docs: stable/ folders in Status, oracle verification line, known-issue points at available fix

README.md

@@ -37,8 +37,9 @@ produces a bare input-arity error naming `ple_table`/`ple_scale`.
 > because previously seen lengths replay from cache at no cost. Long free-form
 > generations grow without bound until the process exits; no in-process mitigation
 > exists (token caps only postpone it, and shape-length reuse is the only stable state).
-> A re-export onto a shape-stable contract (fixed-capacity KV read with an explicit
-> attention mask) is planned and will replace these bundles' decode graphs.
+> A re-export onto a shape-stable contract that removes this growth is available in this
+> repository under `stable/` — see its section below. It requires updated host support
+> (in progress); on current hosts, use the bundles above for guided generation only.
 
 ## Provenance
 
@@ -212,6 +213,7 @@ reachable. 15k was not attempted.
 | `ctx16384/…_tbl_pf64` | **QUALIFIED BY EQUIVALENCE** — as above; free-form at this depth was not attempted. |
 | `w4a8/gemma4_e4b_qat_decode_int4lin_a8_tbl_pf64` | **EXPERIMENTAL** — built, unmeasured. Gate: a Mac-side oracle/parity check plus a device benchmark. |
 | `gpu-pipelined/gemma4_e4b_qat_decode_int4lin` | **BLOCKED** — does not load on any current code path. |
+| `stable/…_tbl_pf64_stable_c16384` | **EXPERIMENTAL** — shape-stable decode contract; removes the per-token memory growth by design; requires host support for absolute-position inputs (in progress); no on-device measurements yet. |
 
 ### About the `w4a8` bundle
 
@@ -292,3 +294,10 @@ trade for the unbounded growth it replaces.
 
 Unlike the `ctx*/` folders, the context ceiling here is **encoded in the graph**: a
 different window needs a different export, not a manifest edit.
+
+**Verification.** Before conversion, the stable graph was checked against the shipped
+graph in eager torch on the same weights: greedy argmax identical on all tested decode
+steps (including positions past the 512-token sliding window), worst logits cosine
+0.99999 (fp16), and the prefill path bit-identical in fp32. On-device behavior is
+unmeasured until host support lands.
+