attack-pass lane (d): F9 and F1 toward 10^6 on the class v5 freeze recorded as partials (stopped on the Igneum 2.0 drain order; 306,980 seeds 0 exhausted; 217,310 programs, two letter misses at 5.0781 percent, parity owed)

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

docs/analysis/attack-pass-2026-10.md

@@ -295,6 +295,8 @@ attack-pass) by the coordinator's exception rule; nothing touches GitHub.
 | F4 weak-day census, the post-freeze commit | 2^24 chain days at class-v5 8ca66afa (AP-F4-1 in the agreed form: cost A at most 205, k >= 1 or all-ROT-equal rejected, the forty redrawn), the harness on the agreed w32 convention (digits 0 to 31) and median 226; known-failed day 29,337 redrawn under the rule (cost 203 to 228), day 20,729 at 219 unchanged; build-1 `lease pool 12` class adv, 379 s, ended 22:3x UTC | 0 of 2^24 days over 1.1x on M1 (median 226; minimum cost 206 at day 27,016, 1.097x, one adder above the reject line) and 0 on M2; mean 225.79, sd 6.07 (pre-rule: 5.69e-4 over, min 203). The redraw rule removes the LUT tail by construction and the measurement agrees | PASS; AP-F4-1 FIXED-AND-PASSED against class v5 at 8ca66afa |
 | F4 day-key scan to 2^28, the strengthening line (8 October 2026, the founder's order to load the builders) | 2^28 = 268,435,456 chain days from day index 20,729 at class-v5 8ca66afa (AP-F4-1's redraw rule; the day-key draw is `MixParams::with_shape(seed_words_from_bytes(day_bytes(d)), Shape::for_class(..))`, the same mixer shape on v4 and v5, the state leaves never enter the key), the gated binary fb872a5d carried from build-1 to build-4, `lease pool 8` class measure, 379.2 s on 8 threads (11 us per day), `scale-8ca66afa-f4/census-2p28.md` written 10:15 UTC | Days with any gain over 1.1x: 0 of 2^28 on M1 (cost under 206 against the median 226), 0 against the mean 225.79 (sd 6.07), 0 on M2 (k at least 2), 0 on ROT and RC (exact 0 ops moved); M1 cost mean 225.791, sd 6.073, median 226, min 206 (day 27,016, 1.0971x, the floor the redraw rule sets: no day under 206 exists in 2^28), max 258 (day 221,075,548). The weak classes sit on their analytic expectation: ROT distinct at most 3: 8,228 against 8,237; ROT any pair sums to 32: 160,354,008 against 161,256,979; MUL popcount at most 4: 8,838 against 9,984; MUL under 256: 130 against 256; MUL two equal: 18 against 15; RC any zero: 1 against 1.0 (day 109,542,046 at cost 234, gain 0.966x, no gain); RC + rk = 0: 87 against 72 (1.8 sigma); RC two equal: 8 against 7.5; the ROT-distinct histogram matches S(8,d) 31_d / 31^8 to three figures at every d. Sixteen times the gate's count with the same floor and the same expectation lines. Meaning per tier: no chain day in the first 735,000 years of days gives a per-day datapath a 1.1x discount (the FPGA or ASIC that would bake a day's constants gains at most 1.097x on its best day, under the 1.1x gate, so no chip buys a weak day), and the day draw is uniform at 2^28 on every class the harness knows | PASS (0 of 2^28 over 1.1x; record `f4-weakday.md`, section 10) |
 | F8 hot-set gate to 256 seeds, the strengthening line (8 October 2026) | seeds p66 to p257 (192 new; with the gate's p2 to p65 that is 256) at 2^24 nonces each, chain path, class v5 on the freeze 1c420786 (the gated binary 0f5c98dc, pairing e5a4ac5978462156, the dn3 state e000824c; no kit-pairing flip reached this lane), window-model control, by-site, box 2 as three thirds under `lease pool 32` class measure, 10:07 to 11:37 UTC (4,291, 4,287 and 5,315 s), `scale-1c420786-f8/`; validation: 3 library comparison samples at 0 mismatches, `Epoch::hash_warp` agreement on 37,440 warps at 0 mismatches | 184 of 192 within 1.2x of the window model at the top 0.1 percent (mean ratio 1.023; 45 under 1.00, 114 at 1.00 to 1.02, 10 at 1.02 to 1.05, 7 at 1.05 to 1.10, 8 at 1.10 to 1.20); 8 over: p110 1.3527x, p66 1.3403x, p234 1.3156x, p145 1.2750x, p77 1.2664x, p225 1.2457x, p248 1.2188x, p89 1.2065x; every over seed's hottest item at 263 to 432 reads of 2^31 (0.0000 percent) and its hot-set verdict on the windowed control clear (largest excess X_f/f +0.60 at p110); the flat control (the auditor's first view) calls p76 and p88 a hot set at X_f/f +1.07, which the window model explains (both within 1.2x on the windowed control); the 6-sigma largest-bucket line flags 57 of 192 (p110 at +61.67 sigma on buckets of 64), the AP-F8-1 tail mechanism at its rate; predicted sources: 190 none, 2 one-one-bit through a load (p212 at 1.1915x, attempt 4; p225 at 1.2457x, attempt 0), routed to the hash lane for by-site attribution on the frozen tip. Over all 256 seeds: 245 within 1.2x (95.7 percent), 11 over, the rate at 256 (4.3 percent) the gate's rate at 64 (4.7 percent), max 1.3527x against the gate's 1.5047x (p10). Meaning per tier: the top 0.1 percent of items carries at most 0.23 percent of reads on any seed (the window model's own 0.17), so no card or chip gains a cacheable hot set on any of 256 epochs; the excess class is the named quarter-bit bucket at one narrow-window site, at the same rate at four times the count | PASS at the gate's reading (the over-1.2x rate stable at 256; no hot set on any seed; p212 and p225 to the hash lane); record `f8-uniform.md`, section (e) |
+| F9 exhaustion count toward 10^6, PARTIAL (stopped on the founder's drain order, 16:38 BST 8 October 2026: Igneum 2.0 moves the baseline to the class v6 generator, docs/plans/igneum-2.0.md, so the class v5 freeze runs serve no pin) | seeds 100,000 to 999,999 on the v5 chain path with the dn3 state at 1c420786 (pairing e5a4ac5978462156), twelve chunks across build-4 (six lower ranges of 85,000 at 8 threads, the gated binary cadce754) and box 2 (six upper ranges of 65,000 at 6 threads), every lease class measure, 11:08 to 16:38 BST, rows keyed by seed in `scale-1c420786-f9/par*.tsv` on both boxes | 206,980 distinct seeds drawn (build-4 142,138, box 2 64,842), 0 exhausted, 0 panics, max attempt index 37 (seed 421302, build-4 chunk 2; seed 718097 at 32 is the only other past 31); tail over the partial: 20: 48, 21: 18, 22: 16, 23: 13, 24: 8, 25: 5, 26: 4, 27: 3, 28: 1, 29: 2, 30: 1, 32: 1, 37: 1; the geometric tail at its rate (about 0.69 per index), the 256-attempt cap and the deterministic last resort never reached. With the record's 10^5: 306,980 seeds on the frozen tip, 0 exhausted. Meaning per tier: unchanged from the 10^5 record (no epoch seed fails to draw; the bound under 1e-5 per seed at 95 percent on 3e5); the index-37 seed costs that epoch 38 candidate draws, about a minute of CPU on one core for every node, once | PARTIAL, 0 of 306,980 exhausted; the bound re-runs on the class v6 generator from the served kit (the D1 harness), where it belongs |
+| F1 shadow redundancy toward 10^6, PARTIAL (stopped on the same drain order) | class v5 programs on 1c420786 through the string-seed path with the (c''') floor, indices 0 to 349,999 on build-4 (40 threads, 8 from 13:46 to 15:30 BST on the coordinator's yield to the class v6 census lane) and 350,000 to 999,999 on box 2 (one 80-thread lease, then 52, then four 13-core parts after two release-class pre-emptions), the flush-tested harness (binaries 14180ef4 and 42ee04c7 with --start), rows in `scale-1c420786-f1/out*/census.csv` on both boxes, deduped by idx | 217,310 distinct programs (build-4 83,000 of the lower range, box 2 134,310 of the upper), differential mismatches 0, verifier mismatches 0, 0 panics; saved mean 0.623 percent, max 5.0781: TWO programs over the 5 percent letter, `attack-f1/392513` and `attack-f1/865158`, both at attempt 0, 6,912 to 6,561 per iteration (13 of 256 per pass), the exact saving of the v4 10^5 letter miss `attack-f1/37341` (AP-F1-1); next 369298 at 4.6875. The parity reading (section 7.3 explain, 7.4 emit-c and clang -O3) was queued at class measure on both boxes from 15:21 BST and never got a core (release-class waiters ahead on box 2, build-4 full), so under AP-F1-1's ruling the two read as letter misses at honest-compiler parity, PASS, THE PARITY VERDICT OWED and not made; the rate at 2.2e5 (2 in 217,310, 9e-6) is the v4 rate at 10^5 (1 in 100,000). Meaning per tier: unchanged from the 10^5 record if parity holds (the compiler takes the same 13 and no chip gains); if the D1 harness reads these two on the class v6 generator and the compiler does not find the 13, the shadow redundancy bound is the finding to carry there | PARTIAL, 2 letter misses of 217,310, parity unread; the bound and the two programs' parity re-run on the class v6 generator (the D1 harness) |
 | F9 exhaustion count | 10^5 chain-shaped seeds on the v5 chain path with the dn3 state, box 1, ten parallel chunks (the chain draw costs about 2.2 s per candidate through (c''), so 10^6 is about fifty hours); killed before its first chunk closed, re-queued through `lease pool` | pending | pending the re-queue |
 | F1 shadow redundancy | 10^5 class v5 programs through the string-seed path, box 1; the known firings fire under v5 (planted 50 of 256: 19.53 percent; the real block 0.000; the must-not-fire 1.157); the census killed before its end, re-queued through `lease pool` | pending | pending the re-queue |