# Project Executive Intent: SMI Firmware

Status: active
Type: decision
Role: project-executive-intent-v1
Updated: 2026-09-24

## Current release reconciliation — 2026-09-24

SMI 00-05-01 is published and independently verified: https://github.com/Sheldon-Mfg-Inc/7520553_SMI_FW/releases/tag/v00.05.01. All eight downloaded assets match expected bytes, including 7520553_SMI_00_05_01.imx; IMX CRCs and its main-payload match to the downloaded Release S-record pass. Exact content 2ec96c2c7ceb00db7e7ca6c0186aebff4c2c6b0c passed all four push-CI jobs. Tag v00.05.01 points to provenance commit 74a6cda40c64ee012f4bb0844cd982a6361ea72e. Firmware bytes remain those qualified at b59c33d1. Evidence: work/evidence/smi-work5-publication-20260924.json. The owner explicitly authorized ship and the .imx. All four qualification gates retain their accepted evidence and scope limits; no unperformed target test is claimed.

## North Star

Deliver dependable SMI oven firmware that keeps control, monitoring, and alarms operating through storage faults, and releases only behavior proven on both controller assemblies.

## Current Completion Horizon

Completed SMI 00-05-01 under the accepted shared updater/media-preparation contract. All four qualification gates are satisfied and https://github.com/Sheldon-Mfg-Inc/7520553_SMI_FW/releases/tag/v00.05.01 is published with independently verified .imx, ELF, S-record, manifest and checksum assets. Customer rollout, ECO/BOM and supplier approvals remain separate and are not implied.

## Strategic Context

The field SD card is not practically replaceable. Ordinary Update Software and service 151 share admitted image policy, explicit consent and target-driven media preparation. Corrected candidate identity and the normal A/B cycle are established. The owner closed the legacy update investigations and excluded stale-selection testing. Recovery after internal-flash replacement begins was already outside the promised contract. Full HPT2, SD-family, supply and other abandoned work are not revived by this release review.

## Current Priorities

- Preserve the published v00.05.01 assets and accepted qualification evidence.
- Keep owner-closed and abandoned work closed.
- Resume project execution only for a new owner scope or contradictory evidence.

## Deliberate Non-Goals

- On 2026-09-23 the owner abandoned the temperature-control recovery and RTD-interlock successor campaigns, standalone SD Qualifier and independent physical-media validator delivery, SD specimen/family approval and supply-change closeout, and Tool Shed defect tickets TKT-0035/TKT-0036. These are no longer local execution commitments. Existing evidence, accepted limitations, and unresolved technical risks remain recorded in `docs/project-work-disposition-20260923.md`; abandonment is not qualification or defect resolution.
- No unconfirmed SD-card conversion or erase, and no field SD-card swap as an update or rollback workflow.
- No claim that the update Title authenticates its publisher.
- No automatic CVO/DVO release, SD-family approval, ECO, or customer rollout from the SMI transition result.

## Decisions Needed

- None for the completed SMI 00-05-01 release. Separate customer rollout or controlled-document work requires its own owner instruction.

## Review Triggers

- New evidence contradicts the qualified A/B behavior.
- The owner resumes release planning or changes the qualification scope.
- A source change invalidates the frozen candidate or its evidence applicability.

## 2026-09-22 requirements and evidence update

Controller A accepted and staged the prior SMI 00-05-01 IMX, with exact QSPI main SHA-256 `7F49E615FF971D1C63E44CF94B8DCD9BF919DA7846E052408189997A58B78B8E`, but internal flash remained at SHA-256 `CFC9ECC6ABCCDDA5633FFF6AB8A6595ECAC21F6AC951ED35F0D51407BB8CE407`. The owner added a target-driven FAT32 rule and disabled-chart rule. The revised source passes focused checks and canonical Debug/Release builds; Release S-record SHA-256 is `4E7DFB2F7333202C71A736DF6692512030DB43508A1CCD0C556E7E8C1EB6B326`. It is not frozen or target-qualified. No controller or SD mutation occurred during this requirements detour.

## 2026-09-23 reconciliation

The 2026-09-22 internal-flash failure was diagnosed and corrected by watchdog, FCU command-lock, and ROM-cache changes. A controlled self update completed with diagnostic error `0` and exact four-MiB flash readback. Accepted candidate `00.05.01-1bf8afe6aeba-6476100e5ae5` has Release S-record SHA-256 `6476100E5AE5B5ED5EA38F5BBFDFC8AE6BC44513200678406F2711B0B91C1D9D`; Controller A exact readback SHA-256 is `40560E9D046293BE345676BC97CD09E88E29D543DBEB02AD3B764EBF029D4E87`. The owner accepted the Format 2 startup and disabled-chart UI behavior. Service 150 then generated the final SMI IMX with SHA-256 `AF8132D13837F6030CD73689E77833AA563C0C878C19126448E869DFEB337332`, valid CRCs, and an exact main-payload match. The remaining current prerequisites are the controlled DisplayTest 01-01 IMX and the paused A/B transition, refusal, rollback, and fault matrix. No release decision has been made.
