a57f4930f0
Single-field protocol-correctness fix, deployed as a candidate for a live A/B. `itemData.itemState: "listFS"` on the seller's own auction rows is not a FIFA 17 token at all: zero occurrences in `CardsDLL_Win64_retail.dll` (md5 4de3493131d7d2ff7f8b360c5ac9b655), zero in 4.26 GiB of live client memory, and it decodes to -1 through `FUN_180166660` — so the client was handed an unrecognised `CARD_OFFERSTATE`. FIFA 17's value for an item offered for sale is `forSale` (5), from the 12-row table at 0x180229cc0. Changed only where the invalid token was emitted: `handle_market_query` (GET …/tradePile) and `handle_market_status` (GET …/trade/status). The market search path already emitted `forSale` and is untouched — which is also why the risk here was lower than it looked: the client has been decoding `forSale` on a live route all along, and only the seller's own pile carried the bad value. Wire A/B on the same expired row: EXACTLY one field differs. tradeId, tradeState, expires, startingBid, buyNowPrice, currentBid, bidState, sellerName, sellerEstablished, watched, coinsProcessed, the twelve-atom count and the whole itemData card are byte-identical; coins unchanged at 29,843,976; Fix A's zero `inactive` rows intact. The differential asserted PARITY on this field and therefore passed while BOTH sides were wrong — the exact mechanism by which the defect survived every run. `market query tradePile` is now DIFFERENT-BY-DESIGN, pinning oracle == "listFS" and rust == "forSale" so the divergence cannot silently close again. Where the FIFA 17 binary contradicts the Python oracle, the binary wins. Gates: 126 host tests, 214 adapter tests, fmt clean, clippy clean. NOT claimed: that this preserves the list -> expire -> Return-to-Club lifecycle. That needs an operator FIFA 17 session and has NOT been observed yet. Also not claimed: anything about the Flash action gate — `CARD_OFFERSTATE` is one of three still-confounded candidates and this change does not test it. Revert is one line if the live test fails.
76 lines
3.0 KiB
JSON
76 lines
3.0 KiB
JSON
{
|
|
"date": "2026-08-17",
|
|
"change": "itemData.itemState on the seller's own auction rows: listFS -> forSale",
|
|
"sites": [
|
|
"openfut-utas-host/src/market.rs handle_market_query (GET /tradePile)",
|
|
"openfut-utas-host/src/market.rs handle_market_status (GET /trade/status)"
|
|
],
|
|
"why": {
|
|
"listFS": "not a FIFA 17 token: 0 occurrences in CardsDLL_Win64_retail.dll (md5 4de3493131d7d2ff7f8b360c5ac9b655), 0 in 4.26 GiB of live client memory, decodes to -1 via FUN_180166660",
|
|
"forSale": "FIFA 17 native, value 5, from the 12-row itemState table at 0x180229cc0",
|
|
"oracle": "the Python oracle emits listFS (utas_server.py:3921); the differential asserted PARITY and so passed while both sides were wrong"
|
|
},
|
|
"supporting_evidence_the_token_is_safe": "the market SEARCH route (/transfermarket) already emitted forSale before this change, so the client has been decoding forSale=5 on a live path all along",
|
|
"wire_ab": {
|
|
"baseline": {
|
|
"tradeId": 1000000155,
|
|
"tradeState": "expired",
|
|
"bidState": "none",
|
|
"expires": 0,
|
|
"startingBid": 150,
|
|
"buyNowPrice": 15000,
|
|
"currentBid": 0,
|
|
"sellerName": "CAGE",
|
|
"sellerEstablished": 1,
|
|
"watched": false,
|
|
"coinsProcessed": 0,
|
|
"atom_count": 12,
|
|
"itemState": "listFS",
|
|
"item_id": 100000155,
|
|
"resourceId": 158023,
|
|
"untradeable": false,
|
|
"rating": 93,
|
|
"preferredPosition": "RW"
|
|
},
|
|
"candidate": {
|
|
"tradeId": 1000000155,
|
|
"tradeState": "expired",
|
|
"bidState": "none",
|
|
"expires": 0,
|
|
"startingBid": 150,
|
|
"buyNowPrice": 15000,
|
|
"currentBid": 0,
|
|
"sellerName": "CAGE",
|
|
"sellerEstablished": 1,
|
|
"watched": false,
|
|
"coinsProcessed": 0,
|
|
"atom_count": 12,
|
|
"itemState": "forSale",
|
|
"item_id": 100000155,
|
|
"resourceId": 158023,
|
|
"untradeable": false,
|
|
"rating": 93,
|
|
"preferredPosition": "RW"
|
|
},
|
|
"fields_changed": [
|
|
"itemState"
|
|
],
|
|
"fields_identical": 17,
|
|
"credits_before": 29843976,
|
|
"credits_after": 29843976,
|
|
"fix_a_inactive_rows_before": 0,
|
|
"fix_a_inactive_rows_after": 0
|
|
},
|
|
"offline_gates": {
|
|
"host_tests": "126 pass",
|
|
"adapter_tests": "214 pass",
|
|
"fmt": "clean",
|
|
"clippy": "clean",
|
|
"differential": "relabelled market-query tradePile PARITY -> DIFFERENT-BY-DESIGN; now pins oracle=listFS and rust=forSale so the divergence stays visible"
|
|
},
|
|
"status": "CANDIDATE DEPLOYED to prod-host, awaiting the live lifecycle A/B",
|
|
"live_status": "NOT YET OBSERVED \u2014 requires an operator FIFA 17 session",
|
|
"revert": "single-line: set both auction_record_as(l, \"forSale\") calls in market.rs back to \"listFS\", rebuild, hub restart prod-host",
|
|
"claim_boundary": "This validates PROTOCOL CORRECTNESS of the token only. It does NOT prove the Flash action-gate term; STATE / CARD_OFFERSTATE / RESERVEDPRICE+MAX_CREDITS remain confounded and the gate stays Category C / STRONGLY SUPPORTED / not proven."
|
|
}
|