# Phase 1.0DG: title-presence primitive audit

Status: `OFFLINE_SNAPSHOT_QUERY_PRIMITIVE_SOURCE_BOUND_LIVE_ACQUISITION_BLOCKED`

This phase audited public and locally pinned source only. No PS5 connection,
request, transfer or execution occurred.

The pinned official Y2JB source identifies
`/system_data/priv/mms/appinfo.db` and queries `tbl_appinfo` with a bound
`titleId` predicate. This supports one narrow offline primitive: open an
already acquired, byte-exact database snapshot read-only and evaluate
`SELECT 1 FROM tbl_appinfo WHERE titleId = ? LIMIT 1`. The exact minimal query
is an inference from the published schema usage; it is not quoted from Y2JB.

This does not establish `PPSA01659`. Y2JB's editor names `PPSA01650`,
`PPSA01651` and `PPSA01652`, not the shsrv v0.7 VideoPlayer candidate. It also
retrieves and later replaces the database over FTP and its editor deliberately
backs up and modifies the local copy. Those mutation steps are excluded.

No accepted path currently acquires a consistent snapshot: the existing
Chimera-audited stack has no binary-safe PS5-to-host readback, live database
access is unproven, and even a read may have unbounded low-level effects such
as access-time changes. Therefore the primitive is usable only if a snapshot
is independently supplied later. Errors, malformed schemas and zero rows may
not be promoted to live firmware evidence.

The next offline phase may specify a hash-bound snapshot-query contract. It
must contain no acquisition client, network adapter, target address, fallback
path, database write, backup creation or device authorization.