# Original Fleet and Mission list selection sources

Offline pinned 6891 executable and current map AS were inspected. Current ED5A addresses below are established by complete function/constructor matches and original vtable slots in `fleet-mission-sources/compatibility.json`. No client function, account request or game input was invoked.

## Fleet: published original data, implemented

`GMYourFleetComponent.as` passes the row's numeric `id` to `OnGMYourFleetSelected`. Original callback registration `468D240` binds that name to `46C33F0`, which calls main MapUI vfunc+1F0, `3A6BB50`. `YourFleetButton.as` also uses the same ID for OnStoredShipQuickPlot; this is a list-selection identity, not a ship ID or system address.

`3A6BB50` resolves original component ID global `5F59D94` through the current player context. Its vfunc+20 is pure getter `B27050`: `lea rax,[rcx+C8];ret`. Original constructor `25BB9B0` puts this interface at base+58, so the published header is base+120, count+130, vector+138. Each row is 0x68 bytes. `26110E0` independently registers the same interface/global. Current ED5A guards are main `529CBF8`, secondary `529CC28`, interface `529CD28`; original counterparts were `529CC28/529CC58/529CD58`.

The actual left panel producer is `3A6F3B0`. It and `3A6BB50` both exclude the current ship ID, require row+1C true, and count the remaining rows from **one**. The AS row ID is that filtered ordinal. Ship ID is row+18 (uint32); row+10 is the original location/body address, masked to the lower 55 bits for system lookup. These three values must remain separate. Original order and duplicate ship IDs/addresses are retained. `3A956F0` is a different selected-system RHS producer with extra same-system/transfer conditions; it is not used to reconstruct the all-Fleet left list.

The current-ship exclusion is a pure port of the original chain:

1. Original current actor interface is `5F05BA4`, current vtable `5294CD8` (old `5294D08`). `25613D0(kind3)` picks an eligible actor row: immediate kind2, otherwise last kind0, otherwise last kind3; rows with +1B8=-1 are skipped. Rows are stride1C0 at manager+978/count970.
2. Original `255A140` compares its selected weak life (copied by `25614F0` from row+1A8) against the owner's existing IEntity reference. Original IEntity vfunc+20/`8C5400` is pure `lea rax,[rcx-228];ret`, with the old/current vtable `512AA10`. No weak life is created or initialised.
3. If equal and weak life is active (`636A80`: first pointer nonzero and life+C0>4), original `2564BA0` resolves component `5F2F24C`. Its pure vfunc+78/`2DCCFE0` reads uint32 at iface+2B0; current profile vtable is `532DE38` (old `532DE68`).
4. For an inactive weak life, the original fallback is descriptor(row+178)+E0, or row+F0 when no descriptor exists. None of these operations issues a request.
5. Original unavailable sentinel FFFFFFFF is exported as `currentShipId:null`. It is never a real zero ID or a fabricated 64-bit ID.

`Navigation.GalaxyAccountFleet.cs` reads only this owner-bound cache on the game owning thread, checks registry/source/row bytes before and after, caps the entire source at 4096 rows and rejects over-cap/malformed sources rather than truncating them. Its wire model is `GalaxyAccountFleet(tick,entity,uint? currentShipId,items)` and each item `(int id,uint shipId,ulong systemAddress)`. No private ship names or identifiers are copied to public artifacts. `complete=false` deliberately describes published-cache scope, not an exhaustive current account/server response.

The independent NativeAOT fixture passed sixteen groups in eight successive calls, mask65535. It covers >2^53 addresses, exact body-to-system mask, original ordinal/current exclusion, duplicate preservation, capacity/owner/VT guards, loaded/unloaded current-ID branches, exact actor priority and no native writes. Report: `artifacts/galaxy-fleet-native-tests/fleet-selftest.json`. The test library is private and was never installed or started.

The unified runtime-neutral ledger imports/rechecks Fleet's ten complete function bodies, leaf slots, constructor references, actor dual-method table binding and four dynamic globals. At the Fleet stable point it accounted for266 source RVAs in333 mappings, with zero unresolved entries; the additional Mission bindings below extend that ledger. This does not approve a live hook or prove runtime cache freshness.

## Mission: published original source, implemented

`GMMissionListComponent.as` and `MissionButton.as` use `uidHigh/uidLow` to form the true uint64 mission identity. Selection callback name OnGMMissionSelected is bound to `46C2410`, which dispatches main MapUI+2E8 to `3A69D00`. The original callback reconstructs `(uint64(high)<<32)|low` and searches both original manager sources; a row ordinal or a system address cannot replace this ID.

Original `5F53244` interface+70 returns the live mission-pointer vector. The callback reads each mission's +38 ID and +78 address list, then selects the final address. Its alternate +78 manager source is an open hash map of 0x88 summary records keyed by the actual mission ID. `20D1A00` extracts type22 structured-text values from those summaries, splits by the key's first character (default ':'), parses the first token as uint64 and returns addresses in source order. It must not parse unrelated mission text or use a mission ID as a location.

The original manager is `ExternalPanelMissionList`, registered at base+58 by `20E9C00`, constructed by `208CD90`. Its current guards are `525EE18/525EE48/525EF48` (original `525EE48/525EE78/525EF78`). The pure interface+70 getter `1F28D0` returns iface+40, hence base98/countA8/vectorB0. Interface+78 returns baseC0: countC8/capacityD0/allocationD8. The allocation contains its original occupancy bitmap, then aligned 0x88 slots. Each occupied slot is `[u64 MissionID,0x80 summary]`; the summary's structured text is at slot+28, not a guessed address member.

Two original derived entries have been closed by their entire constructor/getter bodies and their actual vtable slots:

* `208E800` installs `MissionExternalPanelEntry` main52609F8 and interface5260A48 at object+1A8; current tables are 52609C8/5260A18. Original+38/20E1DC0 reads uint64 ID at iface-C0. Original+78/20D1C40 first extracts the structured text at iface-B0, then appends the address vector at iface-90. Full order and duplicate addresses matter.
* `208EED0` installs `MissionFailedExternalPanelEntry` main5260BA8 and interface5260BF8 at object+118; current tables are 5260B78/5260BC8. Original+38/20E1DD0 reads ID at iface-40. Original+78/20D1E10 copies the existing vector at iface+E0. Failed does not mean the item must be hidden.

The real left list producer `3A8A190` traverses live entries backwards, obtains +B0 summary/+78 addresses and calls `3A3FFD0`. This path does not apply the marker D8/E0 exclusion. `3A3FFD0` requires a nonempty first summary title field, then writes the original mission ID. Normal/failed +B0 use the original +10 getters with parameter1; these produce a nonempty `$...` resource string even when its optional raw key is empty. The adapter does not need to translate or publish that private title. Summary-only rows retain the original nonempty-title gate by inspecting only the existing string length. The second list passed to `3A8A190` is already materialized separately; the adapter therefore reports only the current published manager source and never asserts whole-account list completeness or the game's final locale-dependent sort.

The world marker path is separate: `3AFF080` emits marker45 for live rows whose +D8 is true **or** +E0 equals1. `20E0E60` emits ordinary marker4 for the complementary live rows and for summary rows. On a normal interface these getters read bytes at iface-27 and iface-20. The failed interface getters return false and2, so its world marker remains4. The adapter retains this original integer `markerType`; it does not infer a mission category from a name.

`20D1A00` uses the identity getter233A70 and a 24-byte structured-text entry array at header+18/count+10. Only type22 entries are considered. Their key/value are original FGDK string references (length+0, UTF8 bytes+14). The first token is split at the key's first byte, default `:`. Original52D8F0 skips C whitespace and reads the leading decimal digits; later description/station text is not another address. The safe port rejects invalid, overflowing or non-system values rather than exporting a fabricated location or changing the final target. Typed-text addresses precede the normal entry's explicit address vector. The fallback summary uses typed text only. No vfunc, allocation, lazy initialization, mission acceptance, plot action or account request is invoked.

`Navigation.GalaxyAccountMissions.cs` returns `GalaxyAccountMissions(tick,entity,items)` and `(ulong missionId,ulong[] systemAddresses,ulong? selectedSystemAddress)` plus original `markerType`. Original callback has no proved zero/all-ones mission-ID sentinel: every u64 ID is retained. It searches reverse live IDs first, then the summary map, so the reader gives that live result precedence. It preserves full address arrays, duplicates and the true final address; empty arrays have null selected target. It rejects unknown entry tables, malformed occupancy/counts, more than4096 source/items/addresses, a per-string bound4096 bytes or copy budget8MiB instead of truncating. Final copied bytes, current owner/registry/type and entity are rechecked on the game owning thread. No private title, description or mission text enters its output. Source is `original-external-panel-mission-list`; `complete=false` remains explicit for empty or partial published caches.

The isolated NativeAOT test ran sixteen groups eight times: all65535, no game/network access. It covers >2^53 addresses, u64 IDs including0/FFFFFFFFFFFFFFFF, exact type22 extraction and delimiter/whitespace rules, ordered address appending, failed entries, marker4/45, live-over-summary precedence, nonempty summary title gate, empty/null target, owner/old-table/unknown/bounds rejection, malformed addresses, copy immutability and final byte stability. Report `artifacts/galaxy-missions-native-tests/missions-selftest.json`. Runtime freshness and exact visible translated list are not established by this fixture.

`research/galaxy_missions_compatibility.py` regenerates `fleet-mission-sources/missions-compatibility.json` from both actual PE files: nine whole matched bodies, seven constructor-bound tables, nine actual interface slots and the paired operand for unchanged dynamic ID5F53244. The unified mapping validator now includes and rechecks these original bindings. This remains runtime-neutral evidence, never a reason to loosen the client hash guard or to install hooks without separate live verification.