# Qualify degraded SD operation and logging integrity

Status: abandoned
Type: campaign
Updated: 2026-08-26
Next Action: none
Campaign ID: 011-qualify-degraded-sd-operation-and-logging-integrity
Campaign Number: 011
Outcome: Complete the controller and media evidence for absent, unreadable, full, interrupted, replaced, and failing SD operation while proving control remains available and HPT logging fails closed and recovers safely.
Primary Focus Areas: hpt-media-logging
Supporting Focus Areas: smi-firmware, sd-qualifier-app, controller-automation, power-fault-control, qualification-release
Depends On: 010-qualify-firmware-negative-and-recovery-behavior
Decision: none
Detour For: none
Return To: none
Completion Gate: Linked A/B evidence covers degraded boot, power-off replacement and reboot, injected failures, full media, controlled power interruption, soak, filesystem inspection, and control regression; every failure is fixed or formally dispositioned and the workpackage closes.
Completion Evidence: none
Disposition: Superseded by the owner decision to change SD-card qualification direction; preserve all partial results as history without claiming qualification completion or card rejection.; replacement: Replacement roadmap, milestones, and campaigns are pending the owner follow-up discussion; requirements remain captured in work/spikes/spike-firmware-service-code-sd-qualification-direction.md and work/spikes/spike-hpt2-service-life-retrieval-performance-requirements.md.

## Request

Primary workpackage: `work/wp/active/wp-sd-card-degraded-boot-and-logging-integrity.md`.
Canonical contract: `docs/sd-card-operation-and-recovery.md`.

Run the current HPT media 2.0 degraded-operation contract through the protected
qualifier. Use diagnostic fault injection or a qualified whole-controller
power interruption for unexpected in-service media loss; never remove or
insert an SD card while powered. Any replacement requires power off, boot-time
classification, and a fresh complete CID identity capture.

## Completion Check

Linked A/B evidence covers degraded boot, power-off replacement and reboot, injected failures, full media, controlled power interruption, soak, filesystem inspection, and control regression; every failure is fixed or formally dispositioned and the workpackage closes.
