Flagged the --boot family as unverified three iterations running, deferring each
time on cost. Done: --boot terminates at 156 s on title+plate; --skip-at=1 puts
the title at 7.80 s against 152.54, so the skip is real and quantified;
--film with --film-interval=0.5 writes 375 frames; --play hands over with 'menu on
title' at 7.77 s and stays live by design.
And --boot --film= never terminates. The boot-quit branch is gated on _film ==
at line ~499, and a second quit path on the same condition, so a filming run keeps
capturing past the title forever -- measured still filming at 300 s. verify-dwell
wraps it in timeout so the behaviour was known to whoever wrote that tool, but the
documented example is bare and a reader following it gets a process that looks
hung. That is the failure boot.gd's own header warns about, committed in its own
usage block twelve lines away. Fixed with the measurement.
The deferral was the mechanism: three times I judged the cost too high and
recorded the judgement honestly, which kept a non-terminating documented
instruction alive for three iterations. 'Too expensive to verify' and 'unverified'
are the same state and only one sounds like a decision.
Also records their correction -- the menu spans {0,1}, so even a per-outgoing-screen
key would not be single-valued, making 'not modelled' more robust; and EXTRAS is
structurally stuck at n=1.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01N7FiFFFwbvG2uxdcEh8HyF
940175d62f