re: the trigger container's "push" is a clear — and the live test is blocked

Third independent line for yesterday's built-in 100 rename, from the callee
this time. sub_8226E3B8 was labelled "push", which is what made built-in 100
look like push_trigger. It reads the element count, returns immediately when
the container is EMPTY, and otherwise walks the node list splicing nodes out
until it is empty. A push links one node; this unlinks all of them. It is
clear(). The append is sub_8226E160, reached from built-ins 19 and 25.

So the rename now rests on the handler, the usage (all 12 Stage 02 sites sit
in the phase terminator next to timer_stop / clear_flag(-1) /
MARK_LAST_PHASE), and the callee.

The dynamic half did NOT run, and the write-up says so. phase_watch.py now
samples [phase+272+20] (triggers queued) and [phase+216+8] (coroutines
alive) so a phase terminator's effect on the VM is visible in one line —
written here, never yet exercised against a live guest.

Boot-nav could not reach the title in 381 s. Diagnosed rather than retried:
skip_intro.sh only runs the title test on a static frame, gated at
rmse <= 1500, and this run measured 1503 at 104 s and 1549 at 139 s — just
above the cut — so is_title.py was never called and the one allowed press
was never spent. Recorded in BACKLOG with the explicit instruction NOT to
raise the constant: the first step is to log rmse and the glyph count
through a whole boot and look at the two distributions, because tuning a
threshold to make one run pass is fitting to a single sample.

Also reaped a stale lock: a gdb orphaned 2h14m earlier was holding
/tmp/xenia-canary.lock with an already-defunct emulator child.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PMRJjbxLqZtsb5Vb7KunPE

docs/re/structures/isl-builtins.md

@@ -317,12 +317,35 @@ continuously — see [script-runtime-probe](../script-runtime-probe.md)).
   do with `[phase+272]`.
 * `[phase+272]` is **not a pointer to a queue** — it is an **embedded container**.
   `vt2` (`sub_82265DD0`) is literally `addi r3,r3,272 ; b 0x8226E3B8`, i.e. it
-  passes `phase+272` as `this` into the push.
+  passes `phase+272` as `this`.
 
-### Container layout, from the push/pop pair
+### ❌ `sub_8226E3B8` is a CLEAR, not a push
 
-`sub_8226E3B8` (push, reached from built-in **100**) and `sub_8226E220` (pop,
-called every frame from `sub_8226D740`):
+It was labelled "push" here, which is what made built-in 100 look like
+`push_trigger`. Read directly, it is the opposite:
+
+```
+lwz r11,20(r30)          ; the element count
+cntlzw / extrwi          ; == 0 ?
+bne  -> 0x8226E450       ; count == 0 -> nothing to do, return
+addi r31,r30,12          ; else walk the node list…
+  stw r11,0(r10) ; stw r10,4(r11)   ; …unlinking each node
+```
+
+A push allocates and links **one** node; this runs only when the container is
+**non-empty** and splices nodes **out** until it is empty. So it is
+`clear()`. That is a third independent line for the rename above — the handler,
+the usage (all 12 Stage 02 sites sit in the phase terminator), and now the
+callee.
+
+The **append** is `sub_8226E160`, reached from built-ins 19 and 25: it takes the
+record fields as arguments (including a `double` in `f1`, matching built-in 19's
+`+24 dbl`) and is guarded on `[container+8]`.
+
+### Container layout, from the clear/pop pair
+
+`sub_8226E3B8` (clear) and `sub_8226E220` (pop, called every frame from
+`sub_8226D740`):
 
 | offset in the container | meaning |
 |---|---|