fix(#369): unsupported decoder ops loud-skip, never silently drop (GI-FPU-001) (#371)

* fix(#369): unsupported decoder ops loud-skip the function, never silently drop (GI-FPU-001)

The decoder's `convert_operator` returns None for any op it can't lower, and the
caller silently dropped it — leaving the operand stack wrong and the function a
SILENT miscompile (scalar f32.add -> `mov r0,r1`, returning an operand instead of
the sum; same `_ => None` line drops memory.copy). Per the #180/#185 contract, an
unsupported op must surface loudly, never silently continue.

- wasm_decoder.rs: FunctionOps gains `unsupported: Option<String>`;
  decode_function_body records the first value-affecting op that decodes to None
  (everything except the intentional Nop/Unreachable, via is_intentionally_ignored).
- main.rs compile loop: a flagged function is LOUD-SKIPPED (warning naming the op +
  symbol absent -> caller gets a link error), reusing the #168 skipped_funcs path,
  before selection. An all-skipped module errors loudly rather than emitting nothing.

General fix: covers scalar f32/f64 (#369), bulk-memory (memory.copy/fill), and any
other decoder-dropped value-affecting op. Honest interim until real VFP (GI-FPU-002)
and bulk-memory lowering land.

Verified: f32/f64 module now loud-skips (was silent `mov r0,r1`); all three frozen
oracles byte-identical (control_step 0x00210A55 13/13, flight_seam 0x07FDF307,
div_const 338/338 — no fixture uses floats); unit test + fmt + clippy clean.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* chore(release): v0.11.46 — #369 GI-FPU-001 unsupported-op loud-skip

Pin sweep 0.11.45 -> 0.11.46 (workspace.package + 10 crate path-deps +
MODULE.bazel + Cargo.lock). CHANGELOG v0.11.46 with falsification statement.
rivet: GI-FPU-001 -> implemented + GI-FPU-VER-001 (verifies, sw-verification:
unit test + frozen byte-identity). Frozen oracles re-confirmed on the bumped
tree (control_step ORACLE PASS).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: avrabe

CHANGELOG.md

@@ -7,6 +7,33 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.11.46] - 2026-06-17
+
+**CORRECTNESS — #369: an op the backend cannot lower now LOUD-SKIPS its
+function instead of being silently dropped into a wrong-value miscompile.**
+
+- **#369 / GI-FPU-001 — unsupported decoder ops no longer silently drop**
+  (#371): `convert_operator` returns `None` for any operator it can't lower, and
+  the caller previously **dropped it silently** — leaving the operand stack wrong
+  and the function a silent miscompile (`f32.add(a,b)` lowered to `mov r0,r1`,
+  returning an operand instead of the sum; the same `_ => None` line drops
+  `memory.copy`). Per the #180/#185 contract, an unsupported op must surface
+  loudly. `FunctionOps` now carries `unsupported: Option<String>`;
+  `decode_function_body` records the first value-affecting op that decodes to
+  `None` (everything except the intentional `Nop`/`Unreachable`); and the
+  compile loop **loud-skips** a flagged function (warning naming the op + symbol
+  absent → a caller gets a link error), reusing the #168 `skipped_funcs` path. An
+  all-skipped module errors loudly rather than emitting an empty object. Covers
+  scalar f32/f64 (#369, jess AFD-024/AFD-008), bulk-memory (`memory.copy`/
+  `fill`), and any other decoder-dropped value-affecting op — the honest interim
+  until real VFP (GI-FPU-002) and bulk-memory lowering land.
+
+  **Falsification:** a module whose only function uses a scalar `f32`/`f64` op
+  (or `memory.copy`) no longer produces an object containing that function — it
+  is reported skipped and absent. A pure-integer module is byte-identical to
+  before: the three frozen oracles stay bit-identical (control_step `0x00210A55`
+  13/13, flight_seam `0x07FDF307`, div_const 338/338); no fixture uses floats.
+
 ## [0.11.45] - 2026-06-14
 
 **ON-TARGET SHIPPABILITY — gale #354: a high-offset init segment no longer

Cargo.lock

@@ -27,7 +27,7 @@ resolver = "2"
 # semver to publish, so the convention now catches up: workspace
 # version follows the release tag, bumped pre-tag in the release
 # checklist. See docs/release-process.md.
-version = "0.11.45"
+version = "0.11.46"
 edition = "2024"
 rust-version = "1.88"
 authors = ["PulseEngine Team"]

Cargo.toml

@@ -7,7 +7,7 @@ module(
     name = "synth",
     # Kept in lockstep with [workspace.package] version in Cargo.toml.
     # Both are bumped pre-tag — see docs/release-process.md.
-    version = "0.11.45",
+    version = "0.11.46",
 )
 
 # Bazel dependencies

MODULE.bazel

@@ -607,9 +607,12 @@ artifacts:
       fixture uses floats (zero `f32.`/`f64.` in scripts/repro/*.wat), so
       every frozen differential stays byte-identical. Shippable independently
       of GI-FPU-002 (the hard-float feature); bundles naturally with the
-      memory.copy-drop fix (same decoder catch-all).
-    status: proposed
-    tags: [gale, fpu, float, correctness, silent-miscompile, ok-or-err, release-pending]
+      memory.copy-drop fix (same decoder catch-all). IMPLEMENTED in v0.11.46
+      (#371): FunctionOps.unsupported flag + decode_function_body recording +
+      compile-loop loud-skip; f32/f64 module loud-skips (was silent mov r0,r1);
+      3 frozen oracles byte-identical; unit test; covers memory.copy too.
+    status: implemented
+    tags: [gale, fpu, float, correctness, silent-miscompile, ok-or-err, release-v0.11.46]
     links:
       - type: derives-from
         target: GI-002
@@ -668,3 +671,27 @@ artifacts:
         re-test; cortex-m7 (sp) and cortex-m7dp (dp) outputs DIFFER (FPU mode
         consulted); all frozen fixtures stay byte-identical (no float content,
         unaffected); soft-float retained and unchanged for cortex-m3.
+
+  - id: GI-FPU-VER-001
+    type: sw-verification
+    title: "Unsupported-op loud-skip (#369) — unit test + frozen byte-identity"
+    description: >
+      Verifies GI-FPU-001 (v0.11.46, #371). Unit test
+      `test_369_scalar_float_op_flags_function_unsupported_not_dropped`
+      (crates/synth-core/src/wasm_decoder.rs) asserts a scalar `f32.add` flags
+      its function `unsupported` (naming `F32Add`) while a pure-integer function
+      stays clean. Manual: an f32/f64 module compiled for cortex-m7dp loud-skips
+      both functions (symbol absent; warning names the op) where it previously
+      emitted the silent `mov r0,r1` stub. Frozen byte-identity confirmed: the
+      three differential oracles (control_step 0x00210A55 13/13, flight_seam
+      0x07FDF307, div_const 338/338) PASS unchanged (no fixture uses floats).
+    status: implemented
+    tags: [gale, fpu, verification, unit-test, frozen, release-v0.11.46]
+    links:
+      - type: verifies
+        target: GI-FPU-001
+    fields:
+      method: test
+      pass-criteria: >
+        cargo test test_369 green; f32 module emits no fadd/dmul symbol;
+        control_step / flight_seam / div_const differentials byte-identical.

artifacts/gale-integration.yaml

@@ -11,6 +11,6 @@ categories.workspace = true
 description = "aWsm backend integration for the Synth compiler"
 
 [dependencies]
-synth-core = { path = "../synth-core", version = "0.11.45" }
+synth-core = { path = "../synth-core", version = "0.11.46" }
 anyhow.workspace = true
 thiserror.workspace = true

crates/synth-backend-awsm/Cargo.toml

@@ -11,8 +11,8 @@ categories.workspace = true
 description = "RISC-V encoder, ELF builder, PMP allocator, and bare-metal startup for synth"
 
 [dependencies]
-synth-core = { path = "../synth-core", version = "0.11.45" }
-synth-synthesis = { path = "../synth-synthesis", version = "0.11.45" }
+synth-core = { path = "../synth-core", version = "0.11.46" }
+synth-synthesis = { path = "../synth-synthesis", version = "0.11.46" }
 anyhow.workspace = true
 thiserror.workspace = true
 tracing.workspace = true

crates/synth-backend-riscv/Cargo.toml

@@ -11,6 +11,6 @@ categories.workspace = true
 description = "Wasker backend integration for the Synth compiler"
 
 [dependencies]
-synth-core = { path = "../synth-core", version = "0.11.45" }
+synth-core = { path = "../synth-core", version = "0.11.46" }
 anyhow.workspace = true
 thiserror.workspace = true

crates/synth-backend-wasker/Cargo.toml

@@ -15,7 +15,7 @@ default = ["arm-cortex-m"]
 arm-cortex-m = ["synth-synthesis"]
 
 [dependencies]
-synth-core = { path = "../synth-core", version = "0.11.45" }
-synth-synthesis = { path = "../synth-synthesis", version = "0.11.45", optional = true }
+synth-core = { path = "../synth-core", version = "0.11.46" }
+synth-synthesis = { path = "../synth-synthesis", version = "0.11.46", optional = true }
 anyhow.workspace = true
 thiserror.workspace = true

crates/synth-backend/Cargo.toml

@@ -27,18 +27,18 @@ verify = ["synth-verify"]
 # Path deps carry `version` so `cargo publish` rewrites them to the
 # crates.io coordinate. Bumping the workspace version requires
 # updating these in lockstep — see docs/release-process.md.
-synth-core = { path = "../synth-core", version = "0.11.45" }
-synth-frontend = { path = "../synth-frontend", version = "0.11.45" }
-synth-synthesis = { path = "../synth-synthesis", version = "0.11.45" }
-synth-backend = { path = "../synth-backend", version = "0.11.45" }
+synth-core = { path = "../synth-core", version = "0.11.46" }
+synth-frontend = { path = "../synth-frontend", version = "0.11.46" }
+synth-synthesis = { path = "../synth-synthesis", version = "0.11.46" }
+synth-backend = { path = "../synth-backend", version = "0.11.46" }
 
 # Optional external backends
-synth-backend-awsm = { path = "../synth-backend-awsm", version = "0.11.45", optional = true }
-synth-backend-wasker = { path = "../synth-backend-wasker", version = "0.11.45", optional = true }
-synth-backend-riscv = { path = "../synth-backend-riscv", version = "0.11.45", optional = true }
+synth-backend-awsm = { path = "../synth-backend-awsm", version = "0.11.46", optional = true }
+synth-backend-wasker = { path = "../synth-backend-wasker", version = "0.11.46", optional = true }
+synth-backend-riscv = { path = "../synth-backend-riscv", version = "0.11.46", optional = true }
 
 # Optional verification (requires z3)
-synth-verify = { path = "../synth-verify", version = "0.11.45", optional = true, features = ["z3-solver", "arm"] }
+synth-verify = { path = "../synth-verify", version = "0.11.46", optional = true, features = ["z3-solver", "arm"] }
 
 # Optional PulseEngine WASM optimizer
 # Uncomment when loom crate is available: