The HUD is reachable and the control is paired; what blocks the measurement is narrower and now named -- two tool defects (entities2.py's VA window covering the definitions rather than the instances, gworld.py's 0x600 instance window) plus the missing piece itself, a locked target whose HUD range and position can be read in the same second. Also records the speed shortcut as refuted so it is not retried.