# Controller A triple-circular candidate: read-only media 1.0 classification

Status: passed prototype evidence on 00.04.13; superseded for further qualification by the 00.05.00 version boundary
Type: evidence
Updated: 2026-07-23
Next Action: retain as pre-version-boundary evidence; repeat on frozen 00.05.00 before destructive media 2.0 initialization
Campaign Reason: Historical record from campaign 013-close-hpt-media-2-initial-release-qualification; retained independently after campaign closure and requires no separate owner-queue execution.
Campaign: standalone
Parent: work/checklists/checklist-controller-a-hpt-triple-circular-physical-qualification.md

## Identity

- Controller: A, assembly `1751136`
- J-Link: `69664082`
- VTref: `3.298 V`
- Target: Renesas `R7FS7G27H`, Cortex-M4
- Assigned card: `HPTCS0`
- Card geometry: `15,654,912` logical 512-byte sectors

## Programmed candidate

- Artifact: `Debug/7520553_SMI_FW_00_04_13.srec`
- SHA-256:
  `27D69A81726CD3A396C9BF08BAE833342036A7B6CA4BEBE2BFB83EBBAD457492`
- J-Link result: erase, programming, and verification completed `O.K.`
- Download affected 2,867,200 bytes; program-and-verify completed successfully.
- Target was reset and resumed.

The first programming wrapper exceeded its reporting timeout and was not
credited as success. Its exact helper processes were stopped. The same
hash-guarded operation was repeated and produced the successful J-Link record
above.

## Read-only result

The target was allowed to boot. J-Link briefly halted the CPU, read RAM status,
then issued `go`.

| Field | Value | Interpretation |
| --- | --- | --- |
| `gSdCardState` | `3` | normal FileX media unavailable; raw upgrade has not been entered |
| HPT media state | `2` | `HPT_MEDIA_STATE_HPT1_NEEDS_INITIALIZATION` |
| HPT status | `4` | `HPT_STATUS_UNSUPPORTED`, expected for media major 1 |
| SSP status | `0` | no driver error |
| First error sector | `0` | no storage error captured |
| Sector count | `0x00ECE000` | 15,654,912 sectors |
| Acknowledged/iterated | `0 / 0` | media 2.0 store was not opened or appended |
| Diagnostics | `0 / 0` | media 2.0 diagnostics did not run |

This is the expected read-only upgrade classification. No service 468
initialization request was issued. No format, media-version conversion, or
record append was authorized. The retained media 1.0 content remains the input
to the next separately authorized destructive phase.

## Boundary

This evidence proves the exact image can be programmed and can classify the
existing Controller A card without exposing it as media 2.0. It does not prove
the display wording, media 2.0 formatting, triple commit, reset/reopen, runtime
logging, degraded-lane behavior, stack high-water, Controller B, or power-cut
recovery.

Firmware `00.05.00` was subsequently established as the filesystem-development
line. This result remains valid evidence of the prototype behavior but does not
qualify the rebuilt `00.05.00` artifacts.
