# Qualify firmware negative and recovery behavior

Status: abandoned
Type: campaign
Updated: 2026-08-26
Next Action: none
Campaign ID: 010-qualify-firmware-negative-and-recovery-behavior
Campaign Number: 010
Outcome: Finish the representative-target malformed-update, timeout, storage-failure, power-loss, recovery, regression, and rollout evidence required to close the firmware code-review mitigation workpackage.
Primary Focus Areas: smi-firmware
Supporting Focus Areas: temperature-control-safety, usb-host-publication, sd-qualifier-app, controller-automation, power-fault-control, qualification-release
Depends On: 009-complete-clean-contract-bound-a-b-qualification
Decision: none
Detour For: none
Return To: none
Completion Gate: An accepted immutable Pi result manifest proves every required representative-target negative and recovery case on the exact bundle, documentation and rollout procedures are field-ready, and the code-review mitigation workpackage completion gate passes.
Completion Evidence: none
Disposition: Superseded by the owner decision to change SD-card qualification direction; preserve all partial results as history without claiming qualification completion or card rejection.; replacement: Replacement roadmap, milestones, and campaigns are pending the owner follow-up discussion; requirements remain captured in work/spikes/spike-firmware-service-code-sd-qualification-direction.md and work/spikes/spike-hpt2-service-life-retrieval-performance-requirements.md.

## Request

Primary workpackage: `work/wp/active/wp-mitigate-smi-firmware-code-review-findings.md`.
Execution contract: `work/checklists/checklist-smi-firmware-mitigation-hardware-qualification.md`.

Use only the exact frozen bundle and the admitted qualifier profile. Complete
the safe software/readiness work first, then stop for exact authorization of
each target fault, controller-power, or recovery operation. Preserve heating,
rollback, configuration, option-memory, and evidence gates; do not infer a
release pass from builds or happy-path smoke evidence.

## Completion Check

An accepted immutable Pi result manifest proves every required representative-target negative and recovery case on the exact bundle, documentation and rollout procedures are field-ready, and the code-review mitigation workpackage completion gate passes.
