# Display-test firmware load on controller attached to J-Link A — 2026-08-04

Status: complete
Result: complete; exact display-test code flash programmed and verified
Type: evidence
Updated: 2026-08-04
Next Action: owner may exercise the display-test UI; do not treat this temporary controller as the canonical SMI Controller A inventory
Campaign: 004-produce-and-freeze-corrected-firmware-bundle
Canonical Truth: E:/dev/high_point/7520708_DispTest_FW/README.md

## Scope and result

The owner identified a different controller temporarily attached to the
established J-Link A channel and explicitly requested loading display-test
firmware. The operation selected only J-Link serial `69664082` through the
serial-bound `srv-rpi00.local` Remote Server on port `19120`.

The target connected as a Renesas Cortex-M4 with positive VTref. Before the
load, its embedded identity was `Version 00-04-11` /
`7520553_SMI_00_04_11.imx`; complete code-flash SHA-256 was
`ea086c84e72579597d305c24b38745d66f931fe6eec4d7cf91ae4513c7a4aaf8`.

The exact requested source artifact was:

- `E:/dev/high_point/7520708_DispTest_FW/Debug/7520708_DispTest_FW_01-00.srec`
- S-record SHA-256:
  `8b74d02b8c08ecf3cc17b9a85349d6e6f1ca1278d408555c718ce9fa8a98dcd7`
- expected 4 MiB code-flash SHA-256:
  `9ba8b615fdcc1d634d35a3453bb048fa423fa5386d31ca6705257a8c23bf1a48`

All S-record byte counts and checksums passed. Its only record outside code
flash was 16 erased `0xFF` bytes at `0x40120050`. The operation therefore
converted the S-record to an exact 4 MiB image and programmed code flash only,
without submitting that option-memory record.

Full post-program readback matched the expected code-flash SHA-256 exactly.
The installed image contains `Version    01-00` and
`7520708_DispTest_FW_01-00.imx`. The CPU was running after reset and again
after full readback. The A Remote Server returned to idle with zero client
sessions.

## Preservation checks

- Pre/post 4 KiB VEEPROM SHA-256, unchanged:
  `85cd7f80a1069cdc6ab59c8ff2d5e5b09dee75d64f36b90208e670f26ded05d1`.
- Pre/post option-memory SHA-256, unchanged:
  `80a76a18acf8cb64fec3a659ffc4bab4a87cd9a6fde4dab2161a8751d136c9d2`.
- Complete pre-change code flash was retained in the ignored generated
  evidence directory for rollback.
- J-Link transcript SHA-256:
  `39e9033ef25531598052c2a7f1c47fcc16815417234c01f46452bf8993d9509c`.

Raw captures and transcript are under
`work/evidence/generated/display-test-controller-a-load-20260804T170551Z/`.

## Boundaries

This operation did not access Controller B, SD media, USB media, HPT commands,
or the frozen SMI qualification candidate. SD CID is unavailable because this
was a code-flash-only display-test operation; SD driver/detection state was
intentionally not read and no controller/media qualification claim is made.
The temporarily attached controller's assembly identity was not independently
established from the historical Controller A inventory.
