{ "schema_version": 1, "phase": "0.9C", "date": "2026-07-18", "scope": "offline_observer_execution_feasibility_closure_only", "status": "BLOCKED", "classification": "BLOCKED_MULTIPLE_FOUNDATIONAL_CONTRACTS", "baseline_commit": "3ddc213ea67bb286256ae42e52c65e00488608ca", "branch": "codex/chimera-gfx-phase09c-execution-feasibility", "authorization": { "authorized": false, "transfer_authorized": false, "execution_authorized": false, "installation_authorized": false, "lifecycle_authorized": false, "autoload_authorized": false, "backup_creation_authorized": false, "observer_build_authorized": false, "automatic_retry": false }, "canonical_state_preserved": { "historical_phase08_status": "READ_ONLY_PREFLIGHT_BLOCKED", "phase09a_status": "DESIGN_ONLY", "phase09b_status": "BLOCKED", "firmware_runtime_behavior": "UNPROVEN", "stock_hashes": "reference_only", "payload_manager_backup": "HARD_BLOCKER", "device_contact_performed": false, "device_transfer_performed": false, "device_execution_performed": false, "target_build_performed": false }, "permanent_denylist_binding": { "sha256": "4be1c17b4964f2b68c39b5145bc4af4619c32512d60269ecf5c39728b390fa63", "status": "BLOCKED", "permanent": true, "execution_eligible": false }, "source_commits": { "hardened_elfldr": "197623058f509eddde18868dafcb92fdcac66464", "controlled_payload_manager": "e23d94ff91233aa770e2342800c1467875bdef44", "elfldr_public_base": "699e8bcff03e91e8d6ca6eba281af25c5a58d8c2", "payload_manager_public_base": "cfbc70f30f419b09bf2b52283f7409e2d3117ee1", "ps5_payload_sdk_v0_41": "d2e2e585740362976a39fdd5ccf390f199a7bc37", "lifecycle_probe_source": "fe08300339a13f899fb78ea404ada381a5cba87c" }, "source_tree_status": { "hardened_elfldr": "clean", "controlled_payload_manager": "clean", "elfldr_public_base": "clean", "payload_manager_public_base": "clean", "ps5_payload_sdk_v0_41": "clean" }, "source_evidence": [ { "component": "hardened_elfldr_entry_mapper", "path": "../chimera-elfldr/elfldr.c", "sha256": "9949f8e4037984d10f1f5aa498e4665593d1fac8a33614d7f2141349839bb803", "lines": ["80-265", "273-415", "480-545", "643-769"], "finding": "Maps the payload and child-owned argument resources, installs a synthetic return address, sets RIP/RDI, restores credentials, and detaches without a proven observer return contract." }, { "component": "hardened_elfldr_controlled_route", "path": "../chimera-elfldr/socksrv.c", "sha256": "d642ced3e9b4a296dd15e355050ebe956f53a6dfdaa6ac10109cd067a3bba3d7", "lines": ["129-215", "289-375"], "finding": "Passes stdio=-1, invokes the watchdog, discards payload data, and writes only fixed loader text." }, { "component": "hardened_cleanup_model", "path": "../chimera-elfldr/controlled_runtime.c", "sha256": "10145f3bbb3b54e3d715b1667e45c6f12d3c7f52a04342ab104ec8dd49e384c9", "lines": ["60-92", "95-143", "146-250"], "finding": "Bounds ptrace preparation and models pre-detach cleanup plus a SIGTERM/SIGKILL watchdog; signal termination is not a safe observer exit." }, { "component": "hardened_ps5_cleanup_adapter", "path": "../chimera-elfldr/ps5_controlled.c", "sha256": "68717ef1cc31c483743c5af325c59e73a90f66e93b880b989e349a4ddc748772", "lines": ["26-59", "132-220"], "finding": "Uses waitpid but discards child status and exposes no payload result copy-out." }, { "component": "controlled_manager_send_only_transport", "path": "../chimera-ps5-payload-manager/src/verified_launcher.c", "sha256": "066100ca4917c7acc560e2e85666ca136cd7ccfd9094417377048f41106dd56e", "lines": ["31-184"], "finding": "Hashes and sends one descriptor, then closes; there is no receive operation." }, { "component": "controlled_manager_loopback_adapter", "path": "../chimera-ps5-payload-manager/src/ps5_launcher.c", "sha256": "29c1a5fd01784a59e88b3698940f120cb03020071bc2b7d74a1da1a51524ef59", "lines": ["18-69"], "finding": "Defines connect_loopback, send_all, and close_socket only." }, { "component": "sdk_normal_crt", "path": "work/upstream/sdk/crt/crt.c", "sha256": "3875f4739ec40b33f1f4967a1acbb585a527d2c281a360153e1f69c8b945932a", "lines": ["30-80", "88-180", "193-220"], "finding": "Clears BSS, initializes syscall/kernel/klog/rtld, calls __patch_init before main, and chooses return/exit/trap at termination." }, { "component": "sdk_patch", "path": "work/upstream/sdk/crt/patch.c", "sha256": "4f76a677bba54f4641e1cf2755768c29afb7464a35b2f21e85db2aa2785eceac", "lines": ["27-100"], "finding": "Writes credential capabilities/attributes and syscall address bounds." }, { "component": "sdk_crt_object_set", "path": "work/upstream/sdk/crt/Makefile", "sha256": "6a62f777f32ab05cbe7bff81c00cfd6639ba8bf440aba611a40ff0b62732568b", "lines": ["19-26", "50-54"], "finding": "The normal crt1.o transitively includes patch, kernel, rtld, and related startup objects." }, { "component": "sdk_compiler_wrapper", "path": "work/upstream/sdk/host/bin/prospero-clang", "sha256": "0cf49ae43d6110a7606c0ee4d702fc4b5d5e1c3ae9a722945a48b80294e295ba", "lines": ["25-46", "69-84"], "finding": "-nostartfiles and -nodefaultlibs can suppress CRT and default libraries but do not prove a usable startup ABI." }, { "component": "sdk_linker_script", "path": "work/upstream/sdk/host/elf_x86_64.x", "sha256": "169b80d01da601ef96bbc584986608dec1d9c01397eae81eccd4e1a66b0a6c6a", "lines": ["17-92"], "finding": "Defines image, arrays, dynamic, data, and BSS boundaries; it does not prove loader initialization or cleanup." }, { "component": "sdk_kernel_firmware_source_one", "path": "work/upstream/sdk/crt/kernel.c", "sha256": "ac1c375aae8d3cb1be5fb8bad2f4e6492b6ec1f1450977b534202f46b5b70321", "lines": ["148-170"], "finding": "Reads sdk_ps5_ver from the libSceLibcInternal process parameter; not an independent second current system source." }, { "component": "sdk_firmware_export_name_only", "path": "work/upstream/sdk/sce_stubs/libkernel_web.c", "sha256": "dca70757a0680ede52502fe7db10060fe30506f7ed0adfc43ce00700145ab4ff", "lines": ["2358-2360"], "finding": "sceKernelGetProsperoSystemSwVersion is a name-only export stub without an accepted prototype or semantics and is not source two." }, { "component": "lifecycle_probe_source", "path": "samples/lifecycle_probe/main.c", "sha256": "1ae7df1fe921ccab2a252f77975d3d441ef7725e34535b024580c0d4a242d766", "finding": "Historical normal-CRT lifecycle source is unchanged and is not an observer startup or output proof." } ], "immutable_evidence": { "phase08": { "commit": "2c944d6d65a08f7e1c02f518721cde061b999329", "files": { "docs/runtime/phase-0.8-read-only-preflight.md": "3fbe086175a6048176075f447ec1482074928e3b5282db97ea2169395fe1d508", "manifests/runtime/phase-0.8-read-only-preflight.json": "47d7f452f8799979fe99b3e6d56859f03544112725bf7e5b349eba5ed81b3322", "tests/test_phase08_preflight.py": "8a4ad7c70de28ffe3148fd3fd1f68c36a872c53c691c9068e1ff163970863c48" } }, "phase09a_manifest_sha256": "39fd7c70cae998d9d74e7caf1ff3c19f9f76f7de2e5a50bc09baede4ba53e9e9", "phase09b_manifest_sha256": "104c4a667ad17f9827fc7276852c6faeef96effb8e3561a5ebc19a62c7d51634", "phase09b_schema_sha256": "efcea3b0001ef5b2da65c372ceb93ee2fec09c9331b2e4cbb6008212504c0918" }, "startup_exit": { "normal_sdk_kernelwrite_free": false, "normal_sdk_status": "PROVEN_SIDE_EFFECTING", "freestanding_mechanically_linkable": true, "freestanding_dependency_closure_proven": false, "stack_alignment_proven": false, "complete_relocation_and_bss_tls_contract_proven": false, "callable_read_and_time_abi_proven": false, "safe_return_proven": false, "safe_process_exit_proven": false, "error_exit_proven": false, "timeout_safe_exit_proven": false, "complete_cleanup_proven": false, "blockers": [ "normal_sdk_reaches_prohibited_patch_writes", "freestanding_stack_alignment_unproven", "freestanding_bss_relocation_tls_closure_unproven", "freestanding_read_and_monotonic_time_abi_absent", "return_resumes_unproven_process_continuation", "process_exit_and_status_delivery_unproven", "timeout_relies_on_inadmissible_signal_termination", "post_detach_mapping_descriptor_and_manager_cleanup_unproven" ] }, "output_architectures": [ { "id": "D1_CALLER_OWNED_BOUNDED_BUFFER", "status": "CONCEPT_FEASIBLE_REQUIRES_LOADER_CHANGE_AND_EXIT_PROOF", "current_implementation": false, "reason": "Current payloadout is child-owned mapped memory and is never copied out; a future caller-owned buffer remains a host-only contract." }, { "id": "D2_EXISTING_REQUEST_RESPONSE", "status": "REJECTED_SEND_ONLY_NO_RESULT_RECEIVE", "current_implementation": false, "reason": "The manager connects, sends, and closes without a receive callback." }, { "id": "D3_LOADER_OWNED_STATUS_RECORD", "status": "UNPROVEN_REQUIRES_LOADER_STATE_AND_PROPAGATION_CHANGE", "current_implementation": false, "reason": "The current waiter discards status and no per-request record is propagated." }, { "id": "D4_PROCESS_EXIT_STATUS", "status": "REJECTED_WAIT_STATUS_DISCARDED_AND_AMBIGUOUS", "current_implementation": false, "reason": "Exit/crash/signal status is discarded and cannot carry the observation dataset." } ], "host_protocol": { "model": "tests/phase09c_feasibility_model.py", "host_only": true, "target_implemented": false, "magic": "CHG09C01", "version": 1, "header_size": 256, "maximum_output_size": 4096, "maximum_body_size": 3840, "integer_encoding": "unsigned_big_endian", "execution_nonce_bytes": 16, "request_id_bytes": 16, "firmware_field_bytes": 8, "artifact_hash_algorithm": "sha256", "body_checksum_algorithm": "sha256", "result_checksum_algorithm": "sha256", "completion_marker": "COMPLETE", "result_checksum_zeroed_fields": [ "result_checksum", "completion_marker" ], "required_fields": [ "magic", "protocol_version", "execution_nonce", "request_id", "firmware_source_1", "firmware_source_2", "observer_version", "maximum_output_size", "actual_output_size", "status", "requested_capability_bitmap", "observed_capability_bitmap", "unsupported_capability_bitmap", "truncation_flag", "artifact_sha256", "body_checksum", "result_checksum", "deadline_monotonic_ns", "completion_marker", "cleanup_status" ], "pointers_present": false, "dynamic_growth": false, "fail_closed_conditions": [ "unknown_version", "bad_size_or_checked_arithmetic_failure", "stale_nonce_or_request_id", "duplicate_result", "missing_or_conflicting_firmware_source", "artifact_hash_mismatch", "checksum_failure", "timeout", "incomplete_completion_marker", "truncation", "observer_failure", "cleanup_not_proven", "capability_bitmap_incomplete_or_conflicting" ] }, "firmware": { "expected": "9.60", "source_one": { "identity": "sdk_kernel_get_fw_version_libSceLibcInternal_sdk_ps5_ver", "status": "SOURCE_PRESENT_RUNTIME_UNPROVEN_NOT_INDEPENDENT", "nonce_bound_runtime_result_present": false }, "source_two": { "identity": null, "status": "ABSENT", "export_name_candidate_accepted": false, "nonce_bound_runtime_result_present": false }, "agreement_proven": false, "gate": "BLOCKED_FIRMWARE_SOURCE_INCOMPLETE", "conflict_policy": "BLOCKED_NO_SOURCE_PREFERENCE" }, "side_effect_model": { "no_persistent_content_write_is_side_effect_free": false, "read_only_flag_is_side_effect_free": false, "all_planned_observations_proven_side_effect_free": false, "dimensions": [ "content", "metadata", "atime", "audit", "cache", "counters", "service_state", "security_monitoring", "open_bookkeeping", "process_accounting", "object_lifetime", "races" ], "classifications": [ "SEMANTICALLY_READONLY", "METADATA_EFFECT_POSSIBLE", "ATIME_EFFECT_POSSIBLE", "AUDIT_EFFECT_POSSIBLE", "CACHE_EFFECT_POSSIBLE", "COUNTER_EFFECT_POSSIBLE", "SERVICE_STATE_EFFECT_POSSIBLE", "SECURITY_MONITORING_EFFECT_POSSIBLE", "OPEN_BOOKKEEPING_EFFECT_POSSIBLE", "PROCESS_ACCOUNTING_EFFECT_POSSIBLE", "OBJECT_LIFETIME_EFFECT_POSSIBLE", "OBJECT_RACE_POSSIBLE", "NOT_PROVABLY_SIDE_EFFECT_FREE" ], "gate": "BLOCKED_OBSERVATION_SIDE_EFFECTS_UNBOUNDED" }, "capability_closure": [ {"id": "runtime_self_identity", "source_evidence": "future_protocol_fields_only", "host_evidence": "binding_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "no_target_artifact_or_runtime_binding"}, {"id": "firmware_source_1", "source_evidence": "sdk_crt_kernel_c_148_170", "host_evidence": "result_binding_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "runtime_unproven_and_not_independent"}, {"id": "firmware_source_2", "source_evidence": "name_only_stub_rejected", "host_evidence": "missing_and_conflict_fail_closed", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "accepted_independent_source_absent"}, {"id": "mount_query", "source_evidence": "sdk_sample_only", "host_evidence": "unsupported_representable", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "abi_completeness_runtime_and_effects_unproven"}, {"id": "metadata", "source_evidence": "manager_no_follow_pattern", "host_evidence": "error_framing_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "target_semantics_and_effects_unproven"}, {"id": "object_id", "source_evidence": "manager_stat_comparison", "host_evidence": "completeness_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "stable_identity_and_race_contract_unproven"}, {"id": "size", "source_evidence": "manager_exact_size_comparison", "host_evidence": "checked_lengths_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "current_stable_object_absent"}, {"id": "sha256", "source_evidence": "manager_bounded_same_fd_hash", "host_evidence": "checksum_failures_rejected", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "read_effects_paths_and_stable_object_absent"}, {"id": "processes", "source_evidence": "partial_sdk_sample", "host_evidence": "unsupported_representable", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "complete_bounded_abi_absent"}, {"id": "services", "source_evidence": "none_complete", "host_evidence": "unsupported_representable", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "service_inventory_mapping_absent"}, {"id": "listeners", "source_evidence": "none_accepted", "host_evidence": "unsupported_representable", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "listener_owner_api_absent"}, {"id": "autoload", "source_evidence": "stock_routes_incomplete_or_side_effecting", "host_evidence": "missing_source_blocked", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "complete_authoritative_safe_sources_absent"}, {"id": "rollback_objects", "source_evidence": "phase08r_phase09a_contract_only", "host_evidence": "false_promotion_rejected", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "current_backups_absent_manager_backup_hard_blocker"}, {"id": "monotonic_time", "source_evidence": "loader_owned_clock_only", "host_evidence": "deadline_modelled", "target_evidence": "ABSENT_IN_OBSERVER_ABI", "implementation_allowed": false, "execution_allowed": false, "blocker": "freestanding_callable_clock_absent"}, {"id": "startup", "source_evidence": "full_sdk_and_loader_graph", "host_evidence": "classifications_validated", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "normal_writes_and_freestanding_closure_incomplete"}, {"id": "output", "source_evidence": "current_send_only_route", "host_evidence": "fixed_d1_contract_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "no_caller_owned_target_buffer_or_delivery"}, {"id": "normal_exit", "source_evidence": "wait_reap_status_discarded", "host_evidence": "no_safe_terminal", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "return_exit_teardown_and_status_unproven"}, {"id": "error_exit", "source_evidence": "crt_error_longjmp_trap_paths", "host_evidence": "error_not_empty_success", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "partial_unwind_status_cleanup_unproven"}, {"id": "timeout", "source_evidence": "loader_signal_watchdog", "host_evidence": "timeout_rejected", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "kill_is_not_safe_exit"}, {"id": "cleanup", "source_evidence": "pre_detach_cleanup_post_detach_process_dependency", "host_evidence": "failed_cleanup_rejected", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "joint_resource_loader_manager_cleanup_unproven"}, {"id": "recovery_independence", "source_evidence": "phase09a_contract_only", "host_evidence": "blocker_preserved", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "executor_and_exact_rollback_objects_unproven"} ], "implementation": { "target_observer_source_present": false, "observer_target_declared": false, "target_assembly_present": false, "target_elf_present": false, "linker_map_present": false, "lifecycle_package_present": false, "installation_package_present": false, "autoload_package_present": false, "loader_production_modified": false, "payload_manager_production_modified": false, "lifecycle_production_modified": false }, "artifact": { "present": false, "path": null, "sha256": null, "size": null, "execution_eligible": false, "execution_authorized": false }, "static_audit": { "status": "NOT_APPLICABLE_NO_TARGET_SOURCE_OR_ARTIFACT", "target_build": "NOT_PERFORMED", "elf_headers": "NOT_APPLICABLE", "imports": "NOT_APPLICABLE", "dynamic_dependencies": "NOT_APPLICABLE", "relocations": "NOT_APPLICABLE", "linker_map": "NOT_CREATED", "target_callgraph": "NOT_CREATED", "target_disassembly": "NOT_CREATED", "package": "NOT_CREATED", "host_model_only": true }, "final_decision": { "positive_classification_allowed": false, "classification": "BLOCKED_MULTIPLE_FOUNDATIONAL_CONTRACTS", "foundational_blockers": [ "BLOCKED_STARTUP_ABI_UNPROVEN", "BLOCKED_EXIT_CLEANUP_UNPROVEN", "BLOCKED_NO_BOUNDED_OUTPUT_CHANNEL", "BLOCKED_FIRMWARE_SOURCE_INCOMPLETE", "BLOCKED_OBSERVATION_SIDE_EFFECTS_UNBOUNDED" ], "next_phase_automatic": false }, "prohibited_actions": [ "connect_to_ps5_or_other_device", "network_scan", "usb_transfer", "build_or_assemble_target_observer", "build_target_elf", "transfer_or_execute_payload", "install_or_enable_autoload", "modify_hardened_elfldr_production_code", "modify_controlled_payload_manager_production_code", "modify_lifecycle_installer_or_rollback_production_code", "credential_capability_or_kernel_patch", "ptrace_experiment", "module_loading_experiment", "new_target_listener_or_filesystem_output", "graphics_sdl_retroarch_gnm_or_videoout_work", "external_publication_pull_request_or_upstream_contact" ] }