DF-4230 decisive runs (audit guest, cc 8.3, -O0, x86-64), 2/2 per branch:
$ cc -O0 -Wall -o model_uninit_regs model_uninit_regs.c
$ ./model_uninit_regs 0x2d
poison byte = 0x2d (bit7 RUNNING = clear)
after 31 failing poll iterations: reinited=1 (garbage regs.stat=0x2d decided)
RESULT: re-init decision taken from UNINITIALIZED regs.stat (byte 0x2d, RUNNING bit clear)
$ ./model_uninit_regs 0xcd
poison byte = 0xcd (bit7 RUNNING = set)
after 40 failing poll iterations: reinited=0 (garbage regs.stat=0xcd decided)
RESULT: no re-init (byte 0xcd had RUNNING bit set)
--- the reset decision (cyapa.c:1191-1196) flips solely on the uninitialized byte