feat(runtime): C3c - production placement cutover: both hosts on the residence conductors (routes 1+8)

Campaign P remaining-physics-divergence, placement cutover slice C3c
(docs/plans/2026-08-02-placement-cutover.md). Both production hosts now
register every initial Create through the residence + continuation-
executor + first-entry-conductor machinery (C0-C3b):

- Graphical (route 1): RegisterEntityWithInitialResidence at Create; the
  shared RuntimeFirstEntryDriveController pumps both conductors from the
  placement-receipt flow; MaterializeProjection and RebucketLiveEntity
  are presentation-only while a residence is ACTIVE (ExecutorCompleted is
  the presentation-binding receipt); post-residence entities take the
  full legacy path including the prepare_to_enter_world clock edges.
  PlayerModeController attaches presentation to the Runtime-published
  controller; its legacy resolve/step-heights/host-construction path is
  deleted; presentation-only rollback (retail has no entry-flow rollback).
- Headless (route 8): OnSpawned registers with residence when a drive
  exists; content-less sessions keep the pre-flip direct registration;
  SynchronizeLocalPlayer/CreateController/ApplySetupStepHeights deleted;
  prepared-collision read failure is a typed AwaitingCollisionSource
  retry; far remotes outside the service window complete celless.
- RuntimeLocalPlayerMovementState.Controller setter sealed internal; all
  controller mutation flows through the publication lifecycle.

Fix slices landed within this cutover, each dual-gated:
- F1: live movement-stat/server-physics application routed through the
  Runtime ownership seam (post-logout ingest crash on the retired
  controller eliminated; RuntimeMovementSkillProjection deleted).
- F2: login activation wedge - collision-admission prefix gate factored
  out of the seal (reentrant-commit RejectedAuthority), rearm generation
  identity corrected, PlayerModeAutoEntry requires the Runtime-published
  controller (world reveal can no longer seal unmaterialized).
- F3: landblock-prefix 0-sentinel replaced by explicit absent-id guards;
  map-corner landblocks (grid row/col 0) fully legal through admission,
  park/rearm/retire, quiescence, and outdoor shadow seeds.
- F5: local-player first-entry ground contact seeded by the shared
  SpawnPlacementSettler (moved App->Core) at FinalizeActivation - the
  retail first-gravity-frame touch (enter_world 0x00516170 carries no
  seed); the legacy unconditional force-seed is overwritten by a real
  floor-found contact; airborne spawns stay airborne; outbound contact
  bit verified end-to-end. Fixes the standing-cast 'You can't do that
  while in the air!' rejections.
- R1 (dual-review round): login constraint leash armed at the committed
  placement (HandleReceivedPosition 0x00453FD0 analog); register rows
  AD-61 (settle-timing compression now covering the local player) and
  AD-42 (repointed off the deleted resolve split) in this commit;
  residence-conversion owner API; wire-landblock guards; drive-pending
  ledger in IsConverged; route attach/detach latch; executor-drain drift
  model documented + source-pinned.

Gates: Runtime 1,003, App 4,039/3 skips, Headless 79, complete solution
10,816/0 failed/4 skips (Release, -m:1); connected lifecycle/reconnect
gate PASS (logs/connected-world-gate-20260802-175401; graceful exits,
world-visible, zero airborne rejections). The nine-stop soak remains red
for the pre-existing 6b28ff99 whole-world collision-clone throughput
regression (attributed with evidence; scheduled as its own slice before
C5). Dual Opus reviews (retail-conformance + adversarial): delta PASS.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

src/AcDream.App/Net/GraphicalSessionEventRoute.cs

@@ -15,6 +15,7 @@ internal sealed class GraphicalSessionEventRoute : ILiveSessionEventRouting
         _createSubscription;
     private readonly Func<RuntimeGenerationToken> _generation;
     private readonly RuntimePlacementProjectionRetrySlot _retries;
+    private readonly RuntimeFirstEntryDriveController? _firstEntry;
     private RuntimePlacementProjectionSubscription? _subscription;
     private IDisposable? _retryLease;
     private bool _attachStarted;
@@ -25,7 +26,8 @@ internal sealed class GraphicalSessionEventRoute : ILiveSessionEventRouting
         ILiveSessionEventRouting events,
         GameRuntime runtime,
         IRuntimePlacementProjectionSink placements,
-        RuntimePlacementProjectionRetrySlot retries)
+        RuntimePlacementProjectionRetrySlot retries,
+        RuntimeFirstEntryDriveController? firstEntry = null)
         : this(
             events,
             () => new RuntimePlacementProjectionSubscription(
@@ -33,7 +35,8 @@ internal sealed class GraphicalSessionEventRoute : ILiveSessionEventRouting
                 placements,
                 retryPendingOnSubscribe: false),
             () => runtime.Generation,
-            retries)
+            retries,
+            firstEntry)
     {
         ArgumentNullException.ThrowIfNull(runtime);
         ArgumentNullException.ThrowIfNull(placements);
@@ -43,7 +46,8 @@ internal sealed class GraphicalSessionEventRoute : ILiveSessionEventRouting
         ILiveSessionEventRouting events,
         Func<RuntimePlacementProjectionSubscription> createSubscription,
         Func<RuntimeGenerationToken> generation,
-        RuntimePlacementProjectionRetrySlot retries)
+        RuntimePlacementProjectionRetrySlot retries,
+        RuntimeFirstEntryDriveController? firstEntry = null)
     {
         _events = events ?? throw new ArgumentNullException(nameof(events));
         _createSubscription = createSubscription
@@ -51,6 +55,7 @@ internal sealed class GraphicalSessionEventRoute : ILiveSessionEventRouting
         _generation = generation
             ?? throw new ArgumentNullException(nameof(generation));
         _retries = retries ?? throw new ArgumentNullException(nameof(retries));
+        _firstEntry = firstEntry;
     }
 
     public void Attach()
@@ -60,6 +65,10 @@ internal sealed class GraphicalSessionEventRoute : ILiveSessionEventRouting
             return;
 
         _attachStarted = true;
+        // C3c-R1 review F6: assert (not assume) that the prior route
+        // detached — session reset precedes a new route — before this route
+        // takes ownership of the shared drive controller's tracked entries.
+        _firstEntry?.AttachRoute(this);
         _events.Attach();
 
         RuntimePlacementProjectionSubscription? subscription = null;
@@ -67,9 +76,20 @@ internal sealed class GraphicalSessionEventRoute : ILiveSessionEventRouting
         try
         {
             subscription = _createSubscription();
+            RuntimePlacementProjectionSubscription boundSubscription =
+                subscription;
             retryLease = _retries.BindOwned(
                 _generation(),
-                subscription.RetryPending);
+                // C3c: drive pending first-entry sequences before
+                // republishing the pending FIFO head — a conductor's own
+                // Advance is what consumes conductor-owned receipts, and the
+                // subsequent RetryPending lets the presentation sink apply
+                // whatever new head the drive surfaced.
+                () =>
+                {
+                    _firstEntry?.DriveAll();
+                    return boundSubscription.RetryPending();
+                });
             _subscription = subscription;
             _retryLease = retryLease;
             _ = subscription.RetryPending();
@@ -91,6 +111,12 @@ internal sealed class GraphicalSessionEventRoute : ILiveSessionEventRouting
         // can therefore never retry a retired generation or disposed route.
         Interlocked.Exchange(ref _retryLease, null)?.Dispose();
         Interlocked.Exchange(ref _subscription, null)?.Dispose();
+        // C3c: the drive controller's tracked entries die with this exact
+        // session route; Runtime's own retirement/session-clear fan-out owns
+        // conductor/residence convergence independently. C3c-R1 review F6:
+        // route-scoped — a route that never attached cannot clear a live
+        // route's entries.
+        _firstEntry?.DetachRoute(this);
         if (!_eventsDisposed)
         {
             _events.Dispose();