Final Integrated Candidate Interactive Checklist

Run information

Operator Date Candidate firmware version Source commit and SREC SHA-256 Installed card A Installed card B

Setup A: 1751136 / J-Link 69664082 · Setup B: 1751219 / J-Link 69660123

Controller A: the owner reports its temperature alarm was re-enabled on 2026-07-20. Confirm the enabled state and complete the controlled audible-alarm regression; keep independent over-temperature protection available.

Draft gate: do not begin final qualification until all intended firmware changes are complete, clean gates pass, one source commit and image hash are frozen, and that exact image is loaded on both controllers. Start a new empty results file for that run.

Prior development evidence: builds, automated checks, target loads, nominal SD logging, J-Link source debugging, restored wave data, and SOUND_1 playback have passed on 00.04.13. Reconfirm every release-critical item on the frozen final candidate.

1. Basic controller and configuration regression

Check	A	B
Displayed firmware version matches the frozen candidate version recorded above.
Engineering/J-Link: identity and hidden configuration (including calibration offsets and PID values) match an approved controller-specific baseline. Do not judge this from the customer screen or service-code values alone.
Operator: displayed model/serial, setpoint, alarm enable/thresholds, and logging choices match the intended setup or work order.
SD Ready without automatic format or resize.
New mirrored records, equal counts, no SD/FileX/drop/mirror errors.
Temperature control stable during graph activity.

Evidence rule: the engineering row passes only when the report names the physical controller, baseline file/hash, captured file/hash, compared fields, and result. If no approved pre-change reference exists, select BLOCKED; a plausible-looking service value is not proof.

Comments

2. Temperature calibration bounds and recovery

Check	A	B
J-Link readback shows the stored main-temperature correction is finite and inside the approved absolute interval.
Normal calibration accepts both approved endpoints and cannot enter a value beyond either absolute endpoint.
Service 514 uses the same fixed absolute interval; repeating calibration from either endpoint cannot expand the range.
Cancel and timeout leave the stored correction unchanged and create no configuration save.
A valid correction survives save, reboot, and firmware-update preservation without drift.
Approved safe fault test: an out-of-range/non-finite persisted correction produces a visible calibration finding, inhibits effective heat, retains diagnostic value, and permits recovery.

Record the approved interval, reference instrument, raw temperature, stored correction, adjusted temperature, and pre/post J-Link values. Perform the invalid-persistence case only on an explicitly authorized safe target with recovery evidence.

Comments and readings

3. Temperature graph

No black future-data region on the default graph. Right boundary and newest displayed value/timestamp match the newest real SD record. 1-, 3-, 6-, 12-, and 24-hour views checked. Pan and area zoom checked at oldest and newest limits. Graph left open for at least three logging intervals; refresh remained responsive and error-free. Power-off and missing-record gaps remain distinct and are not fabricated/interpolated. Temperature, target-change, alarm, warning, door, and power-event display priority remains correct. Representative displayed points match underlying 64-byte SD records.

Overall AOverall B

Comments

4. USB export — Graph and Menu entry points

Exact five-minute range accepted; one second shorter rejected. Start equal to or after end rejected with correct reason. End equal to now accepted; one second in future rejected. Start exactly 90 days old accepted; one second older rejected. 10-minute, 1-hour, 1-day, and 30-day ranges accepted without boundary alignment. Rejected input starts no USB activity and creates no file. Accepted export contains only records inside selected timestamps.

Graph entry pointMenu entry point

Comments

5. Alarm and audio regression

Wave address/length tables are valid on A and B after the final candidate load. SOUND_1 completes on A and B with zero audio-processing errors. Controller A temperature alarm enabled before normal operation. Real or controlled over-temperature condition produces visible alarm and audible SOUND_1. Mute stops repetition; a genuinely new alarm clears mute as intended. External alarm output/relay follows alarm state.

Comments

6. Destructive SD qualification — deferred

Do not perform on the well-performing installed card. Full-capacity format, fill beyond 1.79 GiB, power-cut, additional-card, repeated-endurance, and multi-sample campaigns remain owner-deferred. Deferral does not approve other card models or clear the EDGE 4 KiB lost-chain finding.

Deferral/retained-card notes

7. Final disposition

PASS CONDITIONAL FAIL

Disposition comments

Operator sign-offReviewer/owner sign-off

Saved results are JSON in the workspace and can be inspected directly by Codex.