# DF-5341 — mptable_map trusts firmware pap/length with no PCMP-signature, checksum, or PA-range validation

Boot-time (firmware/loader-gated) defect in `sys/platform/pc64/x86_64/mptable.c`.
The kernel-boot manifestation cannot be armed on the standard QEMU/SeaBIOS guest
(no MP-table injection path, no unprivileged in-guest trigger), so per the
DF-5326 precedent this pack carries a **verbatim-logic reproducer** that was
built and executed ON the audited guest and proves the exact code-level
divergence (see `run.log`). Kernel impact classification: untested.

## Build (guest or host)
    cc -O2 -Wall -Wextra -o pap_trust pap_trust.c

## Run
    ./pap_trust

## Expected
See `run.log` (decisive lines quoted in `verdict.json:evidence`).