docs(overhaul): prepare owner G4 checklist and reconcile active status

docs/research/2026-09-01-overhaul/g4-owner-checklist.md

@@ -0,0 +1,80 @@
+# G4 owner checklist — final candidate, 2026-09-05
+
+Status: **NOT RUN / NOT ACCEPTED**. This is the remaining owner session,
+not another implementation or review round. Binding scope is the campaign
+plan's S5 gate and section10 scene matrix. The automatic checks do not replace
+the owner's judgment. Do not merge or mark the campaign closed from this card.
+
+## Candidate and launch
+
+Use the existing Release binaries built at
+`eea83ac884d0b0fd74d86a17a16d7d5d93f64d94`; documentation checkpoint
+`64d7a3981a39b50ee9a33556b01384d480a33e37` records the final controls.
+Exact App/Core/package hashes and green build evidence are in
+`c1a-integrated-verification.md`. Recipe10 package is
+`C:\Users\erikn\Documents\Asheron's Call\acdream-v10-s5-c5.pak`.
+
+Before launch, recheck binary/package hashes, both client processes and ACE
+UDP9000; record the launch commit, flags, profile, process and log directory.
+Keep the saved High/MSAA4, near4/far25 profile for the normal candidate run.
+No rebuild beside either client; no code change after the accepted binary.
+Owner session has no automatic route or automatic close. A retail comparator
+is needed for the two-client row and known cathedral slab comparison; launch
+each client in its own command. Close owned clients gracefully when agreed.
+
+## What is already evidenced
+
+- Release build: zero warnings/errors. Literal hermetic lane:17,094 passes.
+- Two fresh actual geometry/membership runs and the unchanged seven-fixture,
+  25-frame Signature8 corpus pass with equal products.
+- Canonical InstalledDat is **not fully green**:376 pass,8 existing failures,
+  1 existing skip. `c1c-integrated-verification.md` names them; final evidence
+  verifies unchanged identities. Do not describe this as an entire-lane PASS.
+- Final capped lifecycle, fresh uncapped reconnect and nine-stop R6 passed;
+  `s5-final-lifecycle-stability-verification.md` retains their limits/warnings.
+- Five final visual-control routes produced51 inspected PNGs. Portal reveal,
+  exterior wall block/escape, dungeon lighting and captured geometry passed
+  narrowly; `s5-final-visual-controls.md` has every path and proof boundary.
+- Four controls exited0. The wall control instead exited0xC0000374 after
+  graceful status/logout: **process FAIL**, matching carried#422's symptom.
+  No native stack proves its cause; it is not established as AMD#477.
+
+## Owner session
+
+For every row retain PASS/FAIL, actual `/loc`, symptom if any, and PNG/log
+paths. All rows below remain **PENDING** on this final binary. The starting
+locations are navigation aids, not a substitute for movement or camera work.
+
+| Row | Check | Start / navigation |
+|---|---|---|
+| 1. Cathedral walls and hands | Cross the south transition; hold a weapon/wand, rotate and zoom. Body, held item and walls must keep correct depth. Walk into the repaired exterior wall and back away; no penetration/sticking. Exact retail push-out x is not required. | South: F4180106 [37.181568 46.790077 169.804993] to F4180104 [37.310383 48.895710 169.804993]. Wall: F4180012 [49 39.257545 160.004990]. |
+| 2. Cathedral stairs/ramp and two clients | Walk the stairs with camera fully out/tilted; slabs and chamber walls remain stable. Compare the known exterior slab leak to retail: same slab/extent, not removal. Stand on the formerly invisible exterior ramp and record its actual pose. Place the second actor behind a wall: occluded except through a retail-valid sightline. | Stairs: F4180113 [39.502899 19.589222 181.119247], plus plan section10's0107/0112 pair. Remote actor: F4180112 [36.299465 18.594580 169.804993]; observer in0104,0101 and outdoors. Exterior ramp has no recovered standing pose; the indoor020009A2 witness is not a substitute. |
+| 3. Facility Hub | Complete the stair circuit: bottom, side, ascent and top. Zoom/pan/rotate; player, stairs and walls stay whole. | `/teleloc 8A02015E 60.251431 -38.848198 -5.995000 0.995004 0 0 -0.099833` |
+| 4. Nanto and Holtburg | Continuously rotate at Nanto: waterfalls persist and houses occlude correctly. Walk Holtburg town, through a building doorway and around the lifestone: intact buildings, no terrain leak, correct particle/depth behavior. | Nanto:`/teleloc E43D001E 93.826614 126.522484 120.005005 1 0 0 0`; Holtburg:`/teleloc A9B40019 84 7.1 94.005 1 0 0 0`. |
+| 5. Two ordinary dungeons | Traverse the preselected0125 and8C04 interiors, including available stairs/portals and camera seams. Walls/floors stay solid and lighting usable. Arrival stills alone do not pass this row. | `/teleloc 01250126 30 -60 6.005 1 0 0 0`; `/teleloc 8C0401AD 12.319900 -28.482000 0.005000 -0.338946 0 0 -0.940806`. |
+| 6. Tusker combat | Use the owner's dense combat route. Fight, cast and rotate; terrain/scenery/actors stay stable, held items show, spell objects retire. | Owner's route; record actual location. The training dungeon is not a combat substitute. |
+| 7. Travel and sustained movement | Portal to/from outdoor, building and dungeon destinations, including adjacent repeated3032/3031 hops. No stuck/partial reveal; record unusually long waits. Add ten minutes of actual free movement and include cathedral/Neftet jumping from the earlier crash reports. | Existing `route-474-portal-reveal.txt` pins the adjacent pair. Neftet:`/teleloc 8763000E 40.4574 129.281 8.004999 1 0 0 0`. Timed idle waits do not count as free movement. |
+
+On any crash, preserve that run's time/logs, stop its gate and record FAIL;
+network logout or a client-authored code0 does not override the OS exit.
+Do not retry just to replace a failed record. The lead reads local crash
+reports/Windows evidence without changing registry, driver or dump settings.
+
+## Acceptance and remaining closeout
+
+Owner PASS must identify the tested rows and any explicit carried exception.
+The historical acceptance of#422 in Campaign VM is not automatically a new
+OVERHAUL acceptance. A good visual session does not prove the original AMD
+reset's initiating cause, remove the installed-data failures, or convert
+the recorded shutdown failure to PASS. Their disposition remains explicit.
+
+FPS/C2 performance work is owner-deferred. Retail's known cathedral leak is
+unchanged; its proposed post-campaign improvement is not part of this gate.
+
+After the owner results, reconcile the shipping documentation before closure:
+architecture, WorldBuilder inventory, divergence register, launch options,
+FW ledger (superseded, not deleted), roadmap/milestones and campaign memory.
+Keep the existing failure records. Only when G4 and that closeout actually
+agree with the code can the campaign be marked CLOSED — USER ACCEPTED and
+the authorized merge considered. Do not rebuild the accepted product for
+documentation-only changes.