[adriadam10]

What

Adds docs/dev/REVERSE_ENGINEERING.md and links it from CONTRIBUTING. About 11 debt files already cite a title's call sites and 15 cite disassembly (libSceAgc, libSceAudioIn, libSceNpTrophy2, libSceRtc, libSceHttp, libSceJobManager...), but nothing says how to find them, what they establish or how to cite them. The page covers:

• the order of sources (console measurement, the library's own code, other implementations, call sites);
• what a call site settles (argument count and widths, buffers, in/out arguments, checked results, log strings, size queries) and what it doesn't (what the library returns or writes: those paths still throw, and a read that reports no data is not a UI-only silent stub);
• finding call sites with relinker --registry (callSites, GLOB_DAT vs JUMP_SLOT) and disassembling the section-less ELF with objdump;
• how to cite it in the PR and the debt entry;
• rules: only dumps you own, no game/firmware files or keys anywhere, implement from the contract instead of translating the disassembly, interoperability only.

Based on

The technique and the examples come from these merged pull requests:

• feat(libSceVoiceQoS): implement packet and local endpoint attribute functions to unblock Aliens: Fireteam Elite #7727 (leorossi2005): libSceVoiceQoS signatures and in/out *size from a title's call sites and its log strings; jotitadev's review there is the "a call site settles the arguments, not the behaviour" point.
• Call sites: feat(libSceNetCtl): add sceNetCtlGetIfStat #4682 (sceNetCtlGetIfStat layout), refactor(audioin): name X+4jdIS75P0 sceAudioInIsPadEmbeddedMic #3577 (sceAudioInIsPadEmbeddedMic: signature from a call site, still throws; evidence in TechnicalDebt evidence: PPSA26344 call sites for X+4jdIS75P0 and dbOlWdppb4o (unknown function info) #2355), refactor(agc): name dbOlWdppb4o and vieBRwlh1Lw the _10000 interpolant mappings #5848 (sceAgcCreateInterpolantMapping_10000: nine call sites, return value not read), feat(libSceNpTrophy2): declare sceNpTrophy2GetRewardIcon's arguments #7094 (sceNpTrophy2GetRewardIcon size query), fix(exports): export the calls PPSA30601 imports #3814 (sceMouseResetAbsolutePosition), feat(libSceNgs2.native): implement sceNgs2ParseWaveformFile and parse 16-bit PCM waveforms #1020 (sceNgs2ParseWaveformFile).
• Library disassembly: feat(libSceJobManager): implement CPU job sequences #3170 (libSceJobManager from the modules titles ship), feat(libSceRtc): implement the remaining firmware exports #6596 (libSceRtc, firmware 13.60), feat(libSceHttp): implement sceHttpUriCopy #6649 (sceHttpUriCopy, firmware 13.60), feat(libSceIme): implement sceImeFilterText #8036 (sceImeFilterText, codepages rebuilt from Unicode's tables).
• Console measurement: fix(voiceqos): return the console's sceVoiceQoSInit argument errors #1407 and feat(libSceVoiceQoS): implement sceVoiceQoSEnd #3730 (libSceVoiceQoS on firmware 13.60).

Tested

Followed the steps on Astro's Playroom's eboot.bin: unwrap_self, readelf/objdump of the executable LOAD segment, PLT stub 0x1f2e480 and its 4 callers; the registry fields checked against relinker registries of three titles (GLOB_DAT sites are the calls, JUMP_SLOT sites are the PLT stubs). tools/nid_names.py --name sceVoiceQoSReadPacket gives PWokFqab5q4. tools/check_conventions.py passes.

Checklist

• Based on current main; no other open PR implements the same functions
• One topic per PR; follow-ups go in a new PR
• No comments in code except technical debt
• Unimplemented paths throw (NotImplemented_nid_no_patch); silent stubs are listed under Silent stubs in their library's technical debt file
• No notes, investigation .md files or images added to the repository (attach them to this PR)
• New third-party code is a submodule built from source
• Generic behaviour, not specific to one title
• Depends on: none
• Fixes: none
• Unblocks: none
• GPUs tested: n/a
• AI-assisted: yes