Before deriving a new vtable I checked where gworld.py's constants came from. They cite structures/unit-struct-runtime.md, which states its provenance: "Captured 2026-07-29 ... all six tutorials and Stage 02 'Declaration of War' loaded from save slot 01." Loaded from a save slot -- not through MISSION SELECT, which is the route every run this session has taken, and which needs the cleared-stage mask poke to offer a stage at all. So the constants may not be stale; they may just need the state that route produces. That is a cheaper question than writing a new vtable finder, and it should be answered first. First attempt inconclusive: driving the main menu's first item blind, five presses deep, advanced the progress counter every time (3 -> 5 -> 6 -> 8 -> 10 -> 12, so the game responds) but left DEF_VTABLE / INST_VTABLE at 0/0 throughout. Without a screen identity this is dead reckoning, and the first item may not be the load-game entry -- newgame_path.sh documents it as NEW GAME with SELECT DATA two screens further in. Next: reach the save-slot screen deliberately rather than by counting presses, and load slot 01.