# Pengo cumulative score and rollover contract, v1.1

Preserve v1 as a historical snapshot. Stefano's T1 withdraws the proposed diagnostic score write entirely. No score-writing probe is authorized or planned.

The [Paul Hornitzky / OOO submission](https://www.twingalaxies.com/records/voting-performances/221091-mame-pengo-set-1-rev-c-points-1492220-paul-hornitzky), read in the browser on 7 October 2026, declares two rollovers: 655,360 + 655,360 + 181,500 = 1,492,220. The submission and its discussion describe a highest displayed value of 655,350 and a numerical zero on rollover; a displayed 90 corresponds to 655,450 cumulative points. It links the [earlier submission](https://www.twingalaxies.com/records/voting-performances/185475). This is external human evidence, consistent with E058's static update/formatter analysis. It is not a legal crossing observed in this laboratory, nor a transfer of the human category to privileged search.

Before any target above 500,000, freeze a finite legal-rollover protocol and sources. Define **CUMULATIVE POINTS = certified observed rollover epochs × 655,360 + rendered HUD score**. Keep `hud_score`, privileged `word_score`, `verified_wrap_epochs` and `verified_cumulative_points` separate. A reset/player switch creates a new identity; an unexplained decrease never increments the epoch. A million cumulative points cannot be labeled as a million on the native HUD.

For every crossing, two NEW complete native reset proofs, with zero LOAD and zero RAM writes, must reproduce contiguous word and rendered-pixel witnesses before and after the crossing. Require same game/player, a verified positive award smaller than one period, `after_word == (before_word + award_units) mod 65,536`, and fully drawn HUD agreement on both sides. Preserve contact/award and drawing-latency frame indices. Missing/partial pixels, ambiguous awards, death/reset, gaps or disagreement make the crossing UNKNOWN. Require small displayed values, including one-, two- and three-digit scores with leading blanks, to pass the pixel gate before the high-target run.

Search gains use `(after_word - before_word) mod 65,536` award units, multiplied by ten, only within a validated unchanged-game, positive-award context and bounded interval. Reset/death/unknown decreases must be rejected rather than mistaken for enormous positive rewards. Freeze a separate successor policy and guard tests before adoption; historical policies stay unchanged. This rule is not retrospective certification of an arbitrary cumulative total.

The current inspected player-one word is 0x880e–0x880f, little endian, in ten-point units. Player-two and high-score words are separate. E058's qualified update writes the low sixteen bits and its formatter does not retain the carry. These static observations and the human evidence support the period; the laboratory's first legal observation remains a future verified tape. Reports above the threshold must include each crossing certificate and display both HUD and separately certified cumulative points.