[Docs] (P8): wave 1 integrated - rulings ID-P8-5..13 (the survey, packages A-F, the integration gate, the wave 2 scope and the monolith defects left to P13), the survey note, open questions 9/11/15 answered, the debts and the P8 contract amendments, the P8 README table, PLAN-P8 wave 2 and the status page

MobileGL/MG_Remote/CONTRACT-P5B.md

@@ -149,7 +149,9 @@ VBO-backed index buffers (restart rewriting, multi-draw flattening) and is answe
 `Server/IndexHostMirror` (ARCHITECTURE §10.3), not by a per-draw span. **A multi-draw with
 client-side indices** (`indices[i]` are `drawcount` separate client pointers, one span can
 name one run) is refused by name, `Fatal{UnmigratedVerb, "MultiDrawElements+CLIENT_INDICES"}`,
-until P8's `HostResolve.cpp` flattens it; no measured workload has one.
+until P8's `HostResolve.cpp` flattens it; no measured workload has one. **P8 amendment (ID-P8-6):**
+the client flattens client indices into an owned EBO (`EmitTables.cpp:688-709`), so only a foreign
+peer can reach the server latch, which is now `ProtocolCorruption`.
 
 **Client-side VERTEX arrays** (attribute pointers into client memory, no VBO) are NOT d1's
 and are not a wire question: Espryt's `SyncClientSideAttributesForDrawArrays`

MobileGL/MG_Remote/CONTRACT-P5E.md

@@ -441,7 +441,9 @@ pointer, `Managers.cpp:5382`): under `RunAheadArmed` a draw with `kDrawClientArr
 array arm; the lockstep arm is unchanged; the staged form (a per-attribute `{BindingIndex,
 MGHostSpan}` tail like `kDrawHasUserIndices`) is P8's. Two pins by test: `CurrentBufferMutationEpoch()`
 (`Managers.cpp:794`) is apply-thread-only under a transport; the VAO twin key is 1:1 only while the
-vertex-elements CSO stays identity-addressed.
+vertex-elements CSO stays identity-addressed. **P8 amendment (ID-P8-6):** client arrays and client
+indices became owned buffers (`beba0256`); Magma's `client-vertex-array` site is unreachable from our
+client and is now `ProtocolCorruption`.
 
 ### 5.2 Textures (tx2)
 Every draw-path entry is `SyncTextureToBackendByHandle(h, imageBindable)`: record first, twin by

MobileGL/MG_Remote/CONTRACT-P7.md

@@ -60,7 +60,7 @@ P7 收官 = 五道出口门同时成立（§2–§7），而不是路线图 P7
 |---|---|---|---|
 | `uniform-buffer-byte-tail` | `UniformManager.cpp:2391` | **退役**（真机 MC 报告 §5 的活边界） | 拷贝窗口外扩到 4 字节边界进 transient slice，再 `vkCmdCopyBuffer` 对齐内部到正确子字目的；`CopyWireBufferRangeToSlice` 扩 |
 | `copy-image-in-place` | `VulkanRenderer.cpp` | **已退役（wave 2-B，`4f857aa5`）** | `srcImage == dstImage` 时单次转 `GENERAL`、两侧布局 GENERAL、一次写回；同 mip+layer 且矩形重叠 → decline（GL 未定义） |
-| `mipmap-shader-format-or-shape`（真机 iterationt 的死因） | `WireFramebuffer.inc` | **半退役（wave 2-B，`c4be3800`）** | Fatal 行带上格式 / 尺寸 / aspect / 缺的 feature 位；image 不能作附件时经 scratch 走颜色 shader mip；仍无 shader 臂的形状**具名**拒绝 |
+| `mipmap-shader-format-or-shape`（真机 iterationt 的死因） | `WireFramebuffer.inc` | **已退役（P8-F，ID-P8-6）**：wire 臂改具名拒绝 `MipmapShaderFormatOrShape`，与 monolith 一致；此前半退役（wave 2-B，`c4be3800`） | Fatal 行带上格式 / 尺寸 / aspect / 缺的 feature 位；image 不能作附件时经 scratch 走颜色 shader mip；仍无 shader 臂的形状**具名**拒绝 |
 | **wire 回读竞态（曾被当作 OpenRA 真机 0.976494 的原因；真因是下一行）** | `WireFramebuffer.inc` / `VulkanRenderer.cpp` | **已修（wave 2-B，`76b74693`）** |
 | **wire 臂 completed-frame-serial floor 不健全（OpenRA 真机 0.976494 / 0.988998 的真因，ID-P7-33）** | `VulkanRenderer.cpp` `OnSubmitsCompletedUpTo`、`VkBufferManager.cpp` `WriteWireBuffer` | **已修（wave 2-B3，`511c1f16` / `c9164f25`）** | 一个 serial 两次提交（S1 pooled-fence 中帧 flush、S2 Present），逐记录退休把 floor 提前 → 帧 N 首次 `glBufferSubData` 走无序 host memcpy 被 S2(N-1) 的排队拷贝盖掉；floor 只升到可证 serial + 有读者在飞的 buffer 一律有序；计数 26→0，red-once `StreamedBufferSubDataBeforeEachDrawIsOrdered` Split+Spawn；32 处静默出口具名（`WireDeclines.def`）。留：三处单 fence 退休站点的聚合等待（B4） | `ReadWirePixels` 在 pooled fence 下 flush 帧内 draw 但不等待，拷贝是后一次提交，二者只靠一条 barrier 相连，而 `UNDEFINED` / `PRESENT_SRC_KHR` 的源 scope 映射成 `TOP_OF_PIPE`+0 = 空 scope——刚 present 过的默认 framebuffer正是这个布局；修后回读等它读的那一帧（red-once：`fences=2` vs `1`，`completed=71` 不变）。真机验收 = 三次 `pm clear` 冷跑 1.0 |
 | `vertex-layout` | `WireDraw.inc:245`、`VertexInputStateFactory.cpp:439-500` | **已拆分（wave 2-C，`f1b04edf`）** | `buffer-window` 一种保留为协议错（经 hook 的具名 Fatal，家族词暂留 `UnmigratedVerb`——改成更诚实的 `ProtocolCorruption` 要在 `MG_Pipe::MGPipeFatalFamily` 加一行 + 适配臂，§3.3 未花这笔，记 §12）；其余**七**种形状/格式原因（含审计之后新增的 `offset-overflow`）改 monolith 的「屏蔽该属性继续画」，`BuildWireVertexInput` 出 `unsupportedAttribMask`；`vertex-format-conversion` 同包改 decline。`WireDraw.inc` 从此无 `@P7`（普查 15 → 13 处 / 3 文件） |