9352e079bf
Polled the runtime phase mirror every 3s for 936s of hunting flight. It never left 0, which the static work predicts rather than contradicts: ChangePhase is only posted once the ordinal exceeds 1, so a phase-1 run never writes it. That does make the mirror useless as a phase-1 readout -- it reads 0, not 1, and [ScriptMission+40] needs a debugger. The run ended in GAME OVER with the player's hull at full 1500, so a script lose-branch fired rather than the player dying. The pilot log narrows it: the tracked asset fell from 100.8% to 23.4% with ASSET-HIT events, while the pilot avoided f101_TCAF_Acropolis 2588 times. 'Escort lost' is a measured candidate, not a guess -- but the asset ended at 23.4%, not 0, so the threshold (or whether another unit's loss ended it) is not established. Two runs now (530s, 936s) and no phase advance observed. Since phase 1 polls unit_state on ADN110/111/112 and the pilot hunts whatever is nearest rather than the objective, biasing it at those squadrons is the next step. Refuted: sub_8226D740 does NOT read the flag file. Its three addi rN,r31,120 are fields of a local trigger-record buffer passed to sub_8226E220 as out-params; the phase lives in r26/r29. Offsets 88 and 120 are too common image-wide (2091 and 5228 instructions) to isolate the register files by offset search, so what reads the flags is still unknown and the set_flag -> END_PHASE chain has a gap.