# Setup A / controller 1751219 batch execution worksheet

Status: superseded
Type: checklist
Updated: 2026-09-23
Next Action: none; retained as history; any new execution requires a new explicit owner instruction
Campaign Reason: Historical record from campaign 009-complete-clean-contract-bound-a-b-qualification; retained independently after campaign closure and requires no separate owner-queue execution.
Campaign: standalone
Parent: work/maps/map-smi-firmware-stabilization-and-qualification.md

Identity correction: this worksheet remains evidence for physical controller
`1751219` when it carried the Setup A campaign label. Current Setup A is
controller `1751136` on J-Link `69664082`; current Setup B is controller
`1751219` on J-Link `69660123`. Do not continue unchecked rows without a fresh
checklist, current inventory, and operation-specific authority.

## How to use this file

Edit only the `Result`, `Observed`, `Notes`, and decision fields. Valid results
are `PASS`, `FAIL`, `BLOCKED`, `NOT_RUN`, `DEFERRED`, and `N/A`. Save the file whenever a
batch is complete. You do not need to message Codex after every line.

Stop immediately and enter `FAIL` for uncontrolled heating/output activation,
smoke, excessive current, repeated resets, frozen UI/control, lost probe access,
or any instruction that does not match the physical setup. Powered SD-card
removal/insertion is prohibited and cannot be authorized by a checklist row.
Do not interrupt power during a write/update, fill/format media, or run repair
tools unless that row explicitly says `CODEX-GUIDED` and Codex has armed the
specific test.

## Coverage decision

Choose one before the first destructive SD/update batch:

- `REPRESENTATIVE_RELEASE` (recommended): one controlled case per major failure
  class, automated/model coverage for the detailed return-code matrix, one
  24-hour real-cadence soak on the production/reference media, and retained
  unresolved risks. This materially reduces hands-on testing but is a written
  waiver of exhaustive boundary/repetition coverage.
- `FULL_WORKPACKAGE`: ten no-card boots, removal and power cuts at every listed
  FileX/update phase, repeated accelerated profiles, multiple media samples, and
  workload-based endurance per required card role before controller B begins.

Coverage decision: `FUNCTIONALITY_NOW_WEEKEND_QUALIFICATION_LATER`

Owner approval/name: `APPROVED by owner, 2026-07-16`

Approved deviations or retained risks: `For the current session, execute functional smoke only: startup, no-card behavior, UI/control, normal Industrial-card logging/history, USB, and export. Destructive SD/update fault cases, interruption boundaries, evaluator repetitions, and long-duration/real-cadence testing are deferred to the weekend qualification session; they are not waived. Until that work passes, release qualification remains incomplete. The EDGE 4 KiB FAT lost-chain finding remains unresolved, and EDGE media is not approved for production use.`

Current session boundary: complete Batch 1 and Batch 2 only. Do not start Batch
3 or Batch 4 until the owner begins the weekend qualification session.

Weekend soak implementation gate: service code 474 software/build/load is
complete. Before leaving it unattended, run one short Industrial-card start,
minute-record, status, controlled-stop, and persistence check with Codex/J-Link.

## Fixed identity and completed Codex evidence

- Controller: Setup A, physical asset `1751219`.
- Controller B `1751136` remains untouched until this worksheet closes.
- Firmware: integrated 00.04.12 candidate.
- Probe: J-Link serial `69664082`.
- Automated semantic, fingerprint, SD-safety, and evaluator tests: `PASS`.
- Isolated Debug and Release builds: `PASS`.
- Configuration corruption/reset/concurrency/power-cut representative matrix:
  `PASS` under the previously approved representative scope.
- Industrial evaluator run 07949 payload: `PASS`; host FAT result confounded by
  an unplanned powered removal.
- EDGE evaluator run 67569 payload: `PASS`; one unresolved 4 KiB FAT lost chain,
  card preserved without repair.
- Program, VEEPROM, and option memory restored to exact Setup A hashes: `PASS`.

## Batch 1 — No-card cold boot (operator can complete now)

Current setup must be controller A powered with no SD card installed.

### A-NC-01

Action: cold boot with no card and wait for the Home/startup sequence.

Result: `PASS`

Observed: `No-SD warning displayed during startup (owner report, 2026-07-16)`

Notes: `Controller-A identity clarified after this observation.`

### A-NC-02

Action: dismiss the warning. Confirm Home remains usable and the warning does
not immediately reopen for at least five minutes.

Result: `PENDING`

Observed: `PENDING`

Notes: `PENDING`

### A-NC-03

Action: with no card, confirm displayed temperature/monitoring updates, normal
UI navigation, alarm indicators, and control status remain responsive. With
loads disconnected/simulated, confirm no unexpected output activation.

Result: `PENDING`

Observed: `PENDING`

Notes: `PENDING`

### A-NC-04

Action: open About/status and record the exact SD status text/code.

Result: `PENDING`

Observed: `PENDING`

Notes: `PENDING`

### A-NC-05

Action: perform one normal power-off with no card. Confirm shutdown does not
hang waiting for a log completion.

Result: `PENDING`

Observed: `PENDING`

Notes: `PENDING`

## Batch 2 — Industrial-card normal smoke (operator batch)

Start only after Batch 1. With power completely off, install the Industrial
card, then power on. Never insert/remove it while powered in this batch.

### A-SM-01

Action: cold boot three times. Each boot reaches Home without a warning, loop,
assertion, or unexpected output.

Result: `PENDING`

Observed: `PENDING`

Notes: `PENDING`

### A-SM-02

Action: confirm About/status reports SD ready/healthy. Record exact text/code.

Result: `PENDING`

Observed: `PENDING`

Notes: `PENDING`

### A-SM-03

Action: exercise touchscreen navigation, keyboard entry, back/cancel, date/time,
door-input indication if safely simulated, and normal temperature display.

Result: `PENDING`

Observed: `PENDING`

Notes: `PENDING`

### A-SM-04

Action: allow normal logging long enough to create records, open chart/history,
and confirm recent data is visible after one reboot.

Result: `PENDING`

Observed: `PENDING`

Notes: `PENDING`

### A-SM-05

Action: insert an approved USB stick, browse it, export a small known date
range, safely remove it, and record the exported filename/count if displayed.

Result: `PENDING`

Observed: `PENDING`

Notes: `PENDING`

## Batch 3 — Boundary and fault tests (CODEX-GUIDED; do not self-run)

Codex will prepare/capture each selected case as one coordinated session after
the coverage decision is approved. The operator records only visible behavior.

| ID | Case | Result | Observed / notes |
| --- | --- | --- | --- |
| A-FLT-01 | Power-off no-card boot and power-off replacement/reboot | `DEFERRED` | `Powered hot swap prohibited; CODEX-GUIDED` |
| A-FLT-02 | Representative injected write/flush media-loss simulation | `DEFERRED` | `No physical powered removal; CODEX-GUIDED` |
| A-FLT-03 | Representative FileX/SDMMC injected failure | `DEFERRED` | `Weekend; CODEX-GUIDED` |
| A-FLT-04 | Full-card behavior without false success | `DEFERRED` | `Weekend; CODEX-GUIDED` |
| A-FLT-05 | Approved representative SD power interruption and recovery | `DEFERRED` | `Weekend; CODEX-GUIDED` |
| A-UPD-01 | Representative malformed update corpus on target | `DEFERRED` | `Weekend; Codex prepares media and captures QSPI/program state` |
| A-UPD-02 | Valid update plus approved representative interruption/recovery | `DEFERRED` | `Weekend; CODEX-GUIDED` |

## Batch 4 — Endurance, contention, and soak

| ID | Case | Result | Observed / notes |
| --- | --- | --- | --- |
| A-END-01 | Required accelerated evaluator repeat(s) under approved coverage | `DEFERRED` | `Weekend; Codex monitors and captures counters` |
| A-END-02 | Chart load and USB export while logging/evaluator work continues | `DEFERRED` | `Weekend; operator exercises UI; Codex monitors` |
| A-SOAK-01 | Start autonomous service-code 474 soak; J-Link may be disconnected; run until operator stop/failure | `DEFERRED` | `Weekend; record run ID/start/end; normal minute logging must continue` |
| A-SOAK-02 | Post-soak J-Link status plus host production-log mirror/filesystem inspection without repair | `DEFERRED` | `Following week; Codex analyzes persistent VEEPROM/status and mounted media` |

## Final controller-A closeout

| Item | Result | Notes |
| --- | --- | --- |
| Repeat normal smoke after all fault tests | `NOT_RUN` | |
| Restore intended Industrial media/configuration | `NOT_RUN` | |
| Program/VEEPROM/option hashes verified | `NOT_RUN` | |
| Every failure/deviation has disposition | `NOT_RUN` | |
| Controller A approved to close before switching to B | `NOT_RUN` | |

## Handoff to Codex

After editing and saving this file, send exactly:

`ingest Setup A batch worksheet and continue all Codex-owned steps`

Codex will read this file, capture the current J-Link state, update the canonical
checklists/evidence, identify failures or missing fields, and return one grouped
physical batch instead of one question at a time.

## Owner-directed reconciliation — 2026-09-23

Reconcile stale active lifecycle to the previously documented superseded disposition; no new test or broader acceptance claim.

Authorization: Owner instruction in this conversation on 2026-09-23 to close/abandon the named work and mitigate older active records.

Previous header retained for evidence interpretation:

> Status: superseded historical operator worksheet; do not resume under the current Setup A label
> Next Action: retain as controller-1751219 history; create an operation-specific checklist from the current connected-bench inventory before new execution

Earlier observations, unchecked historical criteria, and procedures below/above remain history. This administrative disposition does not qualify a new firmware candidate, physical card, thermal system, ECO, or release. Current 00.05.01 obligations in IDEA-0006, IDEA-0007, MAP-0009, and CAMP-0028 remain unchanged.
