# Checklist: HPT log store dedicated-card controller qualification

Status: superseded; incomplete media-1.0 qualification retained as history
Type: checklist
Updated: 2026-09-23
Next Action: none; retained as history; any new execution requires a new explicit owner instruction
Campaign Reason: Historical record from campaign 013-close-hpt-media-2-initial-release-qualification; retained independently after campaign closure and requires no separate owner-queue execution.
Campaign: standalone
Parent: work/wp/completed/wp-hpt-embedded-log-store-v0-4-0-renesas-integration.md

## Goal

Qualify HPT Embedded Log Store v0.4.0 on a dedicated expendable SD card using
the exact SMI controller candidate, without treating upstream/Linux evidence as
controller proof or allowing FileX and raw access to overlap.

This checklist is preserved as media-1.0 history. The incomplete media-full,
removal, interruption, and Controller B items are not qualification claims.
Firmware 00.05.00 superseded this bounded non-circular format with HPT media
2.0. Current work is governed by
`work/wp/active/wp-triple-mirrored-circular-hpt-log-store.md` and the controlled
retail-card procedure in `docs/ecr-sd-card-supply-change-resolution.md`.
Powered SD-card removal/insertion is now explicitly prohibited; the historical
unchecked removal/reinsertion item below must not be executed.

## Checklist

- [x] Record the pinned upstream identity and pristine/product-owned boundary.
- [x] Build the portable core and product adapter with the qualified toolchain.
- [x] Select whole-card dedicated raw media; no FAT/raw coexistence.
- [x] Erase and precondition Pi samples `card-cs0`/`card-cs1` as unmounted,
  full-capacity MBR/FAT32 first-use inputs under explicit operator authority.
- [x] Assign `card-cs0`/`HPTCS0` to Controller A (`1751136`, J-Link
  `69664082`) and `card-cs1`/`HPTCS1` to Controller B (`1751219`, J-Link
  `69660123`).
- [ ] Record controller assembly, controller serial, J-Link serial, firmware
  identity/hash, card capacity/write-protect state, and a service-467 CID block:
  protocol/CID/sector-read validity, manufacturer/MID, OEM/application ID,
  product name/revision, serial number, manufacturing date, and complete raw
  CID.
- [ ] Repeat the CID block after any card replacement, power-off reinsertion,
  initialization, or reboot material to the evidence; if unavailable, record
  the detection/driver reason.
- [x] Obtain explicit authority to program that controller candidate.
- [x] Obtain explicit authority to erase the resolved whole expendable card.
- [x] Inhibit FileX mount/retry and prove the FileX media is closed before raw open.
- [x] Run geometry/bounds and write-protection rejection tests.
- [x] Run injected read/write/flush/open failures and verify first error reporting.
- [x] Format, close, reopen, append known records, close, reset, reopen, and
  iterate exact sequence/timestamp/type/payload values.
- [ ] Fill the store and verify `HPT_STATUS_FULL` without unrelated corruption.
- [ ] Verify corrupt and unsupported media rejection without writes.
- [x] Physical powered removal/reinsertion is `N/A` and prohibited; current
  qualification uses injected media loss and power-off replacement/reboot.
- [ ] Obtain separate authority for automated interruption tests.
- [ ] For each interruption, record last acknowledged record, intended operation,
  recovered records, incomplete-record disposition, continuation result, and
  first storage error.
- [ ] Obtain separate authority for physical power-cut tests.
- [ ] Repeat the approved qualification matrix on Controller A and Controller B.
- [ ] Run final Debug/Release builds, record hashes/map/stack high-water, and name
  the exact adopting firmware version.

## Runtime Closeout

Use this section only when the checklist changes a running system, scheduler, service, or external status surface.

- [ ] FileX remains inhibited for the complete raw session.
- [ ] Qualification status reports completion and first storage error accurately.
- [ ] Raw ownership is released before FileX is allowed to reopen.
- [ ] Controller is restored to the recorded baseline candidate/state.
- [ ] The dedicated card remains labeled expendable/raw and is not returned to
  production or mounted for filesystem repair.

## Verification

Completion requires preserved controller A/B manifests, exact iteration
comparison, full/error/corruption/removal results, interruption records, clean
build and memory evidence, and explicit evidence that acknowledged records
survive the approved physical interruption matrix.

## Owner-directed reconciliation — 2026-09-23

Reconcile stale active lifecycle to the previously documented superseded disposition; no new test or broader acceptance claim.

Authorization: Owner instruction in this conversation on 2026-09-23 to close/abandon the named work and mitigate older active records.

Previous header retained for evidence interpretation:

> Status: superseded; incomplete media-1.0 qualification retained as history
> Next Action: none; do not execute the obsolete media-1.0 HPT_STATUS_FULL workload

Earlier observations, unchecked historical criteria, and procedures below/above remain history. This administrative disposition does not qualify a new firmware candidate, physical card, thermal system, ECO, or release. Current 00.05.01 obligations in IDEA-0006, IDEA-0007, MAP-0009, and CAMP-0028 remain unchanged.
