vgsp: host CUDA bridge + sema release recovery; greeneye simulator wave

- kernel: gsp_cuda_bridge (QMD launch capture, debugfs job/out/done, param+output resolution cached from inline writes), sema drain fixes (never hold/starve a channel), GR ring autopin + counter autoreg, per-page push reads, counter-derive gate; module builds clean
- tools/cuda-bridge: CUDA driver-API daemon executing mail/vadd kernels on the physical GPU, CUBB2/CBD2 v2 protocol, layout check + self-tests
- tools/guest-diag + tools/cuda-ab: scanner/pin fixes, victory push-only mode
- debug/risc-v-gsp-rm-vm: Phase S simulator wave (GSP device model, boot ladder, triage/re-demo harnesses, docs 30-41), GPGPU-sim scaffolding
- STATE-CURRENT/docs updates

1 files changed, 23 insertions, 2 deletions

diff --git a/debug/risc-v-gsp-rm-vm/README.md b/debug/risc-v-gsp-rm-vm/README.md
index 61204af..1868a58 100644
--- a/debug/risc-v-gsp-rm-vm/README.md
+++ b/debug/risc-v-gsp-rm-vm/README.md
@@ -1,6 +1,8 @@
 # risc-v-gsp-rm-debugger — GSP runtime analysis in a RISC-V QEMU VM
 
 > Status: implemented, documented and tested (audit: docs/27-TOOL-AUDIT.md; value demos: docs/25-VALUE-VALIDATION.md).
+> The 2026-10-03 Phase S simulator docs (30–40: cycle model, device model,
+> A/B verdict, triage) remain **in development** and are labelled as such.
 > Experimental tooling for simulating and inspecting the GSP firmware's
 > runtime memory, for `vgsp` accuracy measurements and GSP/uproc
 > reverse engineering. It is a development-only, out-of-tree tool: never a
@@ -64,12 +66,16 @@ ghidra/             Ghidra scripts (export symbols, annotate hits, control bridg
 plugins/            example plugin, MCP server, RM-harness plugin + authoring guide
 examples/           Python instrumentation scripts and declarative probe specs
 harness/            automation harness (mutation, portability, version diff,
-                    control discovery/reachability, value-validation demos)
+                    control discovery/reachability, value-validation demos,
+                    S4 A/B + new-version triage: sim_qemu_line.py, triage.py)
 rmharness/          host RM oracle wrappers + read-only capture harness
+gpgpu-sim/          Phase G overlay scaffold (configs, patches, scripts; docs/30)
 tests/              unit tests + QEMU integration smoke tests
 docs/               full documentation set (design, scripting, plugins, accuracy,
-                    portability playbooks, roadmap, service/injection guides)
+                    portability playbooks, roadmap, service/injection guides,
+                    simulator device model/cycle/A-B/review docs 30-40)
 dumps/              recorded sessions (gitignored)
+SIMULATOR-WORK-BOUNDARY.txt   scope contract for the 2026-10-03 simulator wave
 ```
 
 ## Documentation map
@@ -106,8 +112,23 @@ dumps/              recorded sessions (gitignored)
 | [27-TOOL-AUDIT](docs/27-TOOL-AUDIT.md) | tool audit: purpose, tests, usage, status |
 | [28-PORTING-AUTOMATION](docs/28-PORTING-AUTOMATION.md) | driver-version sweep and new-device scaffolds (pilot, dry-run default) |
 | [29-PACKAGING-AND-TRIALING](docs/29-PACKAGING-AND-TRIALING.md) | trial simulation packages (pilot) |
+| [30-GPGPU-SIM-INTEGRATION](docs/30-GPGPU-SIM-INTEGRATION.md) | GPGPU-Sim overlay: scaffold, build port, admission drafts (Phase G) |
+| [31-TURING-TU104-PARAMETERS](docs/31-TURING-TU104-PARAMETERS.md) | Turing TU104 parameter dossier (public sources) |
+| [32-GSP-CYCLE-MODEL](docs/32-GSP-CYCLE-MODEL.md) | modeled per-instruction cycle accounting (not silicon timing) |
+| [33-AMPERE-PARAMETERS](docs/33-AMPERE-PARAMETERS.md) | Ampere parameter dossier (public sources) |
+| [34-BLACKWELL-SOURCES](docs/34-BLACKWELL-SOURCES.md) | Blackwell source classification (public/private leads) |
+| [35-GREENEYE-SIMULATOR-DESIGN](docs/35-GREENEYE-SIMULATOR-DESIGN.md) | standalone GSP simulator design; Phase S/G scope and gates |
+| [36-GSP-DEVICE-MODEL](docs/36-GSP-DEVICE-MODEL.md) | S1 device model, versioned profiles, boot ladder B0–B2 |
+| [37-SIM-QEMU-LINE](docs/37-SIM-QEMU-LINE.md) | simulator-vs-QEMU A/B harness and measured line verdict |
+| [38-GSP-EM-API](docs/38-GSP-EM-API.md) | TLV boundary between the GSP emulator and a system simulator (design) |
+| [39-RE-WORKFLOW-REVIEW](docs/39-RE-WORKFLOW-REVIEW.md) | reverse-engineering workflow review: time sinks and upgrades |
+| [40-NEW-VERSION-TRIAGE](docs/40-NEW-VERSION-TRIAGE.md) | one-command new-version triage (`harness/triage.py`, `./risc-v-gsp-rm-debugger.sh triage`) |
+| [41-STABILITY-AND-TIME-TO-VALUE](docs/41-STABILITY-AND-TIME-TO-VALUE.md) | formal stability/value report: phased improvements, proof, adversarial review, conditions |
 | [RISC-V-GSP-RM-DEBUGGER-ROADMAP](RISC-V-GSP-RM-DEBUGGER-ROADMAP.md) | the long-term program (H1–H7) |
 
+Scope contract for the current simulator wave:
+[`SIMULATOR-WORK-BOUNDARY.txt`](SIMULATOR-WORK-BOUNDARY.txt).
+
 <!-- change (2026-10-02): add docs 28/29 to the documentation map; scope: doc
 map only; benefit: new tool-tree documents are linked from the tree front
 door. -->