Independent historical WinMM native qualification review, 2026-10-24

ACCEPT producer 01dfb0d982bcd2756ae4668ff90b18c1949ecb56 for historical full-module public WinMM error-text API qualification. No production repair or oracle change is needed. The producer report and its raw evidence are integrated byte-for-byte. This review adds no current-main module, original SDL, gameplay, audio-quality or Windows-parity qualification.

Independently verified all 17 producer evidence seals and all 53 canonical-build seals. Rehashed 140 build-source pins against both historical Git blobs and preserved source files, and checked accepted implementation 7fd352855 is an ancestor of exact source b41a7c5f4b752d1f0bdab1141a11d4fed4dc6f9a. The untouched normal module is 1,879,746 bytes, SHA-256 8fac39936b6df2418ad86cab118cef19a65a727f649fbc14c412b37818904686. Its sealed provenance binds 291 imports, 2,227 function exports and layout 9a3bc9149d58209c; the corrected helper identity and DIRECT_WINDOW span were checked. No compilation or instantiation was repeated.

Recomputed the fixtures' explicit relative-require closure: 40 files, 2,413,909 bytes. Every retained input matches its historical blob, byte count and SHA-256. Both fixtures and the deterministic PE helper match reconciled producer-era main 9b263cea5801886d43b6e818f0b415645bb32a50. The six differing host dependencies are explicitly historical in the producer binding; no current host closure is substituted. Optional renderer packages are inventoried, not installed or exercised.

Read both complete unchanged oracles and PE helper. Native calls resolve LoadLibraryA(winmm.dll) and GetProcAddress publicly, then execute distinct nonzero A/W addresses in the actual x86 VM. The fixture checks all 26 supported codes, A/W text agreement, capacities 1/2/7/256/UINT_MAX, termination and canaries; invalid codes, null pointers, zero capacity and unsigned bounds; guest stdcall ESP restoration, terminal EIP and absence of unexpected yields. Actual VirtualAlloc produces asserted discontiguous backing, and ANSI/UTF-16 output including NUL and final canary is checked across the guest page boundary, followed by VirtualFree. LastError is explicitly asserted around each full ANSI description only; later A/W truncation calls have no independent LastError assertion. Host controls separately cover count queries, page-watch ranges and out-of-bounds UTF-16 rejection without mutation. These tests cover behavior, not every description's exact English wording.

Retained raw stdout agrees with terminal receipts: native exit 0, host exit 0, wrong-hash exit 1. All report no supervisor limit and empty/reaped process groups. The native arena is fixed shared 512 MiB with oldspace512; its fresh admission exceeded 2,684,354,560 bytes MemAvailable. The wrong-hash stderr names ERR_ASSERTION at native fixture line 11; source line 12 compiles and line 13 creates memory, so rejection precedes both. This is a meaningful executed control, not an assertion copied into a separate oracle. Exact accepted execution is reused; no specific concern warrants another native run.

MADBOMBER-WINMM-ERROR-TEXT-20261019 remains unchecked because its original SDL observation criterion is outside this historical API evidence. Its status now records the completed native qualification. The producer report's phrase that original gameplay “remains open” describes its own unqualified scope and must not reopen the already accepted original gameplay recorded in NEW-GAME-MADBOMBER-20261018 and the October 21 status/reviews. Existing scoped gameplay/FPS acceptances remain intact.

Recovery and independent machine receipts: /tmp/madbomber-winmm-native-independent-integrate-oct24/{admission.json,review.py,independent-review.json,publication.json,resource-final.json}. The committed producer source-binding, seals, prepare/run recipes and raw receipts preserve the underlying recovery identities. Resource projection is 60 MiB within 64 MiB, including 8 MiB reserve, transport and external launcher/session/positive SQLite/future allowance. Initial broad event-search output was tool-truncated; its external history is retained and conservatively charged from session start. Later reads are bounded. Root tracked files/index/refs and all donors remain read-only; only the append-only messageboard is shared. No packages, browser, public deployment or box was used. Box ID/state/expiry: N/A; lifecycle remains coordinator-owned.