angle,name,loc_budget,cascade_d_prediction,risk,prerequisites,expected_evidence_gained
A,XAudioSubmitRenderDriverFrame,~30,NO (host-side audio output only),very low (host-only),none,minimal — no guest callback chain to bootstrap cluster
B,Long-horizon -n 5B,0,NO (counters identical to 500M),none (read-only run),none,DONE this audit — bit-identical to 500M; rules out compute-time plateau
C,STFS / XamContent enum impl,~80-120,UNLIKELY (game gets coherent NO-MORE-FILES path),low,canary content_manager.cc reading,medium — fixes a real correctness gap (XamContentCreateEnumerator writes nothing to out-pointers); may unblock content-discovery wait if there is one
D,Plug missing canary-only exports,~50-100,UNLIKELY (none are renderer/UI critical),low,canary impl reading,low — XamUserGetXUID + XamUserReadProfileSettings could be gating user-profile reads but XamUserGetSigninState already returns signed-in
E,M5.5 caller chain for sub_82452DC0,0 (read-only DB),N/A — diagnostic only,none,none,DONE this audit — work-submitter sub_82452DC0 FIRES on tid=13 cycle 8127 from sub_821CB030+0x19C; γ-class wedge is real but not in caller-reachability
F,Relax M11 static-init detector,~150-300 (analyzer),N/A — diagnostic only,none,re-run analyzer pipeline,HUGE — finds CRT driver sub_824ACB38 that already runs and invokes the 24+ GamePart factory regs; reframes audit-049 narrative — they DO bootstrap. New runtime probing reveals the actual stall.
G,Long-horizon canary trace via patch,~50-100 canary,UNLIKELY in Linux Debug (host-presenter block at frame 42),medium (canary patches already proven safe),canary build,medium — bypassing intro-video host-presenter block in canary may extend reach without Wine
H (NEW),Probe and signal handle 0x1288 manually,~30-60,YES POSSIBLE (unblocks tid=13 join),medium (synthetic signal could cause bad state),audit-049 wait analysis,HIGH — if synthetic NtSetEvent(0x1288) unparks tid=13 and boot advances we learn (a) what tid=13 does next (b) whether the front-end UI flow runs
I (NEW),Trace what work-submitter callback does and where it diverges,~0 (probing),N/A — diagnostic,none,probe sub_82452DC0 + descendants,HIGH — work-submitter fires but never reaches signal-back path; identify the LR within sub_82452DC0 chain that branches to NtSetEvent only in canary; 1-PC fix candidate
J (NEW),XamContentCreateEnumerator writes proper handle/buffer_size,~50,NO (still NO-MORE-FILES from XamEnumerate),low,xam_content.cc:129 reading,low-medium — closes a stub-correctness gap; may be prerequisite for future content-discovery flow