Function ssm_replay_ring_bytes 

pub fn ssm_replay_ring_bytes(
    num_ssm_layers: usize,
    row_bytes: usize,
    k_ceiling: usize,
    mtp_state_slots: usize,
) -> usize

2026-09-25: Replay-mode verify-window input ring: mtp_state_slots * (k_ceiling - 1) * num_ssm_layers * row_bytes, since a partial accept replays at most K-1 tokens. Preflight reserves and SsmStatePool::new allocates through this function, with different arguments: preflight passes num_drafts + 1 and mtp_state_slots, the pool its num_intermediates and mtp_slots + 1 (the dummy slot).