Over-threshold check exchange repaints and re-renders a live E0 readout (not the stale 04000000). The +2 drift in $3184 among 65 status frames refines the counter model: $3184 = started timeout-retry sequences (give-ups are the exhausted subset); timeout-recovered cycles exit via the success teardown, NAK-recovered ones via $DA2F ($3185). All observations from both bench sessions fit. Mash spot-check remains before christening RIO 4.3. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>