1-hk", "localInstructionCount": 46, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#18-base-normal-1-hk", "animationInstallAddresses": [ "0x050228" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-2-lp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8358", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x0509E0\u21920x017588 (external jsr); 0x0509E8\u21920x0178C8 (external jmp); 0x0509F6\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#18-base-normal-2-lp", "animationInstallAddresses": [ "0x0502A0" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-2-mp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E835A", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x0509E0\u21920x017588 (external jsr); 0x0509E8\u21920x0178C8 (external jmp); 0x0509F6\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#18-base-normal-2-mp", "animationInstallAddresses": [ "0x0502D0" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-2-hp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E835C", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x0509E0\u21920x017588 (external jsr); 0x0509E8\u21920x0178C8 (external jmp); 0x0509F6\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#18-base-normal-2-hp", "animationInstallAddresses": [ "0x050300" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-2-lk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E835E", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x050A14\u21920x017588 (external jsr); 0x050A1C\u21920x0178C8 (external jmp); 0x050A2A\u21920x001DD8 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-2-lk", "localInstructionCount": 29, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#18-base-normal-2-lk", "animationInstallAddresses": [ "0x050356" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-2-mk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8360", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "26 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x050A14\u21920x017588 (external jsr); 0x050A1C\u21920x0178C8 (external jmp); 0x050A38\u21920x001DD8 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-2-mk", "localInstructionCount": 26, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#18-base-normal-2-mk", "animationInstallAddresses": [ "0x050386" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-2-hk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8362", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "69 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x050A14\u21920x017588 (external jsr); 0x050A1C\u21920x0178C8 (external jmp); 0x050A66\u21920x001DD8 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-2-hk", "localInstructionCount": 69, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#18-base-normal-2-hk", "animationInstallAddresses": [ "0x0503D2", "0x050416" ], "directionVariantGroups": 2 }, { "id": "18-base-normal-3-lp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8364", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509B2\u21920x01485C (external jsr); 0x0509B8\u21920x013E92 (external jsr); 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x0509E0\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#18-base-normal-3-lp", "animationInstallAddresses": [ "0x0502A0" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-3-mp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8366", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509B2\u21920x01485C (external jsr); 0x0509B8\u21920x013E92 (external jsr); 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x0509E0\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#18-base-normal-3-mp", "animationInstallAddresses": [ "0x0502D0" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-3-hp", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8368", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509B2\u21920x01485C (external jsr); 0x0509B8\u21920x013E92 (external jsr); 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x0509E0\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#18-base-normal-3-hp", "animationInstallAddresses": [ "0x050300" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-3-lk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E836A", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "31 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509B2\u21920x01485C (external jsr); 0x0509B8\u21920x013E92 (external jsr); 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x050A14\u21920x017588 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-3-lk", "localInstructionCount": 31, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#18-base-normal-3-lk", "animationInstallAddresses": [ "0x050356" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-3-mk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E836C", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "28 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509B2\u21920x01485C (external jsr); 0x0509B8\u21920x013E92 (external jsr); 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x050A14\u21920x017588 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-3-mk", "localInstructionCount": 28, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#18-base-normal-3-mk", "animationInstallAddresses": [ "0x050386" ], "directionVariantGroups": 0 }, { "id": "18-base-normal-3-hk", "character": "Jin", "characterId": "0x18", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E836E", "handlerAddress": "0x04FF56", "updateHandlerAddress": "0x05041C", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "71 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x04FF56: unresolved shared/indirect closure: 0x0509B2\u21920x01485C (external jsr); 0x0509B8\u21920x013E92 (external jsr); 0x0509BE\u21920x013EFC (external jsr); 0x0509C4\u21920x013E64 (external jsr); 0x050A14\u21920x017588 (external jsr); 8 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "normal-route-receipts.json#18-base-normal-3-hk", "localInstructionCount": 71, "externalFrontierCount": 13, "initializerSource": "normal-initializer-receipts.json#18-base-normal-3-hk", "animationInstallAddresses": [ "0x0503D2", "0x050416" ], "directionVariantGroups": 2 }, { "id": "18-base-attack-00", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x00", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05106C", "handlerAddress": "0x0510BC", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "122 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0510BC: unresolved shared/indirect closure: 0x05127C\u21920x001DD8 (external jsr); 0x051296\u21920x016FBA (external jmp); 0x0511BE\u21920x001DD8 (external jsr); 0x0511DE\u21920x079094 (external jsr); 0x05124A\u21920x0024C4 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-00", "commandSources": [ "0x05331A", "0x053328" ], "localInstructionCount": 122, "externalFrontierCount": 15 }, { "id": "18-base-attack-02", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x02", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05106E", "handlerAddress": "0x05129E", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "164 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05129E: unresolved shared/indirect closure: 0x051432\u21920x001DD8 (external jsr); 0x051452\u21920x016FBA (external jmp); 0x05132E\u21920x001DD8 (external jsr); 0x05134A\u21920x079094 (external jsr); 0x05135E\u21920x00A4B0 (external jsr); 19 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-02", "commandSources": [ "0x053332", "0x053340" ], "localInstructionCount": 164, "externalFrontierCount": 24 }, { "id": "18-base-attack-04", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x04", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x051070", "handlerAddress": "0x05151E", "selector": "B0=0x2A, E6=0x04", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "297 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05151E: unresolved shared/indirect closure: 0x051766\u21920x001DD8 (external jsr); 0x051780\u21920x016FBA (external jmp); 0x051796\u21920x079094 (external jmp); 0x051736\u21920x001DD8 (external jsr); 0x05173E\u21920x0CB574 (external jsr); 36 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-04", "commandSources": [], "localInstructionCount": 297, "externalFrontierCount": 41 }, { "id": "18-base-attack-06", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x06", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x051072", "handlerAddress": "0x0519D0", "selector": "B0=0x2A, E6=0x06", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "123 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0519D0: unresolved shared/indirect closure: 0x051B70\u21920x001DD8 (external jsr); 0x051B88\u21920x0CB574 (external jsr); 0x051B8E\u21920x0CB5A0 (external jsr); 0x051BA6\u21920x016FBA (external jmp); 0x051B54\u21920x001DD8 (external jsr); 16 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-06", "commandSources": [], "localInstructionCount": 123, "externalFrontierCount": 21 }, { "id": "18-base-attack-08", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x08", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x051074", "handlerAddress": "0x051BAE", "selector": "B0=0x2A, E6=0x08", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "156 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x051BAE: unresolved shared/indirect closure: 0x051DC6\u21920x001DD8 (external jsr); 0x051DE0\u21920x016FBA (external jmp); 0x051D08\u21920x001DD8 (external jsr); 0x051D0E\u21920x0024C4 (external jsr); 0x051D98\u21920x0187CA (external jmp); 18 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-08", "commandSources": [], "localInstructionCount": 156, "externalFrontierCount": 23 }, { "id": "18-base-attack-0a", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x0A", "command": "F \u2192 DF \u2192 D \u2192 DB \u2192 B + K", "variant": "Stock character", "tableAddress": "0x051076", "handlerAddress": "0x051E16", "selector": "B0=0x2A, E6=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "81 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x051E16: unresolved shared/indirect closure: 0x051F3C\u21920x001DD8 (external jsr); 0x051F56\u21920x016FBA (external jmp); 0x051EA6\u21920x0B5C92 (external jsr); 0x051EAC\u21920x0024C4 (external jsr); 0x051F04\u21920x0187CA (external jsr); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-0a", "commandSources": [ "0x053392" ], "localInstructionCount": 81, "externalFrontierCount": 11 }, { "id": "18-base-attack-0c", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x051078", "handlerAddress": "0x051F5E", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "56 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x051F5E: unresolved shared/indirect closure: 0x052036\u21920x001DD8 (external jsr); 0x05203E\u21920x015EF4 (external jmp); 0x051FF0\u21920x001DD8 (external jsr); 0x051FF6\u21920x002490 (external jsr); 0x051FFC\u21920x017588 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-0c", "commandSources": [], "localInstructionCount": 56, "externalFrontierCount": 10 }, { "id": "18-base-attack-0e", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05107A", "handlerAddress": "0x052046", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "54 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x052046: unresolved shared/indirect closure: 0x052102\u21920x001DD8 (external jsr); 0x052120\u21920x016FBA (external jmp); 0x0520B6\u21920x001DD8 (external jsr); 0x0520D0\u21920x0149E8 (external jsr); 0x0520E6\u21920x0D5A7E (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-0e", "commandSources": [], "localInstructionCount": 54, "externalFrontierCount": 9 }, { "id": "18-base-attack-10", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05107C", "handlerAddress": "0x052128", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "184 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x0521F2.", "uncertainty": "Handler 0x052128: unresolved shared/indirect closure: 0x0522CA\u21920x001DD8 (external jsr); 0x0522D2\u21920x00A4B0 (external jsr); 0x0522EA\u21920x016FBA (external jmp); 0x0522A4\u21920x001DD8 (external jsr); 0x0522B0\u21920x0135E6 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x0521F2" ], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-10", "commandSources": [], "localInstructionCount": 184, "externalFrontierCount": 15 }, { "id": "18-base-attack-12", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05107E", "handlerAddress": "0x051086", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x051086: unresolved shared/indirect closure: 0x051086\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "18-base-attack-14", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x051080", "handlerAddress": "0x05108C", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05108C: unresolved shared/indirect closure: 0x05108C\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "18-base-attack-16", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x051082", "handlerAddress": "0x051F5E", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "46 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x051F5E: unresolved shared/indirect closure: 0x052036\u21920x001DD8 (external jsr); 0x05203E\u21920x015EF4 (external jmp); 0x051FF0\u21920x001DD8 (external jsr); 0x051FF6\u21920x002490 (external jsr); 0x051FFC\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-16", "commandSources": [], "localInstructionCount": 46, "externalFrontierCount": 8 }, { "id": "18-base-attack-18", "character": "Jin", "characterId": "0x18", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x051084", "handlerAddress": "0x051092", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x051092: unresolved shared/indirect closure: 0x051092\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-attack-18", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "18-base-throw-00", "character": "Jin", "characterId": "0x18", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x05239C; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x05243E", "handlerAddress": "0x052448", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "16 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x052448: unresolved shared/indirect closure: 0x052466\u21920x0BD606 (external jsr); 0x05246C\u21920x01CD1C (external jsr); 0x052476\u21920x0135E6 (external jsr); 0x05247E\u21920x01439A (external jsr); 0x052486\u21920x014388 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-throw-00", "localInstructionCount": 16, "externalFrontierCount": 5 }, { "id": "18-base-throw-02", "character": "Jin", "characterId": "0x18", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x05239C; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x052440", "handlerAddress": "0x05248C", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x05248C: unresolved shared/indirect closure: 0x0524AA\u21920x0BD606 (external jsr); 0x0524B0\u21920x01CD1C (external jsr); 0x0524BA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-throw-02", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "18-base-throw-04", "character": "Jin", "characterId": "0x18", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x05239C; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x052442", "handlerAddress": "0x0524C0", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0524C0: unresolved shared/indirect closure: 0x0524CA\u21920x0BD606 (external jsr); 0x0524D0\u21920x01CD1C (external jsr); 0x0524DA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-throw-04", "localInstructionCount": 8, "externalFrontierCount": 3 }, { "id": "18-base-throw-06", "character": "Jin", "characterId": "0x18", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x05239C; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x052444", "handlerAddress": "0x0524E0", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0524E0: unresolved shared/indirect closure: 0x0524EA\u21920x0BD606 (external jsr); 0x0524F0\u21920x01CD1C (external jsr); 0x0524FA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-throw-06", "localInstructionCount": 8, "externalFrontierCount": 3 }, { "id": "18-base-throw-08", "character": "Jin", "characterId": "0x18", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x05239C; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x052446", "handlerAddress": "0x052500", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "3 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x052500: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#18", "codeSource": "context-route-receipts.json#leaves/18-base-throw-08", "localInstructionCount": 3, "externalFrontierCount": 0 }, { "id": "1a-base-normal-0-lp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Zangief normal form", "tableAddress": "0x0E8370", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054C5A\u21920x001DD8 (external jsr); 0x054C62\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-0-lp", "animationInstallAddresses": [ "0x054640" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-0-mp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Zangief normal form", "tableAddress": "0x0E8372", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "45 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054C6A\u21920x001DD8 (external jsr); 0x054CA0\u21920x0BF770 (external jsr); 0x054CBC\u21920x0B54E4 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-0-mp", "localInstructionCount": 45, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-0-mp", "animationInstallAddresses": [ "0x054680", "0x0546B0" ], "directionVariantGroups": 2 }, { "id": "1a-base-normal-0-hp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Zangief normal form", "tableAddress": "0x0E8374", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054CEC\u21920x001DD8 (external jsr); 0x054D0E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-0-hp", "localInstructionCount": 25, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-0-hp", "animationInstallAddresses": [ "0x0546E0" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-0-lk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Zangief normal form", "tableAddress": "0x0E8376", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D76\u21920x001DD8 (external jsr); 0x054D7E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-0-lk", "animationInstallAddresses": [ "0x0547C2" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-0-mk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Zangief normal form", "tableAddress": "0x0E8378", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D86\u21920x001DD8 (external jsr); 0x054D8E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-0-mk", "animationInstallAddresses": [ "0x0547F2" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-0-hk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Zangief normal form", "tableAddress": "0x0E837A", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "36 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D96\u21920x001DD8 (external jsr); 0x054D9E\u21920x016FBA (external jmp); 0x054DBE\u21920x0D5A7E (external jsr). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-0-hk", "localInstructionCount": 36, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-0-hk", "animationInstallAddresses": [ "0x054826" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-1-lp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Zangief normal form", "tableAddress": "0x0E837C", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D28\u21920x001DD8 (external jsr); 0x054D30\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-1-lp", "animationInstallAddresses": [ "0x05471C" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-1-mp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Zangief normal form", "tableAddress": "0x0E837E", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D38\u21920x001DD8 (external jsr); 0x054D42\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-1-mp", "animationInstallAddresses": [ "0x054754" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-1-hp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Zangief normal form", "tableAddress": "0x0E8380", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D48\u21920x001DD8 (external jsr); 0x054D52\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-1-hp", "animationInstallAddresses": [ "0x05477C" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-1-lk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Zangief normal form", "tableAddress": "0x0E8382", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054E04\u21920x001DD8 (external jsr); 0x054E0C\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-1-lk", "animationInstallAddresses": [ "0x05486A" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-1-mk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Zangief normal form", "tableAddress": "0x0E8384", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054E14\u21920x001DD8 (external jsr); 0x054E1C\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-1-mk", "animationInstallAddresses": [ "0x05489A" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-1-hk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Zangief normal form", "tableAddress": "0x0E8386", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054E24\u21920x001DD8 (external jsr); 0x054E2C\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-1-hk", "animationInstallAddresses": [ "0x0548CA" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-2-lp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Zangief normal form", "tableAddress": "0x0E8388", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "19 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x054E68\u21920x001DD8 (external jsr); 0x054E70\u21920x0177B6 (external jmp); 0x054E76\u21920x017588 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-2-lp", "localInstructionCount": 19, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-2-lp", "animationInstallAddresses": [ "0x054938" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-2-mp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Zangief normal form", "tableAddress": "0x0E838A", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "91 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x054FB6\u21920x001DD8 (external jsr); 0x054FC4\u21920x016FBA (external jmp); 0x054F38\u21920x001DD8 (external jsr); 15 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-2-mp", "localInstructionCount": 91, "externalFrontierCount": 20, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-2-mp", "animationInstallAddresses": [ "0x054996", "0x0549F6", "0x054A26" ], "directionVariantGroups": 3 }, { "id": "1a-base-normal-2-hp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Zangief normal form", "tableAddress": "0x0E838C", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x05500E\u21920x001DD8 (external jsr); 0x055014\u21920x017588 (external jsr); 0x05501E\u21920x0178C8 (external jmp); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-2-hp", "localInstructionCount": 27, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-2-hp", "animationInstallAddresses": [ "0x054A6E", "0x054ACE", "0x054AFE" ], "directionVariantGroups": 3 }, { "id": "1a-base-normal-2-lk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Zangief normal form", "tableAddress": "0x0E838E", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 0x05503C\u21920x0178C8 (external jmp); 0x05504A\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-2-lk", "animationInstallAddresses": [ "0x054B4C" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-2-mk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Zangief normal form", "tableAddress": "0x0E8390", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "23 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 0x05503C\u21920x0178C8 (external jmp); 0x055062\u21920x001DD8 (external jmp); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-2-mk", "localInstructionCount": 23, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-2-mk", "animationInstallAddresses": [ "0x054BA6", "0x054BD6" ], "directionVariantGroups": 2 }, { "id": "1a-base-normal-2-hk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Zangief normal form", "tableAddress": "0x0E8392", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 0x05503C\u21920x0178C8 (external jmp); 0x055078\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-2-hk", "animationInstallAddresses": [ "0x054C06" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-3-lp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Zangief normal form", "tableAddress": "0x0E8394", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "21 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x054E68\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-3-lp", "localInstructionCount": 21, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-3-lp", "animationInstallAddresses": [ "0x054938" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-3-mp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Zangief normal form", "tableAddress": "0x0E8396", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "93 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x054FB6\u21920x001DD8 (external jsr); 17 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-3-mp", "localInstructionCount": 93, "externalFrontierCount": 22, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-3-mp", "animationInstallAddresses": [ "0x054996", "0x0549F6", "0x054A26" ], "directionVariantGroups": 3 }, { "id": "1a-base-normal-3-hp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Zangief normal form", "tableAddress": "0x0E8398", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x05500E\u21920x001DD8 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-3-hp", "localInstructionCount": 29, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-3-hp", "animationInstallAddresses": [ "0x054A6E", "0x054ACE", "0x054AFE" ], "directionVariantGroups": 3 }, { "id": "1a-base-normal-3-lk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Zangief normal form", "tableAddress": "0x0E839A", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-3-lk", "animationInstallAddresses": [ "0x054B4C" ], "directionVariantGroups": 0 }, { "id": "1a-base-normal-3-mk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Zangief normal form", "tableAddress": "0x0E839C", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-3-mk", "localInstructionCount": 25, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-3-mk", "animationInstallAddresses": [ "0x054BA6", "0x054BD6" ], "directionVariantGroups": 2 }, { "id": "1a-base-normal-3-hk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Zangief normal form", "tableAddress": "0x0E839E", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-base-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1a-base-normal-3-hk", "animationInstallAddresses": [ "0x054C06" ], "directionVariantGroups": 0 }, { "id": "1a-base-attack-00", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x00", "command": "exact newly-pressed word = 0x0070", "variant": "Zangief normal form", "tableAddress": "0x055218", "handlerAddress": "0x05524E", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "101 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x055310, 0x0553BC, 0x0553E0.", "uncertainty": "Handler 0x05524E: unresolved shared/indirect closure: 0x0553FC\u21920x017588 (external jsr); 0x055406\u21920x0178C8 (external jmp); 0x05540C\u21920x002490 (external jsr); 0x055412\u21920x001DD8 (external jmp); 0x055394\u21920x01CD1E (external jsr); 9 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x055310", "0x0553BC", "0x0553E0" ], "gate": "Exact selectors: B0=0x2A, E6=0x00; Zangief normal form. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-00", "commandSources": [ "0x053608" ], "localInstructionCount": 101, "externalFrontierCount": 14 }, { "id": "1a-base-attack-02", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x02", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x05521A", "handlerAddress": "0x055418", "selector": "B0=0x2A, E6=0x02", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "102 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x0554E2, 0x0554EE, 0x055596, 0x0555BA.", "uncertainty": "Handler 0x055418: unresolved shared/indirect closure: 0x0555D6\u21920x017588 (external jsr); 0x0555E0\u21920x0178C8 (external jmp); 0x0555E6\u21920x002490 (external jsr); 0x0555EC\u21920x001DD8 (external jmp); 0x05556E\u21920x01CD1E (external jsr); 9 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x0554E2", "0x0554EE", "0x055596", "0x0555BA" ], "gate": "Exact selectors: B0=0x2A, E6=0x02; Zangief normal form. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-02", "commandSources": [], "localInstructionCount": 102, "externalFrontierCount": 14 }, { "id": "1a-base-attack-04", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x04", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Zangief normal form", "tableAddress": "0x05521C", "handlerAddress": "0x0555F2", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "70 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0555F2: unresolved shared/indirect closure: 0x055676\u21920x002490 (external jsr); 0x05567C\u21920x001DD8 (external jsr); 0x0556D0\u21920x099F06 (external jsr); 0x055716\u21920x016FBA (external jmp); 0x05562C\u21920x017634 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-04", "commandSources": [ "0x0589EE", "0x058AFC" ], "localInstructionCount": 70, "externalFrontierCount": 8 }, { "id": "1a-base-attack-06", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x06", "command": "raw descriptor; matcher semantics unresolved", "variant": "Zangief normal form", "tableAddress": "0x05521E", "handlerAddress": "0x055722", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "85 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055722: unresolved shared/indirect closure: 0x05585E\u21920x002490 (external jsr); 0x055864\u21920x001DD8 (external jsr); 0x055882\u21920x0177B6 (external jmp); 0x055800\u21920x001DD8 (external jsr); 0x05580A\u21920x0D7478 (external jsr); 14 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-06", "commandSources": [ "0x0589FE", "0x058ADE" ], "localInstructionCount": 85, "externalFrontierCount": 19 }, { "id": "1a-base-attack-08", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x08", "command": "B \u2192 DB \u2192 D \u2192 DF \u2192 F + K / raw descriptor; matcher semantics unresolved", "variant": "Zangief normal form", "tableAddress": "0x055220", "handlerAddress": "0x055888", "selector": "B0=0x2A, E6=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "72 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055888: unresolved shared/indirect closure: 0x055A0A\u21920x001DD8 (external jsr); 0x055A16\u21920x016FBA (external jmp); 0x0559A6\u21920x0B5C92 (external jsr); 0x0559AC\u21920x0024C4 (external jsr); 0x0559B2\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-08", "commandSources": [ "0x058A08", "0x058AF2" ], "localInstructionCount": 72, "externalFrontierCount": 15 }, { "id": "1a-base-attack-0a", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x055222", "handlerAddress": "0x055A1C", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "72 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055A1C: unresolved shared/indirect closure: 0x055B44\u21920x001DD8 (external jsr); 0x055B50\u21920x016FBA (external jmp); 0x055AC2\u21920x0148FE (external jmp); 0x055AD6\u21920x0B5C92 (external jsr); 0x055ADC\u21920x0024C4 (external jsr); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-0a", "commandSources": [], "localInstructionCount": 72, "externalFrontierCount": 13 }, { "id": "1a-base-attack-0c", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x0C", "command": "F \u2192 D \u2192 DF + K", "variant": "Zangief normal form", "tableAddress": "0x055224", "handlerAddress": "0x055C34", "selector": "B0=0x2A, E6=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "52 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055C34: unresolved shared/indirect closure: 0x055D10\u21920x0177B6 (external jmp); 0x055D16\u21920x001DD8 (external jsr); 0x055D1C\u21920x002490 (external jsr); 0x055D2C\u21920x0D7526 (external jsr); 0x055D40\u21920x0187CA (external jmp); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-0c", "commandSources": [ "0x058A3A" ], "localInstructionCount": 52, "externalFrontierCount": 10 }, { "id": "1a-base-attack-0e", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x055226", "handlerAddress": "0x05663A", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "50 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05663A: unresolved shared/indirect closure: 0x056700\u21920x001DD8 (external jsr); 0x056708\u21920x016FBA (external jmp); 0x0566C2\u21920x001DD8 (external jsr); 0x0566C8\u21920x002490 (external jsr); 0x0566CE\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-0e", "commandSources": [], "localInstructionCount": 50, "externalFrontierCount": 8 }, { "id": "1a-base-attack-10", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x055228", "handlerAddress": "0x056710", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "59 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x056710: unresolved shared/indirect closure: 0x05678A\u21920x014A2E (external jmp); 0x0567E8\u21920x0024C4 (external jsr); 0x0567EE\u21920x001DD8 (external jsr); 0x0567F8\u21920x016FBA (external jmp); 0x05676C\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-10", "commandSources": [], "localInstructionCount": 59, "externalFrontierCount": 5 }, { "id": "1a-base-attack-12", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x05522A", "handlerAddress": "0x056800", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x056800: unresolved shared/indirect closure: 0x05681E\u21920x001DD8 (external jsr); 0x056828\u21920x016FBA (external jmp); 0x056818\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-12", "commandSources": [], "localInstructionCount": 11, "externalFrontierCount": 3 }, { "id": "1a-base-attack-14", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x05522C", "handlerAddress": "0x0560BC", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0560BC: unresolved shared/indirect closure: 0x0560BC\u21920x016FBA (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1a-base-attack-16", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x05522E", "handlerAddress": "0x0560C2", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0560C2: unresolved shared/indirect closure: 0x0560C2\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-16", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1a-base-attack-18", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x055230", "handlerAddress": "0x0560C8", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "248 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0560C8: unresolved shared/indirect closure: 0x05661A\u21920x001DD8 (external jsr); 0x05662E\u21920x016FBA (external jmp); 0x0565E4\u21920x002490 (external jsr); 0x0565EA\u21920x017588 (external jsr); 0x0565F2\u21920x0B62B6 (external jsr); 35 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-18", "commandSources": [], "localInstructionCount": 248, "externalFrontierCount": 40 }, { "id": "1a-base-attack-1a", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x055232", "handlerAddress": "0x055242", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055242: unresolved shared/indirect closure: 0x055242\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-1a", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1a-base-attack-1c", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x055234", "handlerAddress": "0x056634", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x056634: unresolved shared/indirect closure: 0x056634\u21920x016FBA (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-1c", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1a-base-attack-1e", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x1E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x055236", "handlerAddress": "0x055248", "selector": "B0=0x2A, E6=0x1E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055248: unresolved shared/indirect closure: 0x055248\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1E; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-1e", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1a-base-attack-20", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x20", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x055238", "handlerAddress": "0x05663A", "selector": "B0=0x2A, E6=0x20", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "48 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05663A: unresolved shared/indirect closure: 0x056700\u21920x001DD8 (external jsr); 0x056708\u21920x016FBA (external jmp); 0x0566C2\u21920x001DD8 (external jsr); 0x0566C8\u21920x002490 (external jsr); 0x0566CE\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x20; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-20", "commandSources": [], "localInstructionCount": 48, "externalFrontierCount": 7 }, { "id": "1a-base-attack-22", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x22", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x05523A", "handlerAddress": "0x055B56", "selector": "B0=0x2A, E6=0x22", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "51 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055B56: unresolved shared/indirect closure: 0x055C24\u21920x001DD8 (external jsr); 0x055C2E\u21920x016FBA (external jmp); 0x055BE6\u21920x001DD8 (external jsr); 0x055BF8\u21920x0135E6 (external jmp); 0x055BFE\u21920x0D7526 (external jsr); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x22; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-22", "commandSources": [], "localInstructionCount": 51, "externalFrontierCount": 13 }, { "id": "1a-base-attack-24", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Mecha Zangief transformation", "command": "B \u2192 D \u2192 DB + LK", "variant": "Zangief normal form", "tableAddress": "0x05523C", "handlerAddress": "0x055D48", "selector": "B0=0x2A, E6=0x24", "status": "static: native mode transition", "staticStatus": "named causal path reviewed", "runtimeStatus": "static only", "finding": "Handler $055D48 writes +$EB=2 at $055DC2 to enter Mecha or clears it at $055E1E to return.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Native command candidate $054214/$0542AA, selector E6=$24; meter and caller gates retained.", "effect": "Handler $055D48 writes +$EB=2 at $055DC2 to enter Mecha or clears it at $055E1E to return.", "limit": "Mode transition, not an added-hit mechanism.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-24", "commandSources": [], "localInstructionCount": 52, "externalFrontierCount": 9, "reviewSource": "normal-review/initializer-review.md" }, { "id": "1a-base-attack-26", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x26", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x05523E", "handlerAddress": "0x055E4C", "selector": "B0=0x2A, E6=0x26", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "49 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055E4C: unresolved shared/indirect closure: 0x055F06\u21920x001DD8 (external jsr); 0x055F0E\u21920x016FBA (external jmp); 0x055EFA\u21920x0135E6 (external jmp); 0x055F00\u21920x001DD8 (external jmp); 0x055EC0\u21920x001DD8 (external jsr); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x26; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-26", "commandSources": [], "localInstructionCount": 49, "externalFrontierCount": 11 }, { "id": "1a-base-attack-28", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x28", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Zangief normal form", "tableAddress": "0x055240", "handlerAddress": "0x055F16", "selector": "B0=0x2A, E6=0x28", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "99 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055F16: unresolved shared/indirect closure: 0x0560AC\u21920x001DD8 (external jsr); 0x0560B4\u21920x016FBA (external jmp); 0x056084\u21920x002490 (external jsr); 0x05608A\u21920x017588 (external jsr); 0x056096\u21920x0B62B6 (external jsr); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x28; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-attack-28", "commandSources": [], "localInstructionCount": 99, "externalFrontierCount": 16 }, { "id": "1a-base-throw-00", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x05697C", "handlerAddress": "0x05699A", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x05699A: unresolved shared/indirect closure: 0x0569D4\u21920x0BD606 (external jsr); 0x0569DE\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-00", "localInstructionCount": 15, "externalFrontierCount": 2 }, { "id": "1a-base-throw-02", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x05697E", "handlerAddress": "0x0569E4", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0569E4: unresolved shared/indirect closure: 0x0569F2\u21920x0BD606 (external jsr); 0x056A02\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-02", "localInstructionCount": 8, "externalFrontierCount": 2 }, { "id": "1a-base-throw-04", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x056980", "handlerAddress": "0x056A08", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "7 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056A08: unresolved shared/indirect closure: 0x056A10\u21920x0BD606 (external jsr); 0x056A20\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-04", "localInstructionCount": 7, "externalFrontierCount": 2 }, { "id": "1a-base-throw-06", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x056982", "handlerAddress": "0x056A26", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056A26: unresolved shared/indirect closure: 0x056A2A\u21920x0D5A7E (external jsr); 0x056A38\u21920x0BD606 (external jsr); 0x056A42\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-06", "localInstructionCount": 8, "externalFrontierCount": 3 }, { "id": "1a-base-throw-08", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x056984", "handlerAddress": "0x056A48", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056A48: unresolved shared/indirect closure: 0x056A4C\u21920x0D5A7E (external jsr); 0x056A5A\u21920x0BD606 (external jsr); 0x056A64\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-08", "localInstructionCount": 8, "externalFrontierCount": 3 }, { "id": "1a-base-throw-0a", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x0A", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x056986", "handlerAddress": "0x056A6A", "selector": "E4=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "7 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056A6A: unresolved shared/indirect closure: 0x056A78\u21920x0BD606 (external jsr); 0x056A82\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0A; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-0a", "localInstructionCount": 7, "externalFrontierCount": 2 }, { "id": "1a-base-throw-0c", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x0C", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x056988", "handlerAddress": "0x056A88", "selector": "E4=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "7 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056A88: unresolved shared/indirect closure: 0x056A96\u21920x0BD606 (external jsr); 0x056AA0\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0C; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-0c", "localInstructionCount": 7, "externalFrontierCount": 2 }, { "id": "1a-base-throw-0e", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x0E", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x05698A", "handlerAddress": "0x056AA6", "selector": "E4=0x0E", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "9 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056AA6: unresolved shared/indirect closure: 0x056ABE\u21920x0BD606 (external jsr); 0x056AC8\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0E; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-0e", "localInstructionCount": 9, "externalFrontierCount": 2 }, { "id": "1a-base-throw-10", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x10", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x05698C", "handlerAddress": "0x056ACE", "selector": "E4=0x10", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056ACE: unresolved shared/indirect closure: 0x056B14\u21920x0BD606 (external jsr); 0x056B24\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x10; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-10", "localInstructionCount": 20, "externalFrontierCount": 2 }, { "id": "1a-base-throw-12", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x12", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x05698E", "handlerAddress": "0x056B2A", "selector": "E4=0x12", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "6 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056B2A: unresolved shared/indirect closure: 0x056B32\u21920x0BD606 (external jsr); 0x056B3C\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x12; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-12", "localInstructionCount": 6, "externalFrontierCount": 2 }, { "id": "1a-base-throw-14", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x14", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x056990", "handlerAddress": "0x056B42", "selector": "E4=0x14", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056B42: unresolved shared/indirect closure: 0x056B56\u21920x0BD606 (external jsr); 0x056B68\u21920x0135E6 (external jmp); 0x056B72\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x14; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-14", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "1a-base-throw-16", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x16", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x056992", "handlerAddress": "0x056B78", "selector": "E4=0x16", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056B78: unresolved shared/indirect closure: 0x056B86\u21920x0BD606 (external jsr); 0x056BAC\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x16; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-16", "localInstructionCount": 12, "externalFrontierCount": 2 }, { "id": "1a-base-throw-18", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x18", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x056994", "handlerAddress": "0x056998", "selector": "E4=0x18", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056998: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x18; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-18", "localInstructionCount": 1, "externalFrontierCount": 0 }, { "id": "1a-base-throw-1a", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x1A", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Zangief normal form", "tableAddress": "0x056996", "handlerAddress": "0x056BB2", "selector": "E4=0x1A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056BB2: unresolved shared/indirect closure: 0x056BC6\u21920x0BD606 (external jsr); 0x056BD0\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x1A; Zangief normal form. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-base-throw-1a", "localInstructionCount": 8, "externalFrontierCount": 2 }, { "id": "1a-mecha-normal-0-lp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8370", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054C5A\u21920x001DD8 (external jsr); 0x054C62\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-0-lp", "animationInstallAddresses": [ "0x054640" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-0-mp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8372", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "45 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054C6A\u21920x001DD8 (external jsr); 0x054CA0\u21920x0BF770 (external jsr); 0x054CBC\u21920x0B54E4 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-0-mp", "localInstructionCount": 45, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-0-mp", "animationInstallAddresses": [ "0x054680", "0x0546B0" ], "directionVariantGroups": 2 }, { "id": "1a-mecha-normal-0-hp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8374", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054CEC\u21920x001DD8 (external jsr); 0x054D0E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-0-hp", "localInstructionCount": 25, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-0-hp", "animationInstallAddresses": [ "0x0546E0" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-0-lk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8376", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D76\u21920x001DD8 (external jsr); 0x054D7E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-0-lk", "animationInstallAddresses": [ "0x0547C2" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-0-mk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8378", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D86\u21920x001DD8 (external jsr); 0x054D8E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-0-mk", "animationInstallAddresses": [ "0x0547F2" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-0-hk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E837A", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "36 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D96\u21920x001DD8 (external jsr); 0x054D9E\u21920x016FBA (external jmp); 0x054DBE\u21920x0D5A7E (external jsr). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-0-hk", "localInstructionCount": 36, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-0-hk", "animationInstallAddresses": [ "0x054826" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-1-lp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E837C", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D28\u21920x001DD8 (external jsr); 0x054D30\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-1-lp", "animationInstallAddresses": [ "0x05471C" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-1-mp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E837E", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D38\u21920x001DD8 (external jsr); 0x054D42\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-1-mp", "animationInstallAddresses": [ "0x054754" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-1-hp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8380", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054D48\u21920x001DD8 (external jsr); 0x054D52\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-1-hp", "animationInstallAddresses": [ "0x05477C" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-1-lk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8382", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054E04\u21920x001DD8 (external jsr); 0x054E0C\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-1-lk", "animationInstallAddresses": [ "0x05486A" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-1-mk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8384", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054E14\u21920x001DD8 (external jsr); 0x054E1C\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-1-mk", "animationInstallAddresses": [ "0x05489A" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-1-hk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8386", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054C28\u21920x002490 (external jsr); 0x054C2E\u21920x017540 (external jsr); 0x054E24\u21920x001DD8 (external jsr); 0x054E2C\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-1-hk", "animationInstallAddresses": [ "0x0548CA" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-2-lp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8388", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "19 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x054E68\u21920x001DD8 (external jsr); 0x054E70\u21920x0177B6 (external jmp); 0x054E76\u21920x017588 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-2-lp", "localInstructionCount": 19, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-2-lp", "animationInstallAddresses": [ "0x054938" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-2-mp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E838A", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "91 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x054FB6\u21920x001DD8 (external jsr); 0x054FC4\u21920x016FBA (external jmp); 0x054F38\u21920x001DD8 (external jsr); 15 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-2-mp", "localInstructionCount": 91, "externalFrontierCount": 20, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-2-mp", "animationInstallAddresses": [ "0x054996", "0x0549F6", "0x054A26" ], "directionVariantGroups": 3 }, { "id": "1a-mecha-normal-2-hp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E838C", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x05500E\u21920x001DD8 (external jsr); 0x055014\u21920x017588 (external jsr); 0x05501E\u21920x0178C8 (external jmp); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-2-hp", "localInstructionCount": 27, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-2-hp", "animationInstallAddresses": [ "0x054A6E", "0x054ACE", "0x054AFE" ], "directionVariantGroups": 3 }, { "id": "1a-mecha-normal-2-lk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E838E", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 0x05503C\u21920x0178C8 (external jmp); 0x05504A\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-2-lk", "animationInstallAddresses": [ "0x054B4C" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-2-mk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8390", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "23 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 0x05503C\u21920x0178C8 (external jmp); 0x055062\u21920x001DD8 (external jmp); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-2-mk", "localInstructionCount": 23, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-2-mk", "animationInstallAddresses": [ "0x054BA6", "0x054BD6" ], "directionVariantGroups": 2 }, { "id": "1a-mecha-normal-2-hk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8392", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 0x05503C\u21920x0178C8 (external jmp); 0x055078\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-2-hk", "animationInstallAddresses": [ "0x054C06" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-3-lp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8394", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "21 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x054E68\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-3-lp", "localInstructionCount": 21, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-3-lp", "animationInstallAddresses": [ "0x054938" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-3-mp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8396", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "93 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x054FB6\u21920x001DD8 (external jsr); 17 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-3-mp", "localInstructionCount": 93, "externalFrontierCount": 22, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-3-mp", "animationInstallAddresses": [ "0x054996", "0x0549F6", "0x054A26" ], "directionVariantGroups": 3 }, { "id": "1a-mecha-normal-3-hp", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E8398", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x05500E\u21920x001DD8 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-3-hp", "localInstructionCount": 29, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-3-hp", "animationInstallAddresses": [ "0x054A6E", "0x054ACE", "0x054AFE" ], "directionVariantGroups": 3 }, { "id": "1a-mecha-normal-3-lk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E839A", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-3-lk", "animationInstallAddresses": [ "0x054B4C" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-normal-3-mk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E839C", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-3-mk", "localInstructionCount": 25, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-3-mk", "animationInstallAddresses": [ "0x054BA6", "0x054BD6" ], "directionVariantGroups": 2 }, { "id": "1a-mecha-normal-3-hk", "character": "Zangief", "characterId": "0x1A", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x0E839E", "handlerAddress": "0x0545D6", "updateHandlerAddress": "0x054C0C", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0545D6: unresolved shared/indirect closure: 0x054E34\u21920x01485C (external jsr); 0x054E3A\u21920x013E92 (external jsr); 0x054E40\u21920x013EFC (external jsr); 0x054E46\u21920x013E64 (external jsr); 0x055034\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "normal-route-receipts.json#1a-mecha-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1a-mecha-normal-3-hk", "animationInstallAddresses": [ "0x054C06" ], "directionVariantGroups": 0 }, { "id": "1a-mecha-attack-00", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x00", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055218", "handlerAddress": "0x05524E", "selector": "B0=0x2A, E6=0x00", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "101 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x055310, 0x0553BC, 0x0553E0.", "uncertainty": "Handler 0x05524E: unresolved shared/indirect closure: 0x0553FC\u21920x017588 (external jsr); 0x055406\u21920x0178C8 (external jmp); 0x05540C\u21920x002490 (external jsr); 0x055412\u21920x001DD8 (external jmp); 0x055394\u21920x01CD1E (external jsr); 9 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x055310", "0x0553BC", "0x0553E0" ], "gate": "Exact selectors: B0=0x2A, E6=0x00; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-00", "commandSources": [], "localInstructionCount": 101, "externalFrontierCount": 14 }, { "id": "1a-mecha-attack-02", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x02", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05521A", "handlerAddress": "0x055418", "selector": "B0=0x2A, E6=0x02", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "102 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x0554E2, 0x0554EE, 0x055596, 0x0555BA.", "uncertainty": "Handler 0x055418: unresolved shared/indirect closure: 0x0555D6\u21920x017588 (external jsr); 0x0555E0\u21920x0178C8 (external jmp); 0x0555E6\u21920x002490 (external jsr); 0x0555EC\u21920x001DD8 (external jmp); 0x05556E\u21920x01CD1E (external jsr); 9 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x0554E2", "0x0554EE", "0x055596", "0x0555BA" ], "gate": "Exact selectors: B0=0x2A, E6=0x02; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-02", "commandSources": [], "localInstructionCount": 102, "externalFrontierCount": 14 }, { "id": "1a-mecha-attack-04", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x04", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05521C", "handlerAddress": "0x0555F2", "selector": "B0=0x2A, E6=0x04", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "70 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0555F2: unresolved shared/indirect closure: 0x055676\u21920x002490 (external jsr); 0x05567C\u21920x001DD8 (external jsr); 0x0556D0\u21920x099F06 (external jsr); 0x055716\u21920x016FBA (external jmp); 0x05562C\u21920x017634 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-04", "commandSources": [], "localInstructionCount": 70, "externalFrontierCount": 8 }, { "id": "1a-mecha-attack-06", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x06", "command": "raw descriptor; matcher semantics unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05521E", "handlerAddress": "0x055722", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "85 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055722: unresolved shared/indirect closure: 0x05585E\u21920x002490 (external jsr); 0x055864\u21920x001DD8 (external jsr); 0x055882\u21920x0177B6 (external jmp); 0x055800\u21920x001DD8 (external jsr); 0x05580A\u21920x0D7478 (external jsr); 14 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-06", "commandSources": [ "0x0589FE", "0x058ADE" ], "localInstructionCount": 85, "externalFrontierCount": 19 }, { "id": "1a-mecha-attack-08", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x08", "command": "B \u2192 DB \u2192 D \u2192 DF \u2192 F + K / raw descriptor; matcher semantics unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055220", "handlerAddress": "0x055888", "selector": "B0=0x2A, E6=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "73 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055888: unresolved shared/indirect closure: 0x055A0A\u21920x001DD8 (external jsr); 0x055A16\u21920x016FBA (external jmp); 0x0559A6\u21920x0B5C92 (external jsr); 0x0559AC\u21920x0024C4 (external jsr); 0x0559B2\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-08", "commandSources": [ "0x058A08", "0x058AF2" ], "localInstructionCount": 73, "externalFrontierCount": 15 }, { "id": "1a-mecha-attack-0a", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055222", "handlerAddress": "0x055A1C", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "72 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055A1C: unresolved shared/indirect closure: 0x055B44\u21920x001DD8 (external jsr); 0x055B50\u21920x016FBA (external jmp); 0x055AC2\u21920x0148FE (external jmp); 0x055AD6\u21920x0B5C92 (external jsr); 0x055ADC\u21920x0024C4 (external jsr); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-0a", "commandSources": [], "localInstructionCount": 72, "externalFrontierCount": 13 }, { "id": "1a-mecha-attack-0c", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x0C", "command": "F \u2192 D \u2192 DF + K", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055224", "handlerAddress": "0x055C34", "selector": "B0=0x2A, E6=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "53 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055C34: unresolved shared/indirect closure: 0x055D10\u21920x0177B6 (external jmp); 0x055D16\u21920x001DD8 (external jsr); 0x055D1C\u21920x002490 (external jsr); 0x055D2C\u21920x0D7526 (external jsr); 0x055D40\u21920x0187CA (external jmp); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-0c", "commandSources": [ "0x058A3A" ], "localInstructionCount": 53, "externalFrontierCount": 10 }, { "id": "1a-mecha-attack-0e", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055226", "handlerAddress": "0x05663A", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "50 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05663A: unresolved shared/indirect closure: 0x056700\u21920x001DD8 (external jsr); 0x056708\u21920x016FBA (external jmp); 0x0566C2\u21920x001DD8 (external jsr); 0x0566C8\u21920x002490 (external jsr); 0x0566CE\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-0e", "commandSources": [], "localInstructionCount": 50, "externalFrontierCount": 8 }, { "id": "1a-mecha-attack-10", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055228", "handlerAddress": "0x056710", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "59 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x056710: unresolved shared/indirect closure: 0x05678A\u21920x014A2E (external jmp); 0x0567E8\u21920x0024C4 (external jsr); 0x0567EE\u21920x001DD8 (external jsr); 0x0567F8\u21920x016FBA (external jmp); 0x05676C\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-10", "commandSources": [], "localInstructionCount": 59, "externalFrontierCount": 5 }, { "id": "1a-mecha-attack-12", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05522A", "handlerAddress": "0x056800", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x056800: unresolved shared/indirect closure: 0x05681E\u21920x001DD8 (external jsr); 0x056828\u21920x016FBA (external jmp); 0x056818\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-12", "commandSources": [], "localInstructionCount": 11, "externalFrontierCount": 3 }, { "id": "1a-mecha-attack-14", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05522C", "handlerAddress": "0x0560BC", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0560BC: unresolved shared/indirect closure: 0x0560BC\u21920x016FBA (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1a-mecha-attack-16", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05522E", "handlerAddress": "0x0560C2", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0560C2: unresolved shared/indirect closure: 0x0560C2\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-16", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1a-mecha-attack-18", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055230", "handlerAddress": "0x0560C8", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "248 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0560C8: unresolved shared/indirect closure: 0x05661A\u21920x001DD8 (external jsr); 0x05662E\u21920x016FBA (external jmp); 0x0565E4\u21920x002490 (external jsr); 0x0565EA\u21920x017588 (external jsr); 0x0565F2\u21920x0B62B6 (external jsr); 35 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-18", "commandSources": [], "localInstructionCount": 248, "externalFrontierCount": 40 }, { "id": "1a-mecha-attack-1a", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055232", "handlerAddress": "0x055242", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055242: unresolved shared/indirect closure: 0x055242\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-1a", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1a-mecha-attack-1c", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055234", "handlerAddress": "0x056634", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x056634: unresolved shared/indirect closure: 0x056634\u21920x016FBA (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-1c", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1a-mecha-attack-1e", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x1E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055236", "handlerAddress": "0x055248", "selector": "B0=0x2A, E6=0x1E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055248: unresolved shared/indirect closure: 0x055248\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1E; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-1e", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1a-mecha-attack-20", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x20", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055238", "handlerAddress": "0x05663A", "selector": "B0=0x2A, E6=0x20", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "48 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05663A: unresolved shared/indirect closure: 0x056700\u21920x001DD8 (external jsr); 0x056708\u21920x016FBA (external jmp); 0x0566C2\u21920x001DD8 (external jsr); 0x0566C8\u21920x002490 (external jsr); 0x0566CE\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x20; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-20", "commandSources": [], "localInstructionCount": 48, "externalFrontierCount": 7 }, { "id": "1a-mecha-attack-22", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x22", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05523A", "handlerAddress": "0x055B56", "selector": "B0=0x2A, E6=0x22", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "51 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055B56: unresolved shared/indirect closure: 0x055C24\u21920x001DD8 (external jsr); 0x055C2E\u21920x016FBA (external jmp); 0x055BE6\u21920x001DD8 (external jsr); 0x055BF8\u21920x0135E6 (external jmp); 0x055BFE\u21920x0D7526 (external jsr); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x22; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-22", "commandSources": [], "localInstructionCount": 51, "externalFrontierCount": 13 }, { "id": "1a-mecha-attack-24", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Mecha Zangief transformation", "command": "B \u2192 D \u2192 DB + LK", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05523C", "handlerAddress": "0x055D48", "selector": "B0=0x2A, E6=0x24", "status": "static: native mode transition", "staticStatus": "named causal path reviewed", "runtimeStatus": "static only", "finding": "Handler $055D48 writes +$EB=2 at $055DC2 to enter Mecha or clears it at $055E1E to return.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Native command candidate $054214/$0542AA, selector E6=$24; meter and caller gates retained.", "effect": "Handler $055D48 writes +$EB=2 at $055DC2 to enter Mecha or clears it at $055E1E to return.", "limit": "Mode transition, not an added-hit mechanism.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-24", "commandSources": [], "localInstructionCount": 38, "externalFrontierCount": 9, "reviewSource": "normal-review/initializer-review.md" }, { "id": "1a-mecha-attack-26", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x26", "command": "D \u2192 DF \u2192 F + P", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05523E", "handlerAddress": "0x055E4C", "selector": "B0=0x2A, E6=0x26", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "49 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055E4C: unresolved shared/indirect closure: 0x055F06\u21920x001DD8 (external jsr); 0x055F0E\u21920x016FBA (external jmp); 0x055EFA\u21920x0135E6 (external jmp); 0x055F00\u21920x001DD8 (external jmp); 0x055EC0\u21920x001DD8 (external jsr); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x26; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-26", "commandSources": [ "0x058A5A" ], "localInstructionCount": 49, "externalFrontierCount": 11 }, { "id": "1a-mecha-attack-28", "character": "Zangief", "characterId": "0x1A", "category": "special / super", "name": "Native attack selector 0x28", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x055240", "handlerAddress": "0x055F16", "selector": "B0=0x2A, E6=0x28", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "99 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x055F16: unresolved shared/indirect closure: 0x0560AC\u21920x001DD8 (external jsr); 0x0560B4\u21920x016FBA (external jmp); 0x056084\u21920x002490 (external jsr); 0x05608A\u21920x017588 (external jsr); 0x056096\u21920x0B62B6 (external jsr); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x28; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-attack-28", "commandSources": [], "localInstructionCount": 99, "externalFrontierCount": 16 }, { "id": "1a-mecha-throw-00", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05697C", "handlerAddress": "0x05699A", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x05699A: unresolved shared/indirect closure: 0x0569D4\u21920x0BD606 (external jsr); 0x0569DE\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-00", "localInstructionCount": 15, "externalFrontierCount": 2 }, { "id": "1a-mecha-throw-02", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05697E", "handlerAddress": "0x0569E4", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0569E4: unresolved shared/indirect closure: 0x0569F2\u21920x0BD606 (external jsr); 0x056A02\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-02", "localInstructionCount": 8, "externalFrontierCount": 2 }, { "id": "1a-mecha-throw-04", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x056980", "handlerAddress": "0x056A08", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "7 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056A08: unresolved shared/indirect closure: 0x056A10\u21920x0BD606 (external jsr); 0x056A20\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-04", "localInstructionCount": 7, "externalFrontierCount": 2 }, { "id": "1a-mecha-throw-06", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x056982", "handlerAddress": "0x056A26", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056A26: unresolved shared/indirect closure: 0x056A2A\u21920x0D5A7E (external jsr); 0x056A38\u21920x0BD606 (external jsr); 0x056A42\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-06", "localInstructionCount": 8, "externalFrontierCount": 3 }, { "id": "1a-mecha-throw-08", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x056984", "handlerAddress": "0x056A48", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056A48: unresolved shared/indirect closure: 0x056A4C\u21920x0D5A7E (external jsr); 0x056A5A\u21920x0BD606 (external jsr); 0x056A64\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-08", "localInstructionCount": 8, "externalFrontierCount": 3 }, { "id": "1a-mecha-throw-0a", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x0A", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x056986", "handlerAddress": "0x056A6A", "selector": "E4=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "7 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056A6A: unresolved shared/indirect closure: 0x056A78\u21920x0BD606 (external jsr); 0x056A82\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0A; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-0a", "localInstructionCount": 7, "externalFrontierCount": 2 }, { "id": "1a-mecha-throw-0c", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x0C", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x056988", "handlerAddress": "0x056A88", "selector": "E4=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "7 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056A88: unresolved shared/indirect closure: 0x056A96\u21920x0BD606 (external jsr); 0x056AA0\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0C; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-0c", "localInstructionCount": 7, "externalFrontierCount": 2 }, { "id": "1a-mecha-throw-0e", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x0E", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05698A", "handlerAddress": "0x056AA6", "selector": "E4=0x0E", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "9 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056AA6: unresolved shared/indirect closure: 0x056ABE\u21920x0BD606 (external jsr); 0x056AC8\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0E; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-0e", "localInstructionCount": 9, "externalFrontierCount": 2 }, { "id": "1a-mecha-throw-10", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x10", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05698C", "handlerAddress": "0x056ACE", "selector": "E4=0x10", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056ACE: unresolved shared/indirect closure: 0x056B14\u21920x0BD606 (external jsr); 0x056B24\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x10; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-10", "localInstructionCount": 20, "externalFrontierCount": 2 }, { "id": "1a-mecha-throw-12", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x12", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x05698E", "handlerAddress": "0x056B2A", "selector": "E4=0x12", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "6 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056B2A: unresolved shared/indirect closure: 0x056B32\u21920x0BD606 (external jsr); 0x056B3C\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x12; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-12", "localInstructionCount": 6, "externalFrontierCount": 2 }, { "id": "1a-mecha-throw-14", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x14", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x056990", "handlerAddress": "0x056B42", "selector": "E4=0x14", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056B42: unresolved shared/indirect closure: 0x056B56\u21920x0BD606 (external jsr); 0x056B68\u21920x0135E6 (external jmp); 0x056B72\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x14; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-14", "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "1a-mecha-throw-16", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x16", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x056992", "handlerAddress": "0x056B78", "selector": "E4=0x16", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056B78: unresolved shared/indirect closure: 0x056B86\u21920x0BD606 (external jsr); 0x056BAC\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x16; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-16", "localInstructionCount": 12, "externalFrontierCount": 2 }, { "id": "1a-mecha-throw-18", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x18", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x056994", "handlerAddress": "0x056998", "selector": "E4=0x18", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056998: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x18; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-18", "localInstructionCount": 1, "externalFrontierCount": 0 }, { "id": "1a-mecha-throw-1a", "character": "Zangief", "characterId": "0x1A", "category": "throw", "name": "Native throw selector 0x1A", "command": "Native throw detector 0x056830; individual direction/button predicate unresolved", "variant": "Mecha Zangief +0xEB=2", "tableAddress": "0x056996", "handlerAddress": "0x056BB2", "selector": "E4=0x1A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x056BB2: unresolved shared/indirect closure: 0x056BC6\u21920x0BD606 (external jsr); 0x056BD0\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x1A; Mecha Zangief +0xEB=2. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1A", "codeSource": "context-route-receipts.json#leaves/1a-mecha-throw-1a", "localInstructionCount": 8, "externalFrontierCount": 2 }, { "id": "1c-base-normal-0-lp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83A0", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x059F4C\u21920x001DD8 (external jsr); 0x059F54\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-0-lp", "animationInstallAddresses": [ "0x059ACA" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-0-mp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83A2", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x059F4C\u21920x001DD8 (external jsr); 0x059F54\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-0-mp", "animationInstallAddresses": [ "0x059AFA" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-0-hp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83A4", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "26 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x059F5C\u21920x001DD8 (external jsr); 0x059F64\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-0-hp", "localInstructionCount": 26, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-0-hp", "animationInstallAddresses": [ "0x059B2A" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-0-lk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83A6", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x059FC6\u21920x001DD8 (external jsr); 0x059FCE\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-0-lk", "animationInstallAddresses": [ "0x059C24" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-0-mk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83A8", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x059FC6\u21920x001DD8 (external jsr); 0x059FCE\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-0-mk", "animationInstallAddresses": [ "0x059C54" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-0-hk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83AA", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "26 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x059FD6\u21920x001DD8 (external jsr); 0x059FDE\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-0-hk", "localInstructionCount": 26, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-0-hk", "animationInstallAddresses": [ "0x059C84" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-1-lp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83AC", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x059F98\u21920x001DD8 (external jsr); 0x059FA0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-1-lp", "animationInstallAddresses": [ "0x059B6E" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-1-mp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83AE", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x059F98\u21920x001DD8 (external jsr); 0x059FA0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-1-mp", "animationInstallAddresses": [ "0x059B9E" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-1-hp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83B0", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x059F98\u21920x001DD8 (external jsr); 0x059FA0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-1-hp", "animationInstallAddresses": [ "0x059BD6" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-1-lk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83B2", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x05A012\u21920x001DD8 (external jsr); 0x05A01A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-1-lk", "animationInstallAddresses": [ "0x059CC8" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-1-mk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83B4", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x05A012\u21920x001DD8 (external jsr); 0x05A01A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-1-mk", "animationInstallAddresses": [ "0x059CF8" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-1-hk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83B6", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "55 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x059F1A\u21920x002490 (external jsr); 0x059F20\u21920x017540 (external jsr); 0x05A028\u21920x001DD8 (external jsr); 0x05A030\u21920x016FBA (external jmp); 0x05A0B0\u21920x001DD8 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-1-hk", "localInstructionCount": 55, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-1-hk", "animationInstallAddresses": [ "0x059D34", "0x059D6C" ], "directionVariantGroups": 2 }, { "id": "1c-base-normal-2-lp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83B8", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A0EE\u21920x017588 (external jsr); 0x05A0F6\u21920x0178C8 (external jmp); 0x05A104\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-2-lp", "animationInstallAddresses": [ "0x059DDA" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-2-mp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83BA", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A0EE\u21920x017588 (external jsr); 0x05A0F6\u21920x0178C8 (external jmp); 0x05A104\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-2-mp", "animationInstallAddresses": [ "0x059E0A" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-2-hp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83BC", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A0EE\u21920x017588 (external jsr); 0x05A0F6\u21920x0178C8 (external jmp); 0x05A104\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-2-hp", "animationInstallAddresses": [ "0x059E3A" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-2-lk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83BE", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A122\u21920x017588 (external jsr); 0x05A12A\u21920x0178C8 (external jmp); 0x05A138\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-2-lk", "animationInstallAddresses": [ "0x059E90" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-2-mk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83C0", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A122\u21920x017588 (external jsr); 0x05A12A\u21920x0178C8 (external jmp); 0x05A138\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-2-mk", "animationInstallAddresses": [ "0x059EC0" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-2-hk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83C2", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A122\u21920x017588 (external jsr); 0x05A12A\u21920x0178C8 (external jmp); 0x05A138\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-2-hk", "animationInstallAddresses": [ "0x059EF0" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-3-lp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83C4", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0C0\u21920x01485C (external jsr); 0x05A0C6\u21920x013E92 (external jsr); 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A0EE\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-3-lp", "animationInstallAddresses": [ "0x059DDA" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-3-mp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83C6", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0C0\u21920x01485C (external jsr); 0x05A0C6\u21920x013E92 (external jsr); 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A0EE\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-3-mp", "animationInstallAddresses": [ "0x059E0A" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-3-hp", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83C8", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0C0\u21920x01485C (external jsr); 0x05A0C6\u21920x013E92 (external jsr); 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A0EE\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-3-hp", "animationInstallAddresses": [ "0x059E3A" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-3-lk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83CA", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0C0\u21920x01485C (external jsr); 0x05A0C6\u21920x013E92 (external jsr); 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A122\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-3-lk", "animationInstallAddresses": [ "0x059E90" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-3-mk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83CC", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0C0\u21920x01485C (external jsr); 0x05A0C6\u21920x013E92 (external jsr); 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A122\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-3-mk", "animationInstallAddresses": [ "0x059EC0" ], "directionVariantGroups": 0 }, { "id": "1c-base-normal-3-hk", "character": "Strider Hiryu", "characterId": "0x1C", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83CE", "handlerAddress": "0x059A66", "updateHandlerAddress": "0x059EFE", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x059A66: unresolved shared/indirect closure: 0x05A0C0\u21920x01485C (external jsr); 0x05A0C6\u21920x013E92 (external jsr); 0x05A0CC\u21920x013EFC (external jsr); 0x05A0D2\u21920x013E64 (external jsr); 0x05A122\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "normal-route-receipts.json#1c-base-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1c-base-normal-3-hk", "animationInstallAddresses": [ "0x059EF0" ], "directionVariantGroups": 0 }, { "id": "1c-base-attack-00", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x00", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05A752", "handlerAddress": "0x05A77E", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "81 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05A77E: unresolved shared/indirect closure: 0x05A876\u21920x001DD8 (external jsr); 0x05A890\u21920x016FBA (external jmp); 0x05A89C\u21920x0024C4 (external jsr); 0x05C050\u21920x078002 (external jmp); 0x05A82C\u21920x001DD8 (external jsr); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-00", "commandSources": [ "0x05CB2A", "0x05CC06" ], "localInstructionCount": 81, "externalFrontierCount": 11 }, { "id": "1c-base-attack-02", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x02", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A754", "handlerAddress": "0x05A8A8", "selector": "B0=0x2A, E6=0x02", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05A8A8: unresolved shared/indirect closure: 0x05A94E\u21920x001DD8 (external jsr); 0x05A956\u21920x015EF4 (external jmp); 0x05A922\u21920x001DD8 (external jsr); 0x05A928\u21920x002490 (external jsr); 0x05A92E\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-02", "commandSources": [], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "1c-base-attack-04", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x04", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A756", "handlerAddress": "0x05A77E", "selector": "B0=0x2A, E6=0x04", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "80 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05A77E: unresolved shared/indirect closure: 0x05A876\u21920x001DD8 (external jsr); 0x05A890\u21920x016FBA (external jmp); 0x05A89C\u21920x0024C4 (external jsr); 0x05C050\u21920x078002 (external jmp); 0x05A82C\u21920x001DD8 (external jsr); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-04", "commandSources": [], "localInstructionCount": 80, "externalFrontierCount": 11 }, { "id": "1c-base-attack-06", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x06", "command": "B \u2192 D \u2192 DB + attack", "variant": "Stock character", "tableAddress": "0x05A758", "handlerAddress": "0x05A95E", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "72 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05A95E: unresolved shared/indirect closure: 0x05AA70\u21920x001DD8 (external jsr); 0x05AA8A\u21920x016FBA (external jmp); 0x05AA3A\u21920x002490 (external jsr); 0x05AA40\u21920x001DD8 (external jsr); 0x05AA62\u21920x0135E6 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-06", "commandSources": [ "0x05CB3A" ], "localInstructionCount": 72, "externalFrontierCount": 15 }, { "id": "1c-base-attack-08", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Ouroboros", "command": "QCF + two punches; tap punches", "variant": "Stock character", "tableAddress": "0x05A75A", "handlerAddress": "0x05AA92", "selector": "B0=0x2A, E6=0x08", "status": "static: satellite firing", "staticStatus": "named causal path reviewed", "runtimeStatus": "static only", "finding": "Accepted punch calls projectile creator $094A72; reloads cooldown22. Satellite timer240 is initialized at $09393C and decremented at $0939E4.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Child $093A5E reads owner D4&$0070 when cooldown +$B9 is zero and owner gate passes.", "effect": "Accepted punch calls projectile creator $094A72; reloads cooldown22. Satellite timer240 is initialized at $09393C and decremented at $0939E4.", "limit": "No duration refill and no new live trial in this inventory.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-08", "commandSources": [], "localInstructionCount": 50, "externalFrontierCount": 8, "reviewSource": "../../roster-additions.md" }, { "id": "1c-base-attack-0a", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x0A", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05A75C", "handlerAddress": "0x05AB62", "selector": "B0=0x2A, E6=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05AB62: unresolved shared/indirect closure: 0x05AC00\u21920x001DD8 (external jsr); 0x05AC08\u21920x016FBA (external jmp); 0x05ABE0\u21920x001DD8 (external jsr); 0x05ABF8\u21920x0135E6 (external jmp); 0x05AB90\u21920x01CD1E (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-0a", "commandSources": [ "0x05CB5A", "0x05CC1A" ], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "1c-base-attack-0c", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x0C", "command": "F \u2192 D \u2192 DF + K", "variant": "Stock character", "tableAddress": "0x05A75E", "handlerAddress": "0x05AC10", "selector": "B0=0x2A, E6=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05AC10: unresolved shared/indirect closure: 0x05ACAE\u21920x001DD8 (external jsr); 0x05ACB6\u21920x016FBA (external jmp); 0x05AC8E\u21920x001DD8 (external jsr); 0x05ACA6\u21920x0135E6 (external jmp); 0x05AC3E\u21920x01CD1E (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-0c", "commandSources": [ "0x05CB6A" ], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "1c-base-attack-0e", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x0E", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05A760", "handlerAddress": "0x05ACBE", "selector": "B0=0x2A, E6=0x0E", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "68 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05ACBE: unresolved shared/indirect closure: 0x05AD90\u21920x002490 (external jsr); 0x05ADB2\u21920x001DD8 (external jsr); 0x05ADBA\u21920x0177B6 (external jmp); 0x05AD4E\u21920x001DD8 (external jsr); 0x05AD54\u21920x002490 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-0e", "commandSources": [ "0x05CB7A", "0x05CC38" ], "localInstructionCount": 68, "externalFrontierCount": 9 }, { "id": "1c-base-attack-10", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x10", "command": "D \u2192 DB \u2192 B + P", "variant": "Stock character", "tableAddress": "0x05A762", "handlerAddress": "0x05ADC2", "selector": "B0=0x2A, E6=0x10", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "542 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x05AF94, 0x05B07C, 0x05B140, 0x05C008, 0x05C026.", "uncertainty": "Handler 0x05ADC2: unresolved shared/indirect closure: 0x05B5B2\u21920x001DD8 (external jsr); 0x05B5BA\u21920x016FBA (external jmp); 0x05B55A\u21920x001DD8 (external jsr); 0x05B560\u21920x002490 (external jsr); 0x05B594\u21920x0CB574 (external jsr); 58 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x05AF94", "0x05B07C", "0x05B140", "0x05C008", "0x05C026" ], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-10", "commandSources": [ "0x05CB8A" ], "localInstructionCount": 542, "externalFrontierCount": 63 }, { "id": "1c-base-attack-12", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x12", "command": "D \u2192 DF \u2192 F + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05A764", "handlerAddress": "0x05B602", "selector": "B0=0x2A, E6=0x12", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "33 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05B602: unresolved shared/indirect closure: 0x05B668\u21920x001DD8 (external jsr); 0x05B670\u21920x016FBA (external jmp); 0x05B682\u21920x09C23E (external jmp); 0x05B618\u21920x01CD1E (external jsr); 0x05B652\u21920x017634 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-12", "commandSources": [ "0x05CB9A", "0x05CC2E" ], "localInstructionCount": 33, "externalFrontierCount": 7 }, { "id": "1c-base-attack-14", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A766", "handlerAddress": "0x05B68A", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "51 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05B68A: unresolved shared/indirect closure: 0x05B73E\u21920x001DD8 (external jsr); 0x05B746\u21920x016FBA (external jmp); 0x05B758\u21920x09C256 (external jmp); 0x05B6FE\u21920x001DD8 (external jsr); 0x05B72A\u21920x0148FE (external jmp); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-14", "commandSources": [], "localInstructionCount": 51, "externalFrontierCount": 9 }, { "id": "1c-base-attack-16", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x16", "command": "D \u2192 DF \u2192 F + attack / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05A768", "handlerAddress": "0x05B760", "selector": "B0=0x2A, E6=0x16", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "155 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05B760: unresolved shared/indirect closure: 0x05B9AC\u21920x001DD8 (external jsr); 0x05B9B4\u21920x016FBA (external jmp); 0x05B960\u21920x001DD8 (external jsr); 0x05B966\u21920x002490 (external jsr); 0x05B99E\u21920x0135E6 (external jsr); 13 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-16", "commandSources": [ "0x05CBBA", "0x05CC42" ], "localInstructionCount": 155, "externalFrontierCount": 18 }, { "id": "1c-base-attack-18", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A76A", "handlerAddress": "0x05B9BC", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "99 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05B9BC: unresolved shared/indirect closure: 0x05BB30\u21920x002490 (external jsr); 0x05BB38\u21920x0B5D30 (external jsr); 0x05BB3E\u21920x001DD8 (external jsr); 0x05BB46\u21920x016FBA (external jmp); 0x05BA8E\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-18", "commandSources": [], "localInstructionCount": 99, "externalFrontierCount": 15 }, { "id": "1c-base-attack-1a", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x1A", "command": "D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05A76C", "handlerAddress": "0x05BB4E", "selector": "B0=0x2A, E6=0x1A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "149 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05BB4E: unresolved shared/indirect closure: 0x05BD86\u21920x001DD8 (external jsr); 0x05BDA0\u21920x016FBA (external jmp); 0x05BD4C\u21920x001DD8 (external jsr); 0x05BD52\u21920x002490 (external jsr); 0x05BD78\u21920x0135E6 (external jsr); 20 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-1a", "commandSources": [ "0x05CBDA", "0x05CC10" ], "localInstructionCount": 149, "externalFrontierCount": 25 }, { "id": "1c-base-attack-1c", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x1C", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05A76E", "handlerAddress": "0x05BDF8", "selector": "B0=0x2A, E6=0x1C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "33 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05BDF8: unresolved shared/indirect closure: 0x05BE5E\u21920x001DD8 (external jsr); 0x05BE66\u21920x016FBA (external jmp); 0x05BE78\u21920x09D052 (external jmp); 0x05BE0E\u21920x01CD1E (external jsr); 0x05BE48\u21920x017634 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-1c", "commandSources": [ "0x05CBEA" ], "localInstructionCount": 33, "externalFrontierCount": 7 }, { "id": "1c-base-attack-1e", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x1E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A770", "handlerAddress": "0x05BE80", "selector": "B0=0x2A, E6=0x1E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05BE80: unresolved shared/indirect closure: 0x05BEC8\u21920x001DD8 (external jsr); 0x05BED0\u21920x016FBA (external jmp); 0x05BEE2\u21920x09C23E (external jmp); 0x05BE96\u21920x01CD1E (external jsr); 0x05BEB2\u21920x017634 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-1e", "commandSources": [], "localInstructionCount": 25, "externalFrontierCount": 7 }, { "id": "1c-base-attack-20", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x20", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A772", "handlerAddress": "0x05BEEA", "selector": "B0=0x2A, E6=0x20", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "45 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05BEEA: unresolved shared/indirect closure: 0x05BF58\u21920x001DD8 (external jsr); 0x05BF68\u21920x016FBA (external jmp); 0x05BF88\u21920x0177B6 (external jmp); 0x05BFA2\u21920x0D5A7E (external jsr); 0x05BEFE\u21920x017634 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x20; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-20", "commandSources": [], "localInstructionCount": 45, "externalFrontierCount": 8 }, { "id": "1c-base-attack-22", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x22", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A774", "handlerAddress": "0x05BFAA", "selector": "B0=0x2A, E6=0x22", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05BFAA: unresolved shared/indirect closure: 0x05BFD4\u21920x001DD8 (external jsr); 0x05BFDC\u21920x016FBA (external jmp); 0x05BFCE\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x22; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-22", "commandSources": [], "localInstructionCount": 13, "externalFrontierCount": 3 }, { "id": "1c-base-attack-24", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x24", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A776", "handlerAddress": "0x05BFE4", "selector": "B0=0x2A, E6=0x24", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05BFE4: unresolved shared/indirect closure: 0x05BFE4\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x24; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-24", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1c-base-attack-26", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x26", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A778", "handlerAddress": "0x05BFEA", "selector": "B0=0x2A, E6=0x26", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05BFEA: unresolved shared/indirect closure: 0x05BFEA\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x26; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-26", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1c-base-attack-28", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x28", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A77A", "handlerAddress": "0x05A8A8", "selector": "B0=0x2A, E6=0x28", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05A8A8: unresolved shared/indirect closure: 0x05A94E\u21920x001DD8 (external jsr); 0x05A956\u21920x015EF4 (external jmp); 0x05A922\u21920x001DD8 (external jsr); 0x05A928\u21920x002490 (external jsr); 0x05A92E\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x28; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-28", "commandSources": [], "localInstructionCount": 41, "externalFrontierCount": 7 }, { "id": "1c-base-attack-2a", "character": "Strider Hiryu", "characterId": "0x1C", "category": "special / super", "name": "Native attack selector 0x2A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05A77C", "handlerAddress": "0x05BFF0", "selector": "B0=0x2A, E6=0x2A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05BFF0: unresolved shared/indirect closure: 0x05BFF0\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x2A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-attack-2a", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1c-base-throw-00", "character": "Strider Hiryu", "characterId": "0x1C", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x05C058; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x05C0D2", "handlerAddress": "0x05C0DA", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x05C0DA: unresolved shared/indirect closure: 0x05C0E4\u21920x0135E6 (external jsr); 0x05C0F4\u21920x0135E6 (external jsr); 0x05C0FC\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-throw-00", "localInstructionCount": 11, "externalFrontierCount": 3 }, { "id": "1c-base-throw-02", "character": "Strider Hiryu", "characterId": "0x1C", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x05C058; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x05C0D4", "handlerAddress": "0x05C102", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "9 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x05C102: unresolved shared/indirect closure: 0x05C112\u21920x0BD606 (external jsr); 0x05C118\u21920x01CD1C (external jsr); 0x05C122\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-throw-02", "localInstructionCount": 9, "externalFrontierCount": 3 }, { "id": "1c-base-throw-04", "character": "Strider Hiryu", "characterId": "0x1C", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x05C058; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x05C0D6", "handlerAddress": "0x05C128", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x05C128: unresolved shared/indirect closure: 0x05C13E\u21920x0BD606 (external jsr); 0x05C148\u21920x0D5A7E (external jsr); 0x05C152\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-throw-04", "localInstructionCount": 11, "externalFrontierCount": 3 }, { "id": "1c-base-throw-06", "character": "Strider Hiryu", "characterId": "0x1C", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x05C058; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x05C0D8", "handlerAddress": "0x05C158", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x05C158: unresolved shared/indirect closure: 0x05C17C\u21920x0BD606 (external jsr); 0x05C182\u21920x01CD1C (external jsr); 0x05C18C\u21920x0D5A7E (external jsr); 0x05C196\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1C", "codeSource": "context-route-receipts.json#leaves/1c-base-throw-06", "localInstructionCount": 15, "externalFrontierCount": 4 }, { "id": "1e-base-normal-0-lp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83D0", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=0, 4D=0", "status": "local normal-repeat/variant branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit 4 Clears buffer, resets attack fields, decrements +$BD and changes +$80 when that count becomes nonpositive. Chooses $10/$06 versus $10/$00 from +$3C and calls $0135E6 at $05DF92.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DF16\u21920x001DD8 (external jsr); 0x05DF1E\u21920x016FBA (external jmp); 0x05DF2A\u21920x0176B6 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x05DF3A", "0x05DF3E", "0x05DF56" ], "gate": "Animation flag +$3C and common $0176B6/$01741E gates.", "effect": "Clears buffer, resets attack fields, decrements +$BD and changes +$80 when that count becomes nonpositive. Chooses $10/$06 versus $10/$00 from +$3C and calls $0135E6 at $05DF92.", "limit": "The +$BD branch changes attack attributes; no stopping bound or initial allowance was established here. Do not call it a finite number of bonus hits.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-0-lp", "localInstructionCount": 49, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-0-lp", "animationInstallAddresses": [ "0x05D9BA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#1e-base-normal-0-lp" }, { "id": "1e-base-normal-0-mp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83D2", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DFA0\u21920x001DD8 (external jsr); 0x05DFA8\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-0-mp", "animationInstallAddresses": [ "0x05D9EA" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-0-hp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83D4", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DFA0\u21920x001DD8 (external jsr); 0x05DFA8\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-0-hp", "animationInstallAddresses": [ "0x05DA1A" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-0-lk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83D6", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E02A\u21920x001DD8 (external jsr); 0x05E032\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-0-lk", "animationInstallAddresses": [ "0x05DB4E" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-0-mk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83D8", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E02A\u21920x001DD8 (external jsr); 0x05E032\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-0-mk", "animationInstallAddresses": [ "0x05DB7E" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-0-hk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83DA", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "72 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E040\u21920x001DD8 (external jsr); 0x05E048\u21920x016FBA (external jmp); 0x05E10E\u21920x001DD8 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-0-hk", "localInstructionCount": 72, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-0-hk", "animationInstallAddresses": [ "0x05DBC6" ], "directionVariantGroups": 9 }, { "id": "1e-base-normal-1-lp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83DC", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DFC4\u21920x001DD8 (external jsr); 0x05DFCC\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-1-lp", "localInstructionCount": 29, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-1-lp", "animationInstallAddresses": [ "0x05DA5E" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-1-mp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83DE", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DFFC\u21920x001DD8 (external jsr); 0x05E004\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-1-mp", "animationInstallAddresses": [ "0x05DA8E" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-1-hp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83E0", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DFFC\u21920x001DD8 (external jsr); 0x05E004\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-1-hp", "animationInstallAddresses": [ "0x05DAD0", "0x05DB00" ], "directionVariantGroups": 9 }, { "id": "1e-base-normal-1-lk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83E2", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E132\u21920x001DD8 (external jsr); 0x05E13A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-1-lk", "animationInstallAddresses": [ "0x05DC0A" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-1-mk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83E4", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E132\u21920x001DD8 (external jsr); 0x05E13A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-1-mk", "animationInstallAddresses": [ "0x05DC3A" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-1-hk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83E6", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E132\u21920x001DD8 (external jsr); 0x05E13A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-1-hk", "animationInstallAddresses": [ "0x05DC6A" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-2-lp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83E8", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 0x05E178\u21920x0178C8 (external jmp); 0x05E186\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-2-lp", "animationInstallAddresses": [ "0x05DD20" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-2-mp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83EA", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 0x05E178\u21920x0178C8 (external jmp); 0x05E186\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-2-mp", "animationInstallAddresses": [ "0x05DD50" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-2-hp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83EC", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 0x05E178\u21920x0178C8 (external jmp); 0x05E186\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-2-hp", "animationInstallAddresses": [ "0x05DD80" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-2-lk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83EE", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "19 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E1AA\u21920x001DD8 (external jsr); 0x05E1B2\u21920x0177B6 (external jmp); 0x05E1B8\u21920x017588 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-2-lk", "localInstructionCount": 19, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-2-lk", "animationInstallAddresses": [ "0x05DDD6" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-2-mk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83F0", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "33 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E212\u21920x001DD8 (external jsr); 0x05E218\u21920x017588 (external jsr); 0x05E220\u21920x0178C8 (external jmp); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-2-mk", "localInstructionCount": 33, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-2-mk", "animationInstallAddresses": [ "0x05DE22" ], "directionVariantGroups": 2 }, { "id": "1e-base-normal-2-hk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83F2", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "63 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E2FC\u21920x001DD8 (external jsr); 0x05E304\u21920x016FBA (external jmp); 0x05E284\u21920x001DD8 (external jsr); 8 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-2-hk", "localInstructionCount": 63, "externalFrontierCount": 13, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-2-hk", "animationInstallAddresses": [ "0x05DE92", "0x05DEBA" ], "directionVariantGroups": 2 }, { "id": "1e-base-normal-3-lp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83F4", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-3-lp", "animationInstallAddresses": [ "0x05DD20" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-3-mp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83F6", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-3-mp", "animationInstallAddresses": [ "0x05DD50" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-3-hp", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83F8", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-3-hp", "animationInstallAddresses": [ "0x05DD80" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-3-lk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83FA", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "21 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E1AA\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-3-lk", "localInstructionCount": 21, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-3-lk", "animationInstallAddresses": [ "0x05DDD6" ], "directionVariantGroups": 0 }, { "id": "1e-base-normal-3-mk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83FC", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "35 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E212\u21920x001DD8 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-3-mk", "localInstructionCount": 35, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-3-mk", "animationInstallAddresses": [ "0x05DE22" ], "directionVariantGroups": 2 }, { "id": "1e-base-normal-3-hk", "character": "Morrigan", "characterId": "0x1E", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83FE", "handlerAddress": "0x05D956", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "66 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05D956: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E2FC\u21920x001DD8 (external jsr); 10 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "normal-route-receipts.json#1e-base-normal-3-hk", "localInstructionCount": 66, "externalFrontierCount": 15, "initializerSource": "normal-initializer-receipts.json#1e-base-normal-3-hk", "animationInstallAddresses": [ "0x05DE92", "0x05DEBA" ], "directionVariantGroups": 2 }, { "id": "1e-base-attack-00", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x00", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05E966", "handlerAddress": "0x05E9B4", "selector": "B0=0x2A, E6=0x00", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05E9B4: unresolved shared/indirect closure: 0x05E9B4\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-00", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1e-base-attack-02", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x02", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05E968", "handlerAddress": "0x05E9C0", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "118 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05E9C0: unresolved shared/indirect closure: 0x05EB72\u21920x002490 (external jsr); 0x05EB78\u21920x001DD8 (external jsr); 0x05EB80\u21920x0177B6 (external jmp); 0x05EAFC\u21920x096AD8 (external jsr); 0x05EB06\u21920x0D5A7E (external jsr); 14 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "4 command candidates survive character/style filter (4 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-02", "commandSources": [ "0x060F4C", "0x060FF8", "0x061040", "0x06104A" ], "localInstructionCount": 118, "externalFrontierCount": 19 }, { "id": "1e-base-attack-04", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x04", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x05E96A", "handlerAddress": "0x05EB88", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "182 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05EB88: unresolved shared/indirect closure: 0x05EEAA\u21920x001DD8 (external jsr); 0x05EEB8\u21920x016FBA (external jmp); 0x05EE7A\u21920x002490 (external jsr); 0x05EE80\u21920x001DD8 (external jsr); 0x05EE86\u21920x017588 (external jsr); 24 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "4 command candidates survive character/style filter (4 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-04", "commandSources": [ "0x060F5C", "0x061008", "0x061054", "0x06105E" ], "localInstructionCount": 182, "externalFrontierCount": 29 }, { "id": "1e-base-attack-06", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x06", "command": "F \u2192 DF \u2192 D \u2192 DB \u2192 B + P", "variant": "Stock character", "tableAddress": "0x05E96C", "handlerAddress": "0x05EEC0", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "38 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05EEC0: unresolved shared/indirect closure: 0x05EF22\u21920x001DD8 (external jsr); 0x05EF30\u21920x016FBA (external jmp); 0x05EEEC\u21920x001DD8 (external jsr); 0x05EEFC\u21920x0135E6 (external jmp); 0x05EF02\u21920x0D7526 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-06", "commandSources": [ "0x060F6C" ], "localInstructionCount": 38, "externalFrontierCount": 9 }, { "id": "1e-base-attack-08", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x08", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05E96E", "handlerAddress": "0x05EF38", "selector": "B0=0x2A, E6=0x08", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "49 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05EF38: unresolved shared/indirect closure: 0x05EFF4\u21920x001DD8 (external jsr); 0x05F002\u21920x015EF4 (external jmp); 0x05EFB6\u21920x001DD8 (external jsr); 0x05EFBC\u21920x002490 (external jsr); 0x05EFC2\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-08", "commandSources": [], "localInstructionCount": 49, "externalFrontierCount": 8 }, { "id": "1e-base-attack-0a", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05E970", "handlerAddress": "0x05F00A", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "92 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05F00A: unresolved shared/indirect closure: 0x05F154\u21920x016FBA (external jmp); 0x05F16A\u21920x001DD8 (external jmp); 0x05F0C4\u21920x002490 (external jsr); 0x05F106\u21920x096AD8 (external jsr); 0x05F10C\u21920x001DD8 (external jsr); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-0a", "commandSources": [], "localInstructionCount": 92, "externalFrontierCount": 13 }, { "id": "1e-base-attack-0c", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05E972", "handlerAddress": "0x05F170", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "664 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05F170: unresolved shared/indirect closure: 0x05FB20\u21920x002490 (external jsr); 0x05FB36\u21920x001DD8 (external jsr); 0x05FB44\u21920x016FBA (external jmp); 0x05FB06\u21920x001DD8 (external jsr); 0x05FB14\u21920x016FBA (external jmp); 111 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-0c", "commandSources": [], "localInstructionCount": 664, "externalFrontierCount": 116 }, { "id": "1e-base-attack-0e", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Soul Eraser", "command": "QCF + two punches", "variant": "Stock character", "tableAddress": "0x05E974", "handlerAddress": "0x05FC2E", "selector": "B0=0x2A, E6=0x0E", "status": "tested: button extension and direction orbit control", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Buttons reimburse active timer decrements; directions accelerate satellite orbit through $0812A4\u2013$0812AA. Earlier buttons fixture 18\u219220.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x05FD9A", "0x05FDAC" ], "gate": "Ten button credits at $05FCF2; button loop $05FDAC\u2013$05FDC4; direction flag at $05FD9A\u2013$05FDA8.", "effect": "Buttons reimburse active timer decrements; directions accelerate satellite orbit through $0812A4\u2013$0812AA. Earlier buttons fixture 18\u219220.", "limit": "Ten timer credits; orbit speed and connected hits are separate metrics.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-0e", "commandSources": [], "localInstructionCount": 149, "externalFrontierCount": 17, "reviewSource": "../../roster.md" }, { "id": "1e-base-attack-10", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05E976", "handlerAddress": "0x05FE54", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "74 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05FE54: unresolved shared/indirect closure: 0x05FF7C\u21920x001DD8 (external jsr); 0x05FF8A\u21920x016FBA (external jmp); 0x05FF4E\u21920x0024B2 (external jsr); 0x05FF66\u21920x0B62B6 (external jsr); 0x05FF70\u21920x0135E6 (external jmp); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-10", "commandSources": [], "localInstructionCount": 74, "externalFrontierCount": 12 }, { "id": "1e-base-attack-12", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05E978", "handlerAddress": "0x05FF92", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "84 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05FF92: unresolved shared/indirect closure: 0x0600B2\u21920x001DD8 (external jsr); 0x0600C0\u21920x016FBA (external jmp); 0x06008C\u21920x001DD8 (external jsr); 0x0600A0\u21920x00A4B0 (external jsr); 0x0600AA\u21920x0135E6 (external jmp); 9 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-12", "commandSources": [], "localInstructionCount": 84, "externalFrontierCount": 14 }, { "id": "1e-base-attack-14", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05E97A", "handlerAddress": "0x05E9BA", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05E9BA: unresolved shared/indirect closure: 0x05E9BA\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1e-base-attack-16", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05E97C", "handlerAddress": "0x05EF38", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "47 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05EF38: unresolved shared/indirect closure: 0x05EFF4\u21920x001DD8 (external jsr); 0x05F002\u21920x015EF4 (external jmp); 0x05EFB6\u21920x001DD8 (external jsr); 0x05EFBC\u21920x002490 (external jsr); 0x05EFC2\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-16", "commandSources": [], "localInstructionCount": 47, "externalFrontierCount": 7 }, { "id": "1e-base-attack-18", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05E97E", "handlerAddress": "0x05E9AE", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x05E9AE: unresolved shared/indirect closure: 0x05E9AE\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-18", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "1e-base-attack-1a", "character": "Morrigan", "characterId": "0x1E", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x05E980", "handlerAddress": "0x0600C8", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "401 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0600C8: unresolved shared/indirect closure: 0x0606CE\u21920x016FBA (external jmp); 0x060620\u21920x001DD8 (external jsr); 0x060634\u21920x00A4B0 (external jmp); 0x060648\u21920x01418E (external jsr); 0x06065A\u21920x00A4B0 (external jsr); 31 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-attack-1a", "commandSources": [], "localInstructionCount": 401, "externalFrontierCount": 36 }, { "id": "1e-base-throw-00", "character": "Morrigan", "characterId": "0x1E", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x0606D4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06075A", "handlerAddress": "0x060766", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x06076C. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x060766: unresolved shared/indirect closure: 0x06078E\u21920x0BD606 (external jsr); 0x06079A\u21920x01CD1C (external jsr); 0x0607A4\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x06076C" ], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-throw-00", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "1e-base-throw-02", "character": "Morrigan", "characterId": "0x1E", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x0606D4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06075C", "handlerAddress": "0x0607AA", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0607AA: unresolved shared/indirect closure: 0x0607B6\u21920x0BD606 (external jsr); 0x0607C6\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-throw-02", "localInstructionCount": 8, "externalFrontierCount": 2 }, { "id": "1e-base-throw-04", "character": "Morrigan", "characterId": "0x1E", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x0606D4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06075E", "handlerAddress": "0x0607CC", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "9 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0607CC: unresolved shared/indirect closure: 0x0607D8\u21920x0BD606 (external jsr); 0x0607DE\u21920x01CD1C (external jsr); 0x0607EE\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-throw-04", "localInstructionCount": 9, "externalFrontierCount": 3 }, { "id": "1e-base-throw-06", "character": "Morrigan", "characterId": "0x1E", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x0606D4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x060760", "handlerAddress": "0x0607F4", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "16 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x0607FA. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0607F4: unresolved shared/indirect closure: 0x06081C\u21920x0BD606 (external jsr); 0x060828\u21920x01CD1C (external jsr); 0x060836\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x0607FA" ], "gate": "Exact selectors: E4=0x06; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-throw-06", "localInstructionCount": 16, "externalFrontierCount": 3 }, { "id": "1e-base-throw-08", "character": "Morrigan", "characterId": "0x1E", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x0606D4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x060762", "handlerAddress": "0x06083C", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x06083C: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-throw-08", "localInstructionCount": 1, "externalFrontierCount": 0 }, { "id": "1e-base-throw-0a", "character": "Morrigan", "characterId": "0x1E", "category": "throw", "name": "Native throw selector 0x0A", "command": "Native throw detector 0x0606D4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x060764", "handlerAddress": "0x06083C", "selector": "E4=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x06083C: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#1E", "codeSource": "context-route-receipts.json#leaves/1e-base-throw-0a", "localInstructionCount": 1, "externalFrontierCount": 0 }, { "id": "20-base-normal-0-lp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8400", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x061F72\u21920x001DD8 (external jsr); 0x061F7A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#20-base-normal-0-lp", "animationInstallAddresses": [ "0x061B4C" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-0-mp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8402", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "33 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x061F82\u21920x001DD8 (external jsr); 0x061F8A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-0-mp", "localInstructionCount": 33, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#20-base-normal-0-mp", "animationInstallAddresses": [ "0x061B7C" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-0-hp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8404", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "70 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x062014\u21920x001DD8 (external jsr); 0x06201C\u21920x016FBA (external jmp); 0x061FDE\u21920x001DD8 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-0-hp", "localInstructionCount": 70, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#20-base-normal-0-hp", "animationInstallAddresses": [ "0x061BAC" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-0-lk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8406", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x062108\u21920x001DD8 (external jsr); 0x062110\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#20-base-normal-0-lk", "animationInstallAddresses": [ "0x061C8E" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-0-mk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8408", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "30 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x062118\u21920x001DD8 (external jsr); 0x062120\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-0-mk", "localInstructionCount": 30, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#20-base-normal-0-mk", "animationInstallAddresses": [ "0x061CBE" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-0-hk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E840A", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x062108\u21920x001DD8 (external jsr); 0x062110\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-0-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#20-base-normal-0-hk", "animationInstallAddresses": [ "0x061CF6" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-1-lp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E840C", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x062038\u21920x001DD8 (external jsr); 0x062040\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#20-base-normal-1-lp", "animationInstallAddresses": [ "0x061BE8" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-1-mp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E840E", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "33 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x062048\u21920x001DD8 (external jsr); 0x062050\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-1-mp", "localInstructionCount": 33, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#20-base-normal-1-mp", "animationInstallAddresses": [ "0x061C18" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-1-hp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8410", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "70 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x0620DA\u21920x001DD8 (external jsr); 0x0620E2\u21920x016FBA (external jmp); 0x0620A4\u21920x001DD8 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-1-hp", "localInstructionCount": 70, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#20-base-normal-1-hp", "animationInstallAddresses": [ "0x061C48" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-1-lk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8412", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x06216A\u21920x001DD8 (external jsr); 0x062172\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#20-base-normal-1-lk", "animationInstallAddresses": [ "0x061D3A" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-1-mk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8414", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x06216A\u21920x001DD8 (external jsr); 0x062172\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#20-base-normal-1-mk", "animationInstallAddresses": [ "0x061D6A" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-1-hk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8416", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "37 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x061F40\u21920x002490 (external jsr); 0x061F46\u21920x017540 (external jsr); 0x06217A\u21920x001DD8 (external jsr); 0x062182\u21920x016FBA (external jmp); 0x0621C8\u21920x0D5A7E (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-1-hk", "localInstructionCount": 37, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#20-base-normal-1-hk", "animationInstallAddresses": [ "0x061D9A" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-2-lp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8418", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "21 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062206\u21920x017588 (external jsr); 0x06220E\u21920x00A4B0 (external jsr); 0x062214\u21920x0178C8 (external jmp); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-2-lp", "localInstructionCount": 21, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#20-base-normal-2-lp", "animationInstallAddresses": [ "0x061E08" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-2-mp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E841A", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "21 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062206\u21920x017588 (external jsr); 0x06220E\u21920x00A4B0 (external jsr); 0x062214\u21920x0178C8 (external jmp); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-2-mp", "localInstructionCount": 21, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#20-base-normal-2-mp", "animationInstallAddresses": [ "0x061E38" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-2-hp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E841C", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "73 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062206\u21920x017588 (external jsr); 0x06220E\u21920x00A4B0 (external jsr); 0x062214\u21920x0178C8 (external jmp); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-2-hp", "localInstructionCount": 73, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#20-base-normal-2-hp", "animationInstallAddresses": [ "0x061E68" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-2-lk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E841E", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062296\u21920x017588 (external jsr); 0x06229E\u21920x0178C8 (external jmp); 0x0622AC\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#20-base-normal-2-lk", "animationInstallAddresses": [ "0x061EB6" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-2-mk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8420", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062296\u21920x017588 (external jsr); 0x06229E\u21920x0178C8 (external jmp); 0x0622AC\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#20-base-normal-2-mk", "animationInstallAddresses": [ "0x061EE6" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-2-hk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8422", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062296\u21920x017588 (external jsr); 0x06229E\u21920x0178C8 (external jmp); 0x0622AC\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#20-base-normal-2-hk", "animationInstallAddresses": [ "0x061F16" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-3-lp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8424", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "23 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621D8\u21920x01485C (external jsr); 0x0621DE\u21920x013E92 (external jsr); 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062206\u21920x017588 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-3-lp", "localInstructionCount": 23, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#20-base-normal-3-lp", "animationInstallAddresses": [ "0x061E08" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-3-mp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8426", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "23 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621D8\u21920x01485C (external jsr); 0x0621DE\u21920x013E92 (external jsr); 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062206\u21920x017588 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-3-mp", "localInstructionCount": 23, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#20-base-normal-3-mp", "animationInstallAddresses": [ "0x061E38" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-3-hp", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8428", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "75 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621D8\u21920x01485C (external jsr); 0x0621DE\u21920x013E92 (external jsr); 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062206\u21920x017588 (external jsr); 7 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-3-hp", "localInstructionCount": 75, "externalFrontierCount": 12, "initializerSource": "normal-initializer-receipts.json#20-base-normal-3-hp", "animationInstallAddresses": [ "0x061E68" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-3-lk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E842A", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621D8\u21920x01485C (external jsr); 0x0621DE\u21920x013E92 (external jsr); 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062296\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#20-base-normal-3-lk", "animationInstallAddresses": [ "0x061EB6" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-3-mk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E842C", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621D8\u21920x01485C (external jsr); 0x0621DE\u21920x013E92 (external jsr); 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062296\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#20-base-normal-3-mk", "animationInstallAddresses": [ "0x061EE6" ], "directionVariantGroups": 0 }, { "id": "20-base-normal-3-hk", "character": "Mega Man", "characterId": "0x20", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E842E", "handlerAddress": "0x061AE8", "updateHandlerAddress": "0x061F24", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x061AE8: unresolved shared/indirect closure: 0x0621D8\u21920x01485C (external jsr); 0x0621DE\u21920x013E92 (external jsr); 0x0621E4\u21920x013EFC (external jsr); 0x0621EA\u21920x013E64 (external jsr); 0x062296\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "normal-route-receipts.json#20-base-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#20-base-normal-3-hk", "animationInstallAddresses": [ "0x061F16" ], "directionVariantGroups": 0 }, { "id": "20-base-attack-00", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x00", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x062D12", "handlerAddress": "0x062D2E", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "193 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x062D2E: unresolved shared/indirect closure: 0x062F7E\u21920x001DD8 (external jsr); 0x062F90\u21920x0177B6 (external jmp); 0x062F98\u21920x002490 (external jsr); 0x062F46\u21920x001DD8 (external jsr); 0x062F68\u21920x07A5F6 (external jsr); 25 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-00", "commandSources": [ "0x0659BE" ], "localInstructionCount": 193, "externalFrontierCount": 30 }, { "id": "20-base-attack-02", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x02", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x062D14", "handlerAddress": "0x062FB2", "selector": "B0=0x2A, E6=0x02", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x062FB2: unresolved shared/indirect closure: 0x0630A6\u21920x001DD8 (external jsr); 0x0630AE\u21920x015EF4 (external jmp); 0x06307A\u21920x001DD8 (external jsr); 0x063080\u21920x002490 (external jsr); 0x063086\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-02", "commandSources": [], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "20-base-attack-04", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x04", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x062D16", "handlerAddress": "0x0630B6", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "121 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0630B6: unresolved shared/indirect closure: 0x063280\u21920x001DD8 (external jsr); 0x063288\u21920x016FBA (external jmp); 0x063262\u21920x0B62B6 (external jsr); 0x063274\u21920x0135E6 (external jsr); 0x06327A\u21920x001DD8 (external jmp); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-04", "commandSources": [ "0x0659C8", "0x0659D8" ], "localInstructionCount": 121, "externalFrontierCount": 17 }, { "id": "20-base-attack-06", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x06", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x062D18", "handlerAddress": "0x0632AC", "selector": "B0=0x2A, E6=0x06", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0632AC: unresolved shared/indirect closure: 0x0632CA\u21920x001DD8 (external jsr); 0x0632D2\u21920x016FBA (external jmp); 0x0632C4\u21920x0135E6 (external jsr). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-06", "commandSources": [], "localInstructionCount": 11, "externalFrontierCount": 3 }, { "id": "20-base-attack-08", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Mega Man Beat Plane", "command": "QCF + two kicks", "variant": "Stock character", "tableAddress": "0x062D1A", "handlerAddress": "0x0632DA", "selector": "B0=0x2A, E6=0x08", "status": "tested: fresh-button firing within fixed lifetime", "staticStatus": "named causal path reviewed", "runtimeStatus": "MAME 0.287: ten controlled trials, three identical baselines; no live move-state writes", "finding": "Accepted buttons enter firing phase +$0A=$0E and clear +$3A4. Shared allocator $0A05D6 creates type $84, subtype $04 firing objects: zero baseline, four with taps. First attacker-state combo 3\u219223; tail-inclusive peak before late control 3\u219223. Ten conditions, three identical baseline trace digests.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x0638C6", "0x0638D2" ], "gate": "$0638C6 held gate then $0638D2 fresh attacks; fresh mask $0770, eligible flight/fire subphase.", "effect": "Accepted buttons enter firing phase +$0A=$0E and clear +$3A4. Shared allocator $0A05D6 creates type $84, subtype $04 firing objects: zero baseline, four with taps. First attacker-state combo 3\u219223; tail-inclusive peak before late control 3\u219223. Ten conditions, three identical baseline trace digests.", "limit": "Lifetime +$39E=180 is initialized at $0633B0 and decremented at $061A7C. Every condition spends all 180 decrements; pressing does not refill it. The 36-hit claim is not established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-08", "commandSources": [], "localInstructionCount": 356, "externalFrontierCount": 37, "reviewSource": "mega_beat_plane/summary.json", "runtimeEvidence": { "case": "mega_beat_plane", "source": "mega_beat_plane/summary.json", "baselineDigestsMatch": true, "baselinePeak": 3, "tappedPeak": 23, "baselineTailPeak": 3, "tappedTailPeak": 23 } }, { "id": "20-base-attack-0a", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x062D1C", "handlerAddress": "0x063A00", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "228 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x063CEE, 0x063D0C.", "uncertainty": "Handler 0x063A00: unresolved shared/indirect closure: 0x063CB6\u21920x002490 (external jsr); 0x063CCE\u21920x00A4B0 (external jsr); 0x063CD4\u21920x0177B6 (external jmp); 0x063CDE\u21920x001DD8 (external jmp); 0x063C9C\u21920x001DD8 (external jsr); 24 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x063CEE", "0x063D0C" ], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-0a", "commandSources": [], "localInstructionCount": 228, "externalFrontierCount": 29 }, { "id": "20-base-attack-0c", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x0C", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x062D1E", "handlerAddress": "0x063DC8", "selector": "B0=0x2A, E6=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "204 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x063DC8: unresolved shared/indirect closure: 0x0640F4\u21920x001DD8 (external jsr); 0x064106\u21920x0177B6 (external jmp); 0x062F98\u21920x002490 (external jsr); 0x0640D8\u21920x001DD8 (external jsr); 0x064076\u21920x017634 (external jsr); 38 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "4 command candidates survive character/style filter (4 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-0c", "commandSources": [ "0x065A1A", "0x065A1A", "0x065A2A", "0x065A2A" ], "localInstructionCount": 204, "externalFrontierCount": 43 }, { "id": "20-base-attack-0e", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Hyper Mega Man", "command": "QCF + two punches", "variant": "Stock character", "tableAddress": "0x062D20", "handlerAddress": "0x06410E", "selector": "B0=0x2A, E6=0x0E", "status": "tested: projectile scheduler acceleration", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Normally subtracts one scheduler tick; a fresh attack subtracts four more. Earlier successful object allocations 14\u219223 despite unchanged connected-hit totals.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x064564" ], "gate": "Scheduler $06455E; attack helper $064564.", "effect": "Normally subtracts one scheduler tick; a fresh attack subtracts four more. Earlier successful object allocations 14\u219223 despite unchanged connected-hit totals.", "limit": "Finite emission schedule; distinct from the QCF+KK Beat Plane firing mechanism.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-0e", "commandSources": [], "localInstructionCount": 300, "externalFrontierCount": 41, "reviewSource": "../../roster.md" }, { "id": "20-base-attack-10", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x062D22", "handlerAddress": "0x064894", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x064894: unresolved shared/indirect closure: 0x064894\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-10", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "20-base-attack-12", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x062D24", "handlerAddress": "0x06489A", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06489A: unresolved shared/indirect closure: 0x06489A\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "20-base-attack-14", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x062D26", "handlerAddress": "0x062FB2", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "38 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x062FB2: unresolved shared/indirect closure: 0x0630A6\u21920x001DD8 (external jsr); 0x0630AE\u21920x015EF4 (external jmp); 0x06307A\u21920x001DD8 (external jsr); 0x063080\u21920x002490 (external jsr); 0x063086\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-14", "commandSources": [], "localInstructionCount": 38, "externalFrontierCount": 7 }, { "id": "20-base-attack-16", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x062D28", "handlerAddress": "0x0648A0", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0648A0: unresolved shared/indirect closure: 0x0648A0\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-16", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "20-base-attack-18", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x18", "command": "D \u2192 DB \u2192 B + K", "variant": "Stock character", "tableAddress": "0x062D2A", "handlerAddress": "0x06467E", "selector": "B0=0x2A, E6=0x18", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06467E: unresolved shared/indirect closure: 0x0646EA\u21920x001DD8 (external jsr); 0x0646F2\u21920x016FBA (external jmp); 0x0646C8\u21920x001DD8 (external jsr); 0x0646E2\u21920x0AF434 (external jmp); 0x064694\u21920x017634 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-18", "commandSources": [ "0x065A50" ], "localInstructionCount": 29, "externalFrontierCount": 8 }, { "id": "20-base-attack-1a", "character": "Mega Man", "characterId": "0x20", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x062D2C", "handlerAddress": "0x0646FA", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "141 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0646FA: unresolved shared/indirect closure: 0x06487A\u21920x001DD8 (external jsr); 0x064886\u21920x00A4B0 (external jsr); 0x06488C\u21920x016FBA (external jmp); 0x064862\u21920x001DD8 (external jsr); 0x064874\u21920x0135E6 (external jmp); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-attack-1a", "commandSources": [], "localInstructionCount": 141, "externalFrontierCount": 17 }, { "id": "20-base-throw-00", "character": "Mega Man", "characterId": "0x20", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x0648A6; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06490A", "handlerAddress": "0x06490E", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x06490E: unresolved shared/indirect closure: 0x064926\u21920x0BD606 (external jsr); 0x064936\u21920x0135E6 (external jsr); 0x06493C\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-throw-00", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "20-base-throw-02", "character": "Mega Man", "characterId": "0x20", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x0648A6; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06490C", "handlerAddress": "0x064942", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x064942: unresolved shared/indirect closure: 0x06499C\u21920x0BD606 (external jsr); 0x0649AC\u21920x0135E6 (external jsr); 0x0649B2\u21920x01CD1C (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#20", "codeSource": "context-route-receipts.json#leaves/20-base-throw-02", "localInstructionCount": 29, "externalFrontierCount": 3 }, { "id": "24-base-normal-0-lp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8490", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x06776C\u21920x001DD8 (external jsr); 0x067774\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-0-lp", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-0-lp", "animationInstallAddresses": [ "0x0673C0" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-0-mp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8492", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x06776C\u21920x001DD8 (external jsr); 0x067774\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-0-mp", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-0-mp", "animationInstallAddresses": [ "0x0673E8" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-0-hp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8494", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x06776C\u21920x001DD8 (external jsr); 0x067774\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-0-hp", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-0-hp", "animationInstallAddresses": [ "0x067418" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-0-lk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8496", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x0677AA\u21920x001DD8 (external jsr); 0x0677B2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-0-lk", "animationInstallAddresses": [ "0x0674EA" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-0-mk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8498", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "28 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x0677BA\u21920x001DD8 (external jsr); 0x0677C2\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-0-mk", "localInstructionCount": 28, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-0-mk", "animationInstallAddresses": [ "0x067512" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-0-hk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E849A", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "28 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x0677F0\u21920x001DD8 (external jsr); 0x0677F8\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-0-hk", "localInstructionCount": 28, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-0-hk", "animationInstallAddresses": [ "0x06753A" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-1-lp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E849C", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x06777C\u21920x001DD8 (external jsr); 0x067784\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-1-lp", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-1-lp", "animationInstallAddresses": [ "0x067454" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-1-mp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E849E", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x06777C\u21920x001DD8 (external jsr); 0x067784\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-1-mp", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-1-mp", "animationInstallAddresses": [ "0x06747C" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-1-hp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E84A0", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x06777C\u21920x001DD8 (external jsr); 0x067784\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-1-hp", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-1-hp", "animationInstallAddresses": [ "0x0674A4" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-1-lk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E84A2", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x067826\u21920x001DD8 (external jsr); 0x06782E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-1-lk", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-1-lk", "animationInstallAddresses": [ "0x067576" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-1-mk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E84A4", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x067826\u21920x001DD8 (external jsr); 0x06782E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-1-mk", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-1-mk", "animationInstallAddresses": [ "0x06759E" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-1-hk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E84A6", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "14 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x06774E\u21920x002490 (external jsr); 0x067754\u21920x017540 (external jsr); 0x067826\u21920x001DD8 (external jsr); 0x06782E\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-1-hk", "localInstructionCount": 14, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#24-base-normal-1-hk", "animationInstallAddresses": [ "0x0675C6" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-2-lp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E84A8", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x067876\u21920x017588 (external jsr); 0x06787E\u21920x0178C8 (external jmp); 0x06788C\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-2-lp", "localInstructionCount": 25, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#24-base-normal-2-lp", "animationInstallAddresses": [ "0x067634" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-2-mp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E84AA", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x067876\u21920x017588 (external jsr); 0x06787E\u21920x0178C8 (external jmp); 0x06788C\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-2-mp", "localInstructionCount": 25, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#24-base-normal-2-mp", "animationInstallAddresses": [ "0x06765C" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-2-hp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E84AC", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x067876\u21920x017588 (external jsr); 0x06787E\u21920x0178C8 (external jmp); 0x0678A2\u21920x001DD8 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-2-hp", "localInstructionCount": 41, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#24-base-normal-2-hp", "animationInstallAddresses": [ "0x06768E" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-2-lk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E84AE", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x0678F6\u21920x017588 (external jsr); 0x0678FE\u21920x0178C8 (external jmp); 0x06790C\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-2-lk", "localInstructionCount": 25, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#24-base-normal-2-lk", "animationInstallAddresses": [ "0x0676DC" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-2-mk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E84B0", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x0678F6\u21920x017588 (external jsr); 0x0678FE\u21920x0178C8 (external jmp); 0x06790C\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-2-mk", "localInstructionCount": 25, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#24-base-normal-2-mk", "animationInstallAddresses": [ "0x067704" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-2-hk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E84B2", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "37 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x0678F6\u21920x017588 (external jsr); 0x0678FE\u21920x0178C8 (external jmp); 0x06791C\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-2-hk", "localInstructionCount": 37, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#24-base-normal-2-hk", "animationInstallAddresses": [ "0x06772C" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-3-lp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E84B4", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067836\u21920x01485C (external jsr); 0x06783C\u21920x013E92 (external jsr); 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x067876\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-3-lp", "localInstructionCount": 27, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#24-base-normal-3-lp", "animationInstallAddresses": [ "0x067634" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-3-mp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E84B6", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067836\u21920x01485C (external jsr); 0x06783C\u21920x013E92 (external jsr); 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x067876\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-3-mp", "localInstructionCount": 27, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#24-base-normal-3-mp", "animationInstallAddresses": [ "0x06765C" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-3-hp", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E84B8", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067836\u21920x01485C (external jsr); 0x06783C\u21920x013E92 (external jsr); 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x067876\u21920x017588 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-3-hp", "localInstructionCount": 43, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#24-base-normal-3-hp", "animationInstallAddresses": [ "0x06768E" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-3-lk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E84BA", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067836\u21920x01485C (external jsr); 0x06783C\u21920x013E92 (external jsr); 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x0678F6\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-3-lk", "localInstructionCount": 27, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#24-base-normal-3-lk", "animationInstallAddresses": [ "0x0676DC" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-3-mk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E84BC", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067836\u21920x01485C (external jsr); 0x06783C\u21920x013E92 (external jsr); 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x0678F6\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-3-mk", "localInstructionCount": 27, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#24-base-normal-3-mk", "animationInstallAddresses": [ "0x067704" ], "directionVariantGroups": 0 }, { "id": "24-base-normal-3-hk", "character": "Red Venom", "characterId": "0x24", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E84BE", "handlerAddress": "0x06735C", "updateHandlerAddress": "0x067732", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "39 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06735C: unresolved shared/indirect closure: 0x067836\u21920x01485C (external jsr); 0x06783C\u21920x013E92 (external jsr); 0x067850\u21920x013EFC (external jsr); 0x067856\u21920x013E64 (external jsr); 0x0678F6\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "normal-route-receipts.json#24-base-normal-3-hk", "localInstructionCount": 39, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#24-base-normal-3-hk", "animationInstallAddresses": [ "0x06772C" ], "directionVariantGroups": 0 }, { "id": "24-base-attack-00", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x00", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x067A20", "handlerAddress": "0x067A46", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "114 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x067A72, 0x067BB0, 0x067BB4, 0x067BBE.", "uncertainty": "Handler 0x067A46: unresolved shared/indirect closure: 0x067C30\u21920x001DD8 (external jsr); 0x067C38\u21920x016FBA (external jmp); 0x067B36\u21920x001DD8 (external jsr); 0x067B88\u21920x002490 (external jsr); 0x067BA0\u21920x001DD8 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x067A72", "0x067BB0", "0x067BB4", "0x067BBE" ], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-00", "commandSources": [ "0x068CA4", "0x068D08" ], "localInstructionCount": 114, "externalFrontierCount": 10 }, { "id": "24-base-attack-02", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Web Throw", "command": "HCB + punch", "variant": "Stock character", "tableAddress": "0x067A22", "handlerAddress": "0x067C3E", "selector": "B0=0x2A, E6=0x02", "status": "static: corresponding extra-slam loop", "staticStatus": "named causal path reviewed", "runtimeStatus": "static only", "finding": "The corresponding direction/punch threshold enables another slam-animation cycle.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x067F16" ], "gate": "Copied path $067F16\u2013$067F26 and boundary $067E0C.", "effect": "The corresponding direction/punch threshold enables another slam-animation cycle.", "limit": "Not separately live-tested; ordinary Venom damage/hit totals are not imported.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-02", "commandSources": [ "0x068CB4", "0x068D12" ], "localInstructionCount": 175, "externalFrontierCount": 21, "reviewSource": "../../roster-additions.md" }, { "id": "24-base-attack-04", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Venom Rush", "command": "QCF + kick", "variant": "Stock character", "tableAddress": "0x067A24", "handlerAddress": "0x067F2E", "selector": "B0=0x2A, E6=0x04", "status": "tested: kick-driven repeat", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "A new kick increments loop byte +$50 before unconditional decrement $068062, allowing another attack animation; punches do not qualify.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x067F86", "0x068024", "0x068030", "0x068034", "0x068048" ], "gate": "Input accumulation at $068024; merged DA/DE/398 kick mask $0700 at $068030\u2013$06803C.", "effect": "A new kick increments loop byte +$50 before unconditional decrement $068062, allowing another attack animation; punches do not qualify.", "limit": "Gated continuation, not the common Boolean mash helper.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-04", "commandSources": [ "0x068CC8", "0x068D1C" ], "localInstructionCount": 94, "externalFrontierCount": 9, "reviewSource": "../../red-venom.md" }, { "id": "24-base-attack-06", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x06", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A26", "handlerAddress": "0x0681F0", "selector": "B0=0x2A, E6=0x06", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "236 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0681F0: unresolved shared/indirect closure: 0x0685C8\u21920x001DD8 (external jsr); 0x0685D0\u21920x016FBA (external jmp); 0x068594\u21920x001DD8 (external jsr); 0x06859A\u21920x002490 (external jsr); 0x0685B8\u21920x0B62B6 (external jsr); 31 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-06", "commandSources": [], "localInstructionCount": 236, "externalFrontierCount": 36 }, { "id": "24-base-attack-08", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x08", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A28", "handlerAddress": "0x0685D8", "selector": "B0=0x2A, E6=0x08", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "80 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0685D8: unresolved shared/indirect closure: 0x06871C\u21920x001DD8 (external jsr); 0x068724\u21920x016FBA (external jmp); 0x0686F2\u21920x001DD8 (external jsr); 0x068714\u21920x0135E6 (external jmp); 0x0686CE\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-08", "commandSources": [], "localInstructionCount": 80, "externalFrontierCount": 15 }, { "id": "24-base-attack-0a", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A2A", "handlerAddress": "0x06872A", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06872A: unresolved shared/indirect closure: 0x068770\u21920x001DD8 (external jsr); 0x068778\u21920x016FBA (external jmp); 0x06876A\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-0a", "commandSources": [], "localInstructionCount": 20, "externalFrontierCount": 3 }, { "id": "24-base-attack-0c", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A2C", "handlerAddress": "0x068780", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "78 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x068780: unresolved shared/indirect closure: 0x068848\u21920x001DD8 (external jsr); 0x068850\u21920x016FBA (external jmp); 0x0687FE\u21920x001DD8 (external jsr); 0x068804\u21920x002490 (external jsr); 0x068840\u21920x0135E6 (external jmp); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-0c", "commandSources": [], "localInstructionCount": 78, "externalFrontierCount": 8 }, { "id": "24-base-attack-0e", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A2E", "handlerAddress": "0x067A40", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x067A40: unresolved shared/indirect closure: 0x067A40\u21920x016FBA (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-0e", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "24-base-attack-10", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A30", "handlerAddress": "0x067A46", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "114 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x067A72, 0x067BB0, 0x067BB4, 0x067BBE.", "uncertainty": "Handler 0x067A46: unresolved shared/indirect closure: 0x067C30\u21920x001DD8 (external jsr); 0x067C38\u21920x016FBA (external jmp); 0x067B36\u21920x001DD8 (external jsr); 0x067B88\u21920x002490 (external jsr); 0x067BA0\u21920x001DD8 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x067A72", "0x067BB0", "0x067BB4", "0x067BBE" ], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-10", "commandSources": [], "localInstructionCount": 114, "externalFrontierCount": 10 }, { "id": "24-base-attack-12", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A32", "handlerAddress": "0x068856", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x068856: unresolved shared/indirect closure: 0x068856\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "24-base-attack-14", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A34", "handlerAddress": "0x06885C", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06885C: unresolved shared/indirect closure: 0x06885C\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "24-base-attack-16", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A36", "handlerAddress": "0x068780", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "76 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x068780: unresolved shared/indirect closure: 0x068848\u21920x001DD8 (external jsr); 0x068850\u21920x016FBA (external jmp); 0x0687FE\u21920x001DD8 (external jsr); 0x068804\u21920x002490 (external jsr); 0x06879C\u21920x00A4B0 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-16", "commandSources": [], "localInstructionCount": 76, "externalFrontierCount": 7 }, { "id": "24-base-attack-18", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A38", "handlerAddress": "0x068862", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x068862: unresolved shared/indirect closure: 0x068862\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-18", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "24-base-attack-1a", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A3A", "handlerAddress": "0x0685D8", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "81 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0685D8: unresolved shared/indirect closure: 0x06871C\u21920x001DD8 (external jsr); 0x068724\u21920x016FBA (external jmp); 0x0686F2\u21920x001DD8 (external jsr); 0x068714\u21920x0135E6 (external jmp); 0x0686CE\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-1a", "commandSources": [], "localInstructionCount": 81, "externalFrontierCount": 15 }, { "id": "24-base-attack-1c", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x067A3C", "handlerAddress": "0x0685D8", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "81 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0685D8: unresolved shared/indirect closure: 0x06871C\u21920x001DD8 (external jsr); 0x068724\u21920x016FBA (external jmp); 0x0686F2\u21920x001DD8 (external jsr); 0x068714\u21920x0135E6 (external jmp); 0x0686CE\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-1c", "commandSources": [], "localInstructionCount": 81, "externalFrontierCount": 15 }, { "id": "24-base-attack-1e", "character": "Red Venom", "characterId": "0x24", "category": "special / super", "name": "Native attack selector 0x1E", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x067A3E", "handlerAddress": "0x0680C6", "selector": "B0=0x2A, E6=0x1E", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "77 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0680C6: unresolved shared/indirect closure: 0x0681B8\u21920x001DD8 (external jsr); 0x0681C0\u21920x016FBA (external jmp); 0x068136\u21920x001DD8 (external jsr); 0x06816C\u21920x002490 (external jsr); 0x0681A2\u21920x0B62B6 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-attack-1e", "commandSources": [ "0x068CD8", "0x068D26" ], "localInstructionCount": 77, "externalFrontierCount": 9 }, { "id": "24-base-throw-00", "character": "Red Venom", "characterId": "0x24", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x03B7B4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03B828", "handlerAddress": "0x03B834", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03B83A. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03B834: unresolved shared/indirect closure: 0x03B850\u21920x01CD1C (external jsr); 0x03B85E\u21920x0BD606 (external jsr); 0x03B872\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x03B83A" ], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-throw-00", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "24-base-throw-02", "character": "Red Venom", "characterId": "0x24", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x03B7B4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03B82A", "handlerAddress": "0x03B878", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03B87E. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03B878: unresolved shared/indirect closure: 0x03B894\u21920x01CD1C (external jsr); 0x03B8A2\u21920x0BD606 (external jsr); 0x03B8B6\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x03B87E" ], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-throw-02", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "24-base-throw-04", "character": "Red Venom", "characterId": "0x24", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x03B7B4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03B82C", "handlerAddress": "0x03B8BC", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x03B8C2. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03B8BC: unresolved shared/indirect closure: 0x03B8D8\u21920x01CD1C (external jsr); 0x03B8E6\u21920x0BD606 (external jsr); 0x03B8FA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x03B8C2" ], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-throw-04", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "24-base-throw-06", "character": "Red Venom", "characterId": "0x24", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x03B7B4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03B82E", "handlerAddress": "0x03B832", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03B832: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-throw-06", "localInstructionCount": 1, "externalFrontierCount": 0 }, { "id": "24-base-throw-08", "character": "Red Venom", "characterId": "0x24", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x03B7B4; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03B830", "handlerAddress": "0x03B832", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x03B832: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#24", "codeSource": "context-route-receipts.json#leaves/24-base-throw-08", "localInstructionCount": 1, "externalFrontierCount": 0 }, { "id": "26-base-normal-0-lp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8190", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309B4\u21920x001DD8 (external jsr); 0x0309BC\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#26-base-normal-0-lp", "animationInstallAddresses": [ "0x03057E" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-0-mp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8192", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309B4\u21920x001DD8 (external jsr); 0x0309BC\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#26-base-normal-0-mp", "animationInstallAddresses": [ "0x0305AE" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-0-hp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8194", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309B4\u21920x001DD8 (external jsr); 0x0309BC\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#26-base-normal-0-hp", "animationInstallAddresses": [ "0x0305D6" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-0-lk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8196", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=2, 4D=0", "status": "one-use local normal-repeat allowance verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "Facing-normalized new/buffered LK: (+$DA | +$DE) bit 8 Spends +$3A1 at $030AAC, clears input buffer +$DE at $030AB6, then starts animation $12/$00 through $0135E6 at $030AC2. This secret character reaches the same checked local instruction path; it was not separately live-tested.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030A6A\u21920x001DD8 (external jsr); 0x030A72\u21920x016FBA (external jmp); 0x030A80\u21920x0176B6 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x030A94", "0x030A98", "0x030AB6" ], "gate": "Nonzero animation flag +$3C; common $0176B6 and $01741E gates return zero; repeat allowance +$3A1 is nonzero.", "effect": "Spends +$3A1 at $030AAC, clears input buffer +$DE at $030AB6, then starts animation $12/$00 through $0135E6 at $030AC2.", "limit": "Initializer $0306D0 sets +$3A1 to 1. One qualifying restart can spend that allowance; this is not a super extension or a guaranteed extra connected hit.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-0-lk", "localInstructionCount": 46, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#26-base-normal-0-lk", "animationInstallAddresses": [ "0x0306DA" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#06-base-normal-0-lk" }, { "id": "26-base-normal-0-mk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8198", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030AE8\u21920x001DD8 (external jsr); 0x030AF0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#26-base-normal-0-mk", "animationInstallAddresses": [ "0x03070A" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-0-hk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E819A", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "41 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030AF8\u21920x001DD8 (external jsr); 0x030B00\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-0-hk", "localInstructionCount": 41, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#26-base-normal-0-hk", "animationInstallAddresses": [ "0x03073A" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-1-lp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E819C", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309D8\u21920x001DD8 (external jsr); 0x0309E0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#26-base-normal-1-lp", "animationInstallAddresses": [ "0x030612" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-1-mp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E819E", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309D8\u21920x001DD8 (external jsr); 0x0309E0\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#26-base-normal-1-mp", "animationInstallAddresses": [ "0x030642" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-1-hp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81A0", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "42 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x0309E8\u21920x001DD8 (external jsr); 0x030A46\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-1-hp", "localInstructionCount": 42, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#26-base-normal-1-hp", "animationInstallAddresses": [ "0x03068E" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-1-lk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81A2", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=2, 4D=0", "status": "one-use local normal-repeat allowance verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "Facing-normalized new/buffered LK: (+$DA | +$DE) bit 8 Spends +$3A1 at $030BA6, clears +$DE at $030BB0, and restarts animation $16/$00 at $030BBC. This secret character reaches the same checked local instruction path; it was not separately live-tested.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030B6E\u21920x001DD8 (external jsr); 0x030B76\u21920x016FBA (external jmp); 0x030B84\u21920x0176B6 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x030B8E", "0x030B92", "0x030BB0" ], "gate": "Nonzero animation flag +$3C, common $0176B6 gate returns zero and +$3A1 remains nonzero.", "effect": "Spends +$3A1 at $030BA6, clears +$DE at $030BB0, and restarts animation $16/$00 at $030BBC.", "limit": "Initializer $030772 sets +$3A1 to 1. One qualifying local restart, not an added-hit guarantee.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-1-lk", "localInstructionCount": 44, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#26-base-normal-1-lk", "animationInstallAddresses": [ "0x03077C" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#06-base-normal-1-lk" }, { "id": "26-base-normal-1-mk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81A4", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030BE2\u21920x001DD8 (external jsr); 0x030BEA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#26-base-normal-1-mk", "animationInstallAddresses": [ "0x0307AC" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-1-hk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81A6", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030982\u21920x002490 (external jsr); 0x030988\u21920x017540 (external jsr); 0x030BE2\u21920x001DD8 (external jsr); 0x030BEA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#26-base-normal-1-hk", "animationInstallAddresses": [ "0x0307DC" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-2-lp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E81A8", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 0x030C28\u21920x0178C8 (external jmp); 0x030C36\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#26-base-normal-2-lp", "animationInstallAddresses": [ "0x030852" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-2-mp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E81AA", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 0x030C28\u21920x0178C8 (external jmp); 0x030C36\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#26-base-normal-2-mp", "animationInstallAddresses": [ "0x030882" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-2-hp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81AC", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "32 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 0x030C28\u21920x0178C8 (external jmp); 0x030C46\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-2-hp", "localInstructionCount": 32, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#26-base-normal-2-hp", "animationInstallAddresses": [ "0x0308B2" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-2-lk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81AE", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 0x030CA4\u21920x0178C8 (external jmp); 0x030CB2\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#26-base-normal-2-lk", "animationInstallAddresses": [ "0x030900" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-2-mk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81B0", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 0x030CA4\u21920x0178C8 (external jmp); 0x030CB2\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-2-mk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#26-base-normal-2-mk", "animationInstallAddresses": [ "0x030930" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-2-hk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81B2", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 0x030CA4\u21920x0178C8 (external jmp); 0x030CB2\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-2-hk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#26-base-normal-2-hk", "animationInstallAddresses": [ "0x030960" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-3-lp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E81B4", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#26-base-normal-3-lp", "animationInstallAddresses": [ "0x030852" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-3-mp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E81B6", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#26-base-normal-3-mp", "animationInstallAddresses": [ "0x030882" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-3-hp", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E81B8", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "34 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C20\u21920x017588 (external jsr); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-3-hp", "localInstructionCount": 34, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#26-base-normal-3-hp", "animationInstallAddresses": [ "0x0308B2" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-3-lk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E81BA", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#26-base-normal-3-lk", "animationInstallAddresses": [ "0x030900" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-3-mk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E81BC", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-3-mk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#26-base-normal-3-mk", "animationInstallAddresses": [ "0x030930" ], "directionVariantGroups": 0 }, { "id": "26-base-normal-3-hk", "character": "Orange Hulk", "characterId": "0x26", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E81BE", "handlerAddress": "0x03051A", "updateHandlerAddress": "0x030966", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03051A: unresolved shared/indirect closure: 0x030BF2\u21920x01485C (external jsr); 0x030BF8\u21920x013E92 (external jsr); 0x030BFE\u21920x013EFC (external jsr); 0x030C04\u21920x013E64 (external jsr); 0x030C9C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "normal-route-receipts.json#26-base-normal-3-hk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#26-base-normal-3-hk", "animationInstallAddresses": [ "0x030960" ], "directionVariantGroups": 0 }, { "id": "26-base-attack-00", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x00", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x030FB0", "handlerAddress": "0x03104C", "selector": "B0=0x2A, E6=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "233 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03104C: unresolved shared/indirect closure: 0x0314C6\u21920x001DD8 (external jsr); 0x0314E2\u21920x016FBA (external jmp); 0x031488\u21920x001DD8 (external jsr); 0x03148E\u21920x0024B2 (external jsr); 0x031494\u21920x017588 (external jsr); 30 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-00", "commandSources": [ "0x032886", "0x032894" ], "localInstructionCount": 233, "externalFrontierCount": 35 }, { "id": "26-base-attack-02", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x02", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FB2", "handlerAddress": "0x0315A0", "selector": "B0=0x2A, E6=0x02", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "50 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0315A0: unresolved shared/indirect closure: 0x031662\u21920x001DD8 (external jsr); 0x03166A\u21920x015EF4 (external jmp); 0x031624\u21920x001DD8 (external jsr); 0x03162A\u21920x002490 (external jsr); 0x031630\u21920x017588 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-02", "commandSources": [], "localInstructionCount": 50, "externalFrontierCount": 9 }, { "id": "26-base-attack-04", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x030FB4", "handlerAddress": "0x031672", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "66 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x031672: unresolved shared/indirect closure: 0x0316D8\u21920x001DD8 (external jsr); 0x031706\u21920x078484 (external jsr); 0x03171C\u21920x09F40E (external jsr); 0x031738\u21920x078484 (external jsr); 0x03174C\u21920x078484 (external jsr); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-04", "commandSources": [ "0x03292A", "0x03293A" ], "localInstructionCount": 66, "externalFrontierCount": 13 }, { "id": "26-base-attack-06", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x06", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FB6", "handlerAddress": "0x031792", "selector": "B0=0x2A, E6=0x06", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "298 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x031C4C, 0x031C56.", "uncertainty": "Handler 0x031792: unresolved shared/indirect closure: 0x031B6E\u21920x001DD8 (external jsr); 0x031B8A\u21920x016FBA (external jmp); 0x031B2E\u21920x002490 (external jsr); 0x031B34\u21920x001DD8 (external jsr); 0x031B3A\u21920x017588 (external jsr); 23 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x031C4C", "0x031C56" ], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-06", "commandSources": [], "localInstructionCount": 298, "externalFrontierCount": 28 }, { "id": "26-base-attack-08", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x08", "command": "F \u2192 DF \u2192 D \u2192 DB \u2192 B + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x030FB8", "handlerAddress": "0x031CFC", "selector": "B0=0x2A, E6=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "64 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x031CFC: unresolved shared/indirect closure: 0x031DEE\u21920x001DD8 (external jsr); 0x031E0A\u21920x016FBA (external jmp); 0x031D62\u21920x001DD8 (external jsr); 0x031D7A\u21920x0135E6 (external jmp); 0x031DE8\u21920x0187CA (external jmp); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-08", "commandSources": [ "0x0328C4", "0x0328D8" ], "localInstructionCount": 64, "externalFrontierCount": 9 }, { "id": "26-base-attack-0a", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x0A", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x030FBA", "handlerAddress": "0x031E10", "selector": "B0=0x2A, E6=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "262 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x031278, 0x032046, 0x032052, 0x03205E.", "uncertainty": "Handler 0x031E10: unresolved shared/indirect closure: 0x0322A4\u21920x001DD8 (external jsr); 0x0322C0\u21920x016FBA (external jmp); 0x032266\u21920x001DD8 (external jsr); 0x03226C\u21920x0024B2 (external jsr); 0x032272\u21920x017588 (external jsr); 37 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x031278", "0x032046", "0x032052", "0x03205E" ], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-0a", "commandSources": [ "0x0328EC", "0x0328FA" ], "localInstructionCount": 262, "externalFrontierCount": 42 }, { "id": "26-base-attack-0c", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FBC", "handlerAddress": "0x03238E", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "85 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x03238E: unresolved shared/indirect closure: 0x03242E\u21920x001DD8 (external jsr); 0x032450\u21920x078484 (external jsr); 0x032466\u21920x09F40E (external jsr); 0x032482\u21920x078484 (external jsr); 0x032490\u21920x078484 (external jsr); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-0c", "commandSources": [], "localInstructionCount": 85, "externalFrontierCount": 16 }, { "id": "26-base-attack-0e", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FBE", "handlerAddress": "0x030FCA", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x030FCA: unresolved shared/indirect closure: 0x030FCA\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-0e", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "26-base-attack-10", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FC0", "handlerAddress": "0x030FD0", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x030FD0: unresolved shared/indirect closure: 0x030FD0\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-10", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "26-base-attack-12", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FC2", "handlerAddress": "0x030FDC", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x030FDC: unresolved shared/indirect closure: 0x03102A\u21920x001DD8 (external jsr); 0x031044\u21920x016FBA (external jmp); 0x031012\u21920x017634 (external jsr); 0x03101A\u21920x01CD1E (external jsr); 0x031024\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-12", "commandSources": [], "localInstructionCount": 27, "externalFrontierCount": 5 }, { "id": "26-base-attack-14", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FC4", "handlerAddress": "0x0324D6", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "65 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0324D6: unresolved shared/indirect closure: 0x0325BE\u21920x001DD8 (external jsr); 0x0325D8\u21920x016FBA (external jmp); 0x032566\u21920x001DD8 (external jsr); 0x03258E\u21920x0B54E4 (external jsr); 0x0325A6\u21920x0A95BC (external jsr); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-14", "commandSources": [], "localInstructionCount": 65, "externalFrontierCount": 11 }, { "id": "26-base-attack-16", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FC6", "handlerAddress": "0x0315A0", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "42 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0315A0: unresolved shared/indirect closure: 0x031662\u21920x001DD8 (external jsr); 0x03166A\u21920x015EF4 (external jmp); 0x031624\u21920x001DD8 (external jsr); 0x03162A\u21920x002490 (external jsr); 0x031630\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-16", "commandSources": [], "localInstructionCount": 42, "externalFrontierCount": 8 }, { "id": "26-base-attack-18", "character": "Orange Hulk", "characterId": "0x26", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x030FC8", "handlerAddress": "0x030FD6", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x030FD6: unresolved shared/indirect closure: 0x030FD6\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-attack-18", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "26-base-throw-00", "character": "Orange Hulk", "characterId": "0x26", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x0325E0; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03266A", "handlerAddress": "0x032670", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "12 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x032670: unresolved shared/indirect closure: 0x032690\u21920x0BD606 (external jsr); 0x032696\u21920x01CD1C (external jsr); 0x0326A0\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-throw-00", "localInstructionCount": 12, "externalFrontierCount": 3 }, { "id": "26-base-throw-02", "character": "Orange Hulk", "characterId": "0x26", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x0325E0; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03266C", "handlerAddress": "0x0326A6", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "9 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0326A6: unresolved shared/indirect closure: 0x0326B4\u21920x0BD606 (external jsr); 0x0326C0\u21920x01CD1C (external jsr); 0x0326CA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-throw-02", "localInstructionCount": 9, "externalFrontierCount": 3 }, { "id": "26-base-throw-04", "character": "Orange Hulk", "characterId": "0x26", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x0325E0; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x03266E", "handlerAddress": "0x0326D0", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "11 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x0326D0: unresolved shared/indirect closure: 0x0326DC\u21920x0BD606 (external jsr); 0x0326F8\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#26", "codeSource": "context-route-receipts.json#leaves/26-base-throw-04", "localInstructionCount": 11, "externalFrontierCount": 2 }, { "id": "28-base-normal-0-lp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8130", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=0, 4D=0", "status": "local normal-repeat/restart branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "New LP only: fighter +$D4 & $0010 Clears +$3C, toggles +$380 and chooses animation-bank offsets $2A/$00 versus $10/$00 before calling $0135E6 at $029AB4. It also resets attack fields +$80/+$84/+$86. This secret character reaches the same checked local instruction path; it was not separately live-tested.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029A7E\u21920x001DD8 (external jsr); 0x029A86\u21920x016FBA (external jmp); 0x029AB4\u21920x0135E6 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x029A8C" ], "gate": "Animation updater $001DD8 has not ended the move, and the animation flag byte +$3C is nonzero.", "effect": "Clears +$3C, toggles +$380 and chooses animation-bank offsets $2A/$00 versus $10/$00 before calling $0135E6 at $029AB4. It also resets attack fields +$80/+$84/+$86.", "limit": "No explicit finite mash-credit count in this local branch. The animation window and ordinary state transitions still gate each restart. No maximum or live extra-hit total established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-0-lp", "localInstructionCount": 42, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#28-base-normal-0-lp", "animationInstallAddresses": [ "0x0294A6" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#02-base-normal-0-lp" }, { "id": "28-base-normal-0-mp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8132", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029AE2\u21920x001DD8 (external jsr); 0x029AEA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#28-base-normal-0-mp", "animationInstallAddresses": [ "0x0294D6" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-0-hp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8134", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "35 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029B3E\u21920x001DD8 (external jsr); 0x029B48\u21920x016FBA (external jmp); 0x029B1C\u21920x0135E6 (external jmp); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-0-hp", "localInstructionCount": 35, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#28-base-normal-0-hp", "animationInstallAddresses": [ "0x029506" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-0-lk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8136", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029D0A\u21920x001DD8 (external jsr); 0x029D12\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#28-base-normal-0-lk", "animationInstallAddresses": [ "0x0295E8" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-0-mk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8138", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "24 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029D1A\u21920x001DD8 (external jsr); 0x029D22\u21920x016FBA (external jmp); 0x029D3A\u21920x094D7A (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-0-mk", "localInstructionCount": 24, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#28-base-normal-0-mk", "animationInstallAddresses": [ "0x029618" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-0-hk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E813A", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "24 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029D40\u21920x001DD8 (external jsr); 0x029D48\u21920x016FBA (external jmp); 0x029D60\u21920x094D7A (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-0-hk", "localInstructionCount": 24, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#28-base-normal-0-hk", "animationInstallAddresses": [ "0x029650" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-1-lp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E813C", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029B62\u21920x001DD8 (external jsr); 0x029B6A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#28-base-normal-1-lp", "animationInstallAddresses": [ "0x029542" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-1-mp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E813E", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029B62\u21920x001DD8 (external jsr); 0x029B6A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#28-base-normal-1-mp", "animationInstallAddresses": [ "0x029572" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-1-hp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8140", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "92 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029CCA\u21920x001DD8 (external jsr); 0x029CE6\u21920x016FBA (external jmp); 0x029CA2\u21920x001DD8 (external jsr); 9 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-1-hp", "localInstructionCount": 92, "externalFrontierCount": 14, "initializerSource": "normal-initializer-receipts.json#28-base-normal-1-hp", "animationInstallAddresses": [ "0x0295A2" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-1-lk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8142", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029D7A\u21920x001DD8 (external jsr); 0x029D82\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#28-base-normal-1-lk", "animationInstallAddresses": [ "0x029694" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-1-mk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8144", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "47 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029DDC\u21920x002490 (external jsr); 0x029DE2\u21920x001DD8 (external jsr); 0x029DFC\u21920x016FBA (external jmp); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-1-mk", "localInstructionCount": 47, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#28-base-normal-1-mk", "animationInstallAddresses": [ "0x0296DA" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-1-hk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8146", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "24 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029A4C\u21920x002490 (external jsr); 0x029A52\u21920x017540 (external jsr); 0x029E1A\u21920x001DD8 (external jsr); 0x029E22\u21920x016FBA (external jmp); 0x029E3A\u21920x094D7A (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-1-hk", "localInstructionCount": 24, "externalFrontierCount": 5, "initializerSource": "normal-initializer-receipts.json#28-base-normal-1-hk", "animationInstallAddresses": [ "0x02970C" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-2-lp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8148", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "31 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029E8C\u21920x017588 (external jsr); 0x029E94\u21920x0178C8 (external jmp); 0x029EA2\u21920x001DD8 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-2-lp", "localInstructionCount": 31, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#28-base-normal-2-lp", "animationInstallAddresses": [ "0x0297E2" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-2-mp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E814A", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "31 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029E8C\u21920x017588 (external jsr); 0x029E94\u21920x0178C8 (external jmp); 0x029EC8\u21920x001DD8 (external jsr); 2 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-2-mp", "localInstructionCount": 31, "externalFrontierCount": 7, "initializerSource": "normal-initializer-receipts.json#28-base-normal-2-mp", "animationInstallAddresses": [ "0x029812" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-2-hp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E814C", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029E8C\u21920x017588 (external jsr); 0x029E94\u21920x0178C8 (external jmp); 0x029EEE\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-2-hp", "localInstructionCount": 25, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#28-base-normal-2-hp", "animationInstallAddresses": [ "0x02984E", "0x02989C", "0x0298C4" ], "directionVariantGroups": 3 }, { "id": "28-base-normal-2-lk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E814E", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "28 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029F0C\u21920x017588 (external jsr); 0x029F14\u21920x0178C8 (external jmp); 0x029F22\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-2-lk", "localInstructionCount": 28, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#28-base-normal-2-lk", "animationInstallAddresses": [ "0x029912" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-2-mk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8150", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "74 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029F0C\u21920x017588 (external jsr); 0x029F14\u21920x0178C8 (external jmp); 0x029F46\u21920x001DD8 (external jsr); 14 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-2-mk", "localInstructionCount": 74, "externalFrontierCount": 19, "initializerSource": "normal-initializer-receipts.json#28-base-normal-2-mk", "animationInstallAddresses": [ "0x02995E", "0x0299B8" ], "directionVariantGroups": 2 }, { "id": "28-base-normal-2-hk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8152", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "25 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029F0C\u21920x017588 (external jsr); 0x029F14\u21920x0178C8 (external jmp); 0x02A03E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-2-hk", "localInstructionCount": 25, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#28-base-normal-2-hk", "animationInstallAddresses": [ "0x0299F2", "0x029A22" ], "directionVariantGroups": 2 }, { "id": "28-base-normal-3-lp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8154", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "35 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029E8C\u21920x017588 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-3-lp", "localInstructionCount": 35, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#28-base-normal-3-lp", "animationInstallAddresses": [ "0x0297E2" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-3-mp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8156", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "35 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029E8C\u21920x017588 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-3-mp", "localInstructionCount": 35, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#28-base-normal-3-mp", "animationInstallAddresses": [ "0x029812" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-3-hp", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8158", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029E8C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-3-hp", "localInstructionCount": 29, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#28-base-normal-3-hp", "animationInstallAddresses": [ "0x02984E", "0x02989C", "0x0298C4" ], "directionVariantGroups": 3 }, { "id": "28-base-normal-3-lk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E815A", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "32 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029F0C\u21920x017588 (external jsr); 5 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-3-lk", "localInstructionCount": 32, "externalFrontierCount": 10, "initializerSource": "normal-initializer-receipts.json#28-base-normal-3-lk", "animationInstallAddresses": [ "0x029912" ], "directionVariantGroups": 0 }, { "id": "28-base-normal-3-mk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E815C", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "78 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029F0C\u21920x017588 (external jsr); 16 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-3-mk", "localInstructionCount": 78, "externalFrontierCount": 21, "initializerSource": "normal-initializer-receipts.json#28-base-normal-3-mk", "animationInstallAddresses": [ "0x02995E", "0x0299B8" ], "directionVariantGroups": 2 }, { "id": "28-base-normal-3-hk", "character": "Gold War Machine", "characterId": "0x28", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E815E", "handlerAddress": "0x02943E", "updateHandlerAddress": "0x029A30", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02943E: unresolved shared/indirect closure: 0x029E46\u21920x01485C (external jsr); 0x029E4C\u21920x013E92 (external jsr); 0x029E6A\u21920x013EFC (external jsr); 0x029E70\u21920x013E64 (external jsr); 0x029F0C\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "normal-route-receipts.json#28-base-normal-3-hk", "localInstructionCount": 29, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#28-base-normal-3-hk", "animationInstallAddresses": [ "0x0299F2", "0x029A22" ], "directionVariantGroups": 2 }, { "id": "28-base-attack-00", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x00", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A42C", "handlerAddress": "0x02A47C", "selector": "B0=0x2A, E6=0x00", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "71 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02A47C: unresolved shared/indirect closure: 0x02A582\u21920x001DD8 (external jsr); 0x02A59E\u21920x016FBA (external jmp); 0x02A566\u21920x001DD8 (external jsr); 0x02A57C\u21920x0135E6 (external jmp); 0x02A524\u21920x001DD8 (external jsr); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-00", "commandSources": [], "localInstructionCount": 71, "externalFrontierCount": 12 }, { "id": "28-base-attack-02", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Gold War Machine missile cannon", "command": "QCF + two punches", "variant": "Stock character", "tableAddress": "0x02A42E", "handlerAddress": "0x02A5A4", "selector": "B0=0x2A, E6=0x02", "status": "tested: direction-driven missile scheduling", "staticStatus": "named causal path reviewed", "runtimeStatus": "MAME and independent FBNeo repeated-baseline fixtures", "finding": "Fresh direction inputs change the missile-producing schedule. Attack-only pressing does not establish this effect. The revised scorer includes the complete first move.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x02A9D0" ], "gate": "Gold character ID $28 selects a distinct path; direction input handling and stock phase branch are recorded in core receipts.", "effect": "Fresh direction inputs change the missile-producing schedule. Attack-only pressing does not establish this effect. The revised scorer includes the complete first move.", "limit": "See canonical core fixtures; earlier truncated-window missile totals are superseded.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-02", "commandSources": [], "localInstructionCount": 130, "externalFrontierCount": 18, "reviewSource": "../core/result-summary.json" }, { "id": "28-base-attack-04", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x04", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x02A430", "handlerAddress": "0x02A9DE", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "111 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02A9DE: unresolved shared/indirect closure: 0x02AD96\u21920x001DD8 (external jsr); 0x02ADB2\u21920x016FBA (external jmp); 0x02AD58\u21920x001DD8 (external jsr); 0x02AD6C\u21920x094D7A (external jsr); 0x02AD8A\u21920x0135E6 (external jmp); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-04", "commandSources": [ "0x02BDA4", "0x02BDB4" ], "localInstructionCount": 111, "externalFrontierCount": 17 }, { "id": "28-base-attack-06", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x06", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x02A432", "handlerAddress": "0x02AE78", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "113 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02AE78: unresolved shared/indirect closure: 0x02AEEA\u21920x001DD8 (external jsr); 0x02AF06\u21920x016FBA (external jmp); 0x02AF1C\u21920x0775E8 (external jsr); 0x02AF26\u21920x0775E8 (external jsr); 0x02AF32\u21920x00433A (external jsr); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-06", "commandSources": [ "0x02BE04" ], "localInstructionCount": 113, "externalFrontierCount": 17 }, { "id": "28-base-attack-08", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x08", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A434", "handlerAddress": "0x02B044", "selector": "B0=0x2A, E6=0x08", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B044: unresolved shared/indirect closure: 0x02B06C\u21920x001DD8 (external jsr); 0x02B088\u21920x016FBA (external jmp); 0x02B05A\u21920x01CD1E (external jsr); 0x02B066\u21920x0135E6 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-08", "commandSources": [], "localInstructionCount": 18, "externalFrontierCount": 4 }, { "id": "28-base-attack-0a", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A436", "handlerAddress": "0x02B08E", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "45 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B08E: unresolved shared/indirect closure: 0x02B10E\u21920x002490 (external jsr); 0x02B114\u21920x001DD8 (external jsr); 0x02B130\u21920x016FBA (external jmp); 0x02B0B2\u21920x0B5E20 (external jsr); 0x02B0F4\u21920x0135E6 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-0a", "commandSources": [], "localInstructionCount": 45, "externalFrontierCount": 8 }, { "id": "28-base-attack-0c", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A438", "handlerAddress": "0x02B156", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "104 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B156: unresolved shared/indirect closure: 0x02B298\u21920x001DD8 (external jsr); 0x02B2B2\u21920x016FBA (external jmp); 0x02B27C\u21920x001DD8 (external jsr); 0x02B28C\u21920x0135E6 (external jsr); 0x02B1F6\u21920x001DD8 (external jsr); 16 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-0c", "commandSources": [], "localInstructionCount": 104, "externalFrontierCount": 21 }, { "id": "28-base-attack-0e", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A43A", "handlerAddress": "0x02B2E0", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "54 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B2E0: unresolved shared/indirect closure: 0x02B3B0\u21920x001DD8 (external jsr); 0x02B3B8\u21920x015EF4 (external jmp); 0x02B372\u21920x001DD8 (external jsr); 0x02B378\u21920x002490 (external jsr); 0x02B37E\u21920x017588 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-0e", "commandSources": [], "localInstructionCount": 54, "externalFrontierCount": 9 }, { "id": "28-base-attack-10", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A43C", "handlerAddress": "0x02A446", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02A446: unresolved shared/indirect closure: 0x02A446\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-10", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "28-base-attack-12", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A43E", "handlerAddress": "0x02A44C", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02A44C: unresolved shared/indirect closure: 0x02A44C\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "28-base-attack-14", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A440", "handlerAddress": "0x02B2E0", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "46 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B2E0: unresolved shared/indirect closure: 0x02B3B0\u21920x001DD8 (external jsr); 0x02B3B8\u21920x015EF4 (external jmp); 0x02B372\u21920x001DD8 (external jsr); 0x02B378\u21920x002490 (external jsr); 0x02B37E\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-14", "commandSources": [], "localInstructionCount": 46, "externalFrontierCount": 8 }, { "id": "28-base-attack-16", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x02A442", "handlerAddress": "0x02A452", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02A452: unresolved shared/indirect closure: 0x02A452\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-16", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "28-base-attack-18", "character": "Gold War Machine", "characterId": "0x28", "category": "special / super", "name": "Native attack selector 0x18", "command": "D \u2192 DF \u2192 F + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x02A444", "handlerAddress": "0x02B3C0", "selector": "B0=0x2A, E6=0x18", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "58 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x02B3C0: unresolved shared/indirect closure: 0x02B5F4\u21920x001DD8 (external jsr); 0x02B610\u21920x016FBA (external jmp); 0x02B5B8\u21920x001DD8 (external jsr); 0x02B5D0\u21920x094D7A (external jsr); 0x02B5EE\u21920x0135E6 (external jmp); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-attack-18", "commandSources": [ "0x02BDDA", "0x02BDEA" ], "localInstructionCount": 58, "externalFrontierCount": 9 }, { "id": "28-base-throw-00", "character": "Gold War Machine", "characterId": "0x28", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x02B616; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02B698", "handlerAddress": "0x02B69E", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x02B6AA. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02B69E: unresolved shared/indirect closure: 0x02B6CA\u21920x0BD606 (external jsr); 0x02B6D0\u21920x01CD1C (external jsr); 0x02B6DA\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x02B6AA" ], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-throw-00", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "28-base-throw-02", "character": "Gold War Machine", "characterId": "0x28", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x02B616; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02B69A", "handlerAddress": "0x02B6E0", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x02B6EC. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02B6E0: unresolved shared/indirect closure: 0x02B70C\u21920x0BD606 (external jsr); 0x02B712\u21920x01CD1C (external jsr); 0x02B71C\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x02B6EC" ], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-throw-02", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "28-base-throw-04", "character": "Gold War Machine", "characterId": "0x28", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x02B616; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x02B69C", "handlerAddress": "0x02B722", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x02B72E. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x02B722: unresolved shared/indirect closure: 0x02B74E\u21920x0BD606 (external jsr); 0x02B754\u21920x01CD1C (external jsr); 0x02B75E\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x02B72E" ], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#28", "codeSource": "context-route-receipts.json#leaves/28-base-throw-04", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "2a-base-normal-0-lp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8310", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=0, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069E0C\u21920x001DD8 (external jsr); 0x069E14\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-0-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-0-lp", "animationInstallAddresses": [ "0x069940" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-0-mp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8312", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069E1C\u21920x001DD8 (external jsr); 0x069E26\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-0-mp", "animationInstallAddresses": [ "0x069970" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-0-hp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8314", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069E2C\u21920x001DD8 (external jsr); 0x069E36\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-0-hp", "animationInstallAddresses": [ "0x0699A0" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-0-lk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8316", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069E9E\u21920x001DD8 (external jsr); 0x069EA6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-0-lk", "animationInstallAddresses": [ "0x069A92" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-0-mk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8318", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069EAE\u21920x001DD8 (external jsr); 0x069EB6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-0-mk", "animationInstallAddresses": [ "0x069AC2" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-0-hk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E831A", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069EBE\u21920x001DD8 (external jsr); 0x069EC6\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-0-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-0-hk", "animationInstallAddresses": [ "0x069B0A" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-1-lp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E831C", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069E50\u21920x001DD8 (external jsr); 0x069E58\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-1-lp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-1-lp", "animationInstallAddresses": [ "0x0699E4" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-1-mp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E831E", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069E60\u21920x001DD8 (external jsr); 0x069E6A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-1-mp", "animationInstallAddresses": [ "0x069A14" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-1-hp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8320", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069E70\u21920x001DD8 (external jsr); 0x069E7A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-1-hp", "animationInstallAddresses": [ "0x069A44" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-1-lk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E8322", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069EE2\u21920x001DD8 (external jsr); 0x069EEA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-1-lk", "animationInstallAddresses": [ "0x069B4E" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-1-mk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8324", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069EF2\u21920x001DD8 (external jsr); 0x069EFA\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-1-mk", "animationInstallAddresses": [ "0x069B7E" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-1-hk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8326", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "64 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069DDA\u21920x002490 (external jsr); 0x069DE0\u21920x017540 (external jsr); 0x069F08\u21920x001DD8 (external jsr); 0x069F10\u21920x016FBA (external jmp); 0x069FBE\u21920x001DD8 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-1-hk", "localInstructionCount": 64, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-1-hk", "animationInstallAddresses": [ "0x069BC4", "0x069BF4" ], "directionVariantGroups": 2 }, { "id": "2a-base-normal-2-lp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8328", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x069FFC\u21920x017588 (external jsr); 0x06A004\u21920x0178C8 (external jmp); 0x06A012\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-2-lp", "animationInstallAddresses": [ "0x069C6A" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-2-mp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E832A", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x069FFC\u21920x017588 (external jsr); 0x06A004\u21920x0178C8 (external jmp); 0x06A012\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-2-mp", "animationInstallAddresses": [ "0x069C9A" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-2-hp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E832C", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x069FFC\u21920x017588 (external jsr); 0x06A004\u21920x0178C8 (external jmp); 0x06A012\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-2-hp", "animationInstallAddresses": [ "0x069CCA" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-2-lk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E832E", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x06A030\u21920x017588 (external jsr); 0x06A038\u21920x0178C8 (external jmp); 0x06A046\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-2-lk", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-2-lk", "animationInstallAddresses": [ "0x069D22" ], "directionVariantGroups": 2 }, { "id": "2a-base-normal-2-mk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E8330", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "80 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x06A030\u21920x017588 (external jsr); 0x06A038\u21920x0178C8 (external jmp); 0x06A05C\u21920x001DD8 (external jsr); 9 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-2-mk", "localInstructionCount": 80, "externalFrontierCount": 14, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-2-mk", "animationInstallAddresses": [ "0x069D80" ], "directionVariantGroups": 9 }, { "id": "2a-base-normal-2-hk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E8332", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "31 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x06A030\u21920x017588 (external jsr); 0x06A038\u21920x0178C8 (external jmp); 0x06A15E\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-2-hk", "localInstructionCount": 31, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-2-hk", "animationInstallAddresses": [ "0x069DB0" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-3-lp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E8334", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FCE\u21920x01485C (external jsr); 0x069FD4\u21920x013E92 (external jsr); 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x069FFC\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-3-lp", "animationInstallAddresses": [ "0x069C6A" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-3-mp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E8336", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FCE\u21920x01485C (external jsr); 0x069FD4\u21920x013E92 (external jsr); 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x069FFC\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-3-mp", "animationInstallAddresses": [ "0x069C9A" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-3-hp", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E8338", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FCE\u21920x01485C (external jsr); 0x069FD4\u21920x013E92 (external jsr); 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x069FFC\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-3-hp", "animationInstallAddresses": [ "0x069CCA" ], "directionVariantGroups": 0 }, { "id": "2a-base-normal-3-lk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E833A", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FCE\u21920x01485C (external jsr); 0x069FD4\u21920x013E92 (external jsr); 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x06A030\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-3-lk", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-3-lk", "animationInstallAddresses": [ "0x069D22" ], "directionVariantGroups": 2 }, { "id": "2a-base-normal-3-mk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E833C", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "82 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FCE\u21920x01485C (external jsr); 0x069FD4\u21920x013E92 (external jsr); 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x06A030\u21920x017588 (external jsr); 11 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-3-mk", "localInstructionCount": 82, "externalFrontierCount": 16, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-3-mk", "animationInstallAddresses": [ "0x069D80" ], "directionVariantGroups": 9 }, { "id": "2a-base-normal-3-hk", "character": "Shadow Lady", "characterId": "0x2A", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E833E", "handlerAddress": "0x0698DC", "updateHandlerAddress": "0x069DBE", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "33 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x0698DC: unresolved shared/indirect closure: 0x069FCE\u21920x01485C (external jsr); 0x069FD4\u21920x013E92 (external jsr); 0x069FDA\u21920x013EFC (external jsr); 0x069FE0\u21920x013E64 (external jsr); 0x06A030\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "normal-route-receipts.json#2a-base-normal-3-hk", "localInstructionCount": 33, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#2a-base-normal-3-hk", "animationInstallAddresses": [ "0x069DB0" ], "directionVariantGroups": 0 }, { "id": "2a-base-attack-00", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x00", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A414", "handlerAddress": "0x06A96E", "selector": "B0=0x2A, E6=0x00", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "108 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A96E: unresolved shared/indirect closure: 0x06AABE\u21920x002490 (external jsr); 0x06AAD6\u21920x0B5C92 (external jsr); 0x06AADC\u21920x001DD8 (external jsr); 0x06AAE4\u21920x016FBA (external jmp); 0x06AA38\u21920x001DD8 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-00", "commandSources": [], "localInstructionCount": 108, "externalFrontierCount": 10 }, { "id": "2a-base-attack-02", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x02", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A416", "handlerAddress": "0x06A96E", "selector": "B0=0x2A, E6=0x02", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "108 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A96E: unresolved shared/indirect closure: 0x06AABE\u21920x002490 (external jsr); 0x06AAD6\u21920x0B5C92 (external jsr); 0x06AADC\u21920x001DD8 (external jsr); 0x06AAE4\u21920x016FBA (external jmp); 0x06AA38\u21920x001DD8 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-02", "commandSources": [], "localInstructionCount": 108, "externalFrontierCount": 10 }, { "id": "2a-base-attack-04", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x04", "command": "F \u2192 DF \u2192 D \u2192 DB \u2192 B + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x06A418", "handlerAddress": "0x06A46A", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "79 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A46A: unresolved shared/indirect closure: 0x06A47A\u2192indirect (undecodable boundary); 0x06A46C\u2192indirect (undecodable boundary); 0x06A55C\u21920x001DD8 (external jsr); 0x06A578\u21920x016FBA (external jmp); 0x06A524\u21920x001DD8 (external jsr); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-04", "commandSources": [ "0x06BC64", "0x06BC78" ], "localInstructionCount": 79, "externalFrontierCount": 15 }, { "id": "2a-base-attack-06", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x06", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A41A", "handlerAddress": "0x06A96E", "selector": "B0=0x2A, E6=0x06", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "108 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A96E: unresolved shared/indirect closure: 0x06AABE\u21920x002490 (external jsr); 0x06AAD6\u21920x0B5C92 (external jsr); 0x06AADC\u21920x001DD8 (external jsr); 0x06AAE4\u21920x016FBA (external jmp); 0x06AA38\u21920x001DD8 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-06", "commandSources": [], "localInstructionCount": 108, "externalFrontierCount": 10 }, { "id": "2a-base-attack-08", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x08", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A41C", "handlerAddress": "0x06A96E", "selector": "B0=0x2A, E6=0x08", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "108 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A96E: unresolved shared/indirect closure: 0x06AABE\u21920x002490 (external jsr); 0x06AAD6\u21920x0B5C92 (external jsr); 0x06AADC\u21920x001DD8 (external jsr); 0x06AAE4\u21920x016FBA (external jmp); 0x06AA38\u21920x001DD8 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-08", "commandSources": [], "localInstructionCount": 108, "externalFrontierCount": 10 }, { "id": "2a-base-attack-0a", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A41E", "handlerAddress": "0x06A96E", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "108 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A96E: unresolved shared/indirect closure: 0x06AABE\u21920x002490 (external jsr); 0x06AAD6\u21920x0B5C92 (external jsr); 0x06AADC\u21920x001DD8 (external jsr); 0x06AAE4\u21920x016FBA (external jmp); 0x06AA38\u21920x001DD8 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-0a", "commandSources": [], "localInstructionCount": 108, "externalFrontierCount": 10 }, { "id": "2a-base-attack-0c", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x0C", "command": "raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x06A420", "handlerAddress": "0x06A57E", "selector": "B0=0x2A, E6=0x0C", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "175 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x06A72C.", "uncertainty": "Handler 0x06A57E: unresolved shared/indirect closure: 0x06A586\u21920x013EFC (external jsr); 0x06A59E\u21920x016FBA (external jmp); 0x06A5C6\u2192indirect (undecodable boundary); 0x06A5E8\u21920x01CD1E (external jsr); 0x06A62C\u21920x0135E6 (external jsr); 11 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x06A72C" ], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-0c", "commandSources": [ "0x06BC82" ], "localInstructionCount": 175, "externalFrontierCount": 16 }, { "id": "2a-base-attack-0e", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A422", "handlerAddress": "0x06A828", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "43 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A828: unresolved shared/indirect closure: 0x06A8CE\u21920x001DD8 (external jsr); 0x06A8D6\u21920x015EF4 (external jmp); 0x06A898\u21920x001DD8 (external jsr); 0x06A89E\u21920x002490 (external jsr); 0x06A8A4\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-0e", "commandSources": [], "localInstructionCount": 43, "externalFrontierCount": 8 }, { "id": "2a-base-attack-10", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A424", "handlerAddress": "0x06B554", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "21 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06B554: unresolved shared/indirect closure: 0x06B590\u21920x0135E6 (external jmp); 0x06B596\u21920x001DD8 (external jsr); 0x06B5A0\u21920x016FBA (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-10", "commandSources": [], "localInstructionCount": 21, "externalFrontierCount": 3 }, { "id": "2a-base-attack-12", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A426", "handlerAddress": "0x06A968", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A968: unresolved shared/indirect closure: 0x06A968\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-12", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "2a-base-attack-14", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A428", "handlerAddress": "0x06B474", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06B474: unresolved shared/indirect closure: 0x06B474\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "2a-base-attack-16", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A42A", "handlerAddress": "0x06A96E", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "108 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A96E: unresolved shared/indirect closure: 0x06AABE\u21920x002490 (external jsr); 0x06AAD6\u21920x0B5C92 (external jsr); 0x06AADC\u21920x001DD8 (external jsr); 0x06AAE4\u21920x016FBA (external jmp); 0x06AA38\u21920x001DD8 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-16", "commandSources": [], "localInstructionCount": 108, "externalFrontierCount": 10 }, { "id": "2a-base-attack-18", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A42C", "handlerAddress": "0x06A96E", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "108 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A96E: unresolved shared/indirect closure: 0x06AABE\u21920x002490 (external jsr); 0x06AAD6\u21920x0B5C92 (external jsr); 0x06AADC\u21920x001DD8 (external jsr); 0x06AAE4\u21920x016FBA (external jmp); 0x06AA38\u21920x001DD8 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-18", "commandSources": [], "localInstructionCount": 108, "externalFrontierCount": 10 }, { "id": "2a-base-attack-1a", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A42E", "handlerAddress": "0x06B47A", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06B47A: unresolved shared/indirect closure: 0x06B47A\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-1a", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "2a-base-attack-1c", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A430", "handlerAddress": "0x06A8DE", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "31 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A8DE: unresolved shared/indirect closure: 0x06A94C\u21920x001DD8 (external jsr); 0x06A952\u21920x002490 (external jsr); 0x06A958\u21920x017588 (external jsr); 0x06A960\u21920x015EF4 (external jmp); 0x06A8F2\u21920x00A4B0 (external jsr); 1 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-1c", "commandSources": [], "localInstructionCount": 31, "externalFrontierCount": 6 }, { "id": "2a-base-attack-1e", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x1E", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x06A432", "handlerAddress": "0x06A96E", "selector": "B0=0x2A, E6=0x1E", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "108 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06A96E: unresolved shared/indirect closure: 0x06AABE\u21920x002490 (external jsr); 0x06AAD6\u21920x0B5C92 (external jsr); 0x06AADC\u21920x001DD8 (external jsr); 0x06AAE4\u21920x016FBA (external jmp); 0x06AA38\u21920x001DD8 (external jsr); 5 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1E; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-1e", "commandSources": [ "0x06BBCC", "0x06BBDC" ], "localInstructionCount": 108, "externalFrontierCount": 10 }, { "id": "2a-base-attack-20", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Big Bang Laser", "command": "QCF + two punches", "variant": "Stock character", "tableAddress": "0x06A434", "handlerAddress": "0x06AAEC", "selector": "B0=0x2A, E6=0x20", "status": "tested: finite timer extension", "staticStatus": "named causal path reviewed", "runtimeStatus": "earlier focused evidence; see linked protocol", "finding": "Fresh attacks spend a credit and skip decrement $06AC72; earlier fixture 21\u219225.", "uncertainty": "Finding is restricted to this native path and linked fixtures. It does not establish every opponent/position, every simultaneous-input sequence, or a universal connected-hit maximum.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x06AC62" ], "gate": "Sixteen credits at $06AB2C, timer96 at $06AC2E; helper at $06AC62.", "effect": "Fresh attacks spend a credit and skip decrement $06AC72; earlier fixture 21\u219225.", "limit": "Sixteen credits, not a 25-hit universal cap.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-20", "commandSources": [], "localInstructionCount": 117, "externalFrontierCount": 17, "reviewSource": "../../roster.md" }, { "id": "2a-base-attack-22", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x22", "command": "D \u2192 DF \u2192 F + K / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x06A436", "handlerAddress": "0x06AC9C", "selector": "B0=0x2A, E6=0x22", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "88 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06AC9C: unresolved shared/indirect closure: 0x06AD10\u21920x001DD8 (external jsr); 0x06AD2E\u21920x001920 (external jsr); 0x06AD3E\u21920x001920 (external jsr); 0x06AD60\u21920x0983CC (external jsr); 0x06B3F4\u21920x00405C (external jsr); 6 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x22; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-22", "commandSources": [ "0x06BC02", "0x06BC12" ], "localInstructionCount": 88, "externalFrontierCount": 11 }, { "id": "2a-base-attack-24", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x24", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x06A438", "handlerAddress": "0x06AD72", "selector": "B0=0x2A, E6=0x24", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "148 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x06AEC2.", "uncertainty": "Handler 0x06AD72: unresolved shared/indirect closure: 0x06AF6C\u21920x001DD8 (external jsr); 0x06AF74\u21920x016FBA (external jmp); 0x06AF4A\u21920x001DD8 (external jsr); 0x06AF64\u21920x0135E6 (external jmp); 0x06AE64\u21920x001DD8 (external jsr); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x06AEC2" ], "gate": "Exact selectors: B0=0x2A, E6=0x24; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-24", "commandSources": [ "0x06BC1C", "0x06BC2C" ], "localInstructionCount": 148, "externalFrontierCount": 17 }, { "id": "2a-base-attack-26", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x26", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A43A", "handlerAddress": "0x06AF7C", "selector": "B0=0x2A, E6=0x26", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "177 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06AF7C: unresolved shared/indirect closure: 0x06B1B2\u21920x014EE0 (external jsr); 0x06B1B8\u21920x0C1D02 (external jsr); 0x06B1CE\u21920x018928 (external jsr); 0x06B23C\u21920x001DD8 (external jsr); 0x06B242\u21920x013EFC (external jsr); 25 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x26; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-26", "commandSources": [], "localInstructionCount": 177, "externalFrontierCount": 30 }, { "id": "2a-base-attack-28", "character": "Shadow Lady", "characterId": "0x2A", "category": "special / super", "name": "Native attack selector 0x28", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06A43C", "handlerAddress": "0x06B264", "selector": "B0=0x2A, E6=0x28", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "103 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06B264: unresolved shared/indirect closure: 0x06B464\u21920x001DD8 (external jsr); 0x06B46E\u21920x016FBA (external jmp); 0x06B3B2\u21920x001DD8 (external jsr); 0x06B3DE\u21920x0983CC (external jsr); 0x06B3F4\u21920x00405C (external jsr); 8 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x28; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-attack-28", "commandSources": [], "localInstructionCount": 103, "externalFrontierCount": 13 }, { "id": "2a-base-throw-00", "character": "Shadow Lady", "characterId": "0x2A", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x04F118; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x04F1AA", "handlerAddress": "0x04F1AE", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "13 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04F1AE: unresolved shared/indirect closure: 0x04F1D6\u21920x0BD606 (external jsr); 0x04F1E6\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-throw-00", "localInstructionCount": 13, "externalFrontierCount": 2 }, { "id": "2a-base-throw-02", "character": "Shadow Lady", "characterId": "0x2A", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x04F118; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x04F1AC", "handlerAddress": "0x04F1EC", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "27 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x04F1EC: unresolved shared/indirect closure: 0x04F246\u21920x0BD606 (external jsr); 0x04F256\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2A", "codeSource": "context-route-receipts.json#leaves/2a-base-throw-02", "localInstructionCount": 27, "externalFrontierCount": 2 }, { "id": "2c-base-normal-0-lp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Standing LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83D0", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=0, 4D=0", "status": "local normal-repeat/variant branch verified", "staticStatus": "independently reviewed local selector/input behavior", "runtimeStatus": "not individually live-tested", "finding": "(+$DA | +$DE) bit 4 Clears buffer, resets attack fields, decrements +$BD and changes +$80 when that count becomes nonpositive. Chooses $10/$06 versus $10/$00 from +$3C and calls $0135E6 at $05DF92. This secret character reaches the same checked local instruction path; it was not separately live-tested.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DF16\u21920x001DD8 (external jsr); 0x05DF1E\u21920x016FBA (external jmp); 0x05DF2A\u21920x0176B6 (external jsr); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [ "0x05DF3A", "0x05DF3E", "0x05DF56" ], "gate": "Animation flag +$3C and common $0176B6/$01741E gates.", "effect": "Clears buffer, resets attack fields, decrements +$BD and changes +$80 when that count becomes nonpositive. Chooses $10/$06 versus $10/$00 from +$3C and calls $0135E6 at $05DF92.", "limit": "The +$BD branch changes attack attributes; no stopping bound or initial allowance was established here. Do not call it a finite number of bonus hits.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-0-lp", "localInstructionCount": 49, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-0-lp", "animationInstallAddresses": [ "0x06CB8A" ], "directionVariantGroups": 0, "reviewSource": "normal-review/findings.json#1e-base-normal-0-lp" }, { "id": "2c-base-normal-0-mp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Standing MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83D2", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DFA0\u21920x001DD8 (external jsr); 0x05DFA8\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-0-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-0-mp", "animationInstallAddresses": [ "0x06CBBA" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-0-hp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Standing HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83D4", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DFA0\u21920x001DD8 (external jsr); 0x05DFA8\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-0-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-0-hp", "animationInstallAddresses": [ "0x06CBEA" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-0-lk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Standing LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83D6", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E02A\u21920x001DD8 (external jsr); 0x05E032\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-0-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-0-lk", "animationInstallAddresses": [ "0x06CD1E" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-0-mk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Standing MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83D8", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E02A\u21920x001DD8 (external jsr); 0x05E032\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-0-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-0-mk", "animationInstallAddresses": [ "0x06CD4E" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-0-hk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Standing HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83DA", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=0, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "72 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E040\u21920x001DD8 (external jsr); 0x05E048\u21920x016FBA (external jmp); 0x05E10E\u21920x001DD8 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=0, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-0-hk", "localInstructionCount": 72, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-0-hk", "animationInstallAddresses": [ "0x06CD96" ], "directionVariantGroups": 9 }, { "id": "2c-base-normal-1-lp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Crouching LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83DC", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=0, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "29 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DFC4\u21920x001DD8 (external jsr); 0x05DFCC\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-1-lp", "localInstructionCount": 29, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-1-lp", "animationInstallAddresses": [ "0x06CC2E" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-1-mp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Crouching MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83DE", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=0, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DFFC\u21920x001DD8 (external jsr); 0x05E004\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-1-mp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-1-mp", "animationInstallAddresses": [ "0x06CC5E" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-1-hp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Crouching HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83E0", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=0, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05DFFC\u21920x001DD8 (external jsr); 0x05E004\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=0, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-1-hp", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-1-hp", "animationInstallAddresses": [ "0x06CCA0", "0x06CCD0" ], "directionVariantGroups": 9 }, { "id": "2c-base-normal-1-lk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Crouching LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83E2", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=2, 4D=0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E132\u21920x001DD8 (external jsr); 0x05E13A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-1-lk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-1-lk", "animationInstallAddresses": [ "0x06CDDA" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-1-mk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Crouching MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83E4", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=2, 4D=2", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E132\u21920x001DD8 (external jsr); 0x05E13A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=2; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-1-mk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-1-mk", "animationInstallAddresses": [ "0x06CE0A" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-1-hk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Crouching HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83E6", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=2, B5=2, 4D=4", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "18 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05DEE4\u21920x002490 (external jsr); 0x05DEEA\u21920x017540 (external jsr); 0x05E132\u21920x001DD8 (external jsr); 0x05E13A\u21920x016FBA (external jmp). No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=2, B5=2, 4D=4; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-1-hk", "localInstructionCount": 18, "externalFrontierCount": 4, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-1-hk", "animationInstallAddresses": [ "0x06CE3A" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-2-lp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83E8", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 0x05E178\u21920x0178C8 (external jmp); 0x05E186\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-2-lp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-2-lp", "animationInstallAddresses": [ "0x06CEF0" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-2-mp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83EA", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 0x05E178\u21920x0178C8 (external jmp); 0x05E186\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-2-mp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-2-mp", "animationInstallAddresses": [ "0x06CF20" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-2-hp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83EC", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "20 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 0x05E178\u21920x0178C8 (external jmp); 0x05E186\u21920x001DD8 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-2-hp", "localInstructionCount": 20, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-2-hp", "animationInstallAddresses": [ "0x06CF50" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-2-lk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83EE", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=0, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "19 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E1AA\u21920x001DD8 (external jsr); 0x05E1B2\u21920x0177B6 (external jmp); 0x05E1B8\u21920x017588 (external jsr); 1 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-2-lk", "localInstructionCount": 19, "externalFrontierCount": 6, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-2-lk", "animationInstallAddresses": [ "0x06CFA6" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-2-mk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83F0", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=2, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "33 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E212\u21920x001DD8 (external jsr); 0x05E218\u21920x017588 (external jsr); 0x05E220\u21920x0178C8 (external jmp); 4 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-2-mk", "localInstructionCount": 33, "externalFrontierCount": 9, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-2-mk", "animationInstallAddresses": [ "0x06CFF2" ], "directionVariantGroups": 2 }, { "id": "2c-base-normal-2-hk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83F2", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=4, BA = 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "63 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E2FC\u21920x001DD8 (external jsr); 0x05E304\u21920x016FBA (external jmp); 0x05E284\u21920x001DD8 (external jsr); 8 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA = 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-2-hk", "localInstructionCount": 63, "externalFrontierCount": 13, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-2-hk", "animationInstallAddresses": [ "0x06D062", "0x06D08A" ], "directionVariantGroups": 2 }, { "id": "2c-base-normal-3-lp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA!=0 LP", "command": "LP", "variant": "Stock character", "tableAddress": "0x0E83F4", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-3-lp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-3-lp", "animationInstallAddresses": [ "0x06CEF0" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-3-mp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA!=0 MP", "command": "MP", "variant": "Stock character", "tableAddress": "0x0E83F6", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-3-mp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-3-mp", "animationInstallAddresses": [ "0x06CF20" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-3-hp", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA!=0 HP", "command": "HP", "variant": "Stock character", "tableAddress": "0x0E83F8", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=0, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "22 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E170\u21920x017588 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=0, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-3-hp", "localInstructionCount": 22, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-3-hp", "animationInstallAddresses": [ "0x06CF50" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-3-lk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA!=0 LK", "command": "LK", "variant": "Stock character", "tableAddress": "0x0E83FA", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=0, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "21 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E1AA\u21920x001DD8 (external jsr); 3 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=0, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-3-lk", "localInstructionCount": 21, "externalFrontierCount": 8, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-3-lk", "animationInstallAddresses": [ "0x06CFA6" ], "directionVariantGroups": 0 }, { "id": "2c-base-normal-3-mk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA!=0 MK", "command": "MK", "variant": "Stock character", "tableAddress": "0x0E83FC", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=2, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "35 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E212\u21920x001DD8 (external jsr); 6 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=2, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-3-mk", "localInstructionCount": 35, "externalFrontierCount": 11, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-3-mk", "animationInstallAddresses": [ "0x06CFF2" ], "directionVariantGroups": 2 }, { "id": "2c-base-normal-3-hk", "character": "Lilith", "characterId": "0x2C", "category": "normal", "name": "Air, BA!=0 HK", "command": "HK", "variant": "Stock character", "tableAddress": "0x0E83FE", "handlerAddress": "0x06CB26", "updateHandlerAddress": "0x05DEC8", "selector": "B4=4, B5=2, 4D=4, BA != 0", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "66 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06CB26: unresolved shared/indirect closure: 0x05E142\u21920x01485C (external jsr); 0x05E148\u21920x013E92 (external jsr); 0x05E14E\u21920x013EFC (external jsr); 0x05E154\u21920x013E64 (external jsr); 0x05E2FC\u21920x001DD8 (external jsr); 10 more edges in receipt. No live normal-repeat/collision trial was run. Latched-direction alternatives and installer arguments are recorded separately; these are code-path groups, not a claimed number of distinct named moves.", "reachability": "native normal selector constructed by $018542/$018652; BA row semantics beyond exact flag unlabelled", "inputReaderAddresses": [], "gate": "Exact selectors: B4=4, B5=2, 4D=4, BA != 0; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "normal-route-receipts.json#2c-base-normal-3-hk", "localInstructionCount": 66, "externalFrontierCount": 15, "initializerSource": "normal-initializer-receipts.json#2c-base-normal-3-hk", "animationInstallAddresses": [ "0x06D062", "0x06D08A" ], "directionVariantGroups": 2 }, { "id": "2c-base-attack-00", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x00", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB42", "handlerAddress": "0x06DB92", "selector": "B0=0x2A, E6=0x00", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06DB92: unresolved shared/indirect closure: 0x06DB92\u21920x0168F0 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x00; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-00", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "2c-base-attack-02", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x02", "command": "D \u2192 DF \u2192 F + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x06DB44", "handlerAddress": "0x06DB9E", "selector": "B0=0x2A, E6=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "117 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06DB9E: unresolved shared/indirect closure: 0x06DD44\u21920x002490 (external jsr); 0x06DD4A\u21920x001DD8 (external jsr); 0x06DD58\u21920x0177B6 (external jmp); 0x06DCDA\u21920x096AD8 (external jsr); 0x06DCE4\u21920x0D5A7E (external jsr); 14 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "4 command candidates survive character/style filter (4 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-02", "commandSources": [ "0x0702EE", "0x070398", "0x070408", "0x070412" ], "localInstructionCount": 117, "externalFrontierCount": 19 }, { "id": "2c-base-attack-04", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x04", "command": "F \u2192 D \u2192 DF + P / raw descriptor; matcher semantics unresolved", "variant": "Stock character", "tableAddress": "0x06DB46", "handlerAddress": "0x06DD60", "selector": "B0=0x2A, E6=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "182 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06DD60: unresolved shared/indirect closure: 0x06E082\u21920x001DD8 (external jsr); 0x06E090\u21920x016FBA (external jmp); 0x06E052\u21920x002490 (external jsr); 0x06E058\u21920x001DD8 (external jsr); 0x06E05E\u21920x017588 (external jsr); 24 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "2 command candidates survive character/style filter (2 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-04", "commandSources": [ "0x0702FE", "0x07041C" ], "localInstructionCount": 182, "externalFrontierCount": 29 }, { "id": "2c-base-attack-06", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x06", "command": "F \u2192 DF \u2192 D \u2192 DB \u2192 B + P", "variant": "Stock character", "tableAddress": "0x06DB48", "handlerAddress": "0x06E098", "selector": "B0=0x2A, E6=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "38 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06E098: unresolved shared/indirect closure: 0x06E0FA\u21920x001DD8 (external jsr); 0x06E108\u21920x016FBA (external jmp); 0x06E0C4\u21920x001DD8 (external jsr); 0x06E0D4\u21920x0135E6 (external jmp); 0x06E0DA\u21920x0D7526 (external jsr); 4 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed.", "reachability": "1 command candidates survive character/style filter (1 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x06; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-06", "commandSources": [ "0x07030E" ], "localInstructionCount": 38, "externalFrontierCount": 9 }, { "id": "2c-base-attack-08", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x08", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB4A", "handlerAddress": "0x06E110", "selector": "B0=0x2A, E6=0x08", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "49 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06E110: unresolved shared/indirect closure: 0x06E1CC\u21920x001DD8 (external jsr); 0x06E1DA\u21920x015EF4 (external jmp); 0x06E18E\u21920x001DD8 (external jsr); 0x06E194\u21920x002490 (external jsr); 0x06E19A\u21920x017588 (external jsr); 3 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-08", "commandSources": [], "localInstructionCount": 49, "externalFrontierCount": 8 }, { "id": "2c-base-attack-0a", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x0A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB4C", "handlerAddress": "0x06E1E2", "selector": "B0=0x2A, E6=0x0A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "119 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06E1E2: unresolved shared/indirect closure: 0x06E3A2\u21920x001DD8 (external jsr); 0x06E3AA\u21920x016FBA (external jmp); 0x06E37C\u21920x0B62B6 (external jsr); 0x06E386\u21920x0135E6 (external jmp); 0x06E39C\u21920x001DD8 (external jmp); 12 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-0a", "commandSources": [], "localInstructionCount": 119, "externalFrontierCount": 17 }, { "id": "2c-base-attack-0c", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x0C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB4E", "handlerAddress": "0x06E3B2", "selector": "B0=0x2A, E6=0x0C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "664 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06E3B2: unresolved shared/indirect closure: 0x06ED62\u21920x002490 (external jsr); 0x06ED78\u21920x001DD8 (external jsr); 0x06ED86\u21920x016FBA (external jmp); 0x06ED48\u21920x001DD8 (external jsr); 0x06ED56\u21920x016FBA (external jmp); 111 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x0C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-0c", "commandSources": [], "localInstructionCount": 664, "externalFrontierCount": 116 }, { "id": "2c-base-attack-0e", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x0E", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB50", "handlerAddress": "0x06EE70", "selector": "B0=0x2A, E6=0x0E", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "139 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x06EFAA, 0x06EFBC.", "uncertainty": "Handler 0x06EE70: unresolved shared/indirect closure: 0x06F04E\u21920x001DD8 (external jsr); 0x06F05C\u21920x016FBA (external jmp); 0x06EF74\u21920x001DD8 (external jsr); 0x06EF84\u21920x0A5B3A (external jsr); 0x06EFA0\u21920x0135E6 (external jmp); 10 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [ "0x06EFAA", "0x06EFBC" ], "gate": "Exact selectors: B0=0x2A, E6=0x0E; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-0e", "commandSources": [], "localInstructionCount": 139, "externalFrontierCount": 15 }, { "id": "2c-base-attack-10", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x10", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB52", "handlerAddress": "0x06F064", "selector": "B0=0x2A, E6=0x10", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "74 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06F064: unresolved shared/indirect closure: 0x06F18C\u21920x001DD8 (external jsr); 0x06F19A\u21920x016FBA (external jmp); 0x06F15E\u21920x0024B2 (external jsr); 0x06F176\u21920x0B62B6 (external jsr); 0x06F180\u21920x0135E6 (external jmp); 7 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x10; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-10", "commandSources": [], "localInstructionCount": 74, "externalFrontierCount": 12 }, { "id": "2c-base-attack-12", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x12", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB54", "handlerAddress": "0x06F1A2", "selector": "B0=0x2A, E6=0x12", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "79 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06F1A2: unresolved shared/indirect closure: 0x06F2B4\u21920x001DD8 (external jsr); 0x06F2C2\u21920x016FBA (external jmp); 0x06F28E\u21920x001DD8 (external jsr); 0x06F2A2\u21920x00A4B0 (external jsr); 0x06F2AC\u21920x0135E6 (external jmp); 9 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x12; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-12", "commandSources": [], "localInstructionCount": 79, "externalFrontierCount": 14 }, { "id": "2c-base-attack-14", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x14", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB56", "handlerAddress": "0x06DB98", "selector": "B0=0x2A, E6=0x14", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06DB98: unresolved shared/indirect closure: 0x06DB98\u21920x016DAE (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x14; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-14", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "2c-base-attack-16", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x16", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB58", "handlerAddress": "0x06E110", "selector": "B0=0x2A, E6=0x16", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "47 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06E110: unresolved shared/indirect closure: 0x06E1CC\u21920x001DD8 (external jsr); 0x06E1DA\u21920x015EF4 (external jmp); 0x06E18E\u21920x001DD8 (external jsr); 0x06E194\u21920x002490 (external jsr); 0x06E19A\u21920x017588 (external jsr); 2 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x16; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-16", "commandSources": [], "localInstructionCount": 47, "externalFrontierCount": 7 }, { "id": "2c-base-attack-18", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x18", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB5A", "handlerAddress": "0x06DB8C", "selector": "B0=0x2A, E6=0x18", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06DB8C: unresolved shared/indirect closure: 0x06DB8C\u21920x016C44 (external jmp). Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x18; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-18", "commandSources": [], "localInstructionCount": 1, "externalFrontierCount": 1 }, { "id": "2c-base-attack-1a", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x1A", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB5C", "handlerAddress": "0x06F2CA", "selector": "B0=0x2A, E6=0x1A", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "380 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06F2CA: unresolved shared/indirect closure: 0x06F886\u21920x016FBA (external jmp); 0x06F7DC\u21920x001DD8 (external jsr); 0x06F7F0\u21920x00A4B0 (external jmp); 0x06F804\u21920x01418E (external jsr); 0x06F812\u21920x00A4B0 (external jsr); 28 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-1a", "commandSources": [], "localInstructionCount": 380, "externalFrontierCount": 33 }, { "id": "2c-base-attack-1c", "character": "Lilith", "characterId": "0x2C", "category": "special / super", "name": "Native attack selector 0x1C", "command": "No matched human command survives this context filter; variable-selector/internal routes unresolved", "variant": "Stock character", "tableAddress": "0x06DB5E", "handlerAddress": "0x06F88C", "selector": "B0=0x2A, E6=0x1C", "status": "dispatch entry reviewed; human reachability unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "127 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice.", "uncertainty": "Handler 0x06F88C: unresolved shared/indirect closure: 0x06FA70\u21920x016FBA (external jmp); 0x06FA5C\u21920x001DD8 (external jsr); 0x06FA2E\u21920x002490 (external jsr); 0x06FA46\u21920x0B62B6 (external jsr); 0x06FA50\u21920x0135E6 (external jmp); 13 more edges in receipt. Strength/air variants, dynamic selector writes and external effect-object handlers are not completely closed. No exact immediate E6 store is linked from a surviving command candidate; do not call this an unused or playable named move.", "reachability": "0 command candidates survive character/style filter (0 before filtering); this does not solve meter, position, timing or matcher's success.", "inputReaderAddresses": [], "gate": "Exact selectors: B0=0x2A, E6=0x1C; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-attack-1c", "commandSources": [], "localInstructionCount": 127, "externalFrontierCount": 18 }, { "id": "2c-base-throw-00", "character": "Lilith", "characterId": "0x2C", "category": "throw", "name": "Native throw selector 0x00", "command": "Native throw detector 0x06FA76; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06FAFC", "handlerAddress": "0x06FB08", "selector": "E4=0x00", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "15 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x06FB0E. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x06FB08: unresolved shared/indirect closure: 0x06FB30\u21920x0BD606 (external jsr); 0x06FB3C\u21920x01CD1C (external jsr); 0x06FB46\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x06FB0E" ], "gate": "Exact selectors: E4=0x00; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-throw-00", "localInstructionCount": 15, "externalFrontierCount": 3 }, { "id": "2c-base-throw-02", "character": "Lilith", "characterId": "0x2C", "category": "throw", "name": "Native throw selector 0x02", "command": "Native throw detector 0x06FA76; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06FAFE", "handlerAddress": "0x06FB4C", "selector": "E4=0x02", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "8 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x06FB4C: unresolved shared/indirect closure: 0x06FB58\u21920x0BD606 (external jsr); 0x06FB68\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x02; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-throw-02", "localInstructionCount": 8, "externalFrontierCount": 2 }, { "id": "2c-base-throw-04", "character": "Lilith", "characterId": "0x2C", "category": "throw", "name": "Native throw selector 0x04", "command": "Native throw detector 0x06FA76; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06FB00", "handlerAddress": "0x06FB6E", "selector": "E4=0x04", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "9 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x06FB6E: unresolved shared/indirect closure: 0x06FB7A\u21920x0BD606 (external jsr); 0x06FB80\u21920x01CD1C (external jsr); 0x06FB90\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x04; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-throw-04", "localInstructionCount": 9, "externalFrontierCount": 3 }, { "id": "2c-base-throw-06", "character": "Lilith", "characterId": "0x2C", "category": "throw", "name": "Native throw selector 0x06", "command": "Native throw detector 0x06FA76; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06FB02", "handlerAddress": "0x06FB96", "selector": "E4=0x06", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "16 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: 0x06FB9C. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x06FB96: unresolved shared/indirect closure: 0x06FBBE\u21920x0BD606 (external jsr); 0x06FBCA\u21920x01CD1C (external jsr); 0x06FBD8\u21920x0135E6 (external jmp). The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [ "0x06FB9C" ], "gate": "Exact selectors: E4=0x06; Stock character. Unknown conditions keep both branches.", "effect": "Input operand found; its causal meaning is not established by a reference alone.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-throw-06", "localInstructionCount": 16, "externalFrontierCount": 3 }, { "id": "2c-base-throw-08", "character": "Lilith", "characterId": "0x2C", "category": "throw", "name": "Native throw selector 0x08", "command": "Native throw detector 0x06FA76; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06FB04", "handlerAddress": "0x06FBDE", "selector": "E4=0x08", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x06FBDE: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x08; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-throw-08", "localInstructionCount": 1, "externalFrontierCount": 0 }, { "id": "2c-base-throw-0a", "character": "Lilith", "characterId": "0x2C", "category": "throw", "name": "Native throw selector 0x0A", "command": "Native throw detector 0x06FA76; individual direction/button predicate unresolved", "variant": "Stock character", "tableAddress": "0x06FB06", "handlerAddress": "0x06FBDE", "selector": "E4=0x0A", "status": "local route reviewed; causal closure unresolved", "staticStatus": "local selector route reviewed; global/child closure unresolved", "runtimeStatus": "not individually live-tested", "finding": "1 reachable local instruction addresses under the recorded selectors. Input operands/helper calls: none in this local slice. This row selects throw initialization; the common $0187CA linker binds the victim.", "uncertainty": "Handler 0x06FBDE: unresolved shared/indirect closure: no external edge recorded in this local slice. The continuing attacker/victim update binding for this exact E4 selector has not been closed; initializer-only reader absence cannot establish a non-mashable throw.", "reachability": "E4 dispatch entry verified; detector-to-entry branch mapping remains unresolved", "inputReaderAddresses": [], "gate": "Exact selectors: E4=0x0A; Stock character. Unknown conditions keep both branches.", "effect": "No local input operand found; not a whole-move negative verdict.", "limit": "No universal hit cap established.", "source": "native-tables.json#2C", "codeSource": "context-route-receipts.json#leaves/2c-base-throw-0a", "localInstructionCount": 1, "externalFrontierCount": 0 } ], "reviewCoverage": { "normalContextRows": 576, "normalRowsWithLocalInputReferences": 22, "normalRowsWithoutLocalInputReferences": 554, "independentNormalReviewContexts": 200, "independentSemanticNormalRecords": 20, "additionalSharedCodeAliasAnnotations": 4, "specialAndThrowContextRows": 535, "namedAttackRows": 37, "newControlledRuntimeCases": 4, "newControlledRuntimeTrials": 40, "newIdenticalBaselineTrials": 12, "localClosureIsNotWholeMoveClosure": true, "remainingSemanticGaps": "Dynamic command-selector assignments; complete strength/air/latched-direction human reachability; common routines and effect-object closure; individual throw update/damage/escape bindings." }, "statusCounts": { "local normal-repeat/restart branch verified": 11, "local route reviewed; causal closure unresolved": 686, "tested: differs from Gold missile path": 1, "dispatch entry reviewed; human reachability unresolved": 279, "local normal-repeat/variant branch verified": 4, "one additional local normal-continuation stage verified": 1, "one-use local normal-repeat allowance verified": 4, "tested: trajectory selection, no added hits": 1, "tested: fixed wave schedule": 1, "tested: fixed object schedule": 1, "input reference does not establish local repeat": 1, "conditional local normal-repeat/restart branch verified": 1, "tested: punch-driven continuation": 1, "tested: bounded repeated attack cycles": 1, "tested: extra slam-animation cycle": 1, "static: rotation/throw-parameter mechanic": 1, "tested: no added hits in this fixture": 1, "tested: fresh-button firing within fixed lifetime": 2, "tested: projectile scheduler acceleration": 2, "no local input reference in reviewed update paths": 96, "tested: finite timer reimbursement": 2, "tested: fixed native loop": 1, "tested: no extra contacts in examined fixture": 1, "tested: animation acceleration": 1, "tested: shared finite timer reimbursement": 1, "tested: child repeat-count extension": 1, "static: native mode transition": 2, "static: satellite firing": 1, "tested: button extension and direction orbit control": 1, "static: corresponding extra-slam loop": 1, "tested: kick-driven repeat": 1, "tested: direction-driven missile scheduling": 1, "tested: finite timer extension": 1 } }