← Church Machine

Figure 25 — Single-Lump CALL Split

A single Inform E-GT points to one namespace entry describing a contiguous memory lump. The CALL instruction reads clistCount from word1 and splits the lump into two domain-pure regions: CR14 (code, X-only) and CR6 (c-list, L-only), with inaccessible freespace between them.

Inform E-GT (Golden Token) Version(7) | Index(17) | Perms=E(6) | Type=01(2) 32-bit unforgeable capability token Index resolves to Namespace Entry (3 words) W0: Location 0x1200 (base address of lump) W1: B(31)|F(30)|G(29)|C(28)| type=01(27:26)|clistCount=3(25:17)|limit=255(16:0) W2: Seal FNV-1a(location, limit) — 25 bits CALL Instruction 1. mLoad: type → version → seal → bounds → E-perm → F-bit → deliver 2. Parse W1: extract clistCount and limit 3. clistStart = (limit + 1) - clistCount = 256 - 3 = 253 4. Create CR14 (code) + CR6 (c-list), set PC = 0 Splits lump into two CRs Lump (power-of-2 = 256 words) Code Region Turing domain offset 0: method_table[3] offset 3: Greet code words offset 8: Init code words offset 14: Stop code words ... compiled CLOOMC++ output offset ~50: last instruction 0 FREESPACE Inaccessible Beyond CR14 limit, before CR6 base Growth room for code updates ~51 C-List Region Church domain slot 0: E-GT → Memory (@7) slot 1: E-GT → Mint (@6) slot 2: E-GT → Scheduler (@8) Golden Tokens only — no data Populated by Navana from upload 253 255 clistStart = 253 CR14 Code Region loc=base, lim=252 Perms = X-only CR6 C-List Region loc=base+253, lim=2 Perms = L-only R001 Security Invariant Permissions are HARDCODED by CALL, not derived from GT word0 points to lump base Turing Domain (X) DREAD, DWRITE, IADD, ISUB, BRANCH, MCMP, BFEXT, BFINS, SHL, SHR Church Domain (L) LOAD only — GT slots No SAVE, no DREAD/DWRITE Domain Purity Enforced by CALL ✗ Code cannot LOAD GTs from CR14 (X-only, no L) ✗ C-list cannot execute as code (L-only, no X) ✗ Neither can read/write data across boundary ✓ Security enforced by hardware, not compiler NS Entry word1 Bit Layout B 31 F 30 G 29 C 28 type=01 27:26 clistCount = 3 25:17 (9 bits, max 511) limit = 255 16:0 (17 bits, max 131072)
Golden Token / NS Entry
Code Region (CR14, X-only)
C-List Region (CR6, L-only)
CALL Instruction / Security
clistCount (split key)
Freespace (inaccessible)