%=====================================================================
% En02-C
% Resource-Limited Black-Hole Information Recovery
% Radiation Access, Decoder Memory, and Operational Recovery Thresholds
%
% Self-contained mathematical manuscript.
%
% Compile:
%   pdflatex En02-C.tex
%   pdflatex En02-C.tex
%
% The Python appendix is not a compilation dependency.
% No local LaTeX compilation, Python execution, physical implementation,
% or formal proof-checker execution is asserted.
%=====================================================================

\documentclass[11pt]{article}

\usepackage[utf8]{inputenc}
\usepackage[T1]{fontenc}
\usepackage[margin=1.02in]{geometry}
\usepackage{microtype}
\usepackage{amsmath,amssymb,amsthm,mathtools}
\usepackage{array,booktabs,longtable}
\usepackage{enumitem}
\usepackage{xcolor}
\usepackage{fvextra}
\usepackage[hidelinks]{hyperref}

\setcounter{secnumdepth}{3}
\setcounter{tocdepth}{2}
\numberwithin{equation}{section}
\allowdisplaybreaks
\setlength{\emergencystretch}{2em}

%---------------------------------------------------------------------
% Environments
%---------------------------------------------------------------------

\theoremstyle{plain}
\newtheorem{theorem}{Theorem}[section]
\newtheorem{lemma}[theorem]{Lemma}
\newtheorem{proposition}[theorem]{Proposition}
\newtheorem{corollary}[theorem]{Corollary}

\theoremstyle{definition}
\newtheorem{definition}[theorem]{Definition}
\newtheorem{assumption}[theorem]{Assumption}
\newtheorem{example}[theorem]{Example}
\newtheorem{openproblem}[theorem]{Open Problem}

\theoremstyle{remark}
\newtheorem{remark}[theorem]{Remark}
\newtheorem{convention}[theorem]{Convention}

\DefineVerbatimEnvironment{CodeBlock}{Verbatim}{
  fontsize=\scriptsize,
  breaklines=true,
  breakanywhere=true,
  frame=single,
  framesep=3mm,
  numbers=left,
  numbersep=6pt,
  tabsize=4
}

\DefineVerbatimEnvironment{ShellBlock}{Verbatim}{
  fontsize=\small,
  breaklines=true,
  breakanywhere=true,
  frame=single,
  framesep=3mm
}

%---------------------------------------------------------------------
% Notation
%---------------------------------------------------------------------

\newcommand{\ket}[1]{\lvert #1\rangle}
\newcommand{\bra}[1]{\langle #1\rvert}
\newcommand{\ketbra}[2]{\lvert #1\rangle\!\langle #2\rvert}
\newcommand{\norm}[1]{\left\lVert #1\right\rVert}
\newcommand{\abs}[1]{\left\lvert #1\right\rvert}
\newcommand{\set}[1]{\left\{#1\right\}}
\newcommand{\ceil}[1]{\left\lceil #1\right\rceil}
\newcommand{\code}[1]{\texttt{\detokenize{#1}}}

\newcommand{\HH}{\mathcal H}
\newcommand{\BB}{\mathcal B}
\newcommand{\id}{\mathrm{id}}
\newcommand{\Lib}{\mathfrak L}
\newcommand{\Qpeak}{Q_{\mathrm{peak}}}
\newcommand{\Qtotal}{Q_{\mathrm{stored,total}}}
\newcommand{\Enter}{\mathsf{Enter}}
\newcommand{\Return}{\mathsf{Return}}
\newcommand{\CX}[2]{\mathrm{CX}_{#1\to #2}}
\newcommand{\CZ}[2]{\mathrm{CZ}_{#1,#2}}
\newcommand{\ddiam}{d_\diamond}
\newcommand{\epsIT}{\varepsilon_{\mathrm{IT}}}
\newcommand{\epsop}{\varepsilon_{\mathrm{op}}}
\newcommand{\Bell}[1]{\ket{\Phi_{#1}}}
\newcommand{\Tdep}{\mathcal T}

\DeclareMathOperator{\tr}{tr}
\DeclareMathOperator{\Tr}{Tr}
\DeclareMathOperator{\rank}{rank}
\DeclareMathOperator{\supp}{supp}
\DeclareMathOperator{\Ad}{Ad}

\title{\textbf{En02-C}\\[2mm]
\textbf{Resource-Limited Black-Hole Information Recovery}\\[2mm]
\large Radiation Access, Decoder Memory, and Operational Recovery Thresholds}

\author{Ngo Cheung\\
Independent Researcher\\
Hong Kong SAR, China\\
\texttt{info@cheungngomedical.com}}

\date{7 October 2026}

\begin{document}

\maketitle

\begin{abstract}
We distinguish information-theoretic recovery from executable decoding
in explicitly specified finite unitary radiation models. Our principal
benchmark has one message qubit, four initially pure internal qubits,
and three consistent emission steps. The first two radiation prefixes
are independent of the message and have optimal half-diamond recovery
error \(3/4\). The third prefix permits exact quantum recovery. For an
ordered, single-pass observer without auxiliary quantum storage,
however, the optimal error at one-live-qubit capacity is exactly
\(1/2\), even with unrestricted classical memory and arbitrary
single-qubit instruments. The lower bound is proved directly on the
logical-reference state: consuming the first carrier without quantum
memory makes every subsequent recovered output separable from the
reference. It does not assume approximate uniqueness of an off-code
decoder. A seven-gate Clifford programme attains exact recovery with
two live qubits and two classical record bits. We separately compile
the conjugate-evolution, Bell-projection construction of the idealized
Hayden--Preskill decoder. Under exact complementary-channel decoupling,
its success map is \(2^{-2k}\operatorname{id}\) for a \(k\)-qubit
message. Uniform-angle coherent amplification has an explicitly
priced register and oracle ledger; one amplification iteration is
exact for \(k=1\). Laboratory occupancy and external radiation storage
are recorded separately. Complete-channel implementation errors add,
and a specified flagged-erasure model has optimal error
\(3\ell/4\). Operational thresholds and completion-time bounds are
derived only for the declared interfaces and schedules. The results
are finite quantum-information statements, not a derivation of
evaporation dynamics, a Page curve, or a solution of the information
paradox.
\end{abstract}

\tableofcontents

%=====================================================================
\section{Information availability versus executable recovery}
\label{sec:intro}
%=====================================================================

Hayden--Preskill recovery concerns information retrieval in an idealized
unitary, rapidly mixing model with extensive radiation control
\cite{HP}. Constructive decoding, including conjugate-evolution
postselection and coherent amplification, is available in specified
idealized settings \cite{YK}. Clifford dynamics admits additional
structured recovery procedures \cite{YoshidaClifford}. These results
must be distinguished from the resources of a particular observer.

We separate three questions:
\begin{enumerate}[label=\textup{(\roman*)},leftmargin=*]
\item \textbf{Availability:} what message information is present in
the accessible radiation?
\item \textbf{Existence:} does a recovery channel achieve the requested
reference-preserving accuracy?
\item \textbf{Execution:} can a permitted programme realize such a
channel within its memory, circuit-access, record, and time budgets?
\end{enumerate}

The separation itself is not claimed to be new. Our contribution is
an exact finite example with a quantitatively optimal memory-constrained
error, together with a resource ledger for a recognized constructive
recovery architecture.

The principal separation is
\[
\epsIT(3)=0,
\qquad
\varepsilon_{1,\mathrm{stream}}(3)=\frac12,
\qquad
\varepsilon_{2,\mathrm{stream}}(3)=0.
\]
The middle equality optimizes over all permitted one-live-qubit
decoders, not only a chosen circuit.

\subsection{Inheritance and independent premises}

En02-A supplies the distinction between specified Born semantics and
an unknown-strategy characterization, as well as one-shot versus
adaptive accounting \cite{En02A}. En02-B supplies finite decoder
interfaces and a perfect-code authorized-triple construction
\cite{En02B}. Neither supplies the sequential radiation maps or the
quantitative approximate-memory obstruction proved here.

All principal theorems below use specified Born semantics.
The emission evolution, its initial state, and the observer interface
are stated independently. We do not use unrestricted finite-capacity
measurement uniqueness as a premise.

The primary benchmark has trivial early radiation. A separate
Hayden--Preskill benchmark uses maximally entangled early radiation.
The former is not presented as an old-black-hole or generic-scrambling
model.

\subsection{Scope}

A finite unitary radiation model is not, merely by being unitary, a
model of Hawking spectra, gravitational backreaction, or rapid
scrambling. Our three-step benchmark is a partial-emission model with
a two-qubit remnant. It is not a complete evaporation history.

No entanglement wedge, island, quantum extremal surface, Page curve,
or replica wormhole is constructed. No result changes the status of
a field-theoretic insertion or symmetry problem in another manuscript.
En02-C and Em02-C, if similarly named documents exist, are not
identified.

%=====================================================================
\section{Sequential models and recovery criteria}
\label{sec:model}
%=====================================================================

All Hilbert spaces are finite dimensional. Channels are completely
positive and trace preserving, abbreviated CPTP.

Let \(M\) be the message, \(R\) an arbitrary external reference,
\(B\) the initial internal register, and \(E\) accessible early
radiation. The initial state \(\sigma_{BE}\) is independent of the
message-reference input.

An injection unitary identifies \(MB\) with \(C_0\). Thereafter,
\[
W_j:\HH_{C_{j-1}}
\longrightarrow
\HH_{C_j}\otimes\HH_{d_j}
\]
is a specified dimension-preserving unitary identification, possibly
preceded by gates on \(C_{j-1}\). Emitted carriers never interact again
with the internal evolution.

Set
\[
D_{\le t}=d_1\cdots d_t.
\]
The consistent evolution is
\[
U_t:MB\longrightarrow C_tD_{\le t},
\]
obtained by composing injection and the first \(t\) emission maps.
The accessible channel is
\begin{equation}
\mathcal N_t(\rho)
=
\Tr_{C_t}
\left[
(U_t\otimes I_E)
(\rho\otimes\sigma_{BE})
(U_t^\dagger\otimes I_E)
\right].
\label{eq:Nt}
\end{equation}

The observer receives \(ED_{\le t}\), not \(C_t\).
We identify the decoder's output register \(\widehat M\) with \(M\)
through a fixed computational basis.

\begin{definition}[Reference-preserving recovery error]
For a decoder \(\mathcal D_t:ED_{\le t}\to\widehat M\), define
\[
\epsilon(\mathcal D_t,t)
=
\ddiam(\mathcal D_t\mathcal N_t,\id_M),
\qquad
\ddiam(\Phi,\Psi)=\frac12\norm{\Phi-\Psi}_\diamond.
\]
The diamond norm includes arbitrary entanglement with an external
reference \cite[Chapters 2--3]{Watrous}.
\end{definition}

\begin{definition}[Information-theoretic baseline]
\[
\epsIT(t)=\inf_{\mathcal D_t}
\ddiam(\mathcal D_t\mathcal N_t,\id_M),
\]
where the infimum is over all CPTP decoders without implementation
restrictions.
\end{definition}

A measurement of one specified message observable is a different task.
A measurement instrument must reproduce both its classical outcomes
and its specified conditional quantum outputs. Neither task is
silently substituted for subsystem recovery.

\subsection{Complementary channels and purification}

If \(\sigma_{BE}\) is mixed, purify it by a register \(F\).
The inaccessible complementary output is then \(C_tF\), not
necessarily \(C_t\) alone.

\begin{lemma}[Exact recovery and a constant complement]
\label{lem:decouple}
A channel \(\mathcal N:M\to A\) has an exact CPTP left inverse if
and only if a complementary channel satisfies
\[
\mathcal N^c(X)=\tr(X)\tau
\]
for a fixed density operator \(\tau\).
\end{lemma}

\begin{proof}
Suppose a recovery exists. Compose a Stinespring isometry for
\(\mathcal N\) with one for the recovery. This dilates the identity
channel. Every Kraus operator in any Kraus family of the identity
is proportional to \(I_M\), since its Choi operator has rank one.
The dilation therefore factors as the unchanged message tensored
with a fixed environment vector. Tracing the recovery environment
makes the original complement constant.

Conversely, diagonalize
\(\tau=\sum_j\lambda_j\ketbra j j\), omitting zero eigenvalues.
A Stinespring isometry can be written
\[
W\ket i
=
\sum_j\sqrt{\lambda_j}\ket{\phi_{ij}}_A\ket j.
\]
The constant-complement condition gives
\(\langle\phi_{i'j'}|\phi_{ij}\rangle
=\delta_{ii'}\delta_{jj'}\).
An isometry on their span sends
\(\phi_{ij}\) to \(\ket i\ket j\).
Trace the second factor and define an arbitrary trace-preserving
action on the orthogonal complement. This is an exact recovery.
\end{proof}

This is the exact information--disturbance principle.
Channel-level continuity versions are established in
\cite{KSW}. One-shot decoupling gives other finite-size recovery
tools \cite{Decoupling}; it is not used to assign an unproved
scrambling estimate to our specified circuit.

%=====================================================================
\section{Observer resources and access assumptions}
\label{sec:resources}
%=====================================================================

\begin{definition}[Laboratory and external storage]
At an observer event \(\tau\), let \(q_{\mathrm{lab}}(\tau)\)
count delivered radiation, working ancillas, retained quantum records,
and recovered output not yet returned.

Let \(q_{\mathrm{buf}}(\tau)\) count emitted accessible radiation
held by passive external suppliers. Any other permitted auxiliary
quantum storage is counted separately in \(q_{\mathrm{aux}}(\tau)\).

Define
\[
\Qpeak=\max_{\tau,h}q_{\mathrm{lab}}(\tau,h),
\]
and
\[
\Qtotal
=
\max_{\tau,h}
\bigl(q_{\mathrm{lab}}+q_{\mathrm{buf}}+q_{\mathrm{aux}}\bigr)(\tau,h).
\]
The inaccessible remnant and external correctness reference are not
observer storage. Radiation not yet emitted is not counted as an
external radiation buffer.
\end{definition}

Thus a small laboratory peak does not establish small total radiation
storage.

\begin{definition}[Resource vector]
We record
\[
\mathbf C(\pi)=
(\Qpeak,C_{\mathrm{cl}},G,D,
n_U,n_{U^\dagger},p_{\mathrm{succ}},\epsilon).
\]
Here \(G\) is the worst-history elementary unitary gate count and
\(D\) the instruction depth including destructive readouts.
Outcome storage \(C_{\mathrm{cl}}\) excludes the fixed programme
description.

When a construction requires \(U^*\) or \(U^T\), their counts
\(n_{U^*},n_{U^T}\) are reported additionally. These operations are
not identified with \(U\) or \(U^\dagger\).
The external-storage ledger accompanies \(\mathbf C\).
\end{definition}

\subsection{The single-pass streaming interface}

\begin{assumption}[Streaming observer]
\label{ass:stream}
Accessible carriers are delivered once in their specified order.
A passive supplier may hold undelivered carriers but performs no
measurement, encoding, selection, or decoding.

The observer may pause delivery. It may not return an intermediate
quantum register to the supplier, revisit consumed radiation, use an
unpriced quantum buffer, share auxiliary entanglement, or export
quantum output before the final return.

A delivered carrier is counted before any gate involving it.
Receiving a new qubit while another remains live therefore costs
two live slots, even if a gate immediately consumes one.

Every laboratory qubit is destructively measured or returned.
Classical memory is unrestricted unless a bound is stated.
The internal emission maps are fixed and are not controlled by the
observer's measurement outcomes.
\end{assumption}

For the lower bound, arbitrary single-qubit instruments and arbitrary
classical computation are permitted at one-live-qubit capacity.
For the constructive benchmark, the exact library is
\[
\Lib_{\mathrm{Cl}}
=
\{H,S,S^\dagger,X,Y,Z,\mathrm{CX},\mathrm{CZ}\},
\]
together with zero-state allocation, destructive computational
readout, classical control, and return.
Any two laboratory qubits may interact. A classically selected Pauli
costs at most one gate. This is not a quantum-controlled Pauli
gate convention.

Batch access places the whole accessible register in the laboratory
initially. In particular, \(e\) batch early-radiation qubits already
force peak at least \(e\).

\subsection{Knowledge versus coherent evolution access}

The following interfaces are distinct:
\begin{enumerate}[label=\textup{(\roman*)},leftmargin=*]
\item a supplied explicit gate description;
\item a specified oracle for selected evolution operations;
\item radiation with a fixed prior description of the encoding;
\item radiation with unresolved uncertainty about the encoding.
\end{enumerate}

The main streaming benchmark grants its fixed Clifford description,
but no calls acting on the inaccessible remnant.
The Hayden--Preskill construction later grants operations on
\emph{observer-owned duplicate registers} explicitly.

Memory cost with classical assistance is an established global
optimization problem \cite{Bisio}. Our live-name count specifies a
particular access model and is not automatically identical to
ancillary dimension in a general quantum strategy.

%=====================================================================
\section{C1: soundness for sequential radiation programmes}
\label{sec:soundness}
%=====================================================================

\begin{definition}[Sequential programme certificate]
A certificate contains:
\begin{enumerate}[label=\textup{(\roman*)}]
\item the injection, emission maps, and initial internal state;
\item the finite decoder instruction tree;
\item its branch path maps and reported classical coarse-graining;
\item an equality or error bound for the complete decoded channel;
\item a branchwise laboratory and external-storage ledger;
\item an explicit consumption and final-return specification.
\end{enumerate}
No successful branch is substituted for the complete channel.
\end{definition}

\begin{theorem}[C1: reference-preserving sequential soundness]
\label{thm:C1}
Under specified Born semantics and
Assumption~\ref{ass:stream}, a legal finite programme with such a
certificate implements its declared channel, including every
reference, and obeys its stated storage ledgers.
\end{theorem}

\begin{proof}
Decoder operations act only on emitted names and fresh laboratory
ancillas. Each subsequent emission acts on the remnant.
These operations commute after identifying their distinct tensor
factors. Semantically, one may therefore place the fixed emissions
before the decoder operations, without claiming that this rearranged
batch schedule has the same memory cost.

On each complete decoder history, compose allocation isometries,
unitaries, and destructive measurement bras into a linear path map
\(K_h\). Branch normalizations cancel against their probabilities.
Backward induction on the finite instruction tree gives
\[
\sum_hK_h^\dagger K_h=I.
\]
Reported selective maps are
\[
\Phi_y(X)=\sum_{h:\mathrm{out}(h)=y}K_hXK_h^\dagger.
\]
Their sum is CPTP.

Equality on all input matrix units is equality of channels.
Tensoring with a reference preserves it. A diamond-error certificate
already controls every such extension.

The two ledgers count all named quantum factors at every actual
event, including supplier holdings. Their maxima are precisely the
declared resource bounds. Commutation in the correctness proof
does not erase storage in the actual schedule.
\end{proof}

For a fixed interface and library, define
\begin{equation}
\varepsilon_{N,\Lib}(t)
=
\inf_{\pi:\Qpeak(\pi)\le N}
\ddiam(\Phi_\pi\mathcal N_t,\id_M).
\label{eq:operror}
\end{equation}
The complete output is deterministic unless a success flag and its
failure output are explicitly part of the task.

Increasing capacity or enlarging the implementation library cannot
increase this infimum. Relaxing an error target cannot remove a
feasible programme.

%=====================================================================
\section{An exact three-step emission benchmark}
\label{sec:benchmark}
%=====================================================================

\subsection{Registers and gates}

The message initially occupies position \(2\).
The four internal qubits occupy \(1,3,4,5\) and begin in
\(\ket{0000}\). Early radiation \(E\) is one dimensional.

Write
\[
\Bell{2}_{ab}
=
\frac{\ket{00}_{ab}+\ket{11}_{ab}}{\sqrt2}.
\]
Let \(\mathcal B\) prepare Bell pairs on \(1,4\) and \(3,5\):
chronologically,
\[
H_1,\ \CX{1}{4},\ H_3,\ \CX{3}{5}.
\]

On positions \(1,2,3\), define
\begin{equation}
U
=
Y_2\,\CX{3}{2}\CX{1}{2}
(H_1S_1^\dagger)(H_3S_3^\dagger)
\CZ{1}{2}\CZ{2}{3}.
\label{eq:batchU}
\end{equation}
The rightmost operation is applied first.
This is a nine-gate Clifford circuit.

Define the full encoding unitary
\[
J=(U^\dagger_{123}\otimes I_{45})\mathcal B,
\]
and its message isometry
\begin{equation}
V\ket\psi
=
J\bigl(\ket0_1\ket\psi_2\ket0_3\ket0_4\ket0_5\bigr).
\label{eq:V}
\end{equation}

The authorized-triple channel uses the decoder normal form of
En02-B. The remnant purification and the following sequential
dynamics are specified here.

\subsection{New sequential dynamics}

Set the injection unitary to
\[
J_0=\CZ{2}{3}J.
\]
The leftmost \(\CZ{2}{3}\) cancels the last chronological gate
of \(J\). Thus injection uses twelve elementary gates.

After injection:
\begin{enumerate}[label=\textup{(\arabic*)},leftmargin=*]
\item \(W_1\) emits position \(1\), leaving \(C_1=(2,3,4,5)\);
\item \(W_2\) applies \(\CZ{2}{3}\) on the remnant, then emits
position \(2\), leaving \(C_2=(3,4,5)\);
\item \(W_3\) emits position \(3\), leaving \(C_3=(4,5)\).
\end{enumerate}
Emission itself is a tensor-factor reassignment, not an allocation.
The dimensions are
\[
\dim C_t=2^{5-t},
\qquad
\dim D_{\le t}=2^t,
\qquad
0\le t\le3.
\]
At the third step the joint message encoding is \(V\).

There is a nontrivial gate during the emission sequence, acting only
on not-yet-emitted carriers. The process has a fixed remnant and
does not assert complete evaporation.

\subsection{All accessible channels}

Direct Clifford conjugation gives
\begin{equation}
U^\dagger X_2U=-Z_1X_2Z_3=:L_X,
\quad
U^\dagger Z_2U=-Y_1Z_2Y_3=:L_Z,
\quad
U^\dagger Y_2U=-X_1Y_2X_3=:L_Y.
\label{eq:logicalreps}
\end{equation}
The last identity follows also from \(Y=iXZ\).
These words all have weight three.

For every message operator \(X\),
\begin{equation}
U\mathcal N_3(X)U^\dagger
=
X_2\otimes\frac{I_{13}}4.
\label{eq:normal}
\end{equation}
Indeed,
\[
(U\otimes I_{45})V\ket\psi
=
\ket\psi_2\otimes\Bell{2}_{14}\otimes\Bell{2}_{35}.
\]

For a density operator
\(\rho=(I+xX+yY+zZ)/2\),
\begin{equation}
\mathcal N_3(\rho)
=
\frac18(I+xL_X+yL_Y+zL_Z).
\label{eq:N3}
\end{equation}
Tracing any one of the three radiation factors removes all three
nonidentity terms.

\begin{proposition}[Complete prefix channels]
\label{prop:prefix}
For \(t=0,1,2\),
\[
\mathcal N_t(X)=\tr(X)\frac{I_{2^t}}{2^t},
\]
where \(I_{2^0}=1\).
At \(t=3\), the channel is \eqref{eq:N3}, equivalently
\eqref{eq:normal}.
These are equalities on all operators, including off-diagonal
message matrix units.
\end{proposition}

\begin{proof}
The first two final radiation marginals follow from
\eqref{eq:N3}. Future gates act only on the remnant, so they cannot
change already emitted marginals. In particular, the remaining
\(\CZ{2}{3}\) after the first emission does not alter the first
carrier's law or reference correlations.
At \(t=0\), there is no accessible quantum factor.
\end{proof}

%=====================================================================
\section{C2: the information-theoretic recovery timeline}
\label{sec:IT}
%=====================================================================

\begin{lemma}[Constant-channel recovery error for one qubit]
\label{lem:constant}
If a one-qubit input channel is constant, its optimal recovery error
is \(3/4\).
\end{lemma}

\begin{proof}
Any decoded channel is a constant preparation \(X\mapsto\tr(X)\sigma\).
On a normalized logical Bell state with reference, its output is
\(\sigma\otimes I_R/2\). Its Bell overlap is \(1/4\).
The Bell-projector test therefore gives trace distance at least
\(3/4\).

The bound is attained by the completely depolarizing channel
\[
\Tdep=\frac14(\id+\Ad_X+\Ad_Y+\Ad_Z).
\]
The triangle inequality gives
\[
\norm{\id-\Tdep}_\diamond
\le\frac34+\frac14+\frac14+\frac14=\frac32.
\]
The Bell-state lower bound makes this an equality.
\end{proof}

\begin{theorem}[C2: exact information-theoretic baseline]
\label{thm:C2}
For the three-step benchmark,
\[
\epsIT(0)=\epsIT(1)=\epsIT(2)=\frac34,
\qquad
\epsIT(3)=0.
\]
\end{theorem}

\begin{proof}
Use Proposition~\ref{prop:prefix} and
Lemma~\ref{lem:constant} for the first three values.
At the third step, apply \(U\), destructively read positions
\(1,3\), forget their outcomes, and return position \(2\).
Equation~\eqref{eq:normal} proves exact recovery with every reference.
\end{proof}

The batch decoder has peak three, nine gates, and at most eight
instruction rounds. Its two syndrome bits are independent of the
logical-reference state.

More generally, sequential consistency gives
\[
\mathcal N_t=\Tr_{d_{t+1}}\mathcal N_{t+1}.
\]
Thus unrestricted \(\epsIT(t)\) is non-increasing.
No corresponding total-batch-memory monotonicity is inferred:
a later accessible input can itself be larger.

%=====================================================================
\section{C3: an optimal approximate memory obstruction}
\label{sec:memorylower}
%=====================================================================

The lower bound is stated for all permitted one-live-qubit protocols.
It does not require approximate uniqueness of a full-input recovery
channel.

Let
\[
\omega_{R123}
=
(\id_R\otimes\mathcal N_3)
\ketbra{\Phi_2}{\Phi_2}.
\]
From \eqref{eq:N3},
\begin{equation}
\omega_{R123}
=
\frac1{16}
\left(
I-X_RZ_1X_2Z_3
+Y_RX_1Y_2X_3
-Z_RY_1Z_2Y_3
\right).
\label{eq:omega}
\end{equation}

\begin{lemma}[First-carrier consumption destroys recoverable
reference entanglement]
\label{lem:firstmeasurement}
For every positive measurement effect \(E\) on carrier \(1\), the
conditional state of \(R23\) obtained from \(\omega_{R123}\) is
separable across \(R\mid23\), whenever that outcome has positive
probability.
\end{lemma}

\begin{proof}
Write
\[
E=\frac{\tr E}{2}
(I+v_xX+v_yY+v_zZ),
\qquad
v_x^2+v_y^2+v_z^2\le1.
\]
Its outcome probability is \(\tr E/2\).
The normalized conditional state is
\begin{equation}
\omega_{R23\mid E}
=
\frac18
\left(
I-v_zX_R A+v_xY_R B-v_yZ_R C
\right),
\label{eq:conditional}
\end{equation}
where
\[
A=X_2Z_3,\qquad B=Y_2X_3,\qquad C=Z_2Y_3.
\]
The first two operators commute, are independent, and satisfy
\(AB=-C\). Their four rank-one joint projectors are
\[
P_{\alpha\beta}
=
\frac14(I+\alpha A)(I+\beta B),
\qquad
\alpha,\beta\in\{+1,-1\}.
\]
Equation~\eqref{eq:conditional} becomes
\[
\omega_{R23\mid E}
=
\frac14
\sum_{\alpha,\beta}
\rho_{\alpha\beta}^R\otimes P_{\alpha\beta},
\]
with
\[
\rho_{\alpha\beta}^R
=
\frac12
\left[
I-\alpha v_zX_R
+\beta v_xY_R
+\alpha\beta v_yZ_R
\right].
\]
Each Bloch vector has length \(\norm v_2\le1\), so every
\(\rho_{\alpha\beta}^R\) is a density operator.
This is an explicit separable decomposition.
\end{proof}

\begin{theorem}[C3: sharp one-live-qubit recovery error]
\label{thm:C3}
Under Assumption~\ref{ass:stream}, every deterministic decoder with
\(\Qpeak\le1\) has
\[
\ddiam(\Phi_\pi\mathcal N_3,\id_2)\ge\frac12.
\]
The lower bound permits arbitrary classical storage and arbitrary
single-qubit instruments.
It is attained in \(\Lib_{\mathrm{Cl}}\). Hence
\[
\varepsilon_{1,\mathrm{stream}}(3)=\frac12.
\]
\end{theorem}

\begin{proof}
Before carrier \(2\) can enter a one-slot laboratory, carrier \(1\)
must cease to be a live quantum system. No intermediate quantum
output or external quantum scratch register is permitted.
The complete influence of the first carrier is therefore a classical
measurement history, described by a POVM effect \(E_h\).

Lemma~\ref{lem:firstmeasurement} makes the conditional state of
\(R23\) separable for every such history. All subsequent processing
acts on the observer side, conditioned on classical data.
It preserves separability between \(R\) and the final recovered
output.

A separable two-qubit state has Bell overlap at most \(1/2\):
for a pure product it is at most \(1/2\) by Cauchy--Schwarz,
and convexity extends the bound.
Testing the Bell projector gives recovery trace distance at least
\(1/2\), and therefore the same half-diamond lower bound.

For attainment, read \(Z_1,X_2,Z_3\) sequentially and report the
negative product of their eigenvalues. This is logical \(X\)-readout
by \eqref{eq:logicalreps}. After consuming all three carriers,
allocate and return the corresponding \(X\)-eigenstate.
The unreported quantum channel is
\[
\Delta_X=\frac12(\id+\Ad_X).
\]
Thus
\(\ddiam(\Delta_X,\id)\le1/2\), and the Bell test gives equality.
An \(X\)-readout needs one \(H\); preparation needs \(H\) and at
most one \(Z\). The implementation uses peak one and at most three
unitary gates.
\end{proof}

\begin{corollary}[Robust operational gap]
\label{cor:robustgap}
At step \(3\), information-theoretic recovery is exact, while any
one-slot observer has error at least \(1/2\).

If another consistent emission model has the same access interface
and
\[
\ddiam(\widetilde{\mathcal N}_3,\mathcal N_3)\le\eta,
\]
then every one-slot decoder obeys
\[
\ddiam(\Phi_\pi\widetilde{\mathcal N}_3,\id_2)
\ge\max\{0,1/2-\eta\}.
\]
\end{corollary}

\begin{proof}
The first assertion combines Theorems~\ref{thm:C2}
and~\ref{thm:C3}. The second follows by the triangle inequality and
CPTP contraction under \(\Phi_\pi\).
\end{proof}

The separability proof is stronger than an exact-only obstruction:
it supplies a positive optimized approximate-error bound directly.

%=====================================================================
\section{C4: a matching two-slot decoder}
\label{sec:decoder}
%=====================================================================

Define
\[
P_{12}=Z_1X_2,\qquad Q_{12}=Y_1Z_2.
\]
They commute and have rank-one joint eigenspaces.
Let
\[
B_{12}=H_1S_1^\dagger\CX{1}{2}H_2.
\]
Then
\[
B_{12}P_{12}B_{12}^\dagger=Z_2,
\qquad
B_{12}Q_{12}B_{12}^\dagger=Z_1.
\]

Let the destructive computational outcomes after \(B_{12}\) be
\((t,s)\). Their eigenvalues are
\[
q=(-1)^t,\qquad p=(-1)^s.
\]
Set
\[
R_3=H_3S_3^\dagger,\qquad
C_{ts}=X_3^{1-t}Z_3^{1-s}.
\]
The last product is one classically selected Pauli, up to phase.

The chronological programme is:
\begin{enumerate}[label=\textup{(\arabic*)},leftmargin=*]
\item receive carriers \(1,2\);
\item apply \(H_2,\CX{1}{2},S_1^\dagger,H_1\);
\item destructively read both carriers and retain \(t,s\);
\item receive carrier \(3\);
\item apply \(S_3^\dagger,H_3,C_{ts}\);
\item forget the two record bits and return carrier \(3\).
\end{enumerate}

\begin{theorem}[C4: exact executable recovery]
\label{thm:C4}
This programme recovers the message exactly with every reference.
Each of its four measurement histories has probability \(1/4\),
independent of the message-reference state.

Its resource bounds are
\[
\Qpeak=2,\quad
C_{\mathrm{cl}}\le2,\quad
G\le7,\quad
D\le8,
\]
with no evolution-oracle calls, no auxiliary entanglement, and
\(p_{\mathrm{succ}}=1\).
Consequently,
\[
\varepsilon_{2,\Lib_{\mathrm{Cl}},\mathrm{stream}}(3)=0.
\]
\end{theorem}

\begin{proof}
Put
\(\bra{\beta_{ts}}=\bra{t,s}B_{12}\).
The full branch map, including the inaccessible remnant, is
\[
W_{ts}
=
(C_{ts}R_3\otimes I_{45})
(\bra{\beta_{ts}}\otimes I_{345})V.
\]
The logical representatives are
\(L_X=-P_{12}Z_3\) and \(L_Z=-Q_{12}Y_3\).
Also,
\[
R_3Z_3R_3^\dagger=X_3,
\qquad
R_3Y_3R_3^\dagger=Z_3.
\]
The correction signs therefore give
\[
W_{ts}X=X_3W_{ts},
\qquad
W_{ts}Z=Z_3W_{ts}.
\]

The \(Z\) equation makes the two logical basis inputs have their
corresponding output basis values. The \(X\) equation makes their
remaining environment vectors equal. Hence
\[
W_{ts}\ket\psi=\ket\psi_3\otimes\ket{\chi_{ts}}_{45}
\]
for a fixed branch vector.
The reduction on \(12\) is \(I_4/4\), so
\(\norm{\chi_{ts}}^2=1/4\).
Linearity proves branchwise reference preservation.

There are two live input qubits before the early readout.
Both are consumed before the third arrives. Thereafter one is live.
Four early gates, two late basis-change gates, and one Pauli
correction give seven gates. The simultaneous early readout adds
one round.
\end{proof}

\subsection{A complete finite error table}

For capacities at least one, with the broad one-qubit lower-bound
library and the exact Clifford upper-bound library,
\begin{center}
\begin{tabular}{@{}c|ccc@{}}
\toprule
Emission step & Unrestricted error & One-slot error & Two-slot error\\
\midrule
0 & \(3/4\) & \(3/4\) & \(3/4\)\\
1 & \(3/4\) & \(3/4\) & \(3/4\)\\
2 & \(3/4\) & \(3/4\) & \(3/4\)\\
3 & \(0\) & \(1/2\) & \(0\)\\
\bottomrule
\end{tabular}
\end{center}

The early upper bounds consume supplied radiation and prepare a
maximally mixed output using one recyclable slot.

\subsection{Laboratory peak versus radiation storage}

If the observer starts at step \(3\), a passive supplier initially
holds all three radiation qubits. The two-slot programme then has
\[
\Qpeak=2,\qquad \Qtotal=3.
\]
It has not compressed three stored radiation qubits into two.

With just-in-time emissions and sufficient spacing to finish the
early readout before carrier \(3\) is emitted, there need be no
external buffer and \(\Qtotal=2\).
If carrier \(3\) is emitted while the two early carriers remain
live, it occupies a supplier slot and total storage reaches three.
These are different delivery schedules.

\subsection{Postselection on the benchmark}

Keeping only one outcome \((t,s)\) gives the selective recovered map
\[
\Phi_{ts}\mathcal N_3=\frac14\id_2.
\]
Its trace is \(1/4\), not one. All four corrected histories together
give deterministic recovery.

The peak-one attainment programme is logical readout followed by
preparation. It has recovery error \(1/2\); it is not an exact
subsystem decoder merely because it implements the corresponding
rank-one measurement instrument.

%=====================================================================
\section{A constructive Hayden--Preskill decoder}
\label{sec:HPdecoder}
%=====================================================================

We now change the initial model explicitly.

Let the message have \(k\) qubits and dimension \(m=2^k\).
Let \(B,E\) each have \(b\) qubits, initially in
\(\Bell{\beta}_{BE}\), where \(\beta=2^b\).
Let
\[
U:MB\longrightarrow CD,
\qquad
\gamma=2^c,\quad \delta=2^d,\quad
m\beta=\gamma\delta.
\]
Thus
\[
k+b=c+d.
\]

The observer is given \(ED\) in batch.
It knows an explicit circuit for \(U\), or is explicitly granted
observer-register operations \(U^*\) and, for amplification, \(U^T\).
It has no access to the actual remnant \(C\).

The construction is the conjugate-evolution and Bell-projection
architecture of Yoshida--Kitaev \cite[Sections 4--5]{YK}.
We prove an exact specialization and its ledger below rather than
importing an unquantified scrambling approximation.

\subsection{Preparation and success map}

Allocate two \(k\)-qubit registers \(F,\widehat M\) and prepare
\(\Bell m_{F\widehat M}\).
Apply
\[
U^*:FE\longrightarrow C'D'.
\]
Project \(DD'\) onto \(\Bell\delta_{DD'}\).
This projection can be implemented by inverse Bell preparation
and destructive computational measurement, declaring success only
when all \(2d\) outcomes are zero.

The corresponding linear map from \(ED\) to \(\widehat M C'\) is
\begin{equation}
L=
(\bra{\Phi_\delta}_{DD'}\otimes I_{\widehat M C'})
(I_D\otimes U^*_{FE})
(\ket{\Phi_m}_{F\widehat M}\otimes I_{ED}).
\label{eq:L}
\end{equation}
The successful output channel traces \(C'\), operationally by
destructive readout with unreported outcome.

\subsection{An exact algebraic recovery condition}

The complementary channel is
\[
\mathcal N^c(X)
=
\Tr_D\bigl(U(X\otimes I_B/\beta)U^\dagger\bigr).
\]
Assume
\begin{equation}
\mathcal N^c(X)=\tr(X)\frac{I_C}{\gamma}.
\label{eq:exactdecouple}
\end{equation}
This is a checkable equality on all message matrix units.
It is a hypothesis, not a consequence of unitarity.

For each computational \(C\)-label \(a\), define a Kraus map
\(E_a:M\to ED\) by
\[
(E_a)_{(j,\ell),i}
=
\frac1{\sqrt\beta}U_{(a,\ell),(i,j)}.
\]
Then
\[
\mathcal N(X)=\sum_aE_aXE_a^\dagger,
\qquad
E_a^\dagger E_{a'}=\frac{\delta_{aa'}}{\gamma}I_M.
\]
The maps \(V_a=\sqrt\gamma E_a\) are orthogonal isometries.
Let
\[
S=\sum_aV_aV_a^\dagger
\]
be their range projector in \(ED\).

\begin{theorem}[Exact postselected recovery identity]
\label{thm:HPpost}
Under \eqref{eq:exactdecouple},
\begin{align}
L^\dagger L&=\frac1{m^2}S,
\label{eq:Lnorm}\\
L\mathcal N(X)L^\dagger
&=
\frac1{m^2}X_{\widehat M}\otimes\frac{I_{C'}}{\gamma}.
\label{eq:HPsuccess}
\end{align}
The successful recovered map is therefore
\[
\Phi_{\mathrm{succ}}\mathcal N=\frac1{m^2}\id_M.
\]
Its success probability is \(p=m^{-2}=2^{-2k}\), independent of
every message-reference input.
\end{theorem}

\begin{proof}
From \eqref{eq:L},
\[
L_{(i,a),(j,\ell)}
=
\frac1{\sqrt{m\delta}}\,
U^*_{(a,\ell),(i,j)}
=
\sqrt{\frac{\beta}{m\delta}}\,
(E_a^\dagger)_{i,(j,\ell)}.
\]
Thus
\[
L^\dagger L
=
\frac{\beta}{m\delta}\sum_aE_aE_a^\dagger
=
\frac{\beta}{m\delta\gamma}S
=
\frac1{m^2}S,
\]
using \(m\beta=\gamma\delta\).

Likewise, the \(a\)-th block of \(LE_{a'}\) is
\[
\sqrt{\frac{\beta}{m\delta}}\,
\frac{\delta_{aa'}}{\gamma}I_M.
\]
Summing over \(a'\) proves
\[
L\mathcal N(X)L^\dagger
=
\frac{\beta}{m\delta\gamma^2}
X\otimes I_{C'}
=
\frac1{m^2}X\otimes\frac{I_{C'}}{\gamma}.
\]
All identities are linear, so tensoring with a reference preserves them.
\end{proof}

For a generic \(U\), equation~\eqref{eq:L} still defines a selective
map, but neither constant success probability nor exact conditional
recovery is presumed. A different fidelity or decoupling certificate
must then be supplied.

%=====================================================================
\section{C5: amplification and the single-copy ledger}
\label{sec:amplification}
%=====================================================================

\subsection{Coherent projections}

Before destructive readout, define the isometry
\[
T:ED\longrightarrow DC'D'\widehat M,
\qquad
T=(I_D\otimes U^*)
(\ket{\Phi_m}_{F\widehat M}\otimes I_{ED}).
\]
Let
\[
P=TT^\dagger,
\qquad
Q=\ketbra{\Phi_\delta}{\Phi_\delta}_{DD'}
\otimes I_{C'\widehat M}.
\]
Then
\[
T^\dagger QT=L^\dagger L=\frac1{m^2}S.
\]

The reflection about \(P\) is executable as
\[
I-2P
=
(I_D\otimes U^*)
\left[
I-2\bigl(\ketbra{\Phi_m}{\Phi_m}_{F\widehat M}
\otimes I_{DE}\bigr)
\right]
(I_D\otimes U^T).
\]
The inverse of \(U^*\) is \(U^T\), not \(U^\dagger\) in general.

\begin{theorem}[C5: uniform-angle coherent amplification]
\label{thm:C5}
Assume \eqref{eq:exactdecouple} and access to the two reflections
above. Put
\[
\theta=\arcsin(1/m).
\]
After \(r\) iterations of
\[
-(I-2P)(I-2Q),
\]
followed by the final Bell test, the success probability is
\[
s_r=\sin^2((2r+1)\theta).
\]
The successful recovered map is \(s_r\id_M\).

If the success flag is forgotten while the failure quantum output
is retained, the complete recovered channel has error at most
\(1-s_r\).

For \(k=1\), one iteration gives \(s_1=1\), hence deterministic exact
recovery. For general \(k\ge1\), choosing a nonnegative integer
\(r\) nearest to
\[
\frac{\pi}{4\theta}-\frac12
\]
gives \(1-s_r\le m^{-2}\) and \(r=O(m)\).
\end{theorem}

\begin{proof}
For a unit vector \(v\in\supp S\), let \(a_v=Tv\).
Equation~\eqref{eq:Lnorm} gives
\[
PQP\,a_v=\frac1{m^2}a_v.
\]
Define
\[
g_v=\frac{Qa_v}{\sin\theta},
\qquad
b_v=\frac{(I-Q)a_v}{\cos\theta}.
\]
These are orthonormal, and
\[
a_v=\sin\theta\,g_v+\cos\theta\,b_v.
\]
The two reflections preserve their span and their product rotates
the angle by \(2\theta\). The same angle applies to every \(v\)
in the encoded support. Therefore the success component after
\(r\) iterations is
\[
\frac{\sin((2r+1)\theta)}{\sin\theta}\,Qa_v.
\]
Using Theorem~\ref{thm:HPpost} gives success map \(s_r\id_M\),
including arbitrary references.

The failure map has constant trace \(1-s_r\). When this is nonzero,
divide it by that scalar to obtain a CPTP channel \(\mathcal F_r\).
The complete output channel is
\[
s_r\id_M+(1-s_r)\mathcal F_r.
\]
Half-diamond distance between channels is at most one, giving the
error bound.

When \(m=2\), \(\theta=\pi/6\), and \(r=1\) gives angle \(\pi/2\).
For the nearest-integer choice, the final angle differs from
\(\pi/2\) by at most \(\theta\). Hence failure is at most
\(\sin^2\theta=m^{-2}\).
\end{proof}

The last result is an exact-decoupling specialization.
It is not a proof that arbitrary evolution has a uniform Grover
angle or the displayed worst-case error.

\subsection{Register accounting}

The batch input \(ED\) occupies \(b+d\) qubits.
Appending \(F,\widehat M\) adds \(2k\).
Applying \(U^*\) merely reassigns the \(F,E\) factors into
\(C',D'\); it does not allocate them again.
At the coherent stage the live factors are
\[
D,\quad D',\quad C',\quad \widehat M,
\]
with total
\[
d+d+c+k=b+d+2k.
\]

\begin{proposition}[Postselection and amplification ledgers]
\label{prop:HPledger}
In an ancilla-free reflection implementation, the postselected
construction and every fixed-\(r\) amplification construction have
\[
\Qpeak=\Qtotal=b+d+2k.
\]
There is no external buffer in this batch convention.

The postselected construction uses one \(U^*\) call and no \(U^T\)
call. The amplified construction uses
\[
n_{U^*}=r+1,\qquad n_{U^T}=r.
\]
No call acts on the actual remnant. Original-evolution calls satisfy
\(n_U=n_{U^\dagger}=0\) when the stated conjugate operations are the
native oracle services.

At the end, destructive readout consumes \(DD'C'\), a total of
\(2d+c\) qubits, and returns the \(k\)-qubit \(\widehat M\).
Retaining all raw readout bits and a success flag costs at most
\(2d+c+1\) classical bits.
\end{proposition}

\begin{proof}
The displayed live register list accounts for every supplied and
allocated factor. Reflections preserve those factors.
Each \(P\)-reflection uses one \(U^T\) and one \(U^*\);
the initial preparation uses one \(U^*\).
The final readouts and output consume or return every factor.
\end{proof}

\subsection{Gate-library-dependent reflection costs}

Let \(g_U,D_U\) price the supplied \(U^*\) and \(U^T\) circuits.
Let
\[
Z_0(n)=I-2\ketbra{0^n}{0^n}
\]
have a declared ancilla-free implementation of gate count \(z(n)\)
and depth \(d_0(n)\).

This is an additional implementation assumption. It is not a
constant-cost elementary gate for arbitrary \(n\).

A Bell-subspace reflection on two \(n\)-qubit registers consists of
inverse Bell preparation, \(Z_0(2n)\), and Bell preparation.
It has count \(4n+z(2n)\) and depth at most \(4+d_0(2n)\).

\begin{corollary}[Compiled amplification costs]
\label{cor:HPgates}
Under these library assumptions, a fixed-\(r\) programme has
\[
G
\le
2k+(2r+1)g_U
+r\bigl[4k+4d+z(2k)+z(2d)\bigr]+2d,
\]
and
\[
D
\le
5+(2r+1)D_U
+r\bigl[8+d_0(2k)+d_0(2d)\bigr].
\]
The final measurements of \(DD'\) and \(C'\) may share one round.

No additional coherent success-flag qubit is required for these
direct reflections. If a different implementation computes a
predicate into a quantum flag, that flag and all predicate workspace
must be added to its ledger.
\end{corollary}

\begin{proof}
Initial Bell preparation costs \(2k\) gates and two rounds.
There is an initial conjugate-evolution circuit.
Each iteration contains two evolution circuits and the two
Bell-subspace reflections.
The terminal Bell-basis change costs \(2d\) gates and two rounds;
the terminal destructive readouts add one round.
\end{proof}

If only an unknown oracle for \(U\) is supplied, conjugating its
matrix entries is not an automatic permitted operation.
For an explicit circuit, conjugate gates and reversed adjoints
can be priced in the declared library.

\subsection{A fully explicit one-message Hayden--Preskill example}

Take \(k=b=c=d=1\) and
\[
U\ket a_M\ket j_B=\ket j_C\ket a_D.
\]
Thus \(U\) is SWAP, initially \(BE\) is a Bell pair, and
\[
\mathcal N(\rho)=\frac{I_E}{2}\otimes\rho_D.
\]
The complement is \(I_C/2\), so exact decoupling holds.

SWAP has a three-CNOT implementation.
Also,
\[
Z_0(2)=X_1X_2\,\CZ{1}{2}\,X_1X_2,
\]
which costs five gates and no ancilla.
Therefore:
\begin{center}
\small
\begin{tabular}{@{}lrrrrr@{}}
\toprule
Programme & Peak & \(G\) bound & \(D\) bound
& \(n_{U^*}\) & \(n_{U^T}\)\\
\midrule
Conjugate postselection & 4 & 7 & 8 & 1 & 0\\
One-iteration amplification & 4 & 31 & 32 & 2 & 1\\
Direct recovery of this example & 2 & 0 & 1 & 0 & 0\\
\bottomrule
\end{tabular}
\end{center}

Postselection succeeds with probability \(1/4\); one iteration is
deterministic and exact. Direct recovery simply consumes \(E\)
and returns \(D\). The table prices the chosen published architecture,
not an optimum for this deliberately simple evolution.

\subsection{Why destructive retries are not supplied for free}

A success map \(p\id\) does not determine what remains after failure.
A destructive Bell test generally changes the unique available
radiation state. A failed attempt cannot be retried on the original
unknown message without an additional recovery or state-supply
assumption.

The coherent amplification programme avoids this issue by preserving
all registers until its final test. Its inverse calls, reflections,
and retained registers are explicitly charged.

%=====================================================================
\section{C6: implementation, model error, and radiation loss}
\label{sec:errors}
%=====================================================================

\begin{theorem}[C6: compatible complete-channel error budgets]
\label{thm:C6}
Suppose
\[
\ddiam(\mathcal D\mathcal N,\id_M)
\le\epsilon_{\mathrm{rec}},
\quad
\ddiam(\widetilde{\mathcal D},\mathcal D)
\le\epsilon_{\mathrm{impl}},
\quad
\ddiam(\widetilde{\mathcal N},\mathcal N)
\le\epsilon_{\mathrm{model}}.
\]
Then
\[
\ddiam(\widetilde{\mathcal D}\widetilde{\mathcal N},\id_M)
\le
\epsilon_{\mathrm{rec}}
+\epsilon_{\mathrm{impl}}
+\epsilon_{\mathrm{model}}.
\]

For compatible complete-channel steps with individual errors
\(\delta_j\), the implementation error is at most
\(\sum_j\delta_j\).
\end{theorem}

\begin{proof}
Insert
\(\widetilde{\mathcal D}\mathcal N\) and
\(\mathcal D\mathcal N\), use the triangle inequality, and contract
under CPTP composition. The stepwise statement follows by
telescoping the channel products.
\end{proof}

For adaptive decoding, retain the classical history in the complete
step channels. A uniform error bound for every controlled branch
bounds the entire controlled channel. A bound for a normalized
postselected branch is not a complete-channel error bound.

For the two-slot benchmark decoder, seven unitary gates and two
single-qubit destructive readouts give
\[
\epsilon_{\mathrm{impl}}
\le7\delta_g+2\delta_m
\]
when these are uniform complete-channel error bounds.
This assumes compatible interfaces and no unmodelled correlated
device memory. Radiation loss and encoding uncertainty are separate
channel errors, not automatically gate noise.

\subsection{A specified flagged whole-radiation erasure}

\begin{definition}[Flagged erasure model]
With probability \(\ell\), independent of the message, all three
accessible radiation carriers are lost and replaced by a fixed state.
A classical flag reports the erasure:
\[
\mathcal N_{3,\ell}(X)
=
(1-\ell)\mathcal N_3(X)\otimes\ketbra{\mathrm{ok}}{\mathrm{ok}}
+
\ell\,\tr(X)\sigma_{\mathrm{lost}}
\otimes\ketbra{\mathrm{lost}}{\mathrm{lost}}.
\]
This models complete flagged erasure, not arbitrary partial radiation
loss.
\end{definition}

\begin{proposition}[Exact flagged-erasure recovery error]
\label{prop:loss}
The unrestricted optimal error for this model is
\[
\inf_{\mathcal D}
\ddiam(\mathcal D\mathcal N_{3,\ell},\id_2)
=\frac{3\ell}{4}.
\]
A two-slot decoder attains it: recover on the \(\mathrm{ok}\) branch
and prepare \(I_2/2\) on the lost branch.
\end{proposition}

\begin{proof}
On a logical Bell input, the good branch has Bell overlap at most
one. The erased branch produces a constant output with Bell overlap
\(1/4\). The total overlap is at most \(1-3\ell/4\), giving the
lower bound.

The stated decoder implements
\((1-\ell)\id+\ell\Tdep\).
Lemma~\ref{lem:constant} and homogeneity give error \(3\ell/4\).
\end{proof}

\subsection{Uncertainty about the encoding}

\begin{proposition}[An unknown logical Pauli is a separate obstruction]
\label{prop:unknown}
Suppose the observer is given radiation from one of the four channels
\[
\mathcal N_3\Ad_P,\qquad P\in\{I,X,Y,Z\},
\]
but no information identifying \(P\). For a single decoder required
to work uniformly,
\[
\inf_{\mathcal D}\max_P
\ddiam(\mathcal D\mathcal N_3\Ad_P,\id_2)=\frac34.
\]
This remains true with unlimited laboratory memory.
\end{proposition}

\begin{proof}
Averaging the four input Paulis gives \(\Tdep\).
The averaged decoded channel is constant, so its error is at least
\(3/4\) by Lemma~\ref{lem:constant}.
Convexity of the diamond norm bounds that averaged error above by
the maximum of the four individual errors.
Ignoring radiation and preparing \(I_2/2\) attains \(3/4\).
\end{proof}

Knowledge, coherent circuit access, radiation loss, and workspace
therefore price different obstructions.

%=====================================================================
\section{Operational thresholds and completion times}
\label{sec:thresholds}
%=====================================================================

For a finite emission horizon \(T\), use the convention
\(\inf\varnothing=+\infty\).
Define
\[
t_{\mathrm{IT}}(\epsilon)
=
\inf\set{t\in\{0,\ldots,T\}:\epsIT(t)\le\epsilon},
\]
and
\[
t_{\mathrm{op}}(N,G_0,\epsilon)
=
\inf\set{
t:
\exists\pi,\ 
\Qpeak(\pi)\le N,\ G(\pi)\le G_0,\ 
\ddiam(\Phi_\pi\mathcal N_t,\id_M)\le\epsilon
}.
\]
The access convention is part of both definitions.

\begin{theorem}[Certified thresholds for the three-step model]
\label{thm:thresholds}
Within the declared horizon \(T=3\):
\begin{enumerate}[label=\textup{(\roman*)}]
\item for \(0\le\epsilon<3/4\),
\(t_{\mathrm{IT}}(\epsilon)=3\);
\item for \(0\le\epsilon<1/2\) and any gate budget,
\(t_{\mathrm{op}}(1,G_0,\epsilon)=+\infty\);
\item for \(N\ge2\), \(G_0\ge7\), and \(0\le\epsilon<3/4\),
\(t_{\mathrm{op}}(N,G_0,\epsilon)=3\);
\item for \(G_0\ge3\) and \(1/2\le\epsilon<3/4\),
\(t_{\mathrm{op}}(1,G_0,\epsilon)=3\).
\end{enumerate}
\end{theorem}

\begin{proof}
The early prefixes have unrestricted error \(3/4\), so no programme
can cross these targets before step \(3\).
At step \(3\), use Theorems~\ref{thm:C3} and~\ref{thm:C4}.
\end{proof}

The infinite value means no permitted programme reaches the target
within the specified horizon. It is not a statement about every
possible extension of the emission model.

\subsection{A physical clock only after declaring durations}

Let physical availability times be
\(a_1\le a_2\le a_3\).
Assume:
\begin{itemize}[nosep]
\item each gate or simultaneous destructive readout round takes
time \(\tau>0\);
\item transfers and allocation are instantaneous in this declared
clock;
\item classical feedback latency is included in the relevant round;
\item the supplier buffers any emitted carrier not yet accepted.
\end{itemize}

The early decoder has four gate rounds and one readout round.
Its completion is
\[
T_{\mathrm{early}}=a_2+5\tau.
\]
The late part has at most three gate rounds.

\begin{proposition}[Completion and storage of the stated schedule]
\label{prop:deadline}
The two-slot programme has worst-history completion time
\[
T_{\mathrm{finish}}
=
\max\{a_3,a_2+5\tau\}+3\tau.
\]
If \(a_3\ge a_2+5\tau\), its total observer storage peak is two.
If \(a_3<a_2+5\tau\), a supplier holds carrier \(3\) while the
laboratory still holds the first two, so total storage reaches three.
A deadline at least the displayed completion time is sufficient for
this programme.
\end{proposition}

\begin{proof}
The early gates cannot start before the second carrier arrives.
The third can be accepted after both its availability and completion
of the early readout. The late gate bound gives the formula.
The storage statements inspect the same live intervals.
\end{proof}

This is a certificate for one schedule, not an unrestricted runtime
lower bound. A deadline earlier than this programme's completion
does not prove every decoder impossible.
The memory-error obstruction does prove impossibility for one-slot
observers at targets below \(1/2\), independent of deadline.

Neither \(t_{\mathrm{IT}}\), \(t_{\mathrm{op}}\), nor these physical
times is identified with a Page time.

%=====================================================================
\section{Approximate recovery metrics and interpretive boundaries}
\label{sec:interpretation}
%=====================================================================

\subsection{A dimension-priced Choi-to-diamond conversion}

\begin{lemma}[Entanglement fidelity is not dimension-free diamond control]
\label{lem:ChoiDiamond}
Let \(\Phi\) be a CPTP channel on a \(d\)-dimensional message, and let
\[
\omega_\Phi=(\id\otimes\Phi)\ketbra{\Phi_d}{\Phi_d}.
\]
If
\[
f=\bra{\Phi_d}\omega_\Phi\ket{\Phi_d},
\]
then
\[
\ddiam(\Phi,\id)\le\min\{1,d\sqrt{1-f}\}.
\]
\end{lemma}

\begin{proof}
The trace distance from a density operator to the pure Bell state
is at most \(\sqrt{1-f}\).
Every pure message-reference input, with reference compressed to
dimension \(d\), is a filtered Bell vector
\((A\otimes I)\ket{\Phi_d}\), with
\(\norm A_\infty^2\le d\).
Applying this filter to the normalized Choi difference bounds its
trace norm by \(d\) times the Choi trace norm.
Convexity handles mixed inputs.
The characterization of the diamond norm on reference-extended
states gives the result. Channel half-diamond distance is also at
most one \cite[Chapter 3]{Watrous}.
\end{proof}

Thus a state-specific or maximally entangled-input recovery estimate
must not be advertised as dimension-free worst-case recovery.
For the exact constructions here, channel identities avoid this
conversion loss.

\subsection{Complexity and gravitational statements}

Harlow--Hayden analyzes computational restrictions in particular
radiation-distillation thought experiments \cite{HH}.
Our low-memory Clifford programme is not a generic decoding-complexity
theorem and does not overturn those restrictions.
The amplification count \(O(2^k)\) is a message-dimension dependence
in the declared construction, not a universal lower bound.

Clifford Hayden--Preskill algorithms use special operator structure
and measurement feedback \cite{YoshidaClifford}.
The tractability of such dynamics is not a proof of efficient recovery
for unspecified black-hole evolution.

Replica-wormhole calculations address fine-grained entropy in
specified gravitational settings \cite{Replica}.
An entropy calculation is not a register-level recovery programme.
None of our emission thresholds is inferred from an island formula.

\subsection{Conditional unknown-strategy transfer}

The primary results use specified Born semantics.
A conditional transfer can be made only after purifying and globally
accounting for the complete experiment, including the remnant,
reference, and undelivered carriers.

Under En02-A's admissibility and global diagonal-faithfulness
hypotheses, its outcome-rigidity theorem and projective-update
corollary apply when each readout of \(s\) factors from a global
\(g\)-qubit state satisfies
\[
g+s\le N_{\mathrm{glob}}.
\]
Induction then transfers that finite programme's histories and
positive residuals to specified Born execution.

This global record budget is not the laboratory peak two or the
Hayden--Preskill ledger \(b+d+2k\).
No unrestricted finite-capacity uniqueness claim is added.

%=====================================================================
\section{Status and open extensions}
\label{sec:status}
%=====================================================================

\begin{center}
\small
\begin{tabular}{@{}p{0.23\linewidth}p{0.67\linewidth}@{}}
\toprule
Result & Established scope\\
\midrule
C1 & Sequential finite-program soundness with explicit supplier storage\\
C2 & Exact \(3/4,3/4,3/4,0\) availability timeline\\
C3 & Optimized one-slot error \(1/2\), with unrestricted classical memory\\
C4 & Exact two-slot recovery, seven gates, two record bits\\
C5 & Exact-decoupling postselection and uniform-angle amplification,
with conjugate-operation and reflection costs\\
C6 & Complete-channel error addition and specified flagged-erasure
optimum\\
Thresholds & Declared three-step horizon and gate-budget sufficient bounds\\
Deadline & Completion certificate for the stated timed schedule\\
\bottomrule
\end{tabular}
\end{center}

\begin{openproblem}[Beyond the finite benchmark]
Determine quantitative memory-error trade-offs for explicitly
specified longer emission circuits, non-Clifford dynamics, or random
ensembles with a declared distribution and depth.
No generic scrambling or ensemble probability bound is supplied here.
\end{openproblem}

\begin{openproblem}[Simultaneous memory, oracle, and deadline optimality]
For a specified evolution and oracle interface, optimize recovery
error jointly over workspace, query count, classical records, and
completion time. Separate efficient circuit description from physically
available coherent oracle access.
\end{openproblem}

\begin{remark}[Evidence boundary and retained external statuses]
The mathematical proofs are the arguments in this manuscript.
The appendix contains finite exact checks, not an execution log or
formal verification certificate.

No closing of O.1, restoration of bulk symmetry, discharge of Route B,
release of the XVI-N insertion, or opening of XV-B is claimed.
No quantum coefficient or field-to-qubit preparation is admitted.
En02-C is not a solution of the information paradox.
\end{remark}

%=====================================================================
\appendix
\section{Standalone exact finite checks}
\label{app:code}
%=====================================================================

The following standard-library Python source can be copied to
\code{en02_c_checks.py}. It uses Gaussian integers and exact rational
normalizations. Hadamards are applied without their \(1/\sqrt2\)
factor, and the omitted factors are tracked.

The checks inspect all message matrix units for the specified
third-prefix channel, its early reductions, the corrected streaming
branches, and the one-message SWAP recovery and amplification example.
The live-register checker distinguishes laboratory occupancy from
supplier storage. No execution is asserted by this source file.

\begin{ShellBlock}
python en02_c_checks.py
\end{ShellBlock}

\begin{CodeBlock}
"""En02-C: exact finite checks.

Standard library only. No execution log is supplied.
The manuscript's general proofs do not depend on running this file.
"""

from fractions import Fraction as F
from itertools import product

ZERO = (0, 0)
ONE = (1, 0)


class CheckFailure(Exception):
    pass


class CapacityRefusal(Exception):
    pass


def need(condition, message):
    if not condition:
        raise CheckFailure(message)


def add(a, b):
    return (a[0] + b[0], a[1] + b[1])


def neg(a):
    return (-a[0], -a[1])


def mul(a, b):
    return (a[0] * b[0] - a[1] * b[1],
            a[0] * b[1] + a[1] * b[0])


def conj(a):
    return (a[0], -a[1])


def sq(a):
    return a[0] * a[0] + a[1] * a[1]


def bits(index, n):
    return tuple((index >> (n - 1 - j)) & 1 for j in range(n))


def index_of(bs):
    out = 0
    for b in bs:
        out = 2 * out + b
    return out


def nq(v):
    size = len(v)
    need(size > 0 and (size & (size - 1)) == 0,
         "state dimension is not a power of two")
    return size.bit_length() - 1


def gate(v, op):
    """Unnormalized H; caller tracks the number of H gates."""
    n = nq(v)
    kind = op[0]
    out = [ZERO] * len(v)

    if kind == "H":
        q = op[1]
        for j, amp in enumerate(v):
            bs = list(bits(j, n))
            old = bs[q]
            for new in (0, 1):
                bs[q] = new
                term = neg(amp) if old and new else amp
                t = index_of(bs)
                out[t] = add(out[t], term)
        return out

    for j, amp in enumerate(v):
        bs = list(bits(j, n))
        term = amp

        if kind == "X":
            bs[op[1]] ^= 1
        elif kind == "Y":
            q = op[1]
            term = mul(amp, (0, 1) if bs[q] == 0 else (0, -1))
            bs[q] ^= 1
        elif kind == "Z":
            if bs[op[1]]:
                term = neg(amp)
        elif kind == "S":
            if bs[op[1]]:
                term = mul(amp, (0, 1))
        elif kind == "SD":
            if bs[op[1]]:
                term = mul(amp, (0, -1))
        elif kind == "CX":
            if bs[op[1]]:
                bs[op[2]] ^= 1
        elif kind == "CZ":
            if bs[op[1]] and bs[op[2]]:
                term = neg(amp)
        elif kind == "Z0":
            if all(bs[q] == 0 for q in op[1:]):
                term = neg(amp)
        else:
            raise CheckFailure("unknown gate")

        target = index_of(bs)
        out[target] = add(out[target], term)
    return out


def circuit(v, ops, h=0):
    for op in ops:
        v = gate(v, op)
        h += op[0] == "H"
    return v, h


def project(v, fixed, survivors):
    n = nq(v)
    need(set(fixed).isdisjoint(survivors), "overlapping coordinates")
    need(set(fixed) | set(survivors) == set(range(n)),
         "unaccounted coordinates")
    out = [ZERO] * (1 << len(survivors))
    for j, amp in enumerate(v):
        bs = bits(j, n)
        if all(bs[q] == b for q, b in fixed.items()):
            out[index_of(tuple(bs[q] for q in survivors))] = amp
    return out


def reduced_matrix(v, w, survivors, h):
    """Reduction of |v><w| divided by 2**h."""
    n = nq(v)
    need(nq(w) == n, "different state dimensions")
    env = tuple(q for q in range(n) if q not in survivors)
    size = 1 << len(survivors)
    groups_v = {}
    groups_w = {}
    for j in range(1 << n):
        bs = bits(j, n)
        a = index_of(tuple(bs[q] for q in survivors))
        e = index_of(tuple(bs[q] for q in env))
        groups_v[a, e] = v[j]
        groups_w[a, e] = w[j]
    out = [[ZERO for _ in range(size)] for _ in range(size)]
    for a in range(size):
        for b in range(size):
            value = ZERO
            for e in range(1 << len(env)):
                value = add(value,
                            mul(groups_v[a, e], conj(groups_w[b, e])))
            out[a][b] = (F(value[0], 1 << h),
                         F(value[1], 1 << h))
    return out


def pauli_matrix(word, minus=False):
    n = len(word)
    size = 1 << n
    out = [[ZERO for _ in range(size)] for _ in range(size)]
    for col in range(size):
        v = [ZERO] * size
        v[col] = ONE
        for q, letter in enumerate(word):
            if letter != "I":
                v = gate(v, (letter, q))
        for row, amp in enumerate(v):
            out[row][col] = neg(amp) if minus else amp
    return out


BELL_PREP = (
    ("H", 0), ("CX", 0, 3),
    ("H", 2), ("CX", 2, 4),
)

ENCODE_BACK = (
    ("Y", 1),
    ("CX", 2, 1), ("CX", 0, 1),
    ("H", 0), ("H", 2),
    ("S", 0), ("S", 2),
    ("CZ", 0, 1), ("CZ", 1, 2),
)

EARLY_DECODER = (
    ("H", 1), ("CX", 0, 1), ("SD", 0), ("H", 0),
)


def encode_basis(i, injection_only=False):
    v = [ZERO] * 32
    v[8 * i] = ONE  # message is physical position 2
    ops = BELL_PREP + ENCODE_BACK
    if injection_only:
        ops = ops[:-1]  # W_2 supplies the final CZ
    return circuit(v, ops)


def check_prefix_channels():
    encoded = [encode_basis(i) for i in (0, 1)]
    need(all(h == 4 for _, h in encoded), "encoder H count changed")
    LX = pauli_matrix("ZXZ", minus=True)
    LY = pauli_matrix("XYX", minus=True)
    LZ = pauli_matrix("YZY", minus=True)

    for i, j in product((0, 1), repeat=2):
        v, h = encoded[i]
        w, _ = encoded[j]

        for survivors in ((), (0,), (0, 1)):
            matrix = reduced_matrix(v, w, survivors, h)
            size = len(matrix)
            for a in range(size):
                for b in range(size):
                    expected = (F(1, size), 0) if i == j and a == b else ZERO
                    need(matrix[a][b] == expected,
                         "early prefix depends on message")

        matrix = reduced_matrix(v, w, (0, 1, 2), h)
        for a in range(8):
            for b in range(8):
                if i == j:
                    sign = 1 if i == 0 else -1
                    base = ONE if a == b else ZERO
                    value = add(base, (sign * LZ[a][b][0],
                                       sign * LZ[a][b][1]))
                else:
                    factor = (0, 1) if (i, j) == (0, 1) else (0, -1)
                    value = add(LX[a][b], mul(factor, LY[a][b]))
                expected = (F(value[0], 8), F(value[1], 8))
                need(matrix[a][b] == expected,
                     "third-prefix matrix-unit certificate failed")

    # Before W_2, carrier 1 has the same private marginal.
    injected = [encode_basis(i, injection_only=True) for i in (0, 1)]
    for i, j in product((0, 1), repeat=2):
        matrix = reduced_matrix(injected[i][0], injected[j][0],
                                (0,), injected[i][1])
        for a in range(2):
            for b in range(2):
                expected = (F(1, 2), 0) if i == j and a == b else ZERO
                need(matrix[a][b] == expected,
                     "first emission is not private")


def check_streaming_branches():
    encoded = [encode_basis(i) for i in (0, 1)]
    early = [circuit(v, EARLY_DECODER, h) for v, h in encoded]

    for t, s in product((0, 1), repeat=2):
        residuals = []
        for raw, h in early:
            branch = project(raw, {0: t, 1: s}, (2, 3, 4))
            branch, h = circuit(branch, (("SD", 0), ("H", 0)), h)
            if 1 - s:
                branch = gate(branch, ("Z", 0))
            if 1 - t:
                branch = gate(branch, ("X", 0))
            residuals.append((branch, h))

        b0, h = residuals[0]
        b1, h1 = residuals[1]
        need(h == h1 == 7, "streaming normalization changed")
        e0 = project(b0, {0: 0}, (1, 2))
        e1 = project(b1, {0: 1}, (1, 2))
        wrong0 = project(b0, {0: 1}, (1, 2))
        wrong1 = project(b1, {0: 0}, (1, 2))
        need(all(a == ZERO for a in wrong0 + wrong1),
             "wrong logical branch value")
        need(e0 == e1, "branch loses logical coherence")
        need(F(sum(sq(a) for a in e0), 1 << h) == F(1, 4),
             "branch probability is not one quarter")


def swap_ops(a, b):
    return (("CX", a, b), ("CX", b, a), ("CX", a, b))


def bell_reflection(a, b):
    # Inverse Bell preparation, all-zero phase, Bell preparation.
    return (("CX", a, b), ("H", a), ("Z0", a, b),
            ("H", a), ("CX", a, b))


def check_swap_HP(iterations):
    # Positions: R, C, D, E, F, recovered M.
    # After the physical SWAP, prepare Bell pairs RD, CE, F M.
    v = [ZERO] * 64
    v[0] = ONE
    prep = (
        ("H", 0), ("CX", 0, 2),
        ("H", 1), ("CX", 1, 3),
        ("H", 4), ("CX", 4, 5),
    )
    v, h = circuit(v, prep)
    v, h = circuit(v, swap_ops(4, 3), h)  # U* on F,E

    for _ in range(iterations):
        # Q-reflection on D,D', where D' is now position E=3.
        v, h = circuit(v, bell_reflection(2, 3), h)
        # P-reflection: U^T, auxiliary Bell reflection, U*.
        v, h = circuit(v, swap_ops(4, 3), h)
        v, h = circuit(v, bell_reflection(4, 5), h)
        v, h = circuit(v, swap_ops(4, 3), h)

    # Final Bell measurement on D,D'.
    v, h = circuit(v, (("CX", 2, 3), ("H", 2)), h)
    success = project(v, {2: 0, 3: 0}, (0, 1, 4, 5))
    p = F(sum(sq(a) for a in success), 1 << h)
    expected = F(1, 4) if iterations == 0 else F(1)
    need(p == expected, "wrong HP success probability")

    # On success, reference and recovered message are a Bell pair.
    # Survivors are ordered R,C,C',M.
    for j, amp in enumerate(success):
        bs = bits(j, 4)
        if bs[0] != bs[3]:
            need(amp == ZERO, "HP output not Bell-correlated")
    e0 = project(success, {0: 0, 3: 0}, (1, 2))
    e1 = project(success, {0: 1, 3: 1}, (1, 2))
    need(e0 == e1, "HP success loses Bell coherence")
    return p


def check_live_ledger(capacity):
    """Snapshot delivery: supplier initially holds all three carriers."""
    lab = set()
    supplier = {"q1", "q2", "q3"}
    peak = 0
    total_peak = len(supplier)
    gate_count = 0
    depth = 0

    instructions = (
        ("receive", ("q1",)),
        ("receive", ("q2",)),
        ("gate", ("q2",)),
        ("gate", ("q1", "q2")),
        ("gate", ("q1",)),
        ("gate", ("q1",)),
        ("measure", ("q1", "q2")),
        ("receive", ("q3",)),
        ("gate", ("q3",)),
        ("gate", ("q3",)),
        ("gate", ("q3",)),  # worst-history correction
        ("return", ("q3",)),
    )
    for kind, names in instructions:
        names = set(names)
        if kind == "receive":
            need(names <= supplier, "carrier delivered twice or absent")
            if len(lab | names) > capacity:
                raise CapacityRefusal("laboratory capacity exceeded")
            supplier -= names
            lab |= names
        elif kind == "gate":
            need(names <= lab, "gate uses absent qubit")
            gate_count += 1
            depth += 1
        elif kind == "measure":
            need(names <= lab, "measurement uses absent qubit")
            depth += 1
            lab -= names
        elif kind == "return":
            need(names <= lab, "return uses absent qubit")
            lab -= names
        else:
            raise CheckFailure("unknown ledger instruction")
        peak = max(peak, len(lab))
        total_peak = max(total_peak, len(lab) + len(supplier))

    need(not lab and not supplier, "unconsumed carrier")
    need((peak, total_peak, gate_count, depth) == (2, 3, 7, 8),
         "incorrect resource ledger")
    return peak, total_peak, gate_count, depth


def main():
    check_prefix_channels()
    check_streaming_branches()
    need(check_swap_HP(0) == F(1, 4), "postselection check failed")
    need(check_swap_HP(1) == 1, "one-iteration amplification failed")
    ledger = check_live_ledger(2)
    try:
        check_live_ledger(1)
    except CapacityRefusal:
        pass
    else:
        raise CheckFailure("missing capacity refusal")

    print("Exact finite matrix-unit and branch checks: PASS")
    print("Snapshot ledger (lab,total,gates,depth):", ledger)
    print("No general theorem or physical model is certified by this pass.")


if __name__ == "__main__":
    main()
\end{CodeBlock}

\section{Submission and proof-obligation ledger}
\label{app:ledger}

\begin{enumerate}[label=\textup{(\arabic*)},leftmargin=*]
\item \textbf{New emission data.}
The injection \(J_0\), the remnant gate in \(W_2\), and the three
emission maps are explicit. Their dimensions and consistency are
part of the model, not inherited black-hole dynamics.

\item \textbf{Whole-channel correctness.}
The accessible channels are identified on all matrix units.
Branch intertwiners preserve a common environment vector and
therefore logical coherence with every reference.

\item \textbf{Approximate lower bound.}
The one-slot bound applies directly to the conditional
logical-reference states. No approximate off-code uniqueness is
assumed.

\item \textbf{Storage.}
Batch early radiation, supplier buffers, duplicate registers,
recovered output, and quantum flags are counted in their respective
ledgers. Undelivered radiation is not deleted by a change of notation.

\item \textbf{Conjugate access.}
\(U^*\) and its inverse \(U^T\) are explicit granted operations.
No generic conversion from an unknown \(U\)-oracle is claimed.

\item \textbf{Amplification assumptions.}
Uniform angles follow from exact decoupling and the proved support
identity \(L^\dagger L=m^{-2}S\). They are not presumed for arbitrary
evolution.

\item \textbf{Reflection compilation.}
Large all-zero phase operations have a declared implementation cost.
If their implementation uses workspace, that workspace must be added.
The one-message example needs only two-qubit phases and has an
explicit ancilla-free realization.

\item \textbf{Single-copy restrictions.}
A selective map is not renormalized into a deterministic channel.
Destructive failures are not supplied with free retries.

\item \textbf{Noise.}
Complete-channel gate errors, independent flagged erasure, and
encoding uncertainty are separate models. A selected-state fidelity
does not replace a diamond-error certificate.

\item \textbf{Thresholds and clocks.}
The finite emission horizon, gate budget, access convention,
delivery times, and gate durations are declared. None is a Page-time
or evaporation-time identification.

\item \textbf{Computational evidence.}
The source is supplied without an execution log. The proofs do not
depend on sampled tests, numerical fitting, or an unavailable package.
\end{enumerate}

%=====================================================================
\section*{Declarations}
%=====================================================================

\paragraph{Competing interests.}
The author declares no competing interests.

\paragraph{Funding.}
No specific grant supported this work.

\paragraph{Author contribution.}
N.C.\ developed the finite emission model, resource definitions,
mathematical arguments, and computational specification, and prepared
the manuscript.

\paragraph{Data and code availability.}
The exact circuits, channel identities, ledgers, and standalone
finite-check source are included in this document. No external
execution log or formal verification certificate is supplied.

\paragraph{Ethics and clinical studies.}
Not applicable.

%=====================================================================
\begin{thebibliography}{99}

\bibitem{HP}
P.~Hayden and J.~Preskill,
\emph{Black holes as mirrors: quantum information in random subsystems},
Journal of High Energy Physics \textbf{2007}(09), 120 (2007).
arXiv:0708.4025, version 2.
\url{https://arxiv.org/abs/0708.4025}.

\bibitem{YK}
B.~Yoshida and A.~Kitaev,
\emph{Efficient decoding for the Hayden--Preskill protocol},
arXiv:1710.03363, version 2 (2017).
Sections 4--5: probabilistic and deterministic decoder constructions.
\url{https://arxiv.org/abs/1710.03363}.

\bibitem{YoshidaClifford}
B.~Yoshida,
\emph{Recovery algorithms for Clifford Hayden--Preskill problem},
arXiv:2106.15628, version 3 (2022).
\url{https://arxiv.org/abs/2106.15628}.

\bibitem{Bisio}
A.~Bisio, G.~M.~D'Ariano, P.~Perinotti, and M.~Sedl\'ak,
\emph{Memory cost of quantum protocols},
Physical Review A \textbf{85}, 032333 (2012).
arXiv:1112.3853.
\url{https://arxiv.org/abs/1112.3853}.

\bibitem{Decoupling}
F.~Dupuis, M.~Berta, J.~Wullschleger, and R.~Renner,
\emph{One-shot decoupling},
Communications in Mathematical Physics \textbf{328},
251--284 (2014).
arXiv:1012.6044, version 3.
\url{https://arxiv.org/abs/1012.6044}.

\bibitem{KSW}
D.~Kretschmann, D.~Schlingemann, and R.~F.~Werner,
\emph{The Information--Disturbance Tradeoff and the Continuity of
Stinespring's Representation},
IEEE Transactions on Information Theory \textbf{54},
1708--1717 (2008).
arXiv:quant-ph/0605009.
\url{https://arxiv.org/abs/quant-ph/0605009}.

\bibitem{HH}
D.~Harlow and P.~Hayden,
\emph{Quantum Computation vs.\ Firewalls},
Journal of High Energy Physics \textbf{2013}(06), 085 (2013).
arXiv:1301.4504, version 4.
\url{https://arxiv.org/abs/1301.4504}.

\bibitem{Replica}
A.~Almheiri, T.~Hartman, J.~Maldacena, E.~Shaghoulian, and
A.~Tajdini,
\emph{Replica Wormholes and the Entropy of Hawking Radiation},
Journal of High Energy Physics \textbf{2020}(05), 013 (2020).
arXiv:1911.12333, version 2.
\url{https://arxiv.org/abs/1911.12333}.

\bibitem{Watrous}
J.~Watrous,
\emph{The Theory of Quantum Information},
Cambridge University Press, 2018.
Author's text:
\url{https://cs.uwaterloo.ca/~watrous/TQI/}.

\bibitem{En02A}
N.~Cheung,
\emph{En02-A: Finite-Resource Geometry for the Enter Calculus:
Cut Monotones, Certificate Costs, and Conditional Born Rigidity}.
Companion manuscript, \code{En02-A-v1.tex},
7 October 2026.
Cited for its resource conventions, specified-Born distinction,
conditional rigidity, and one-shot/adaptive separation.

\bibitem{En02B}
N.~Cheung,
\emph{En02-B: Resource-Limited Holographic Reconstruction:
Boundary Access, Decoder Memory, and Certified Operational Recovery}.
Companion manuscript, \code{En02-B-v1.tex},
7 October 2026.
Cited for finite decoder interfaces and the authorized-triple
Clifford decoder component. Sequential emission data and the
optimized approximate memory-error bound are proved separately here.

\end{thebibliography}

\end{document}