EXPcalibur recorded device trace

BRD1 descriptor captured at guest+0xc400

64-byte constructor payload (+0x18)

Flavor selects this payload variant. In this captured run metadata is zero, so byte +0x65 contains the flavor.

Guest control memory: before → after

Address/name	Before	After

Applied combat lease

Submitted 32-byte records

#	op	kind	seq	selector	arg_c	arg_10	arg_14	value_lo	value_hi

Native module ledger: after request

row	state	kind	slot	alias	flags	raw first 32 bytes

Native relation/resource slots: after request

slot	identity	kind	meta	class	raw 12 bytes

Raw captured bytes

BRD1 header (128 bytes)

Input records

Output buffer: before → after

Native lease and selected engine fields

All numeric values and byte strings come from one real read-only GDB capture. Friendly request labels and field names are reverse-engineered annotations. “Before” and “after” are transaction boundaries, not invented states.