docs: refresh status, supersede stale material, link the CUDA analysis

* Status now matches the live state: guest driver probe and nvidia-smi work;
  cuInit/device queries work; cuCtxCreate returns 999 because the emulated
  engine list is missing the async copy engine (COPY14). The userspace
  libcuda segfault is recorded as solved, with its mechanism (an RM
  allocation reply must echo request parameters; zeroing them corrupted the
  caller's saved frame pointer).
* Correct the emulation claims: only a subset of RM controls are
  special-cased; the rest return a success reply with zeroed parameters whose
  consumed fields are still being corrected; allocation replies are coherent
  but no server-side object model exists.
* Add the eight-point emulation checklist and reply-fidelity ladder as
  explicit gates, documented in userspace/cuda and linked from the
  architecture, implementation and operations docs.
* Fix operational errors: build/test commands, module load order, mdev type
  names, LFS references, debugfs claims, in-repo firmware claims, CI claims,
  portability matrix (guest status, config layout, userspace driver facts).
* Mark historical material: one superseded banner per legacy document with a
  pointer to its replacement; STATE.md marked as a 2026-09-21 snapshot.
* Wiki: fix the index, add status banners and in-place factual corrections
  (msgq transport vs legacy mailbox, BAR definitions, error statuses,
  migration, glossary), and note the archived 2023 imports.

1 files changed, 24 insertions, 8 deletions

diff --git a/docs/04-implementation/02-practical-challenges-and-adversarial-interop.md b/docs/04-implementation/02-practical-challenges-and-adversarial-interop.md
index 1deff02..e2769f8 100644
--- a/docs/04-implementation/02-practical-challenges-and-adversarial-interop.md
+++ b/docs/04-implementation/02-practical-challenges-and-adversarial-interop.md
@@ -18,7 +18,11 @@ the project portable, maintainable and legally clean.
 Correctness is not "no crash". It is:
 
 * the guest observes the same **values** (capabilities, handles, table
-  contents) it would on real hardware,
+  contents) it would on real hardware — a control whose reply fields the
+  driver consumes is only "implemented" once its reply is coherent, not just
+  `SUCCESS`-shaped (the reply-fidelity ladder: status-only → coherent zeroed
+  params → coherent values for consumed fields → exact values; see
+  [`../../userspace/cuda/docs/04-virtualization-and-emulation.md` §6](../../userspace/cuda/docs/04-virtualization-and-emulation.md)),
 * the guest observes the same **ordering** (completions happen after the work
   they signal; faults arrive before replays),
 * the guest observes the same **failure semantics** (errors are surfaced, not
@@ -48,8 +52,10 @@ without a methodology is not accepted in this project.
 * **Management operations** (object creation, capability queries, mappings)
   are answered from cached/derived state where the hardware has no side effects
   the guest can observe.
-* **Real work** (grid launches, copies) is forwarded. Nothing else is allowed
-  on the hot path.
+* **Real work** (grid launches, copies) is meant to be forwarded to the
+  physical GPU (see §3). Today only the work the host decoder understands —
+  memsets, copies and semaphore releases — is executed in software as a
+  correctness bridge; no CUDA kernel is forwarded yet.
 
 ## 3. Forwarding: the three options and how we choose
 
@@ -99,15 +105,25 @@ means maintaining forks for every guest OS and driver version. A patch to the
 hypervisor means every hypervisor project must carry it. A firmware change is
 impossible in practice.
 
+In this repository, patch files exist only as build glue for the *optional*
+OpenRM submodule build (`legacy-patches/nvidia/`, applied by `install.sh`).
+The runtime and the guest stack are never patched, and the deployment path uses
+the distribution driver — so nothing patched is required to run the stack.
+
 ### 5.2 How compliance is verified
 
-* **Contract tests**: CI builds run against *stock* drivers obtained from
-  distribution repositories (or vendor runfiles), and against *unmodified*
-  hypervisor packages.
+* **Contract tests** (goal): CI builds run against *stock* drivers obtained
+  from distribution repositories (or vendor runfiles), and against
+  *unmodified* hypervisor packages. Today CI is push/PR-triggered only — builds,
+  kernel/unit/KUnit/mock tests, static analysis and docs checks; there is no
+  scheduled guest suite or stock-driver contract test yet, so the guest ladder
+  is still run by hand (see the operations docs).
 * **No-patch checks**: our build must not depend on any patch file for
   third-party components. Where patches exist in the tree for convenience
-  (e.g. build glue), the contract tests must pass without them; anything that
-  fails this is a bug.
+  (e.g. build glue for the optional OpenRM submodule), they are development
+  scaffolding only: the contract tests must pass without them, and the
+  deployment path uses the unpatched distribution driver; anything that fails
+  this is a bug.
 * **Behavioral equivalence**: where we answer from emulation, we validate the
   values against traces from real hardware (or from our decompiled study notes) —
   not against our own previous answers.