# GDR-8050L v258 READ(10) phase-4 descriptor consumer probe

- ok: `true`
- firmware_derived_host_lba: `true`
- read10_phase4_descriptor_consumer: `true`
- parser_descriptor_proof_complete_read10: `true`
- single_call_stack_proof: `false`
- firmware_derived_delta: `false`

## Static phase-dispatch audit

- phase table: `0x9003B9A0`
- phase `0x04` handler: `0x9001B4AE`
- expected phase `0x04` descriptor handler: `0x9001B4AE`
- state `0x11` table entry at `0x9003BA1B`: `['0x05', '0x81', '0x00']`

## CPU phase-consumer cases

| case | LBA | flags | D0 table offset | phase4 entry | setup | copy | 0x06E4 LBA | 0x06E0=F0 | 0x06F1 cleared | ok |
|---|---:|---:|---:|---:|---:|---:|---:|---:|---:|---:|
| `read10_phase4_consumer_video_lba` | `0x00000010` | `0x04` | `0x00000010` | `True` | `True` | `True` | `True` | `True` | `True` | `True` |
| `read10_phase4_consumer_redump_boundary_lba` | `0x0004ABBF` | `0x04` | `0x00000010` | `True` | `True` | `True` | `True` | `True` | `True` | `True` |
| `read10_phase4_consumer_dispatch_boundary_lba` | `0x00202000` | `0x04` | `0x00000010` | `True` | `True` | `True` | `True` | `True` | `True` | `True` |
| `read10_phase4_consumer_unlocked_max_lba` | `0x00345B5F` | `0x04` | `0x00000010` | `True` | `True` | `True` | `True` | `True` | `True` | `True` |
| `read10_phase4_gate_off_negative` | `0x0004ABBF` | `0x00` | `0x00000010` | `True` | `True` | `False` | `False` | `False` | `True` | `True` |

## Interpretation

This probe closes the READ(10) parser/descriptor proof across the firmware state handoff. v257 proves READ(10) naturally writes `0x05EC`, sets `0x05B6&0x04`, writes `0x05F0=0x11`, and writes `0x06F1=0x04`. This v258 probe proves the main service-loop phase consumer at `0x9001B285` dispatches phase `0x04` through table `0x9003B9A0[4]` to `0x9001B4AE`, which reaches `0x9001B5EF` and copies `0x05EC -> 0x06E4`, then arms `0x06E0=0xF0`.

This is a state-handoff closure, not one uninterrupted call-stack proof from the SCSI front dispatcher through the main loop. It still does **not** derive the unlocked media-window delta; keep `firmware_derived_delta=false`.
