The gap I named and the Decoder prioritised: every --control run asserts that each check fails on a perturbed contract, and none asserted that a broken control reports broken. That is printing a verdict without asserting it, one level up. A harness that silently approves a dead check is exactly as useless as a check that silently approves a dead value. contract-check --selftest feeds the machinery a stub that cannot fail -- a function that prints 'everything is fine' and asserts nothing, which is precisely the defect I shipped in verify-transcode-fidelity's unconditional return 0 -- and requires the machinery to flag it. Exit codes follow the Decoder's convention: 0 all good, 1 a real check failed, 2 the HARNESS is broken and nothing it reported can be trusted. Asserting in check-all. It caught two defects while being written. The first version checked that the stub left the failure counter at zero and then REASONED that control() would therefore flag it -- arguing where a measurement was available, the error this whole thread has been about, committed inside the tool built to prevent it. Rewritten to push the stub through the real control() loop and read its verdict. It then returned 2 immediately: the stub was flagged, but as 'the control's own anchor is gone' rather than as a dead check, because the src selection anchored anything not in one specific list at the walk document instead of HANDOFF. A real failure for a fabricated reason, which is the confusion ANCHOR SPLIT exists to separate. Not covered and filed rather than left looking finished: check-claims, audit-kinds and verify-transcode-fidelity have controls and no harness self-test. The shape is known and the fix is cheap. Every asserting check passes. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N7FiFFFwbvG2uxdcEh8HyF
Sylpheed
A clean-room reverse engineering and port project for Project Sylpheed: Arc of Deception (Xbox 360, 2007).
Three things live here, in one repository so that a change spanning them lands as one commit:
| The decoders | crates/sylpheed-formats — the disc's formats, read and verified disc-wide |
| The port | port/ — a Godot 4 project, plus crates/sylpheed-export which converts a disc into the open asset tree it reads |
| The corpus | docs/re/ — what has been reverse engineered, with its evidence, its retractions and its dead ends |
You need your own copy of the game. No game content is in this repository and none ever will be. The exporter reads the disc you supply.
The oracle is the real game
sylpheed-cliand the Explorer are tools for verifying our decoding. They are hypotheses under test and they have been wrong. When something must be checked against the truth, the truth is the game running in Xenia Canary, captured — not any renderer of ours.
This is stated first because getting it backwards is the most expensive mistake this project has made.
Layout
crates/
sylpheed-formats/ the decoders. Disc-wide verified; the corpus is its spec
sylpheed-cli/ headless tools -- render a screen, dump a table, probe audio
sylpheed-viewer/ the Explorer: a human's window onto the disc. STATIC data only
sylpheed-export/ disc -> the open, moddable asset tree
port/ the Godot 4 project. Reads open formats ONLY
authored/ decisions that are NOT on the disc, each with its reason
data/
base/ generated by the exporter. Gitignored, never hand-edited
mods/ drop-in overrides. Yours
docs/
re/ the corpus: findings, refutations, method traps
game/ how the game is navigated -- menus, modals, flight
port/ the port's mission, its handoff contract, modding rules
agents/ how the agent team works together
tools/ capture harnesses, probes, the share tool
exchange/ transient inter-agent files. NOT in git
docker/ the agent containers
Where to start
docs/re/INDEX.md— what is decodeddocs/re/REFUTED.md— what has been tested and dieddocs/re/METHOD.md— traps this project has already paid fordocs/game/navigation.md— how the game is navigateddocs/port/MODDING.md— why the asset tree looks the way it does
Xenia Canary is a separate repository: it is a fork tracking upstream, and it carries our instrumentation.
Conventions
Confidence is per claim, never per document: ✅ CONFIRMED · 🟡 PROBABLE ·
❔ HYPOTHESIS · ❌ REFUTED. A withdrawn result is kept with its reasoning
rather than deleted — that is why the numbers here can be trusted.