# Campaign: Freeze Firmware Qualification Authority And Shared Test Catalog

Status: completed
Type: campaign
Updated: 2026-08-31
Roadmap: PRM-0006
Milestone: M1
Unlocks Gates: G1-SHARED-TEST-CATALOG, G2-FIRMWARE-WITNESS-AUTHORITY
Requested Endpoint: work2
Outcome Cycle: cec58490-b533-46a7-bbe5-10e7addba684
Next Action: bind the exact non-production target and destructive-execution authority for PRM-0006 M4

## Outcome

Freeze the responsibility boundary and the smallest service/test catalog needed
for the promoted IDEA-0001 outcome. The catalog and governing contract are now
implemented in candidate commit `3df82f32b997022efeaba97561d7a2320dcf7997`.
No Pi runtime, controller state, or physical media was changed.

## Decision Resolved

- **A — Selected hybrid (2026-08-31):** firmware owns shared leaf-test truth,
  prerequisites, progress, safe-stop checkpoints, and technical results; the
  Pi/web qualifier remains campaign coordinator, independent power witness,
  evidence ingester/admission authority, and reviewer/family-disposition
  surface.
- **B — Firmware-owned campaign:** firmware also owns complete campaign
  sequencing and evidence; this expands controller responsibility and weakens
  independent observation.
- **C — Pi-owned sequence:** Pi retains complete full-run sequencing and
  firmware exposes shared leaves; this preserves the current contract but
  narrows IDEA-0001's firmware full-run ambition.

Options B and C were not selected. The selected boundary is recorded in
`docs/sd-card-qualification-contract.md` and
`docs/sd-qualification-service-catalog-v1.md`.

## Completion Evidence

- `qualification/profiles/sd-qualification-service-catalog-v1.json` freezes
  service codes 480–489, seven shared leaf IDs, and the ten-step full-run order.
- `docs/sd-qualification-service-catalog-v1.md` defines the authority split,
  preconditions, destructive classification, progress, results, journal, and
  Work2 target boundary.
- `script/check-sd-qualification-service.ps1` passed and proves that individual
  and full-run paths resolve through the same catalog and engine.
- `script/test-sd-qualification-service-model.py` passed all eight reference
  model tests, including planned pause, no automatic replay, identity-bound
  manual resume, separate result dimensions, and evidence-admission ownership.
- `docs/sd-qualification-work2-candidate-evidence-20260831.md` records the
  complete repository verification and artifact identities.
- Candidate commit: `3df82f32b997022efeaba97561d7a2320dcf7997`.

## Gate Result

`G1-SHARED-TEST-CATALOG` and `G2-FIRMWARE-WITNESS-AUTHORITY` pass. The reviewed
authority disposition exists; the exact catalog and order are stable; every
leaf has explicit prerequisites, safety, progress, stop, and result semantics;
and shared-implementation proof passes.
