CDL re-trace: 1942 (JU) 46.6%, Galaga (U) 32.3% (Pass 2/3 complete)

Pass 3 _wip: semantic ZP aliases for Sqoon (U) (FrameCounter, PpuCtrlShadow, NmiFrameFlag) and Elevator Action (U) (PpuCtrlShadow, NmiSaveA/X/Y)
Pass 3 Slalom (U): semantic ZP aliases (PpuCtrlShadow, PpuMaskShadow)
Pass 3 Kung Fu (U): semantic ZP alias (PpuCtrlShadow)
Pass 3 Othello (U): semantic ZP alias (PpuCtrlShadow)
Pass 3 1942 (JU): semantic ZP alias (PpuCtrlShadow)
Pass 3 Galaga (U): semantic ZP aliases (PpuCtrlShadow, PpuMaskShadow)
Docs: add power-on flow + data-table inventory to READMEs of 13 promoted NROM projects
Pass 3 Elevator Action (U): add NmiFrameFlag alias
Pass 3 Elevator Action (U): full ZP naming (23 aliases) + 25 named data tables, 59.4% coverage
Pass 1/2/3 re-trace: recover unreached code in 7 NROM projects (Sqoon 56.4%, Elevator Action 59.3%, Kung Fu 52.1%, 1942 52.1%)
Pass 3 Sqoon (U): full ZP naming (22 aliases) + 17 named data tables
Pass 3 Kung Fu (U): full ZP naming (21 aliases) + 13 named data tables
Pass 3 Othello (U): full ZP naming (18 aliases) + 27 named data tables
Pass 3 1942 (JU): full ZP naming (14 aliases) + 19 named data tables
Pass 3 Galaga (U): full ZP naming (15 aliases) + 14 named data tables
Pass 3 Slalom (U): full ZP naming (16 aliases) + 16 named data tables
Pass 2/3: re-apply naming to Slalom (U), Othello (U), Galaga (U) after re-seed
Pass 1/2/3 re-trace: recover unreached code in 6 more promoted NROM projects
Pass 3 Stack-Up (JU): full ZP naming (15 aliases) + 12 named data tables
Pass 3 Tag Team Wrestling (U): full ZP naming (20 aliases) + 11 named data tables
Pass 3 Kung Fu (U) (a1): full ZP naming (20 aliases) + 12 named data tables
Pass 3 Magmax (U): full ZP naming (18 aliases) + 6 named data tables
Pass 3 Soccer (JU): full ZP naming (18 aliases) + 9 named data tables
Pass 3 Ms Pac-Man (Namco) (U): full ZP naming (18 aliases) + 8 named data tables
Docs: refresh coverage numbers and data-table inventories for 13 promoted NROM projects

NROM/Ms Pac-Man (Namco) (U)/README.md

@@ -2,66 +2,56 @@
 
 ## Status
 
-**Pass 3.** All address-derived `Label_XXXX` definitions replaced;
-every `jsr`/`jmp` operand symbolic; hardware-register operands resolved
-via `apply_symbols.py` (0 residue); audit comments aligned; `make`
-stays byte-identical.
-
-`make` assembles `header.s`, `prg.s`, `chr.s`, links them with `ld65` and compares the
-result against `rom.nes`:
-
-```
-Byte-identical ROM verified.
-```
+**Pass 3 complete; promoted.** `prg.s` is a traced disassembly with all
+address-derived labels replaced, all `jsr`/`jmp` operands symbolic, hardware
+registers named via `symbols.inc`, and `apply_symbols.py` reporting 0 residue.
+Code coverage: 10,136 / 32,768 bytes (30.9%).
+`make` assembles and verifies byte-identical to `rom.nes`.
 
 ## ROM
 
 | Property | Value |
 |----------|-------|
 | Format | iNES |
-| Mapper | 0 |
-| Board | NROM-256 |
+| Mapper | 0 (NROM) |
+| PRG | 32 KB |
+| CHR | 8 KB |
 | Mirroring | Horizontal |
-| Four-screen VRAM | no |
-| Battery | no |
-| PRG | 32 KB (2 x 16 KB), mapped at CPU $8000-$FFFF |
-| CHR | 8 KB (1 x 8 KB) |
-| Trainer | none |
-| Footer | none |
 | NMI vector | $C107 |
 | RESET vector | $FFF7 |
 | IRQ vector | $C198 |
-| ROM file | `Ms Pac-Man (Namco) (U).nes` |
-| SHA-256 | `c47ffe87736f5bc98049d9ff955077d4443acb516dbe24e5c9612b615eebcfe2` |
 
-### Header notes
+## Power-on flow
 
-- none
+RESET enters at `$FFF7`:
 
-## Open work
+    jmp Sub_C004                   ; CPU:$FFF7 PRG:7FF7  4C 04 C0
+    .byte $07, $C1, $F7, $FF, $98, $C1  ; CPU:$FFFA PRG:7FFA  07 C1 F7 FF 98 C1
 
-- **Pass 1** - run `nesdis.py` over `prg.bin` to produce the code/data
-  split. The tracer reads the vectors from the last six bytes of the PRG
-  image, so the split seeds correctly.
-- **Pass 1** must emit the canonical audit comment
-  `; CPU:$C123 PRG:0123  AD 21 03` at column 35 for every instruction.
-- **Pass 2** - replace the address-derived `Label_XXXX` names and the raw
-  `$XXXX` call operands.
-- **Pass 3** - semantic zero-page aliases (applied only at the sites where
-  their role is proven) and named data tables.
-- **Promotion** to `NROM/<name>/` once Pass 3 is done, as `git mv`.
+NMI handler at `$C107`:
 
-## Files
+    pha                            ; CPU:$C107 PRG:4107  48
+    txa                            ; CPU:$C108 PRG:4108  8A
+    pha                            ; CPU:$C109 PRG:4109  48
+    tya                            ; CPU:$C10A PRG:410A  98
+    pha                            ; CPU:$C10B PRG:410B  48
+    lda PPUSTATUS                  ; CPU:$C10C PRG:410C  AD 02 20
+    lda Zp27                       ; CPU:$C10F PRG:410F  A5 27
+    beq NmiHandler_Loop            ; CPU:$C111 PRG:4111  F0 07
 
-| File | Purpose |
-|------|---------|
-| `prg.s` | Pass 0 PRG include (replaced by the Pass 1 disassembly) |
-| `header.s` | iNES header include |
-| `chr.s` | CHR include |
-| `prg.bin` | 32768 bytes (32 KB) PRG image |
-| `chr.bin` | 8192 bytes (8 KB) CHR image |
-| `rom.nes` | byte-identical copy of the original ROM |
-| `linker.cfg` | HEADER / PRG / CHR memory areas |
-| `symbols.inc` | NES hardware register names |
-| `locals.inc` | zero-page aliases (empty at Pass 0) |
-| `Makefile` | build and byte-identity check |
+## Data-table inventory (Pass 3)
+
+- `$8000-$C003` (16388 bytes) - `CopyrightText`
+- `$C0D7-$C106` (48 bytes) - `LevelTileData`
+- `$C20D-$C212` (6 bytes) - `LevelStartParameterTable`
+- `$C69B-$C6E7` (77 bytes) - `LevelNameText`
+- `$CA24-$CB31` (270 bytes) - `LevelObjectDefinitionTable`
+- `$CEE6-$D01F` (314 bytes) - `SpriteOamEntryTable`
+- `$D03D-$D0D5` (153 bytes) - `SpriteOamAttributeTable`
+- `$D1C2-$D349` (392 bytes) - `LevelObjectPointerTable`
+
+## Build
+
+```
+Byte-identical ROM verified.
+```