python#7287 (comment)

Win arm32 ssl fix

…sion 2.1

RFC 8018 superseded RFC 8018.

….1 (GH-24289)

RFC 8018 superseded RFC 8018.

Automerge-Triggered-By: GH:tiran

….1 (pythonGH-24289)

RFC 8018 superseded RFC 8018.

Automerge-Triggered-By: GH:tiran

5: Support Py3xwarning warnings with a fix argument r=vext01 a=nanjekyejoannah

This PR does the following:

- Adds a `fix` argument to allow for flexibility in adding a possible fix to a warning
- The new warning format is used for the already merged warnings for numbers

Co-authored-by: Joannah Nanjekye <jnanjekye@python.org>

* Added `default` parameter to `lookup_special` in `types.py`

See https://discuss.python.org/t/expose-special-method-lookup-at-python-level/106236 for more.

---------

Co-authored-by: JoBe <165585785+JoBeGaming@users.noreply.github.com>

Five bugs found and fixed in C translateMove:
1. XMM register base offset (PHYLOC_VECD_REG_BASE subtraction)
2. kOut memory sizing (output's size for memory operands)
3. isVecD (physical register location check)
4. Linked operand resolution (lir_operand_type/data_type getters)
5. XMM register size (16 for MOVQ encoder, matching C++ Xmm class)

Also: ARM64 linked operand fix (64 raw ->type_ → resolving getters)

Fingerprint shows float functions now match C++ sizes after fix python#5.
Integer functions have 3-5 byte differences (1 instruction encoding
variation). Crash persists under multi-compilation (test suite) but
individual function execution is correct.

Move enabled in dispatch for continued investigation.

…ation)

Push 39's e808676 + 0a5f096 added BINARY_MATCH on both arches.
The grep is bare-hash: 'grep "$COMMIT_HASH" "$LONG_VERSION"'. That
matches both clean ':<hash>,' AND '-dirty:<hash>' suffix — the
exact contamination class that bit catch python#4 (binary built from a
dirty working tree masquerades as a clean build).

Pre-push-39, 'cp || true' accidentally protected against this by
falling back to a stale-clean python_gate when local build was
dirty. Push 39 removed the fallback. Without -dirty rejection,
the next contaminated build IS the binary the gate tests, while
BINARY_MATCH still passes.

Fix: tighten the check to reject any version string containing
'-dirty'. Mirror on ARM64 path (mirrors 0a5f096 symmetry).
Output now distinguishes BINARY_MISMATCH (wrong hash) from
BINARY_DIRTY (right hash, dirty build).

Adds catches python#5 (push-39 in-flight commit race) and python#6 (this
fix) to docs/wiring_catches.md.

Per supervisor 2026-04-22 01:08:18Z + theologian 01:08:00Z
(defense-in-depth: when a single incident exposes N adjacent
gaps, fixing 1 leaves N-1 unprotected).

Convert HIRBuilder::emitLoadMethodOrAttrSuper from C++ multi-block
deopt+dispatch to a thin delegation stub. New C function
hir_builder_emit_load_method_or_attr_super_c builds the deopt path
(snapshot+deopt) and fast path (CondBranchCheckType + RefineType +
LoadAttrSuper or LoadMethodSuper+GetSecondOutput).

C++ stub computes nothing — passes oparg + bc_offset.value() through
to C. The C body computes name_idx/load_method/no_args from oparg
(3.11+ packing per theologian audit python#3 — load_method param overwrite),
following the project's 3.12-only convention dropping the pre-3.11
oparg-tuple branch.

Theologian invariant audit (2026-04-22 11:58:52Z) drives the
implementation:

  python#1 phx_frame_state_copy runs BEFORE the 3 pops so deopt-path frame
     preserves PRE-POP stack for interpreter resumption
  python#4 pop order: receiver (TOS), type, global_super
  python#5 push order varies by load_method (1 value vs 2)
  python#8 deopt-path emits go into deopt_tc.block
  python#9 CondBranchCheckType branches; tc.block <- fast_path; emit
     RefineType in-place

Both exit paths phx_frame_state_destroy the deopt_tc to avoid leaking
the heap-allocated stack/locals arrays.

testkeeper pre-commit verify (2026-04-22 12:15:46Z): JIT_BUILD_EXIT=0,
full BUILD_EXIT=0, 7/7 phoenix-jit tests PASS at HEAD+uncommitted.
W26 gate-hardening not triggered (no recent fail).

PRIMITIVE_UNARY_OP (Static Python) opcode handler. Per W27a Step A scope
final commit (5 of 5).

C body: hir_builder_emit_primitive_unary_op_c (~50 lines). Inlines the
PRIM_OP_* unary-op switch:
  - NEG_INT/INV_INT/NOT_INT: emit primitive_unary_op directly
  - NEG_DBL: special-case via load_const(-1.0) + double_multiply (no
    native double-negate primitive). hir_type_from_cdouble handles
    Type::fromCDouble C-side equivalent.

PHX_PRIM_UOP_* values are in a SEPARATE namespace from binary/compare
(per classloader.h:110-113 — unary uses 0..3, distinct from binary
0..23). Defined separately to avoid identifier collision.

C primitives used: hir_c_create_primitive_unary_op + hir_c_create_load_const
+ hir_c_create_double_binary_op + hir_type_from_cdouble +
hir_builder_temps_alloc_stack (all existing).

C++ HIRBuilder::emitPrimitiveUnaryOp → 4-line delegation stub (passes
current_func_ for AllocateRegister equivalent).

Verification: cmake --build target jit/phoenix_jit clean (BUILD_EXIT=0).

W27a CLOSURE: 5/5 emit-methods converted (PrimitiveBox/Unbox/BinaryOp/
Compare/UnaryOp). Pure-C++ count: 20 → 15 (5 delegation stubs added).

PRIMITIVE_LOAD_CONST (Static Python) opcode handler. Per W27b Step A scope
final commit (5 of 5).

C body: hir_builder_emit_primitive_load_const_c (~50 lines). Reads
(num, type_code) pair from co_consts[oparg], maps type_code via
hir_prim_type_to_type, builds the appropriate fromC* HirType:
  - CDouble → hir_type_from_cdouble(PyFloat_AsDouble(num))
  - CBool → hir_type_from_cint with HIR_TYPE_CBOOL base (equivalent to
    Type::fromCBool: same kCBool bits + kSpecInt flag + bool int_val)
  - Unsigned → hir_type_from_cuint(PyLong_AsUnsignedLong(num), size)
  - Signed (default) → hir_type_from_cint(PyLong_AsLong(num), size)

TCUnsigned constructed in C via 3 hir_type_union calls of HIR_TYPE_CUINT8/
16/32/64 (no compile-time set-union literal in C99).

C primitives used: hir_prim_type_to_type + hir_type_from_cdouble/cint/cuint
+ hir_type_union + hir_type_is_subtype + hir_c_create_load_const
+ hir_builder_temps_alloc_stack (all existing).

C++ HIRBuilder::emitPrimitiveLoadConst → 4-line delegation stub (passes
current_func_ + code_ + oparg).

Verification: cmake --build target jit/phoenix_jit clean (BUILD_EXIT=0).

W27b CLOSURE: 5/5 emit-methods converted (LoadSpecial + FormatSimple +
BuildCheckedList + BuildCheckedMap + PrimitiveLoadConst). Pure-C++ count:
15 → 10 (5 delegation stubs added).

SEQUENCE_SET (Static Python) opcode handler. Per W27c Step A scope final
commit (5 of 5).

C body: hir_builder_emit_sequence_set_c (~75 lines). Pops idx/sequence/
value, allocates adjusted_idx. SEQ_LIST_INEXACT branch loads ob_type +
GuardIs PyList_Type + RefineType to TListExact. CheckSequenceBounds.
Then SEQ_ARRAY_INT64 → load_const(offsetof(PyStaticArrayObject, ob_item))
+ load_field_address; SEQ_LIST/SEQ_LIST_INEXACT → load_field 'ob_item'
at PyListObject offset. Inlines element_type_from_seq_type helper
(switch on oparg → TObject for list/tuple; TCInt64 for ARRAY_INT64).
StoreArrayItem.

PHX_SEQ_* values hard-coded to mirror cinderx/StaticPython/classloader.h
(avoided in C TU per existing convention):
  PHX_SEQ_LIST=0, PHX_SEQ_TUPLE=1, PHX_SEQ_LIST_INEXACT=2,
  PHX_SEQ_CHECKED_LIST=256 (1<<8),
  PHX_SEQ_ARRAY_INT64=0xC0 ((TYPED_INT64=4 << 4) | TYPED_ARRAY=0x80).

Includes added: cinderx/StaticPython/static_array.h (PyStaticArrayObject).
Header verified C-safe: Ci_STATIC_ARRAY_H guard (unique), no Py_OPCODE_H
collision (theologian L2521 caveat satisfied).

ZERO new bridges. C primitives used: hir_c_create_load_field_reg +
hir_c_create_guard_is_reg + hir_c_create_refine_type_reg +
hir_c_create_check_seq_bounds_reg + hir_c_create_load_field_address_reg +
hir_c_create_store_array_item_reg + hir_c_create_load_const +
hir_type_from_cint + hir_builder_temps_alloc_stack (all existing).

C++ HIRBuilder::emitSequenceSet → 3-line delegation stub.

Verification: cmake --build target jit/phoenix_jit clean (BUILD_EXIT=0).
Sole-path: __static__-only per emitInvokeNative precedent (single caveat
per theologian L2521 W27c coverage observation).

W27c CLOSURE: 5/5 emit-methods converted (SetupWithCommon helper +
SetupWith + BeforeWith chain + Send + SequenceSet). 1 NEW bridge total
(SetupWithCommon helper). Pure-C++ count: 10 → 5.

…ERO C++

SEQUENCE_GET (Static Python) opcode handler. FINAL emit-method conversion
in W27 burndown. Per W27d Step A scope.

C body: hir_builder_emit_sequence_get_c (~85 lines). Same shape as
emitSequenceSet (W27c python#5) + SEQ_SUBSCR_UNCHECKED bit gating + emitLoadArrayItem
(vs StoreArrayItem):
  - oparg & SEQ_SUBSCR_UNCHECKED set → skip CheckSequenceBounds, raw idx
  - else CheckSequenceBounds + adjusted_idx
  - Per (oparg & ~UNCHECKED): SEQ_LIST/INEXACT/CHECKED_LIST → load_field
    'ob_item' at PyListObject offset + TCPtr; SEQ_ARRAY_INT64 → load_const
    offset + load_field_address
  - LoadArrayItem with element_type_from_seq_type(oparg)

PHX_SEQ_SUBSCR_UNCHECKED = (1<<3) = 8 hard-coded inline.
PHX_SEQ_* base values reused from W27c python#5 (PHX_SEQ_LIST/TUPLE/LIST_INEXACT/
CHECKED_LIST/ARRAY_INT64).

ZERO new bridges.

C primitives: hir_c_create_load_field_reg + hir_c_create_guard_is_reg +
hir_c_create_refine_type_reg + hir_c_create_check_seq_bounds_reg +
hir_c_create_load_field_address_reg + hir_c_create_load_array_item_reg +
hir_c_create_load_const + hir_type_from_cint +
hir_builder_temps_alloc_stack (all existing).

C++ HIRBuilder::emitSequenceGet → 4-line delegation stub.

Verification: cmake --build target jit/phoenix_jit clean (BUILD_EXIT=0).
Sole-path: SEQUENCE_GET is __static__-only per accepted-residual L2531.

🎯 W27d CLOSURE — ZERO C++ ACHIEVED for emit-methods:
  W27d python#1: emitCopyFreeVars
  W27d python#2: emitGetYieldFromIter
  W27d python#3: emitMatchClass
  W27d python#4: emitMatchMappingSequence
  W27d python#5: emitSequenceGet (THIS)

Pure-C++ count: 5 → 0 / 123 (100% per scripts/count_emit_methods.sh).
Total W27 burndown: 20 → 0 across 4 batches (W27a/b/c/d).
W27e residual paragraph (theologian L2533) attached to closure announcement
to Alex (10 __static__-only methods accepted-residual per Phoenix-doesn't-
expose-Static-Python framing).

Per supervisor 21:54:07Z + theologian 21:53:58Z methodology cross-check
PASS for batch-of-6: emitPrimitiveLoadConst + emitPrimitiveBox +
emitPrimitiveUnbox + emitPrimitiveBinaryOp + emitPrimitiveCompare +
emitPrimitiveUnaryOp.

All 6 had 1 caller each in builder.cpp dispatch (lines 2005/2009/2013/
2017/2021/2025) + Lib/test/ scope EMPIRICALLY VERIFIED clean per
theologian 21:53:58Z (grep -E 'emitPrimitive(LoadConst|Box|Unbox|
BinaryOp|Compare|UnaryOp)' Lib/test/test_phoenix_*.py = 0 references).

Methods deleted (all bytecode-dispatch overloads). Inline helpers in
HIRBuilder class body with Register*-based signatures (lines 944, 733,
456, 978) STAY — distinct overloads. tc.emitPrimitiveBox /
tc.emitPrimitiveUnbox at lines 3875/3884 are TranslationContext class
methods (different class) — NOT affected.

6 caller-rewrites (lines 2005, 2009, 2013, 2017, 2021, 2025) at
bytecode dispatch.

Numstat (verified pre-commit per shepard 20:41:46Z + supervisor
20:16:25Z discipline + supervisor 21:54:07Z 'commit-message count = 6
caller-rewrites avoid python#4 annotation typo'):
  builder.cpp   +14/-62   (NET -48; 6 wrapper bodies + 6 inline extern
                            decls deleted, +14 from caller-rewrite
                            expansions and 6 file-scope extern decl
                            hoists)
  builder.h     +0/-18    (NET -18; 6 method declarations removed,
                            3 lines per declaration)

Bundle: -66L net, ZERO new bridges (6 existing C functions reused via
file-scope extern hoists).

Verified at HEAD post-fix:
  test_phoenix_jit_comparisons + controlflow + autocompile +
    partial_conversions: 369/369 PASS (no regression).
  W44 DO-NOT-USE caller gate: PASS (2 markers, 0 violations).

Phase 1 cumulative burndown: -35 (python#1+python#1.5) + -5 (python#2) + -52 (python#3) +
-54 (python#4) + -66 (python#5) = -212L total. builder.cpp 4817→4769.

Eliminate the C++ wrapper HIRBuilder::emitBeforeWith by folding its
PY_VERSION_HEX/opcode-branch logic into the existing C body
hir_builder_emit_before_with_c. Caller now passes the raw bytecode
opcode and the C body derives enter_id/exit_id/is_async locally.

This is the first Cat-B fold-into-C in the Phase 1 burndown (prior
batches python#2-python#5 were Cat-A clean-delegation deletes). Pattern is reusable
for emitSetupWith python#7 and emitSetupWithCommon (Register* helper).

Authorization: theologian 22:08:49Z + 22:10:41Z (GO Step B atomic post
Lib/test scope verify), supervisor 22:08:58Z + 22:10:51Z. Lib/test
scope verified clean (0 references).

Numstat:
  Python/jit/hir/builder.cpp     +3 -30  (delete wrapper + extern,
                                          add file-scope extern,
                                          rewrite caller)
  Python/jit/hir/builder.h       +0 -3   (delete decl)
  Python/jit/hir/builder_emit_c.c +33 -10 (fold opcode-branch logic)
NET: -7 lines, substantive (algorithmic fold, not delegation-marginal).

W44 gate: PASS (2 markers audited, 0 production callers).

Implements scripts/w45_bridge_drift_falsifier.sh per
docs/w45-bridge-signature-drift-falsifier.md.

Mutate-Build-Verify-Restore loop:
- Mutates a bridge signature (extern "C" decl in builder.cpp + function
  definition in builder_emit_c.c, in lockstep) by appending a sentinel
  param 'int phx_w45_drift'.
- Verifies the build fails at the C++ dispatch-switch call site (which
  has the OLD arity).
- Restores both files; clean rebuild verifies tree state.

Catches the structural drift class identified by pythia python#90/python#91:
void* args at the bridge crossing erase the type-safety C++ overload
resolution would normally provide. 252+ dispatch sites in builder.cpp
post Phase 1 burndown — manual audit unscalable.

Initial 6 fixtures (per spec §2.2 + §2.6 retro):
- hir_builder_emit_before_with_c (Phase 1 python#6 retro)
- hir_builder_emit_setup_with_c (Phase 1 python#7 retro)
- hir_builder_emit_format_simple_c (Phase 1 python#2 sample)
- hir_builder_emit_copy_free_vars_c (Phase 1 python#4 sample)
- hir_builder_emit_get_yield_from_iter_c (Phase 1 python#4 sample)
- hir_builder_emit_primitive_load_const_c (Phase 1 python#5 sample)

Modes:
- --dry-run: stage mutations, no build (any agent — bypass build lock)
- --strict: exit 1 on FAIL (for gate integration)
- --verbose: show build stderr

Uses perl -0777 multi-line slurp for robust parsing of multi-line
extern decls + function definitions. Mutation marker (phx_w45_drift)
verified post-mutation to guard against silent no-op substitutions.

Build lock: BUILD mode invokes cmake --build --target jit; per CLAUDE.md
Phase 3D Build Lock, only testkeeper / gate_phoenix.sh may invoke with
builds enabled. --dry-run is unrestricted.

Authorization: theologian 21:55:24Z + supervisor 21:55:36Z + 22:33:17Z
DISPOSITION (C). §3.5 fold-into-C derivation falsifier (opcode-constant
shadow class) is deferred — needs W21 golden integration.

Sibling workstreams: W33 (zero-bridge verifier), W42 (refcount
correctness), W44 (DO-NOT-USE caller gate).

Implements scripts/w45_section_3_5_derivation_drift.sh per
docs/w45-bridge-signature-drift-falsifier.md §2.7. Trigger fired at
Phase 3 Batch 4 b44a514 (5/5 backstop reached: W26 fold-into-C
python#6 + python#7 + Phase 3 Batch 1 + Batch 2 + Batch 4).

Sibling to scripts/w45_bridge_drift_falsifier.sh (W45 §1-§2 signature
mutation). This script mutates DERIVED CONSTANTS, struct FIELD LAYOUTS,
and bridge RETURN TYPES that C-body implementations depend on.

Mode (B) source-mutation per spec §2.7.1 (mode (A) W21-golden-driven
deferred until W21 lands per §2.7.5).

Initial 4 fixtures per spec §2.7.2:
  Class A — fold-into-C derived constants:
    1. BEFORE_ASYNC_WITH opcode-derivation (Phase 1 python#6 emitBeforeWith
       C body) — rename constant in builder_emit_c.c, expect build
       fail at C body comparison site
    2. _Py_ID identifier-derivation (Phase 1 python#7 emitSetupWith body
       region) — rename macro in builder_emit_c.c lines 4140-4220,
       expect build fail at C body identifier sites
  Class B — Phase 3 bridge-derived field-reads:
    3. ExceptionTableEntry depth field rename (Phase 3 Batch 2) —
       rename in builder.h struct decl, expect build fail at
       builder.cpp push_cpp/entry_cpp impls
    4. block_map_blocks_lookup_cpp return-type void* -> int (Phase 3
       Batch 4) — change in builder_state_c.h, expect build fail at
       hir_c_api.cpp:hir_builder_get_block_at_off return statement

Restore: `git checkout HEAD -- <file>` per spec §2.7.3 (deterministic
cleanup; idempotent; no temp-file shuffling). EXIT trap restores any
touched files defensively.

Modes:
- --dry-run: stage mutations, no build (any agent — bypass build lock)
- --strict:  exit 1 on FAIL (for gate integration)
- --verbose: show build stderr

Build lock: BUILD mode invokes cmake --build --target jit; per
CLAUDE.md Phase 3D Build Lock, only testkeeper / gate_phoenix.sh
may invoke with builds enabled. --dry-run is unrestricted.

Dry-run verification: 4/4 fixtures stage cleanly; tree restored
(git status clean post-run, no leftover modifications).

§3.5 backstop count post-this-commit: 5/5 reached + impl landing.
Future fixtures appended atomic-with-burndown per shepard 22:46:33Z
+ spec §2.7.3 python#5.

Authorization: theologian 23:49:00Z §2.5 amendment + 00:14:30Z §2.7
sketch + supervisor 00:14:45Z SEQUENTIAL post-Batch-4-push disposition.

ROOT CAUSE FIX for the 8-incident undiagnosed-recurring file-state
revert class (D-1776998268 + 7 priors).

Per supervisor 04:14:27Z post-incident-python#8 ROOT CAUSE IDENTIFICATION:
the §3.5 falsifier's restore_files() trap was the "external reverter"
across all 8 incidents. It ran `git checkout HEAD --` on TOUCHED_FILES
on script exit; if those files had unstaged modifications BEFORE the
script ran (e.g., agent's in-flight Tier 8 Phase A content), the trap
blew them away.

Empirical validation (this session 04:13:36Z):
- Test python#6 + python#7 (trivial content, single-mechanism): no revert
- Tests python#5/python#7 idle: no revert
- cmake build alone: no revert
- §3.5 invocation on staged Phase A: REVERT (PhxExceptionTable
  count 13 → 0; mtime bumped 1777002918 → 1777003987; builder_state_c.h
  no longer M in git status)

8 prior incidents now retroactively attributed to §3.5 trap firing
during build/gate cycles concurrent with agent Tier 8 attempts.
NO external actor (no VS Code, no Alex, no formatter, no cron).
W48 inotify daemon NOT NEEDED. (Iso-A) host relocation NOT NEEDED.
Class size CLOSED — class type changed from "undiagnosed-recurring"
to "self-inflicted via §3.5 trap, RESOLVED".

Fix mechanism: snapshot per-file content to /tmp on first
snapshot_file_if_new() call (per fixture mutation start). restore_files()
copies from snapshot (not HEAD), preserving pre-script unstaged state.
Snapshots cleaned + FILE_SNAPSHOTS array unset post-restore.

Re-validation (this session post-fix):
- §3.5 BUILD MODE 4/4 PASS
- post-restore build [OK]
- Phase A content (PhxExceptionTable count 13) SURVIVED §3.5 invocation
- ALL 6 Tier 8 staged files still M

Doc-only (script-only) push, no §3.5 BUILD MODE per touched-files rule
(this IS the §3.5 script being amended; meta-circular but doc-only
gate appropriate).

Authorization: supervisor 04:14:27Z FIX directive post-ROOT-CAUSE
identification (generalist 04:13:58Z catch).

Pythia python#105 'fever has name infection still spreads' was structurally
correct re self-inflicted infrastructure — but the infection wasn't
external-class undiagnosable; it was OUR OWN script's exit trap
trampling unstaged work. 5 detection layers (Alex directive D-1776434533,
gate python#3 D-1776887480, 4-step Pre-Edit WT Integrity D-1776995670,
mtime-checkpoint D-1776998268, W48 spec D-1776999077) added to detect
ourselves. Audit own scripts BEFORE external-actor hypotheses (per
new feedback memory entry).

Per docs/tier8-class-b-cport-migrate-arm-spec.md theologian 01:01:50Z +
supervisor 01:02:46Z ADOPTED + supervisor 01:18:35Z + 03:44:19Z +
04:14:27Z (8-incident root-cause attribution to §3.5 restore-trap +
b83f084 fix LIVE).

Migrates HIRBuilder std::vector<ExceptionTableEntry> exception_table_
field to PhxExceptionTable (purpose-built typed-inline pure-C
container in PhxHirBuilderState.exception_table_phx). Validates
Pythia python#103 + python#94 (3) §5 forcing-decision MIGRATE-ARM via 1-pilot
port (vs Phase 3's 4-Class-B-kept disposition).

CONTAINER:
  PhxExceptionTable (builder_state_c.h): typed-inline data/count/capacity
  with 6 inline funcs (init/destroy/push/size/at/clear). Lazy-init,
  doubling realloc, free at HIRBuilder dtor.
  ExceptionTableEntry (builder_state_c.h): POD mirror of deleted C++
  struct, fields flattened BCOffset → int + bool → unsigned char.

C BODY PORTS (builder_state_c.c):
  hir_builder_state_init: also calls phx_exception_table_init
  hir_builder_state_destroy: NEW (calls phx_exception_table_destroy)
  parse_exception_table_c: pushes ExceptionTableEntry via
    phx_exception_table_push (replaces deleted push_cpp bridge)
  find_exception_handler_c: linear scan via phx_exception_table_size +
    at (replaces deleted size_cpp/entry_cpp bridges)

C++ SHIM (transient compatibility per Phase A; Phase B deletes):
  HIRBuilder::parseExceptionTable → 1-line delegate to C body
  HIRBuilder::findExceptionHandler → C body returns index, shim
    converts via phx_exception_table_at preserving caller-contract
  HIRBuilder::buildHIRImpl translate-loop iterates PhxExceptionTable
    via size+at; .clear() goes to phx_exception_table_clear
  HIRBuilder::getSimpleExceptInfo wraps handler.target in BCOffset{}
    (now plain int post-C struct migration)
  emit_call_method_exception_handler_inline_c at builder.cpp:2883
    still calls self->findExceptionHandler (KEPT shim — Phase B
    will rewire)

DELETED:
  3 _cpp bridge impls in builder.cpp (push/size/entry, ~37L)
  3 friend decls in builder.h
  C++ struct ExceptionTableEntry in builder.h (5L)
  std::vector<ExceptionTableEntry> exception_table_ field in builder.h

W45 §1-§2 fixture removals (3): the deleted bridges no longer have
signatures to fuzz. Cumulative bridge-count delta: -3 (per Tier 8
spec §5 python#11 acceptance).

Numstat (vs HEAD b83f084):
  Python/jit/hir/builder.cpp           +21 -44   (-23 NET)
  Python/jit/hir/builder.h             +14 -19   (-5 NET)
  Python/jit/hir/builder_state_c.c     +30 -17   (+13 NET)
  Python/jit/hir/builder_state_c.h     +103 -48  (+55 NET)
  scripts/w45_bridge_drift_falsifier.sh +0 -3    (-3 NET)
TOTAL: NET +37L, bridge-count delta -3.

Per Tier 8 spec §5 python#10 amendment (theologian 01:14:29Z): full Tier 8
endpoint ≤+0L cumulative is across all 4 Class B containers, not
single pilot. exception_table_ pilot subtracts ~19% of Phase 3 +257L
foundation cost; Phase 3 + Tier 8 Phase A cumulative now +257 + 37 =
+294L.

Apply mechanism: python single-process write (8-incident root cause
was §3.5 restore-trap, NOT Write-tool-burst — but python single-process
remains best practice per Pythia python#107 (4) isolation principle). Apply
script: /tmp/apply_phase_a.py.

EXPANDED PRE-COMMIT GATE per supervisor 01:17:23Z (testkeeper 04:24:49Z):
  Stage 1 compile-check: BUILD_EXIT=0
  Stage 2 §3.5 BUILD MODE: 4/4 PASS, PhxExceptionTable INTACT post
    (§3.5 fix b83f084 VINDICATED)
  Stage 3 per-bench gate: GEO 1.27x, all 4 floor criteria PASS

§5 forcing-decision MIGRATE-ARM EMPIRICALLY VALIDATED via this pilot:
exception_table_ migrated to PhxArray-equivalent pure-C container
without C++-side-keep dependency in C-side reads. Pattern propagatable
to remaining 3 Class B containers (block_map_, temps_,
static_method_stack_) in future Tier 8 batches per spec §1.1
container-shape transferability caveat.

Phase B follow-up commit (NEXT) deletes C++ shims + rewires the
remaining caller at builder.cpp:2883 per Tier 8 spec §5 python#5.

Authorization: supervisor 03:44:19Z + 04:14:27Z; theologian 03:33:50Z
patch-apply hybrid + 03:54:15Z content-trigger refinement (later
attributed to §3.5 trap, not content) + 04:14:27Z fix directive.

Cross-link: 8 incidents resolved via b83f084 §3.5 restore-trap fix.
Pythia python#105 'fever has name infection still spreads' RESOLVED — fever
was self-inflicted instrumentation. W48 spec marked CANCELLED post-
this-commit per supervisor 04:14:27Z cascade re-retract.

Per Tier 8 spec §5 python#5 + theologian 04:48:17Z + supervisor 04:48:47Z.
Completes the exception_table_ pilot started in Phase A (6945b96)
by deleting the transient C++ compatibility layer.

DELETED:
  HIRBuilder::parseExceptionTable shim (builder.cpp:1243-1245 area
    + builder.h decl)
  HIRBuilder::findExceptionHandler shim (builder.cpp:1247-1258 area
    + builder.h decl)

REWIRED:
  builder.cpp:1197 (translate setup) → inline call
    hir_builder_state_parse_exception_table_c(&state_, this)
  builder.cpp:2865 (emit_call_method_exception_handler_inline_c) →
    inline call hir_builder_state_find_exception_handler_c +
    phx_exception_table_at conversion preserves caller-contract

HIRBuilder no longer has any accessor methods for exception_table_phx;
all access via bridges (parse_exception_table_c +
find_exception_handler_c + phx_exception_table_at). §5 python#5 acceptance
criterion fully satisfied. ZERO new bridges (uses existing C bodies
+ inline phx_exception_table_at helper).

Numstat (vs HEAD f33bde6):
  Python/jit/hir/builder.cpp +22 -27  (-5 NET)
  Python/jit/hir/builder.h   +5  -10  (-5 NET)
TOTAL: NET -10L, bridge-count delta 0, fixture delta 0.

Per Tier 8 spec §5 python#11 acceptance: ZERO bridge additions ✓.
Per Tier 8 spec §5 python#12 forcing-function: this commit IS the Phase B
landing; block_map_ Phase A Step A NOW UNBLOCKED for next session.

EXPANDED PRE-COMMIT GATE per supervisor 01:17:23Z (testkeeper
04:57:42Z):
  Stage 1 compile: BUILD_EXIT=0
  Stage 2 §3.5 BUILD MODE: 4/4 PASS, post-restore clean, staged
    content INTACT (§3.5 fix b83f084 VINDICATED — cpp/h mtimes
    identical pre/post all 3 stages)
  Stage 3 per-bench gate: GEO 1.26x, all 4 floor criteria PASS
    (worst single-bench gen_simple 0.70x > 0.5x absolute floor)

Phase 3 + Tier 8 (Phase A + B) cumulative: +257 + 37 - 10 = +284L.
exception_table_ pilot COMPLETE — first Class B container fully
migrated to pure-C with no C++-side accessor residue.

Authorization: theologian 04:48:17Z cross-check + supervisor
04:48:47Z Step B GO + librarian 04:51:37Z broader sister-script
audit CLEAN.

Design notes for the next round of fork-side perf work, after the
autopsy-report consumer drove tracing overhead from ~1x (original
exp28 baseline) to ~3x via the OID-refresh / type-name-fidelity /
WAL_OBJ_SNAPSHOT correctness fixes.

Six optimizations enumerated with first-pass risk assessments
(LoC, invasiveness, crash risk):

1. User-code-only filter at capture time (~5-10x WAL volume win,
   high leverage; the simple variant is straightforward, the smart
   variant is more nuanced because mutations on user-visible objects
   from inside stdlib must still emit).

2. Resizable oid_map (~40 LoC, removes a sharp cliff at >16K live
   objects — what made one of our benchmarks hang for 20+ minutes).

3. Compact event encoding via varints (~2-3x smaller WAL, ~100 LoC,
   medium crash risk because varint decoding is finicky).

4. Streaming compression (~3-5x smaller bundles, stacks well with
   python#3, ~50 LoC + dep on liblz4/zstd).

5. Skip BIND for unchanged primitive values (modest win, ~20 LoC,
   trivial risk — freebie).

6. tp_dealloc hooks (~2x runtime speedup but high crash risk —
   foot-gun on cleanup ordering, race conditions, subclass coverage,
   collisions with other tools that patch tp_dealloc).

Suggested order: python#2, python#1, python#5, python#3, python#4, python#6.

None implemented; this is just a design-time scope-out so the work
is shovel-ready when perf becomes a blocker.

…4.A.5 probe

Closes two spec gaps surfaced by pythia python#188 2026-04-27:

(a) §6 python#5 'PhxHirBuilderState 100% of state' acceptance criterion was
not mechanically testable — '100%' undefined, no falsifier. Now adds
explicit grep-rule against builder.cpp filtering out accepted access
patterns (state_.<field>, _cpp/_c bridge defs/calls, comments). Any
other hit = unmigrated C++ direct member access = fail acceptance.

(b) §4.A.5 inserted as a class-state extraction PROBE between Phase
4.A and 4.B. ~30-50 LOC, 1 commit. Pilot-5 dry-run on the simplest
Class A field (kwnames_) to surface silent-drift / mutator-enumeration /
JIT_DCHECK-equality risks BEFORE Phase 4.C burns its 33-53 commits on
the harder containers. §5.A close gate is LOC-trajectory only and
won't catch class-state failure modes; §4.A.5 fills that gap.

Authored 2026-04-27 per pythia python#188 + supervisor 2026-04-27T09:36:01Z.
'A rehearsal in an empty theater predicts only that the lights work.'

Pythia python#188 class-state-extraction PROBE (supervisor 2026-04-27T09:36:01Z
authored §4.A.5; supervisor 09:45:06Z accepted in-session execution;
theologian patch-shape APPROVE 09:49:24Z). Pilot-5 dry-run on the
simplest Class A field — kwnames_, the most-recent KW_NAMES Register*
slot — to surface class-state extraction failure modes (silent drift,
mutator-site enumeration miss, JIT_DCHECK equality drift) BEFORE
Phase 4.C burns 33-53 commits on harder containers.

Migration is single-commit + same-instant deletion:

  Python/jit/hir/builder.h
    Delete the C++ field 'Register* kwnames_{nullptr};'. Update the
    Class A mirror comment (line 693-697) to reflect kwnames_ removal
    + document the §4.A.5 probe entry.

  Python/jit/hir/builder.cpp
    builder.cpp:2538 — sole C++ direct read site rewritten to
    state_.kwnames == nullptr (post-translate KW_NAMES-stash invariant).
    builder.cpp:2928-2935 — extern "C" hir_builder_get/set_kwnames
    bridge bodies redirected to state_.kwnames; the static_cast<void*>
    / static_cast<Register*> drop because state_.kwnames is already
    void* — no implicit conversion.

Mutator-site enumeration: ALL writes go through hir_builder_set_kwnames
(2 callers in builder_emit_c.c:968 + 3878); ALL reads go through
hir_builder_get_kwnames (3 callers in builder_emit_c.c:962 + 3857) +
the 1 direct-read C++ site at builder.cpp:2538. Zero C++ direct write
sites outside the bridge body — audited.

JIT_DCHECK equality (spec §4.A.5 step 3) is moot in the single-commit
migration: the C++ field is deleted in the same commit that redirects
the bridges, so no parallel state can drift. Theologian 09:49:24Z noted
the spec wording was overconservative for the single-commit case.

Falsifier (§6 python#5 grep-rule) result post-migration:
  grep -nE '\\bkwnames_\\b' Python/jit/hir/builder.cpp
  → ZERO HITS. Field name is no longer anywhere in the codebase.

Build + ABBA: scripts/build_phoenix.sh --clean PASS (testkeeper
09:55:03Z). 4-bench ABBA GEO-MEAN 1.28x (matches BLME batch 2 baseline);
gen_simple 0.75x is pre-existing (BLME batch 2 0.74x; push-59 baseline
0.70x; same-session stable, structural causal absence — kwnames_
touches KW-arg dispatch not generator FRAME ops). No >5% drop trigger;
well above 1.0x floor.

Acceptance per spec §4.A.5: ABBA clean + zero functional regressions =
probe PASS = Class A delete approach VALIDATED for Pilot 5 across the
remaining Class A fields (code_ 46 sites, current_func_ ~30,
preloader_ 28, func_, static_method_stack_).

Closes three spec gaps surfaced by pythia python#190 2026-04-27:

(1) §4.A.5b add CALL-PATH SHAPE audit: site count alone insufficient,
shape (single-setter / multi-direct-assignment / write-during-iteration)
governs migration mode. SHAPE OVERRIDES COUNT — a 3-site multi-direct-
assignment field is migrated under multi-commit + DCHECK rule, not
single-commit. Per supervisor 2026-04-27T11:29:30Z (1).

(3) §4.A.5c NEW bracket-validation probe gate: the §4.A.5b
"DO-NOT-EXTRAPOLATE" annotation is a written warning, not a falsifier.
Each bracket beyond ≤5 single-setter (kwnames_-class) requires a
passed probe BEFORE cluster work commences. 3 probes: 6-15 single-
setter, 6-15 multi-direct-assignment, >15 multi-direct-assignment
(smallest in each class). Cost ~3-9 commits prep before ~13-19
commits of cluster work; acceptable de-risking. Per supervisor (3).

(2) §6 decision python#4 + §5.F prerequisite: compiler.cpp:236 caller
rewire reframed from "DEFER to Phase 4.D" to "HARD PREREQUISITE of
Phase 4.E close gate." Without rewire, builder.cpp's C++ Pass class
shell cannot delete (compiler.cpp consumes it) and §6 python#5 acceptance
"builder.cpp ≤ 200 LOC" is unreachable. §5.F now includes explicit
grep prerequisite check; FAIL → Phase 4 EXIT BLOCKED until rewire
lands. Per supervisor (2).

Authored 2026-04-27 per pythia python#190 + supervisor 2026-04-27T11:29:30Z.
"The first photon to reach the lens does not describe the star —
only that the lens works."