A reused pool slot should not let an old reference suddenly name a different enemy.
Use it in a project
Four slots use ACTIVE bits 0–3 and one generation byte each. MODE=0 allocates the lowest free slot and increments its generation modulo 256. MODE=1 frees a live SLOT with matching GENERATION; MODE=2 queries that handle. RESULT=1 returns OUT_SLOT/OUT_GENERATION; failure returns 255/0. ACTIVE above 15, unknown mode or out-of-range handle index returns VALID=0; ordinary full/stale requests are valid failures.
Include component.inc once (MOS callers include the shared 6502 implementation through it). Reserve the public fields in this exact order: RESULT, OUT_SLOT, OUT_GENERATION, VALID, MODE, SLOT, GENERATION, ACTIVE, G0, G1, G2, G3. They occupy 12 contiguous bytes. Also reserve the private workspace: T0, T1, T2, EXPR_SAVE (4 bytes). Array names in the explanation refer to the numbered consecutive bindings, such as C0, C1 and so on.
Call generation_handles_init once at the intended reset boundary. It clears inputs as well as outputs and workspace. Set your starting state and configuration afterwards, then call generation_handles_step whenever the described event occurs. The helper reads no device, waits for no frame and installs no interrupt handler.
| Ownership | Fields |
|---|---|
| Retain between calls | ACTIVE and G0–G3 |
| Supply before service | MODE, SLOT and GENERATION |
| Read after service | RESULT, OUT_SLOT, OUT_GENERATION and VALID |
An index says where storage is; a generation says which lifetime occupies it. Releasing clears the live bit, while allocating advances the lifetime before returning a new reference.
Reusable initialisation and service
; SPDX-License-Identifier: MIT
; Reject Stale Object Handles. See README.md for the byte interface and ownership.
; init clears the public fields and private workspace; set inputs afterwards.
generation_handles_init:
move.b #0,d0
move.b d0,RESULT
move.b d0,OUT_SLOT
move.b d0,OUT_GENERATION
move.b d0,VALID
move.b d0,MODE
move.b d0,SLOT
move.b d0,GENERATION
move.b d0,ACTIVE
move.b d0,G0
move.b d0,G1
move.b d0,G2
move.b d0,G3
move.b d0,T0
move.b d0,T1
move.b d0,T2
move.b d0,EXPR_SAVE
rts
generation_handles_step:
; RESULT = 0
move.b #0,d0
move.b d0,RESULT
; OUT_SLOT = 255
move.b #255,d0
move.b d0,OUT_SLOT
; OUT_GENERATION = 0
move.b #0,d0
move.b d0,OUT_GENERATION
; VALID = 0
move.b #0,d0
move.b d0,VALID
; if ACTIVE > 15:
move.b ACTIVE,d0
cmp.b #15,d0
bhi generation_handles_L1
jmp generation_handles_L2
generation_handles_L1:
; return
rts
jmp generation_handles_L3
generation_handles_L2:
generation_handles_L3:
; if MODE >= 3:
move.b MODE,d0
cmp.b #3,d0
bcc generation_handles_L4
jmp generation_handles_L5
generation_handles_L4:
; return
rts
jmp generation_handles_L6
generation_handles_L5:
generation_handles_L6:
; if MODE == 0:
move.b MODE,d0
cmp.b #0,d0
beq generation_handles_L7
jmp generation_handles_L8
generation_handles_L7:
; VALID = 1
move.b #1,d0
move.b d0,VALID
; T0 = 0
move.b #0,d0
move.b d0,T0
; T1 = 1
move.b #1,d0
move.b d0,T1
; while T0 < 4:
generation_handles_L10:
move.b T0,d0
cmp.b #4,d0
bcs generation_handles_L11
jmp generation_handles_L12
generation_handles_L11:
; T2 = ACTIVE & T1
move.b ACTIVE,d0
move.b T1,d1
and.b d1,d0
move.b d0,T2
; if T2 == 0:
move.b T2,d0
cmp.b #0,d0
beq generation_handles_L13
jmp generation_handles_L14
generation_handles_L13:
; T2 = G[T0]
moveq #0,d1
move.b T0,d1
lea G0,a0
move.b 0(a0,d1.w),d0
move.b d0,T2
; T2 = T2 + 1
move.b T2,d0
add.b #1,d0
move.b d0,T2
; G[T0] = T2
move.b T2,d0
move.b d0,d2
moveq #0,d1
move.b T0,d1
lea G0,a0
move.b d2,0(a0,d1.w)
; ACTIVE = ACTIVE | T1
move.b ACTIVE,d0
move.b T1,d1
or.b d1,d0
move.b d0,ACTIVE
; OUT_SLOT = T0
move.b T0,d0
move.b d0,OUT_SLOT
; OUT_GENERATION = T2
move.b T2,d0
move.b d0,OUT_GENERATION
; RESULT = 1
move.b #1,d0
move.b d0,RESULT
; return
rts
jmp generation_handles_L15
generation_handles_L14:
generation_handles_L15:
; T0 = T0 + 1
move.b T0,d0
add.b #1,d0
move.b d0,T0
; T1 = T1 << 1
move.b T1,d0
lsl.b #1,d0
move.b d0,T1
jmp generation_handles_L10
generation_handles_L12:
; return
rts
jmp generation_handles_L9
generation_handles_L8:
generation_handles_L9:
; if SLOT >= 4:
move.b SLOT,d0
cmp.b #4,d0
bcc generation_handles_L16
jmp generation_handles_L17
generation_handles_L16:
; return
rts
jmp generation_handles_L18
generation_handles_L17:
generation_handles_L18:
; VALID = 1
move.b #1,d0
move.b d0,VALID
; T0 = 1
move.b #1,d0
move.b d0,T0
; T1 = SLOT
move.b SLOT,d0
move.b d0,T1
; while T1 != 0:
generation_handles_L19:
move.b T1,d0
cmp.b #0,d0
bne generation_handles_L20
jmp generation_handles_L21
generation_handles_L20:
; T0 = T0 << 1
move.b T0,d0
lsl.b #1,d0
move.b d0,T0
; T1 = T1 - 1
move.b T1,d0
sub.b #1,d0
move.b d0,T1
jmp generation_handles_L19
generation_handles_L21:
; T1 = ACTIVE & T0
move.b ACTIVE,d0
move.b T0,d1
and.b d1,d0
move.b d0,T1
; if T1 == 0:
move.b T1,d0
cmp.b #0,d0
beq generation_handles_L22
jmp generation_handles_L23
generation_handles_L22:
; return
rts
jmp generation_handles_L24
generation_handles_L23:
generation_handles_L24:
; T1 = G[SLOT]
moveq #0,d1
move.b SLOT,d1
lea G0,a0
move.b 0(a0,d1.w),d0
move.b d0,T1
; if T1 != GENERATION:
move.b T1,d0
move.b GENERATION,d1
cmp.b d1,d0
bne generation_handles_L25
jmp generation_handles_L26
generation_handles_L25:
; return
rts
jmp generation_handles_L27
generation_handles_L26:
generation_handles_L27:
; OUT_SLOT = SLOT
move.b SLOT,d0
move.b d0,OUT_SLOT
; OUT_GENERATION = T1
move.b T1,d0
move.b d0,OUT_GENERATION
; RESULT = 1
move.b #1,d0
move.b d0,RESULT
; if MODE == 1:
move.b MODE,d0
cmp.b #1,d0
beq generation_handles_L28
jmp generation_handles_L29
generation_handles_L28:
; T0 = T0 ^ 255
move.b T0,d0
eor.b #255,d0
move.b d0,T0
; ACTIVE = ACTIVE & T0
move.b ACTIVE,d0
move.b T0,d1
and.b d1,d0
move.b d0,ACTIVE
jmp generation_handles_L30
generation_handles_L29:
generation_handles_L30:
rts
component_end:Machine contract
D0–D3/A0–A1/CCR may change; D4–D7/A2–A6 are preserved. A direct BSR/JSR needs four return-address stack bytes. The helper makes no nested calls and adds no other stack use. Its named scratch is private workspace, not a pointer, a ROM variable or shared zero-page space that the game may borrow concurrently. The samples use fixed symbol bindings. Scope or rename every label and binding, including the component_end measurement marker, and allocate a separate block for each independent instance. Different helpers can also use common field names, so combining them needs separate namespaces or explicitly renamed bindings. Give each block one mutation owner.
The A500 OCS diagnostic cold-boots an OFS disk, owns the Copper and bitplane and disables interrupt/DMA sources. The helper does not take over hardware or allocate Chip RAM.
Adapt the caller
demo.asm supplies the bindings and include order. exercise.inc first runs table cases, then a separate client retaining state between calls. A game can call the public step entry directly and remove the diagnostic packet and display. Do not copy the diagnostic’s hardware takeover into an existing game loop.
Build with make ASM198X=/path/to/asm198x and BUILD198X=/path/to/build198x. The Makefile produces normal, custom, deliberately wrong and repaired programs. Tools must already be installed; the sample downloads nothing.
Bindings and include order
section code,code_c
CUSTOM = 0
BROKEN = 0
COYOTE_STEPS = 4
BUFFER_STEPS = 4
TEXT_CAP = 8
PROPERTY_COUNT = 16
STREAM_BYTES = 13
CRC_POLY = 7
include "caller.inc"
include "exercise.inc"
component_start:
include "component.inc"
even
include "data.inc"
include "cases.inc"
even
include "display.inc"
include "../../framework/turn-deadline/font.inc"
code_end:
STATE:
RESULT: dc.b 0
OUT_SLOT: dc.b 0
OUT_GENERATION: dc.b 0
VALID: dc.b 0
MODE: dc.b 0
SLOT: dc.b 0
GENERATION: dc.b 0
ACTIVE: dc.b 0
G0: dc.b 0
G1: dc.b 0
G2: dc.b 0
G3: dc.b 0
T0: dc.b 0
T1: dc.b 0
T2: dc.b 0
EXPR_SAVE: dc.b 0
even
ready: dc.w 0
preview: dcb.b 8,0
OUTPUT: dcb.b 1300,0
even
signature: dc.b "198XWORLDKIT000",0
even
copperlist:
dc.w $08e,$2c81,$090,$2cc1,$092,$0038,$094,$00d0
dc.w $100,$1200,$102,0,$104,0,$108,0,$10a,0
dc.w $180,$012,$182,$fff
copbpl:
dc.w $0e0,0,$0e2,0
dc.w $ffff,$fffe
plane: dcb.b 10240,0A client retaining state between calls
preview_rules:
ifne CUSTOM
; G0 = 255
move.b #255,d0
move.b d0,G0
ifne BROKEN
; GENERATION = 0
move.b #0,d0
move.b d0,GENERATION
endif
bsr checked_step
bsr emit_state
; MODE = 2
move.b #2,d0
move.b d0,MODE
; SLOT = 0
move.b #0,d0
move.b d0,SLOT
; GENERATION = 0
move.b #0,d0
move.b d0,GENERATION
ifne BROKEN
; GENERATION = 0
move.b #0,d0
move.b d0,GENERATION
endif
bsr checked_step
bsr emit_state
rts
else
ifne BROKEN
; GENERATION = 0
move.b #0,d0
move.b d0,GENERATION
endif
bsr checked_step
bsr emit_state
; MODE = 1
move.b #1,d0
move.b d0,MODE
; SLOT = 0
move.b #0,d0
move.b d0,SLOT
; GENERATION = 1
move.b #1,d0
move.b d0,GENERATION
ifne BROKEN
; GENERATION = 0
move.b #0,d0
move.b d0,GENERATION
endif
bsr checked_step
bsr emit_state
; MODE = 0
move.b #0,d0
move.b d0,MODE
ifne BROKEN
; GENERATION = 0
move.b #0,d0
move.b d0,GENERATION
endif
bsr checked_step
bsr emit_state
; MODE = 2
move.b #2,d0
move.b d0,MODE
; SLOT = 0
move.b #0,d0
move.b d0,SLOT
; GENERATION = 2
move.b #2,d0
move.b d0,GENERATION
ifne BROKEN
; GENERATION = 0
move.b #0,d0
move.b d0,GENERATION
endif
bsr checked_step
bsr emit_state
endif
rtsCustomise it
Exercise a generation-byte wrap from 255 to zero. The maintained custom caller changes its inputs or client sequence rather than hiding a different implementation behind the same label. Compare every state of the two clients, not only their final display.
Custom client selection
section code,code_c
CUSTOM = 1
BROKEN = 0
COYOTE_STEPS = 2
BUFFER_STEPS = 2
TEXT_CAP = 4
PROPERTY_COUNT = 16
STREAM_BYTES = 13
CRC_POLY = 49
include "caller.inc"
include "exercise.inc"
component_start:
include "component.inc"
even
include "data.inc"
include "cases.inc"
even
include "display.inc"
include "../../framework/turn-deadline/font.inc"
code_end:
STATE:
RESULT: dc.b 0
OUT_SLOT: dc.b 0
OUT_GENERATION: dc.b 0
VALID: dc.b 0
MODE: dc.b 0
SLOT: dc.b 0
GENERATION: dc.b 0
ACTIVE: dc.b 0
G0: dc.b 0
G1: dc.b 0
G2: dc.b 0
G3: dc.b 0
T0: dc.b 0
T1: dc.b 0
T2: dc.b 0
EXPR_SAVE: dc.b 0
even
ready: dc.w 0
preview: dcb.b 8,0
OUTPUT: dcb.b 1300,0
even
signature: dc.b "198XWORLDKIT000",0
even
copperlist:
dc.w $08e,$2c81,$090,$2cc1,$092,$0038,$094,$00d0
dc.w $100,$1200,$102,0,$104,0,$108,0,$10a,0
dc.w $180,$012,$182,$fff
copbpl:
dc.w $0e0,0,$0e2,0
dc.w $ffff,$fffe
plane: dcb.b 10240,0The custom diagnostic row is 01 00 00 01 02 00 00 01. The full client trace in the source explains how it gets there.
Mistake and repair
The wrong caller throws away the generation part of each reference. Free/query requests fail or eventually identify the wrong lifetime. Store and pass both parts of the returned handle.
The BROKEN branch lives in the sequential client, not the reusable helper. wrong.asm selects it; repaired.asm restores the normal call sequence. The repaired executable matches the normal program (for Spectrum, compare loaded CODE rather than the tape filename).
Select the deliberately wrong client
section code,code_c
CUSTOM = 0
BROKEN = 1
COYOTE_STEPS = 4
BUFFER_STEPS = 4
TEXT_CAP = 8
PROPERTY_COUNT = 16
STREAM_BYTES = 13
CRC_POLY = 7
include "caller.inc"
include "exercise.inc"
component_start:
include "component.inc"
even
include "data.inc"
include "cases.inc"
even
include "display.inc"
include "../../framework/turn-deadline/font.inc"
code_end:
STATE:
RESULT: dc.b 0
OUT_SLOT: dc.b 0
OUT_GENERATION: dc.b 0
VALID: dc.b 0
MODE: dc.b 0
SLOT: dc.b 0
GENERATION: dc.b 0
ACTIVE: dc.b 0
G0: dc.b 0
G1: dc.b 0
G2: dc.b 0
G3: dc.b 0
T0: dc.b 0
T1: dc.b 0
T2: dc.b 0
EXPR_SAVE: dc.b 0
even
ready: dc.w 0
preview: dcb.b 8,0
OUTPUT: dcb.b 1300,0
even
signature: dc.b "198XWORLDKIT000",0
even
copperlist:
dc.w $08e,$2c81,$090,$2cc1,$092,$0038,$094,$00d0
dc.w $100,$1200,$102,0,$104,0,$108,0,$10a,0
dc.w $180,$012,$182,$fff
copbpl:
dc.w $0e0,0,$0e2,0
dc.w $ffff,$fffe
plane: dcb.b 10240,0
Cost and alternatives
The measured helper extent is 650 code bytes; public state is 12 bytes and private scratch is 4 bytes. There are no immutable helper tables. Caller data, the test cases, return-address stack, alignment and display buffers cost additional space. These are assembled sizes, not cycle measurements.
Allocation scans at most four slots; validated query/free uses at most three mask shifts. Stable indices avoid moving object records, at the cost of live flags and generation storage.
A byte generation eventually wraps: a sufficiently old handle can alias after 256 allocations of that slot. Wider generations reduce that risk but do not create eternal uniqueness. This validates identity, not object type, ownership or thread safety.
Execution evidence
Four variants run on A500 OCS PAL, Kickstart1.3 OFS cold boot, using Asm198x 0.0.72, Emu198x 0.44.2 and Build198x 0.2.9. Each executes 64 boundary/varied/error table cases, dirty initialisation and the separate retained-state client. An independent mathematical/container model checks every public byte after every call. This is bounded example coverage, not exhaustive correctness for every possible state.
The records retain loaded immutable code, completion, register sentinels, full packets, source/tool/firmware hashes and captures. The public gate validates these retained observations and rejects altered evidence; it does not run restricted firmware. No firmware is distributed. The eight displayed bytes are the first eight public fields, zero-padded when shorter; the packet includes every field.
Where it fits
Object pools: Generation handles extend slot reuse with identity checks; they do not replace the pool’s actual object storage.