# Executive Directive: Deliver a safe SMI 00-05-01 update floor while preserving a return path to revised DisplayTest and the FAT32 production handoff. Prove the transition on both controller assemblies before release.

Status: promoted
Type: idea-brief
Role: project-executive-directive-v1
Updated: 2026-09-21
Next Action: execute MAP-0009 source-side Work1 candidate; name controlled rollback and DisplayTest images before enabling service recovery or bench qualification
Readiness Review: READY-WITH-PRM-GATES at revision 3; four gates transferred to MAP-0009
Produces: MAP-0009

## CEO Directive

Deliver a safe SMI 00-05-01 update floor while preserving a return path to revised DisplayTest and the FAT32 production handoff. Prove the transition on both controller assemblies before release.

## Desired Outcome

Use IDEA-0006 as the technical scope and decision record. Deliver an SMI 00-05-01 candidate whose validated IMX Title governs family/version identity and whose ordinary updater refuses pre-00-05-01 personality images before QSPI erase. Provide a separate direct service rollback to named approved older SMI images. For a FAT32-era target, validate and stage the image before explicit, confirmed in-place FAT32 preparation of the installed card; service 471 remains the HPT2 recovery action if current SMI survives a pre-flash failure. Preserve a return path to an approved revised DisplayTest image that safely handles HPT2 media and applies the normal personality floor. Keep DisplayTest's normal production SD handoff FAT32 and SMI's HPT2 initialization explicit. Require transition, refusal, and rollback evidence on both controller assemblies before release.

## Current Position

The owner accepted the direction in IDEA-0006 and added the rare direct SMI rollback path. The Plan Cycle reviewed this directive as ready with four PRM gates and captured its direction in MAP-0009. SMI source work may proceed to a verified Work1 candidate. Approved older SMI and revised DisplayTest images remain unnamed. Bench transition testing remains paused.

## Progress

- [x] Directive captured exactly in canonical project state.
- [x] Codex has delegated the directive into a bounded plan and execution chain (MAP-0009).
- [ ] The requested outcome has evidence and is reconciled.

Only check a milestone when canonical lifecycle state or linked evidence supports it. Codex updates
this section as work moves; the generated `work/100k.md` never guesses progress.

## Recommended Next Action

Implement and verify the SMI normal updater floor under MAP-0009. Identify exact approved older SMI and revised DisplayTest images before enabling controlled service rollback and physical qualification. Retain the bench pause until the owner resumes it.

## Why This Next

The normal compatibility floor, direct SMI rollback need, DisplayTest return policy, and field card-access constraint are settled enough to plan. The exact older SMI and revised DisplayTest releases and physical test specimens can be resolved in subordinate work before qualification.

## Blockers

- The approved revised DisplayTest release image is not yet named.
- The older SMI release images approved for service rollback are not yet named.
- Bench transition testing is paused by owner direction.

## Operator Needs

- Resume bench transition testing before any controller programming, SD preparation, or physical transition qualification.

## Completion Condition

The SMI and DisplayTest implementation and release identities satisfy IDEA-0006; both controller assemblies pass the forward, return, renamed-file, ordinary legacy-refusal, and approved direct rollback matrix; in-place FAT32 preparation, service-471 recovery, and retention safeguards are verified; the resulting release decision is evidence-backed and reconciled to this directive.

## Authority And Delivery Boundary

- Preserve any endpoint, target, timing, non-goal, or authority language stated in the directive.
- Initial CEO intake does not authorize code, build, programming, SD preparation, bench testing, push, or release. Subordinate source-changing work defaults to a verified Work1 candidate until a later delivery endpoint is authorized.
- Preserve the explicit bench pause and do not treat "before release" as release authorization.
- The service rollback is explicit and limited to approved released images. Do not treat the ordinary floor as a ban on controlled recovery or treat common internal-flash failure risk as unique to downgrading. Do not require field SD-card replacement.
- Interrupt only for a genuine material decision or authority boundary.

## Delegation Contract

Initial issuance is durable intake only. Tool Shed appends this Idea through canonical planning
order, checkpoints it, and stops so other directives may be captured first. Reissuing the exact
active directive delegates or resumes it when doing so will not preempt another working campaign.

The Plan Cycle interprets this directive, the Roadmap Cycle organizes it when needed, the Milestone
Cycle materializes bounded campaigns, Campaign Cycles execute, and Evidence/Outcome Cycles report
the result back to 100k. The CEO is not required to select those internal mechanics.

## Exploration Log

### 2026-09-21

- The owner accepted the recommended CEO framing from the IDEA-0006 discussion. Preserve that brief as the technical source and keep this directive as the executive outcome.
- The owner directed IDEA-0006 and this CEO directive to include direct service rollback to approved older SMI firmware and in-place FAT32 preparation. Service 471 is the existing explicit HPT2 recovery action when current SMI remains bootable.
