SIMULATOR WORK BOUNDARY — risc-v-gsp-rm-debugger

This directory (open-iov/debug/risc-v-gsp-rm-vm/) is the ONLY place the
simulator workstream writes. Every file change, test, session and document
produced by this workstream stays inside it (the private handoffs at the
workspace root are pointer/canonical copies, not project changes).

NOT TOUCHED, EVER, WITHOUT EXPLICIT HUMAN APPROVAL:
  - kernel/ (including vgsp.ko and every kernel module)
  - driver/, userspace/, firmware/ sources, config/, tools/
  - any file outside open-iov/debug/risc-v-gsp-rm-vm/

CONDITIONAL EXCEPTION (owner-granted 2026-10-03, session 4):
  Backups of AGENTS.md, Handoff-vGPU-IO.md, STATE-CURRENT.md and
  Handoff-gsp-accurate-emulation-tools.md exist under
  HANDOFF-BACKUPS/simulator-wave-20261003/. Those four files may be edited
  ONLY after: (a) measured time-to-value proof, (b) first and second
  adversarial review pass, (c) changes are additive/trimming with solid
  reasoning. Any other edit outside this directory remains deferred.

DEFERRED UNTIL HUMAN APPROVAL (recorded in the simulator handoff):
  The private live handoff lives at the workspace root (directory above
  open-iov): /home/rmcore/Git/integdev_gpu_drv/handoff-simulator.md
  (its §14.4 lists the deferrals).
  - vgsp kernel-module changes for a simulator-backed VFIO/PCIe device
  - any use of physical GPU / mdev / module load / guest / reboot
  - promotion of any simulator result into product behavior
  - edits to eng-ops, RUNBOOK, AGENTS.md or other project docs

If a required change falls outside this directory, stop, record the deferral
in the handoff, and continue with everything that can be done inside.