Publish final147 SASS runtime source and interface records

Preserve the final fixed-request model integration source overlays, actual ABI
and library-domain contracts, dependency/build receipts, manual reconstruction
steps, and compact validation evidence. Keep unvalidated worktree changes and
original failed records separate from accepted components.

Record independent reviews of Concordia PRs 1-5: none meets all merge conditions;
retain the reproduced semantic and integration counterexamples.

Validation: published plugin CPU contract passed; source/configuration checks
passed with one malformed historical WIP manifest preserved as archive-only.
No fresh full rebuild, GPU rerun or cross-machine reproduction is claimed.

Author: vickiegpt

README.md

@@ -1,5 +1,7 @@
 # HBFSim: simulating High-Bandwidth Flash while the workload runs on a real GPU
 
+The [SASS final147 reproduction package](reproduction/sass-final147-20260926/README.md) preserves the experimental runtime sources, actual interface contracts, build recipes and fixed-request validation evidence. Its [upstream PR review](reproduction/sass-final147-20260926/upstream-review/REVIEW_SUMMARY.md) records generality limits separately from the model result.
+
 [![License: Apache-2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 [![CI](https://github.com/SlugLab/HBFSim/actions/workflows/ci.yml/badge.svg)](https://github.com/SlugLab/HBFSim/actions/workflows/ci.yml)
 [![arXiv:2609.09800](https://img.shields.io/badge/arXiv-2609.09800-b31b1b.svg)](https://arxiv.org/abs/2609.09800)

README.zh-CN.md

@@ -1,5 +1,7 @@
 # HBFSim:让负载跑在真实 GPU 上,同时模拟 High-Bandwidth Flash
 
+[SASS final147 复现包](reproduction/sass-final147-20260926/README.md)保存本轮实验实际使用的运行时源码、接口契约、构建步骤和固定请求验收证据；[上游 PR 审核](reproduction/sass-final147-20260926/upstream-review/REVIEW_SUMMARY.md)单独记录通用性限制。
+
 [![License: Apache-2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 [![CI](https://github.com/SlugLab/HBFSim/actions/workflows/ci.yml/badge.svg)](https://github.com/SlugLab/HBFSim/actions/workflows/ci.yml)
 [![arXiv:2609.09800](https://img.shields.io/badge/arXiv-2609.09800-b31b1b.svg)](https://arxiv.org/abs/2609.09800)

reproduction/sass-final147-20260926/CURRENT_RESEARCH_WIP_FROM_EABC.patch

@@ -0,0 +1,31 @@
+# Final147 runtime interface entry points
+
+This index describes the implementation actually used by epoch6712. Historical receipts are observations; absolute paths, GPU identity, addresses and process IDs must not become new-host constants. The full [binding contract](evidence-tree/rebuttal_20260921/sass-lifter-20260924/reports/interface-binding-contract.md) and [weight integration matrix](evidence-tree/rebuttal_20260921/sass-lifter-20260924/reports/weight-integration-matrix.md) retain version-specific history.
+
+## Host ABI and lifetime
+
+The source of truth for the provider interface is [qkv_live_identity_v1.hpp](evidence-tree/rebuttal_20260921/sass-lifter-20260924/task/li6-li7-combined-host-v1/source/qkv_live_identity_v1.hpp). `QkvLiveIdentityV1` is104 bytes on the required64-bit host ABI: `struct_size`/`reserved` are32-bit at offsets0/4; `context`/`module`/`association_token` are64-bit at8/16/24; `image_sha256[65]` begins at32, followed by alignment padding. The caller initializes `struct_size`; the provider owns live association tracking and invalidates function/module/context associations as they expire.
+
+`hbfsim_qkv_live_identity_for_entry_v1(uint64_t function, uint64_t expected_context, const char* expected_exact_symbol, QkvLiveIdentityV1* out)` is additive to the older `hbfsim_qkv_live_identity_v1(function, expected_context, out)`. It returns1 only for an exact live module/function/context/entry/image association,0 for no exact proof, and-1 for invalid inputs. See [provider implementation](evidence-tree/rebuttal_20260921/sass-lifter-20260924/task/li6-li7-combined-host-v1/source/provider_router_exact.cpp). These are custom status values, not CUDA errors.
+
+The exported agent controls are implemented in [nv_attach_impl_frida_setup.cpp](evidence-tree/rebuttal_20260921/sass-lifter-20260924/task/li6-li7-combined-host-v1/source/nv_attach_impl_frida_setup.cpp):
+
+- `int bpftime_nv_qkv_select_weight_storage_v1(CUdeviceptr base, size_t bytes)`:0 success/disarm; -1 opt-in disabled; -2 invalid/overflowing or already-selected span; -3 no current CUDA context; -4 missing registration function or nonexact registered span. `(0,0)` explicitly disarms. Call on the actual model execution thread after registration.
+- `int bpftime_nv_qkv_end_selected_call_v1()`: clears the selected scope on every call;0 only for exactly consumed successful selection, otherwise-1. The plugin calls it in `finally` and preserves candidate/end failures.
+- `int bpftime_nv_qkv_pin_bound_identity_v1(CUfunction original)`: called after exact PTX binding, outside CUPTI callbacks.0 success; -1 disabled/missing function/unpinned configuration; -2 no context; -3 no exact live identity; -4 inactive/unready implementation; -5 missing patched function or metadata mismatch. Bound identity includes current context, module and association token.
+
+The [model plugin](evidence-tree/rebuttal_20260921/sass-lifter-20260924/task/li6-li7-combined-model-v1/combined_model_adapter/__init__.py) uses two uint64/size_t arguments for select, no arguments for end, and signed int results. It is default-off. Each selected real decode call captures its cloned-input native reference, selects the actual full storage, executes the candidate, ends the scope and compares output. Router tuple/bias and lm_head `compute_logits` placement remain explicit; class names alone do not establish an ABI match.
+
+## Actual components and library domains
+
+The [CPU build receipt](evidence-tree/rebuttal_20260921/sass-lifter-20260924/task/li6-li7-combined-host-v1/CPU_BUILD_RECEIPT.json) maps exact source→compiler argv→object→archive→DSO. The final setup TU joins the Li7 `nv_attach_impl_router_scoped.cpp` implementation member in the actual nv-attach archive; provider has its own `library_identity_core.cpp`; the gate is the frozen Li7 gate. Rebuilding must include both TUs, not substitute a similarly named object or copy a historical archive.
+
+Agent/private CUDA13 and provider/CUPTI12 domains are separate. Use the recorded dependency versions and configured paths; do not select libraries by whichever `libcudart` happens to appear first. An exported symbol or preload order does not prove invocation: the accepted evidence joins actual Driver API/CBID307, thread, function, image, storage, profile and service records.
+
+## Configuration, paths and acceptance
+
+Combined host configuration keeps separate immutable Li6/Li7 entries and metadata profiles. Source PTX identifies the recovered module; staged PTX includes the existing HBF instrumentation. SHA-named stage links, sidecar module IDs, native-binding manifest and original/staged joins have different roles. Regenerate location-dependent paths at preparation time; never repair a path mismatch by relaxing an identity assertion.
+
+The [validator](evidence-tree/rebuttal_20260921/sass-lifter-20260924/task/li6-li7-combined-model-v1/validate_combined_model.py) and [final report](evidence-tree/rebuttal_20260921/sass-lifter-20260924/reports/final147-20260926-v1/REPORT.md) distinguish source conversion, instrumented-kernel output and actual model connection. Final147 is an actual one-run fixed-request result:147 registered storages,49 selected new decode outputs, old98 address/module/service closure. Registered extent is not every byte touched; other shapes, experts and all prefill consumers are not certified.
+
+The package contains source and historical build/run evidence. Publishing it does not itself prove a clean-machine rebuild or a new GPU execution. Upstream lifter generality limits discovered after the run are recorded separately in [the five-PR review](upstream-review/REVIEW_SUMMARY.md).

reproduction/sass-final147-20260926/INTERFACES.md

@@ -0,0 +1,7 @@
+# Source origins and license preservation
+
+HBFSim source and patches derive from SlugLab/HBFSim, base eabc5c2c0820ac0d84c2f16ea3460b219f11ff83; publication main base7bec0bf76d147ec449404c9ad0e7af065a6ebf61. The repository LICENSE governs its source; preserve original file notices.
+
+The bpftime source patch and modified attach translation units derive from bpftime ec26daecc8e787fb80fd95dd596a576404a5e36e. Its upstream LICENSE is retained under evidence-tree/native-supported-partial-exact-agent-build-v1/source (with the full workspace prefix). Follow the repository/submodule notices for dependencies built from pinned sources.
+
+The qkv-output-repair Rust recovery source derives from Concordia; source-delivery LICENSE-MIT and LICENSE-APACHE are included alongside its attribution/provenance reports and Cargo.lock. No license is implied for NVIDIA vendor binaries, model weights or omitted generated artifacts. Acquire those separately under their applicable terms. Per-file original workspace paths are in PUBLICATION_FILE_MANIFEST.json; derived-source revisions and exact changed TU joins are recorded in REBUILD.md and the preserved build receipts.