# QuickFIX C++ source-built SDK functional verification

Recorded 2026-10-03. This closes the missing SDK build/source receipt for
one functional generation in [PLAN_FULL_BENCH.md](PLAN_FULL_BENCH.md).
It does not grant public-release or report-grade Stage 5 admission.

## Preserved setup failures

Three original controllers remain failed, with their inputs and queue logs:

| Generation | Outcome |
|---|---|
| `bb7badeb05a0` | Source verification followed Python symlinks while the regular-file manifest excluded them. Failed before SDK configuration. |
| `311d3e50c639` | Verified regular files and all symlink targets, then found no CMake on the controller's minimal PATH. Failed before SDK configuration. |
| `34646114eac2` | Pinned CMake configured and built the SDK successfully. The controller then required `config.h` to change; actual changes were empty because its existing bytes already matched the generated configuration. Overall controller remains failed. |

The third generation's two SDK commands both returned zero. Its SDK input
archive contains **1,701 regular files and 15 upstream Python symlinks**.
All original regular-file bytes and symlink targets remain unchanged after
the SDK build. No source checkout or another session's products were edited.

## Successful continuation

A separately sealed controller, `73fb9f230599`, verified the original failed
build report and its two successful commands before consuming that SDK.
It rechecked all original source bytes, symlink targets, **734 generated
headers**, the static library and the materialized CMake tool. It then
compiled both benchmark binaries and ran the actual session checker. The
continuation passes; it does not rewrite any earlier controller's outcome.

| Input | Value |
|---|---|
| Managed SDK source pin | `386ce46e917ae494ab6e90b1be90fd421cdbe3f9` |
| SDK Git archive SHA-256 | `79bb976d6451de78b602a236a2e51babdbc2f5fe42a3cd1e080e404815a83885` |
| CMake version | 3.31.6, with download receipt and complete tool-file hashes retained |
| SDK compiler/configuration | GCC 14.2.1, `-O3 -DNDEBUG -std=gnu++17`, Release, static library, `--parallel 2`; examples, tests, SSL, database and Python bindings disabled |
| Fresh static library SHA-256 | `93ba126bd531479aa5f503c179235ec15ee0165f85fc0fc3ebf858d742730c1a` |
| Benchmark source | `5d3f03d491a26ecdd1955cef2d84102cf3dbcbfb` |
| Benchmark source fingerprint | `791e0b061c57cc9fc785249f5ad4d50bc1db36e0b8ebb4b9e06e408f2695e689` |
| Benchmark compile | GCC 14.2.1, C++17, `-O2 -DNDEBUG` |
| Fixture binary SHA-256 | `beaaed534e2a45facebebeec9f124a730e7946ba05357f64ca33051fdcaf6ae8` |
| Session binary SHA-256 | `edace8161d1349b057ebe8a7e068ae35ca487b157c86efb15095f3802e5e1381` |
| Execution | HP high-priority `isol` slot; CPUs 8–17, concurrent shared work allowed |
| Actual continuation start | `2026-10-02T23:49:26.732884Z` |

Both binaries compile against this source-built SDK without an engine
directory or `.git` in the frozen benchmark source capsule. The actual SDK
passes **48 wire cycles, 12 independent owner vectors, 37 malformed-payload
rejections and both quantity clamp boundaries**. All **15 localhost session
pairs** pass with complete required-value captures, owner sinks, primary/delay
raw counts and prepared tick clocks. There are **zero skips**. Source/SDK
inputs remain unchanged, and all fifteen imported pairs were independently
regraded locally using the frozen grading source.

These paired processes inherit one reservation's CPU mask; role CPUs are
not disjoint. This functional lease permits concurrent shared work, and the
1,000/s offered load is a small diagnostic. No latency, throughput or
stability number from this run is report grade.

## Evidence and remaining gates

The devel import retains **134 original continuation files plus an import
seal**, including the original failed SDK build report, source and generated
header/library manifests, controller, queue journal/wrapper, compiler logs,
fixture vectors, bilateral captures, settings, exits and raw series:

- [Successful continuation](evidence/quickfix-cpp-source-sdk-20261003/hp-73fb9f230599/build-report.json)
- [Functional result](evidence/quickfix-cpp-source-sdk-20261003/hp-73fb9f230599/functional/report.json)
- [Original failed SDK controller](evidence/quickfix-cpp-source-sdk-20261003/hp-34646114eac2/build-report.json)
- [Actual SDK compile log](evidence/quickfix-cpp-source-sdk-20261003/hp-34646114eac2/sdk-build.log)
- [Postbuild SDK compiler flags](evidence/quickfix-cpp-source-sdk-20261003/hp-34646114eac2-postbuild-config/flags.make)
- [Continuation import seal](evidence/quickfix-cpp-source-sdk-20261003/hp-73fb9f230599/SHA256SUMS)

A separate read-only postbuild receipt retains the SDK CMake cache, compiler
flags and archive link command. These files were copied after the functional
checks; the original controllers and their reports remain unchanged.

This receipt establishes source/build identity for the consumed SDK in this
diagnostic. Portable public SDK admission and the release environment are
separate gates. Full body byte/order alignment, measured admin observations,
hash-pinned root deployment, physical-link proof and report rate/stability
still require qualification. `comparison_fixture_aligned` and `stage5_pass`
remain false. Original installed generations and coverage grades are intact.

## Persistent SDK products

The session's compiled SDK source/header tree and static library now also live
under HP's persistent `~/.cache/libhft/`, in
`fullbench-quickfix-cpp-sdk-20261003-386ce46e917a-93ba126bd531`. The original
build tree remains intact. Every copied file and internal symlink is checked
against the original; the static library retains SHA256
`93ba126bd531479aa5f503c179235ec15ee0165f85fc0fc3ebf858d742730c1a`.
This is verified artifact retention, with no compilation, benchmark or new SDK
qualification. The original failed setup receipt and its successful compilation
phases keep their original grades. The cache survives later session build-root
cleanup; existing frozen preparation metadata and consumer paths are unchanged.
[Copied/original byte and symlink inventories](evidence/quickfix-cpp-sdk-cache-20261003/SHA256SUMS).