vgsp: GL section capture + synthesized launch reaches the engine (SESSION 149 r888)

- M1.1a: preserve the bracketing release across the section-open reset; allow
  hash-verified replay capture (exactly-once guard). First trusted pass now
  captures the GL setup section (push=0x120010004, prog=0x121201b00,
  rel=0x120001000, replay=0).
- M1.1b: per-channel ring scan 16->24 slices + put-triggered keep-alive.
- M2-S1: booter skips w48 Tier-1 when shadow_win0 is set; flush attaches the
  observed LID payload as an inline record.
- Evidence (r888): 'qmd_word 48 page copied to window-0 shadow'; 'GR LAUNCH
  submitted pages=5 shadow=1 qmdwin=0x108000'; FAULT-CAP code_src=win0,
  code64 non-zero, FAULT_PDE count=0 (engine fetched the shadowed code).
- Remaining wall: SKEDCHECK06_REGISTER_COUNT + SKEDCHECK16_CTA_THREAD_DIM_ZERO
  (synthesized QMD scheduling fields) -> bounded fail + SW release. Feature
  gated by sema_gl_xlate (default off).

0 files changed, 0 insertions, 0 deletions