From bd917d43d8e1345db3aa14685db4966c2ddc95ca Mon Sep 17 00:00:00 2001
From: firestar5683 <168790843+firestar5683@users.noreply.github.com>
Date: Tue, 3 Nov 2026 04:07:11 -0600
Subject: [PATCH] Continue unfinished tuning studies across maneuvers

---
 openpilot/starpilot/flm/live_tracking.py      |  84 ++++++--
 .../flm/tests/test_source_study_gaps.py       |   3 +-
 .../flm/tests/test_staged_source_study.py     | 187 ++++++++++++++++++
 prebuilt.json                                 |   2 +-
 4 files changed, 261 insertions(+), 15 deletions(-)
 create mode 100644 openpilot/starpilot/flm/tests/test_staged_source_study.py

diff --git a/openpilot/starpilot/flm/live_tracking.py b/openpilot/starpilot/flm/live_tracking.py
index 9d5b989018..3618895314 100644
--- a/openpilot/starpilot/flm/live_tracking.py
+++ b/openpilot/starpilot/flm/live_tracking.py
@@ -506,12 +506,42 @@ class LiveTrackingOptimizer:
     self.comparison: list[TrackingEpisode] = []
     self.settled_ns: int | None = None
     self.paused_intent: tuple[TrialState, tuple[TrackingEpisode, ...], tuple[TrackingEpisode, ...]] | None = None
+    self.paused_demand_context: tuple[LiveTrialBinding, ResponseCertificate, str] | None = None
+    self.paused_baseline_ns = 0
     self.status, self.reason = 'collecting', 'qualified_tracking_episodes_required'
     self.model_status = 'unavailable'
 
   def _hash(self, values: dict[str, float] | tuple[tuple[str, float], ...]) -> str:
     return full_profile_sha256(self.binding.baseline_revision, values)
 
+  def _drop_paused(self) -> None:
+    self.paused_intent = self.paused_demand_context = None
+    self.paused_baseline_ns = 0
+
+  def _check_paused_demand(self, now_ns: int) -> None:
+    if self.paused_demand_context is not None and (
+      self.paused_intent is None
+      or self.paused_demand_context != (self.binding, self.certificate, self.domain)
+      or self.paused_intent[0]['baseline'] != self.accepted
+      or now_ns >= self.paused_intent[0]['deadline_ns']
+    ):
+      self._drop_paused()
+
+  def _resume_paused(self, control_ns: int) -> None:
+    assert self.paused_intent is not None
+    intent, before, future = self.paused_intent
+    self._drop_paused()
+    self.sequence += 1
+    resumed = intent.copy()
+    resumed['trial_id'] = hashlib.sha256(repr((intent['trial_id'], self.sequence, control_ns)).encode()).hexdigest()
+    resumed['target_sequence'] = self.sequence
+    resumed['published'] = False
+    resumed['prior_accepted'] = self.offer_state
+    self.offer_state = resumed
+    self.before, self.future = before, list(future)
+    self.settled_ns = None
+    self.status, self.reason = 'trial_pending', 'fresh_target_application_after_evidence_gap_required'
+
   def interrupt(self, reason: str, *, context_changed: bool = False) -> None:
     # Retain only inert numerical study intent on missing/stale evidence. The
     # command still rolls back; a fresh baseline ACK must precede a NEW wire
@@ -525,7 +555,7 @@ class LiveTrackingOptimizer:
       'fresh_physical_residual_window_required',
     )
     if not transient:
-      self.paused_intent = None
+      self._drop_paused()
     elif ((reason in ('acknowledged_trial_profile_withdrawn', 'expired_response_witness') or self.rmse is None and transient) and self.offer_state is not None
         and self.offer_state['phase'] == 'trial' and not self.offer_state.get('accepted', False) and self.before):
       # Source-only transient gaps retain completed numerical study rows,
@@ -750,6 +780,7 @@ class LiveTrackingOptimizer:
     self.last_episode_end_ns = max(self.last_episode_end_ns, episode.end_ns)
     state = self.offer_state
     if state is None or state.get('accepted', False):
+      self._check_paused_demand(now_ns)
       if episode.profile_sha256 != self._hash(self.accepted):
         return False
       # Planning-only evidence retains completed accepted-profile geometry,
@@ -757,6 +788,24 @@ class LiveTrackingOptimizer:
       # supplies the scored baseline or any future trial outcome.
       if not self.planning_history or episode.start_ns > self.planning_history[-1].end_ns:
         self.planning_history.append(episode)
+      if self.paused_demand_context is not None:
+        # A whole accepted-baseline window is an input-only resume trigger,
+        # never another scored row. Match the ORIGINAL demand, not a newer
+        # anchor. Fresh ACKs cannot move the first restored-baseline boundary.
+        assert self.paused_intent is not None
+        intent, before, _future = self.paused_intent
+        if (
+          state is not None
+          and state.get('accepted', False)
+          and self.paused_baseline_ns > 0
+          and episode.start_ns > self.paused_baseline_ns + self.lag_ns
+          and self.last_ack is not None
+          and self.last_ack[:4] == (state['trial_id'], state.get('target_sequence', self.sequence), state['phase'], self._hash(self.accepted))
+          and 0 <= now_ns - self.last_ack[-1] <= 100_000_000
+          and _matches_demand(intent.get('demand', _demand(before[0])), episode)
+        ):
+          self._resume_paused(self.last_ack[-1])
+        return False
       self._current_selector(now_ns)
       if self.selector_pending and self._revalidate_selector(episode, now_ns):
         return False
@@ -1238,13 +1287,21 @@ class LiveTrackingOptimizer:
     )
 
   def _rollback(self, reason: str) -> None:
-    self.paused_intent = None  # An actual scored rejection is terminal.
+    self._drop_paused()  # An actual scored rejection is terminal.
     if self.offer_state is None:
       raise ValueError('rollback requires a pending live trial')
     state = self.offer_state.copy()
     if state['phase'] == 'trial' and state.get('published', True) is False:
       self.interrupt(reason)
       return
+    if (reason == 'trial_input_regime_ended' and self.rmse is None and state['phase'] == 'trial'
+        and self.settled_ns is not None and self.before and len(self.future) < state['required_episodes']):
+      # Completed immutable episodes may wait for this same input regime.
+      # Roll back now; this saved arithmetic carries no application lease.
+      self.paused_intent = (state.copy(), self.before, tuple(self.future))
+      self.paused_demand_context = (self.binding, self.certificate, self.domain)
+      self.before, self.future = (), []
+      self.settled_ns = None
     if (
       state['phase'] == 'trial'
       and self.before
@@ -1325,21 +1382,21 @@ class LiveTrackingOptimizer:
         self.offer_state = accepted
         if self.selector_pending:
           self.selector_after_ns = max(self.selector_after_ns, control_ns)
-      paused, self.paused_intent = self.paused_intent, None
+      self._check_paused_demand(now_ns)
+      if phase == 'rollback' and self.paused_demand_context is not None:
+        self.paused_baseline_ns = control_ns
+        self.baseline.clear()
+        self.future.clear()
+        self.settled_ns = None
+        self.status, self.reason = 'collecting', 'original_input_regime_after_baseline_ack_required'
+        return True
+      paused = self.paused_intent
       if phase == 'rollback' and paused is not None:
         intent, before, future = paused
         if now_ns < intent['deadline_ns'] and intent['baseline'] == self.accepted:
-          self.sequence += 1
-          resumed = intent.copy()
-          resumed['trial_id'] = hashlib.sha256(repr((intent['trial_id'], self.sequence, control_ns)).encode()).hexdigest()
-          resumed['target_sequence'] = self.sequence
-          resumed['published'] = False
-          resumed['prior_accepted'] = self.offer_state
-          self.offer_state = resumed
-          self.before, self.future = before, list(future)
-          self.settled_ns = None
-          self.status, self.reason = 'trial_pending', 'fresh_target_application_after_evidence_gap_required'
+          self._resume_paused(control_ns)
           return True
+      self._drop_paused()
       self.baseline.clear()
       self.future.clear()
       self.settled_ns = None
@@ -1366,6 +1423,7 @@ class LiveTrackingOptimizer:
   def offer(self, now_ns: int, *, publication=True) -> LiveTrialOffer | None:
     from openpilot.starpilot.flm.live_tracking_response import validate_response_witness
 
+    self._check_paused_demand(now_ns)
     try:
       validate_response_witness(self.response_witness, self.binding, now_ns)
     except (TypeError, ValueError):
diff --git a/openpilot/starpilot/flm/tests/test_source_study_gaps.py b/openpilot/starpilot/flm/tests/test_source_study_gaps.py
index 658cd1d84c..0da3f13759 100644
--- a/openpilot/starpilot/flm/tests/test_source_study_gaps.py
+++ b/openpilot/starpilot/flm/tests/test_source_study_gaps.py
@@ -134,7 +134,8 @@ class SourceActiveRegime(unittest.TestCase):
     assert not o.observe_episode(e, now_ns=e.end_ns)
     assert o.offer_state['phase'] == 'rollback' and o.reason == 'trial_input_regime_ended'
     assert not any(o.accepted.values()) and o.offer_state['target'] == state['baseline']
-    assert o.selector_hint is None and o.paused_intent is None
+    assert o.selector_hint is None and o.paused_intent is not None
+    assert len(o.paused_intent[2]) == 2 and not o.before and not o.future
 
 
 class SourceRampFreshness(unittest.TestCase):
diff --git a/openpilot/starpilot/flm/tests/test_staged_source_study.py b/openpilot/starpilot/flm/tests/test_staged_source_study.py
new file mode 100644
index 0000000000..325d2895ac
--- /dev/null
+++ b/openpilot/starpilot/flm/tests/test_staged_source_study.py
@@ -0,0 +1,187 @@
+"""Inert numerical continuation contracts; not native or road proof."""
+
+from dataclasses import FrozenInstanceError, replace
+import unittest
+
+from openpilot.starpilot.flm.live_tracking import _matches_demand, _demand
+from openpilot.starpilot.flm.tests.test_live_tracking import episode
+from openpilot.starpilot.flm.tests.test_source_study_gaps import active_study
+from openpilot.starpilot.flm.tests.test_tracking_source_context import owner, refresh, source_ack
+
+
+def pause():
+  o, _now = active_study()
+  original = o.offer_state.copy()
+  scores = tuple(o.before), tuple(o.future)
+  incoming = replace(episode(o, 40, 'center_taper_max', kind='subtle', profile=o._hash(original['target'])), normalization_accel=0.1)
+  refresh(o, incoming.end_ns)
+  assert not o.observe_episode(incoming, now_ns=incoming.end_ns)
+  assert o.reason == 'trial_input_regime_ended'
+  return o, original, scores, incoming
+
+
+def baseline_ack(o, now):
+  refresh(o, now)
+  offer = o.offer(now)
+  assert offer is not None and offer.phase == 'rollback'
+  assert source_ack(o, offer, now + 1_000_000)
+  return now + 1_000_000
+
+
+def trigger(o, index, *, start=None, profile=None, **changes):
+  return replace(episode(o, index, 'ff_gain_right', start=start, profile=profile), normalization_accel=0.5, **changes)
+
+
+class StagedSourceStudy(unittest.TestCase):
+  def test_regime_change_keeps_only_completed_inert_rows_and_original_plan(self):
+    o, original, scores, incoming = pause()
+    intent, before, future = o.paused_intent
+    assert (before, future) == scores and len(future) == 2
+    assert incoming not in before + future
+    assert intent == original and intent['required_episodes'] == 3
+    assert not o.before and not o.future and o.settled_ns is None
+    assert o.offer_state['phase'] == 'rollback' and o.offer_state['target'] == original['baseline']
+    assert not o.offer_state['accepted'] and not any(o.accepted.values())
+    with self.assertRaises(FrozenInstanceError):
+      future[0].error_rms = 0.0
+
+  def test_baseline_ack_and_unmatched_window_do_not_reapply_target(self):
+    o, _original, scores, incoming = pause()
+    first_ack = baseline_ack(o, incoming.end_ns + 10_000_000)
+    assert o.offer_state['accepted'] and o.offer_state['phase'] == 'rollback'
+    assert o.paused_intent[1:] == scores and o.paused_baseline_ns == first_ack
+    row = trigger(o, 42, direction=1)
+    baseline_ack(o, row.end_ns - 10_000_000)
+    assert o.paused_baseline_ns == first_ack
+    assert not o.observe_episode(row, now_ns=row.end_ns)
+    assert o.offer_state['phase'] == 'rollback' and not any(o.accepted.values())
+    assert o.paused_intent[1:] == scores and not o.future
+
+  def test_matching_whole_baseline_window_resumes_new_generation_without_scoring_it(self):
+    o, original, scores, incoming = pause()
+    baseline_ack(o, incoming.end_ns + 10_000_000)
+    row = trigger(o, 42)
+    baseline_ack(o, row.end_ns - 10_000_000)
+    assert not o.observe_episode(row, now_ns=row.end_ns)
+    resumed = o.offer_state
+    assert resumed['phase'] == 'trial' and not resumed['published']
+    assert resumed['trial_id'] != original['trial_id'] and resumed['target_sequence'] > original['target_sequence']
+    for key in ('target', 'baseline', 'demand', 'started_ns', 'deadline_ns', 'alpha', 'critical', 'required_episodes', 'look_quotas'):
+      assert resumed.get(key) == original.get(key)
+    assert (tuple(o.before), tuple(o.future)) == scores and row not in o.before + tuple(o.future)
+    assert o.settled_ns is None and o.paused_intent is None and not any(o.accepted.values())
+    unacknowledged = trigger(o, 43, profile=o._hash(resumed['target']))
+    assert not o.observe_episode(unacknowledged, now_ns=unacknowledged.end_ns)
+    assert len(o.future) == 2 and o.offer_state['phase'] == 'trial'
+    refresh(o, unacknowledged.end_ns)
+    offer = o.offer(unacknowledged.end_ns)
+    assert source_ack(o, offer, unacknowledged.end_ns + 10_000_000)
+    assert o.settled_ns == unacknowledged.end_ns + 10_000_000
+    overlapping = trigger(o, 44, profile=offer.target_sha256, start=o.settled_ns)
+    assert not o.observe_episode(overlapping, now_ns=overlapping.end_ns)
+    assert len(o.future) == 2 and not any(o.accepted.values())
+
+  def test_queued_window_starting_before_baseline_ack_is_not_resume_evidence(self):
+    o, _original, scores, incoming = pause()
+    ack = baseline_ack(o, incoming.end_ns + 10_000_000)
+    queued = trigger(o, 100, start=ack - 1_000_000)
+    baseline_ack(o, queued.end_ns - 10_000_000)
+    assert not o.observe_episode(queued, now_ns=queued.end_ns)
+    assert o.offer_state['phase'] == 'rollback' and o.paused_intent[1:] == scores
+
+  def test_stale_baseline_ack_cannot_resume_even_matching_window(self):
+    o, _original, scores, incoming = pause()
+    baseline_ack(o, incoming.end_ns + 10_000_000)
+    row = trigger(o, 42)
+    refresh(o, row.end_ns)
+    assert not o.observe_episode(row, now_ns=row.end_ns)
+    assert o.offer_state['phase'] == 'rollback' and o.paused_intent[1:] == scores
+
+  def test_unscored_input_window_cannot_become_a_transitive_new_anchor(self):
+    o, original, scores, incoming = pause()
+    baseline_ack(o, incoming.end_ns + 10_000_000)
+    intermediate = trigger(o, 42, speed_low=21.5, speed_high=22.5)
+    assert _matches_demand(original['demand'], intermediate)
+    refresh(o, intermediate.end_ns)  # Original baseline ACK is stale.
+    assert not o.observe_episode(intermediate, now_ns=intermediate.end_ns)
+    different = trigger(o, 43, speed_low=23.1, speed_high=24.1)
+    assert _matches_demand(_demand(intermediate), different)
+    assert not _matches_demand(original['demand'], different)
+    baseline_ack(o, different.end_ns - 10_000_000)
+    assert not o.observe_episode(different, now_ns=different.end_ns)
+    assert o.paused_intent[0]['demand'] == original['demand'] and o.paused_intent[1:] == scores
+    assert o.offer_state['phase'] == 'rollback'
+
+  def test_context_profile_and_deadline_changes_discard_inert_study(self):
+    for change in ('manual', 'reset', 'binding', 'model', 'controller', 'baseline', 'deadline'):
+      with self.subTest(change=change):
+        o, original, _scores, incoming = pause()
+        now = baseline_ack(o, incoming.end_ns + 10_000_000)
+        if change in ('manual', 'reset'):
+          o.interrupt('manual_override' if change == 'manual' else 'source_configuration_changed', context_changed=change == 'reset')
+        else:
+          if change == 'binding':
+            o.binding = replace(o.binding, baseline_revision='9' * 64)
+          elif change == 'model':
+            o.certificate = replace(o.certificate, model_revision='9' * 64)
+          elif change == 'controller':
+            o.domain = 'torque_pid'
+          elif change == 'baseline':
+            o.accepted['ff_gain_left'] = 0.001
+          else:
+            now = original['deadline_ns']
+          o._check_paused_demand(now)
+        assert o.paused_intent is None and o.paused_demand_context is None and o.paused_baseline_ns == 0
+
+  def test_unacknowledged_target_cannot_create_staged_study(self):
+    o, _now = active_study()
+    o.settled_ns = None
+    o._rollback('trial_input_regime_ended')
+    assert o.paused_intent is None and o.paused_demand_context is None
+
+  def test_actual_run19_three_plus_three_rejection_remains_terminal(self):
+    o = owner()
+    for i in range(5):
+      row = replace(episode(o, i, 'highway_center_taper_max', kind='subtle'), normalization_accel=0.1)
+      refresh(o, row.end_ns)
+      o.observe_episode(row, now_ns=row.end_ns)
+    offer = o.offer(row.end_ns)
+    assert offer is not None and o.offer_state['required_episodes'] == 3
+    assert source_ack(o, offer, row.end_ns + 10_000_000)
+    old = (0.04533781831071211, 0.05451536049350658, 0.04055138232722946)
+    new = (0.037869039309016156, 0.039513578311132, 0.05890910591648849)
+    o.before = tuple(replace(row, error_rms=error) for row, error in zip(o.before, old, strict=True))
+    for i, error in enumerate(new):
+      row = replace(episode(o, 20 + i, 'highway_center_taper_max', kind='subtle', profile=offer.target_sha256, error=error), normalization_accel=0.1)
+      refresh(o, row.end_ns)
+      assert o.observe_episode(row, now_ns=row.end_ns)  # Admission is separate from the comparison decision.
+    assert o.reason == 'matched_tracking_not_consistently_improved' and o.offer_state['phase'] == 'rollback'
+    assert o.paused_intent is None and o.paused_demand_context is None
+    assert len(o.future) == 3 and not any(o.accepted.values())
+
+
+def test_legacy_model_regime_end_remains_terminal():
+  from openpilot.starpilot.flm.tests.test_live_tracking import optimizer, ready, acknowledge
+
+  o = optimizer()
+  _state, now = ready(o, 'ff_gain_right')
+  offer = o.offer(now)
+  assert offer is not None and acknowledge(o, offer)
+  o._rollback('trial_input_regime_ended')
+  assert o.paused_intent is None and o.paused_demand_context is None
+  assert o.offer_state['phase'] == 'rollback' and not any(o.accepted.values())
+
+
+def test_old_generation_ack_cannot_settle_resumed_study():
+  o, _original, _scores, incoming = pause()
+  old_offer = o.offer(incoming.end_ns)
+  baseline_ack(o, incoming.end_ns + 10_000_000)
+  row = trigger(o, 42)
+  baseline_ack(o, row.end_ns - 10_000_000)
+  assert not o.observe_episode(row, now_ns=row.end_ns)
+  assert o.offer_state['phase'] == 'trial'
+  assert not source_ack(o, old_offer, row.end_ns + 1_000_000)
+  assert o.settled_ns is None and len(o.future) == 2
+
+if __name__ == '__main__':
+  unittest.main()
diff --git a/prebuilt.json b/prebuilt.json
index 154e1d22a2..8e7d64d940 100644
--- a/prebuilt.json
+++ b/prebuilt.json
@@ -1 +1 @@
-{"protected_inventory_sha256": "a4e57edf60b47ca5ef9240ac00554772506d95b7f05cdd5e758d86cc0c41007b", "schema_version": 1}
+{"protected_inventory_sha256": "2ba5ea84e77e3acc80ba45d12b36967041d963aa70dfbb57ef1485802da946a4", "schema_version": 1}