BONE/SEA S13: relink the SEA image with segment-local VMAs

[Deadbytes101]

BONE/SEA S13 SEGMENT-LOCAL IMAGE

STACKED BASE

• base branch: ecosystem/shinesea-s12-n6-loader
• exact parent head: 56f9697f094fd848b0cf659861f21407b3a9ea75
• exact S13 head: 0213d2368da7c49555e62555b17496a91cea6f2b
• exact N6 authority: 93ea5ffb59ff31e87ab7fd5ecb5570c89b29ffee
• exact N6 nano SHA256: 581d1a6c59580fedca7fca97035449521231f9450ca4a3c2cf35d6ed07640855
• exact SHINESEA source: 3bc6343ecaeae27f0d01c6301cab01a0e77bfb96

CLASSIFICATION

S12 proved actual BIOS publication, full-byte CRC32, SEA LDT installation and architectural LSL read-back, but intentionally did not transfer to S10 _start.

The S10 image used physical addresses as VMAs while the SEA LDT already adds physical base 0x00020000. A ring3 transfer against that model would double-add the segment base for static addresses.

ONE DECISION

Keep the bounded S2/S12 descriptor unchanged and relink the unchanged no_std source graph with:

physical = segment_base + local
segment_base = 0x00020000
local range  = 0x00000000..0x0006ffff
physical     = 0x00020000..0x0008ffff
entry offset = 0x00000000

S13 does not transfer to ring3.

LOCAL / PHYSICAL LEDGER

OWNER                     LOCAL VMA          PHYSICAL LMA
CODE / RODATA / STATIC    00000000-0000FFFF  00020000-0002FFFF
RING3 STACK               00010000-00013FFF  00030000-00033FFF
ATA BLOCK BOUNCE          00014000-00014FFF  00034000-00034FFF
PROTOCOL SCRATCH          00015000-00017FFF  00035000-00037FFF
LINKER GROWTH RESERVE     00018000-0001FFFF  00038000-0003FFFF
ALLOCATOR ARENA           00020000-0005FFFF  00040000-0007FFFF
ZERO PADDING RESERVE      00060000-0006FFFF  00080000-0008FFFF

SOURCE LAW

The exact-parent source graph remains frozen:

• tools/bone-sea/src/lib.rs
• tools/bone-sea/src/s3_adapter.rs
• tools/bone-sea/s10/image.rs

S13 adds a new VMA/LMA linker authority rather than rewriting SHINESEA or the no_std image source.

OBSERVED EXACT-HEAD VALIDATION

Working tree:

• tracked/index state clean;
• local untracked artifacts: .tools/, __pycache__/, sc.local.png;
• Rust target i686-unknown-linux-gnu: installed.

Native validation:

• total defined tests: 126 / 126 PASS;
• compiler warnings: 0.

Segment-local image:

• crate name: bone_sea_s13_local_image;
• ELF entry offset: 0x00000000;
• SEA segment base / limit: 0x00020000 / 0x0006ffff;
• local range: 0x00000000..0x0006ffff;
• physical range: 0x00020000..0x0008ffff;
• ELF bytes: 79972;
• ELF SHA256: 22560ca0ca12aaf81e1324fe77c93d9ba01af1d7e775cb66e9b2df0ada77d4b9;
• code bytes / headroom: 35040 / 30496;
• physical flat bytes: 458752;
• physical flat SHA256: 668f272d4035c18600dfaec211756307bd5ab18734bd093bc5a0fe41a6028cd3;
• PT_LOAD segments: 7;
• undefined symbols: 0.

Judge results:

• VMA/LMA translation: PASS;
• repeated ELF identity: PASS;
• repeated flat identity: PASS;
• absolute-VMA adversary: REJECTED;
• LMA-offset adversary: REJECTED;
• temporary outputs: removed on exit;
• terminal verdict: BONE/SEA S13 SEGMENT-LOCAL IMAGE VERIFY PASS.

GitHub Actions currently exposes no pull-request workflow run for this exact head. The accepted evidence is the observed exact-head local transcript.

ADVERSARIAL JUDGE

• absolute-VMA adversary moves the code VMA from local zero to 0x00020000 and is rejected by the exact base-translation law;
• LMA-offset adversary moves the code physical address by one sector and is rejected;
• the earlier over-broad predicate rejecting every local VMA >= 0x00020000 was removed because it falsely rejected the legitimate arena and zero regions.

DEADBYTE ECOSYSTEM REUSE

• CINDER-16 authority 9eadc22d03b0782373d5ca23290bb76768df5e4f: exact identity and validation-before-publication discipline;
• LOOM authority 444937bd0aef2e5b17ed253deb7677a778225d7e: freestanding linker boundary, binary geometry and adversarial rejection;
• no CINDER VM code copied;
• no LOOM runtime code copied.

PROOF SURFACE

• .github/workflows/bone-sea-s13-local-offset-image.yml
• config/bone_sea_s13.json
• docs/BONE_SEA_S13.md
• tools/bone-sea/s13/LICENSE-NOTICE.txt
• tools/bone-sea/s13/link.ld
• tools/bone-sea/s13/prove.py
• tools/bone-sea/src/bin/bone-sea-s13.rs

NON-CLAIMS

• ring3 transfer: no;
• SEA _start execution: no;
• N6 I/O-gate execution: no;
• SHINESEA runtime mount: no;
• allocator runtime PASS: no;
• write authority: no.

MERGE LAW

S13 is ready for review only against exact parent 56f9697f094fd848b0cf659861f21407b3a9ea75 and exact head 0213d2368da7c49555e62555b17496a91cea6f2b. Any head movement, rebase, retarget or integration requires fresh evidence.

No merge is performed automatically. No S14 authorization is implied by this PR transition.

REPORTS ARE CLAIMS, NOT EVIDENCE.
NO COSTUME RIGOR.

[Deadbytes101]

S13 BRANCH CREATION AND STATIC REVIEW COMPLETE

Exact parent:

56f9697f094fd848b0cf659861f21407b3a9ea75

Exact candidate head:

0213d2368da7c49555e62555b17496a91cea6f2b

Observed connector state:

• PR remains draft;
• mergeable: true;
• merged: false;
• seven changed files;
• source graph inherited from S12 remains frozen by the verifier;
• no GitHub Actions pull-request run is currently exposed for this exact head.

Static adversarial review found and repaired one verifier defect before the PR was opened: the first draft rejected every local VMA greater than or equal to 0x00020000, which would have falsely rejected the legitimate local arena and zero regions. The surviving law is only:

p_paddr = 0x00020000 + p_vaddr

plus exact local and physical bounds.

Acceptance is still pending actual exact-head execution:

$env:RUSTFLAGS = '-Dwarnings'

cargo test `
    --locked `
    --all-targets `
    --manifest-path .\tools\bone-sea\Cargo.toml

cargo run `
    --locked `
    --release `
    --manifest-path .\tools\bone-sea\Cargo.toml `
    --bin bone-sea-s13 `
    -- `
    verify `
    --shinesea D:\TECHNICAL\SHINESEA

Expected native total: 126 / 126 PASS, warnings 0.

No ring3 transfer, no _start execution, no write authority, no merge, and no S14 authorization are claimed from static review.

REPORTS ARE CLAIMS, NOT EVIDENCE.
NO COSTUME RIGOR.

[Deadbytes101]

BONE/SEA S13 EXACT-HEAD EVIDENCE

Observed on exact head 0213d2368da7c49555e62555b17496a91cea6f2b with exact parent 56f9697f094fd848b0cf659861f21407b3a9ea75 and SHINESEA 3bc6343ecaeae27f0d01c6301cab01a0e77bfb96.

WORKTREE

• tracked/index state: clean
• local untracked artifacts only: .tools/, __pycache__/, sc.local.png
• Rust target i686-unknown-linux-gnu: installed

NATIVE GATE

• tests: 126 / 126 PASS
• compiler warnings: 0

SEGMENT-LOCAL IMAGE

• crate name: bone_sea_s13_local_image
• ELF entry offset: 0x00000000
• SEA segment base: 0x00020000
• SEA segment limit: 0x0006ffff
• local range: 0x00000000..0x0006ffff
• physical range: 0x00020000..0x0008ffff
• ELF bytes: 79972
• ELF SHA256: 22560ca0ca12aaf81e1324fe77c93d9ba01af1d7e775cb66e9b2df0ada77d4b9
• code bytes: 35040
• code headroom: 30496
• flat bytes: 458752
• flat SHA256: 668f272d4035c18600dfaec211756307bd5ab18734bd093bc5a0fe41a6028cd3
• PT_LOAD segments: 7
• undefined symbols: 0

JUDGES

• VMA/LMA translation: PASS
• repeated ELF identity: PASS
• repeated flat identity: PASS
• absolute-VMA adversary: REJECTED
• LMA-offset adversary: REJECTED
• temporary outputs: removed on exit
• terminal verdict: BONE/SEA S13 SEGMENT-LOCAL IMAGE VERIFY PASS

NON-CLAIMS PRESERVED

• ring3 transfer: not performed
• SEA _start: not executed
• write authority: disabled

GitHub Actions currently exposes no pull-request workflow run for this exact head. Local exact-head evidence is attached; any head movement, rebase, retarget or integration requires fresh proof.

REPORTS ARE CLAIMS, NOT EVIDENCE.
NO COSTUME RIGOR.