2026-08-19 (later) - The guest runs, and says what it wants

Phase 4 is genuinely done. Fault reporting, the execute-only protection fix, the time limit, and named call traces. D065-D067; 235 tests.

The result. All four commercial executables execute real guest code. Three fault deep inside their own text; the fourth does not fault at all - it spins, calling one libkernel function 299 million times in ten seconds, which the run now reports by library and hash.

Surprises

Outstanding

The spinning import has no name, only libkernel.prx::0x7dd1e10c2d2e7a04. Naming it is now the highest-value single piece of work in the project - which makes phase 2, the symbol database, the thing to do next rather than a later nicety.