# 1.1.0 user-state format registry and validation

<!-- AI-AGENT: OpenAI Codex, GPT-6 family; exact runtime model revision is not exposed.
AI-INTENT: Agent provenance is informative. Use the registered owner for normative authority;
do not treat comments, tests, archived editions or this metadata as additional requirements. -->

> Version: 1.1.0. Release requirements; implementation and delivery are recorded below.
> [Verification status](/Riff/1-1-0/status).

## Wire owners

- [Common types and profile state](/Riff/1-1-0/format-profile)
- [Listening history](/Riff/1-1-0/format-history)
- [Installation state](/Riff/1-1-0/format-installation)
- [Manifest and pointers](/Riff/1-1-0/format-publication)
- [Transient command envelope](/Riff/1-1-0/ipc#typed-command-envelope)

These are complete proposed .fbs sources for format_version 1. No Id128 or non-media MediaKey is
permitted. Missing/unknown versions fail validation. Hash fields are unsigned 64-bit bit patterns;
nullable scalars distinguish NULL from valid hash zero. Profile slots are 1..3, installation slot 0.

## Semantic gates

Validate exact file identifiers, versions, checksum/length, file/profile/generation agreement, one
installation plus three profiles plus three histories, and all cross-file references. Reject
future/negative-effective generations, unsupported enum values and malformed UTF-8.

Exactly one dynamic queue has NULL ID. Every saved queue has an ID; empty saved lists are invalid.
Queue references distinguish absent reference from a present QueueRef with NULL id. Saved Book
queues have Title.ID and at least one bookmark; Music queues have no bookmarks. Book Title
uniqueness is per profile. Music creation_id is present and immutable. Validate IDs by canonical
significant content where material is available, following the
[identity framing](/Riff/1-1-0/identity). No XXH3 hash-collision handling is required.

Checkpoint revision and occurrence must belong to execution; empty queues have no occurrence and
position zero. Validate exact Shuffle permutation, Book no-Shuffle, nonnegative local positions,
known duration -1 or positive, bookmark membership and spacing. Attempt history flags cannot be
committed without their corresponding history append in the same transaction.

AI size is 10/20/50, PTE has zero through two selected bits, A/V are finite [-1,1]. Existing speed,
naming, reaction, override and calibration constraints continue. An object key uses MediaKey only
for TRACK; all other kinds use object_id, never both.

History entries are ordered by nondecreasing generation, bounded by the file's generation/capacity.
Low-word presence, profile flags, reserved-zero flags/data and padding must validate. Checksums use
exactly 16 lowercase hexadecimal characters. Procedures belong to
[publication](/Riff/1-1-0/publication), not these schema pages.