Live VZ gates (class B)

Class B gates boot a real Virtualization.framework VM on Apple silicon and assert on what the kernel actually reports. CI cannot run them; a developer host can (just verify-vz).

Why they exist

The class A floor proves the code paths. The class B gates prove the machine: that the MMU switch completes under real firmware, that the virtio device answers, that a typed key reaches the terminal, that a written file survives a reboot, that a captured Ethernet frame is byte-exact.

The shape of a gate

Each gate is a tools/verify-live-*.sh script that:

boots the VM with the right flag-gated device mode;
drives a deterministic scripted session (marker-triggered, not sleep-based);
asserts on the guest's own serial reports — and, for pixel and network gates, decodes the captured PNG or frame bytes;
exits 0 only on full evidence.

A sample of the set

Serial / machine — live-transcript, live-reboot, live-timer, live-tasks, live-exceptions
Userspace — live-userspace, live-svc, live-uaccess, live-addrspaces, live-lifecycle, live-exec, live-sleep
Processes — live-procs, live-concurrent, live-long-lived, live-kill, live-ipc, live-scale, live-wait, live-procs-syscall
Storage / entropy / files — live-fs, live-gfs, live-entropy, live-user-fs (the userland file ABI)
Network — live-net-tx, -rx, -arp, -icmp, -udp, -udp-syscall, -nat, -dhcp, -dhcp-renew, -tcp, -tcp-rto, -tcp-syscall, -dns, -fetch
Graphics / input — live-screen, live-text, live-roadpops, live-glyphs, live-win, live-win-syscall, live-win-move, live-win-close, live-win-hig, live-xhci, live-usb, live-input
Usability / HIG — live-help, live-editing, live-settings, plus the pointer seams: pointer-manual (class C, a human at the mouse) and live-pointer-cg (class B, self-gating on Accessibility trust)
Events / desktop / apps — live-events, live-sys-kill, live-desktop, live-file-browser

The aggregate verify-vz sweep re-checks the shared seam across every subsystem in one run (43 gates at the current tree) — the standing regression proof that a new subsystem did not break the ones before it.